$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/650afc4b-a3fd-482c-9b5f-6e8c732568ab/650afc4b-a3fd-482c-9b5f-6e8c732568ab.mft File: 650afc4b-a3fd-482c-9b5f-6e8c732568ab.mft (raw, json) Hash identifier: 40RaYxGTlrVinZLefEZzwLDq8q6VXfQnkQgpoXM2aic= Subject key identifier: 65:3F:A3:F6:B4:B0:4B:63:D9:F2:37:03:4D:EF:22:2E:8B:5F:AD:17 Authority key identifier: E8:7A:F1:C7:EC:C2:87:49:8F:CA:84:8F:EA:DB:1F:CB:05:B1:1D:F8 Certificate issuer: /CN=650afc4b-a3fd-482c-9b5f-6e8c732568ab Certificate serial: 010D0C9F43285849B12BC667597E09B957A3ECC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/650afc4b-a3fd-482c-9b5f-6e8c732568ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/650afc4b-a3fd-482c-9b5f-6e8c732568ab/650afc4b-a3fd-482c-9b5f-6e8c732568ab.mft Manifest number: 010D0C9F43285847ECF8DDEBB36A535755A674C6 Signing time: Wed 30 Apr 2025 00:00:03 +0000 Manifest this update: Wed 30 Apr 2025 00:00:03 +0000 Manifest next update: Sat 03 May 2025 00:00:00 +0000 Files and hashes: 1: 650afc4b-a3fd-482c-9b5f-6e8c732568ab.crl (hash: R2fC+lS1BTC749BFfiD+s4InErQqG0Yw9eHNRqeOnNw=) 2: b4acf39b-529d-3507-b6a7-c216868daffb.roa (hash: flw2y1tpHaQEhYQELlr5Ymgcq+5fWfz9XU91ZFb2wzU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/650afc4b-a3fd-482c-9b5f-6e8c732568ab/650afc4b-a3fd-482c-9b5f-6e8c732568ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/650afc4b-a3fd-482c-9b5f-6e8c732568ab/650afc4b-a3fd-482c-9b5f-6e8c732568ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/650afc4b-a3fd-482c-9b5f-6e8c732568ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:2b:c6:67:59:7e:09:b9:57:a3:ec:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=650afc4b-a3fd-482c-9b5f-6e8c732568ab Validity Not Before: Apr 30 00:00:03 2025 GMT Not After : May 3 00:00:00 2025 GMT Subject: CN=a1550c5c-5b9f-4946-83c1-0f22ada1a9c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:3b:e0:c8:8f:fc:e4:b0:3d:71:44:17:e9:6a: bf:fc:33:19:d0:41:c1:39:b8:cb:92:7f:21:8f:08: 50:ef:71:16:c2:42:2d:2f:5a:0a:1c:b8:06:dd:07: d3:02:06:e4:4f:23:e5:14:1b:59:0c:ae:69:da:79: 46:ed:96:72:b9:3c:50:0f:19:21:44:2d:0d:14:16: cf:86:6a:72:a0:5d:68:d7:bc:78:3b:b4:6b:99:48: 37:28:ce:b8:9c:19:c0:7a:09:6f:37:da:99:ce:8a: 00:b7:20:81:79:7c:87:47:f0:d6:e7:0e:fb:c4:af: 22:50:b6:bf:0d:c5:70:d5:82:79:60:c0:13:c5:d8: 66:41:41:af:ff:0e:4e:7d:01:7a:76:0f:4c:ec:b3: d8:6a:ca:74:74:de:c5:da:35:b2:82:ab:2d:89:6e: ff:ae:d0:d5:f3:2f:42:93:d6:70:e4:37:f7:b9:cb: 3a:ef:63:b4:5c:d2:d6:f4:a2:91:33:f5:c7:6a:98: a9:d2:ff:cc:21:d5:6d:2f:56:e4:f5:48:20:ff:8e: d5:72:be:7f:b0:b9:5d:ce:7e:ad:37:18:99:38:a3: ae:5c:34:28:f9:21:32:f8:1a:50:19:bf:04:f6:54: 7b:d5:9d:62:9d:b0:65:50:e3:1c:ae:bb:50:cb:19: ab:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:3F:A3:F6:B4:B0:4B:63:D9:F2:37:03:4D:EF:22:2E:8B:5F:AD:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/650afc4b-a3fd-482c-9b5f-6e8c732568ab/650afc4b-a3fd-482c-9b5f-6e8c732568ab.