$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft File: 70ddad33-55eb-4125-9221-0129168a645b.mft (raw, json) Hash identifier: b2Ajn0sNos+Ag4cRPSGl5hug1mj7rwo3twsK5hYYNhY= Subject key identifier: A2:B3:5F:41:FF:6F:10:E0:4F:36:AC:43:82:0C:9A:2E:5D:0A:3B:8A Authority key identifier: 7F:4C:A4:22:A3:CB:BB:A5:D6:77:9C:25:01:F3:7F:E5:D9:0E:B4:BD Certificate issuer: /CN=70ddad33-55eb-4125-9221-0129168a645b Certificate serial: 010D0C9F43285849B2911D588263BA8BEAE27990 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft Manifest number: 010D0C9F43285841E951957BE6B5270236230025 Signing time: Wed 30 Apr 2025 12:00:03 +0000 Manifest this update: Wed 30 Apr 2025 12:00:03 +0000 Manifest next update: Sat 03 May 2025 12:00:00 +0000 Files and hashes: 1: 41138728-4b0a-33e7-a5bd-ea7cb42a601e.roa (hash: dPXW+oU1lPzZWAX8+AVce/1H9o8SAz3vpgFIebYzK+s=) 2: 70ddad33-55eb-4125-9221-0129168a645b.crl (hash: QdDpCPOD/Y60r3BRtAJ1hmpI7g9Duw5DRfFaleCICFo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b2:91:1d:58:82:63:ba:8b:ea:e2:79:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70ddad33-55eb-4125-9221-0129168a645b Validity Not Before: Apr 30 12:00:03 2025 GMT Not After : May 3 12:00:00 2025 GMT Subject: CN=67d3fe7c-41f3-428c-a4f8-8d9582b5c1a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0b:ab:c6:bd:87:8f:5d:d9:aa:96:b7