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/650afc4b-a3fd-482c-9b5f-6e8c732568ab/650afc4b-a3fd-482c-9b5f-6e8c732568ab.crl X509v3 Authority Key Identifier: keyid:E8:7A:F1:C7:EC:C2:87:49:8F:CA:84:8F:EA:DB:1F:CB:05:B1:1D:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/650afc4b-a3fd-482c-9b5f-6e8c732568ab.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:03:9d:c3:7c:d9:cc:3b:04:73:f8:e9:55:cd:86:8c:29:2b: d2:62:fd:4e:cf:b4:5c:b3:3e:58:ba:ce:e8:99:eb:cd:e4:b9: 51:3d:75:49:f0:9e:b4:f6:ea:57:0d:84:56:87:af:e6:a0:b3: ad:ee:17:07:39:d6:94:ce:fd:e0:63:ff:51:bf:61:5d:de:06: 0b:0a:9a:42:66:47:7c:78:46:ab:fc:43:c5:88:2c:27:bf:69: 1b:f8:7f:70:d6:b7:93:c7:de:c7:ec:27:a4:73:1b:a4:0f:ff: f3:13:98:1c:9a:78:75:02:0d:8a:4c:9f:07:6b:7a:42:c0:ed: b2:ff:71:31:81:fd:8b:21:38:58:a9:76:5e:bc:17:56:bd:da: a2:4f:a7:03:e3:53:df:0a:1f:da:97:f0:3a:80:7c:d3:db:a1: b1:f3:ab:b1:e7:b5:67:ed:e8:20:95:ee:1c:86:4f:eb:fb:e9: 25:54:cf:4f:15:93:1f:e2:b3:2b:b7:93:9d:3e:38:d4:82:6a: c2:c7:9e:d8:a5:a3:2e:1c:4b:b4:d0:45:2f:2a:5a:0d:a5:d8: 69:59:85:0c:e0:95:e1:d0:0a:4c:af:30:c6:03:e0:ac:7d:3e: f1:2c:43:0d:7f:e6:67:e8:da:f1:ba:e8:36:55:d6:cc:1a:b8: c8:be:75:58 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmxK8ZnWX4JuVej7MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjUwYWZjNGItYTNmZC00ODJjLTliNWYtNmU4YzczMjU2 OGFiMB4XDTI1MDQzMDAwMDAwM1oXDTI1MDUwMzAwMDAwMFowLzEtMCsGA1UEAxMk YTE1NTBjNWMtNWI5Zi00OTQ2LTgzYzEtMGYyMmFkYTFhOWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTvgyI/85LA9cUQX6Wq//DMZ0EHBObjLkn8h jwhQ73EWwkItL1oKHLgG3QfTAgbkTyPlFBtZDK5p2nlG7ZZyuTxQDxkhRC0NFBbP hmpyoF1o17x4O7RrmUg3KM64nBnAeglvN9qZzooAtyCBeXyHR/DW5w77xK8iULa/ DcVw1YJ5YMATxdhmQUGv/w5OfQF6dg9M7LPYasp0dN7F2jWygqstiW7/rtDV8y9C k9Zw5Df3ucs672O0XNLW9KKRM/XHapip0v/MIdVtL1bk9Ugg/47Vcr5/sLldzn6t NxiZOKOuXDQo+SEy+BpQGb8E9lR71Z1inbBlUOMcrrtQyxmrzwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGU/o/a0sEtj2fI3A03vIi6LX60XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NTBh ZmM0Yi1hM2ZkLTQ4MmMtOWI1Zi02ZThjNzMyNTY4YWIvNjUwYWZjNGItYTNmZC00 ODJjLTliNWYtNmU4YzczMjU2OGFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjUwYWZjNGItYTNmZC00ODJjLTli NWYtNmU4YzczMjU2OGFiLzY1MGFmYzRiLWEzZmQtNDgyYy05YjVmLTZlOGM3MzI1 NjhhYi5jcmwwHwYDVR0jBBgwFoAU6Hrxx+zCh0mPyoSP6tsfywWxHfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82NTBhZmM0Yi1hM2ZkLTQ4MmMtOWI1Zi02ZThj NzMyNTY4YWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCMA53DfNnMOwRz+OlVzYaM KSvSYv1Oz7Rcsz5Yus7omevN5LlRPXVJ8J609upXDYRWh6/moLOt7hcHOdaUzv3g Y/9Rv2Fd3gYLCppCZkd8eEar/EPFiCwnv2kb+H9w1reTx97H7CekcxukD//zE5gc mnh1Ag2KTJ8Ha3pCwO2y/3Exgf2LIThYqXZevBdWvdqiT6cD41PfCh/al/A6gHzT 26Gx86ux57Vn7eggle4chk/r++klVM9PFZMf4rMrt5OdPjjUgmrCx57YpaMuHEu0 0EUvKloNpdhpWYUM4JXh0ApMrzDGA+CsfT7xLEMNf+Zn6Nrxuug2VdbMGrjIvnVY -----END CERTIFICATE-----Generated at Wed Apr 30 03:31:58 2025 by rpki-client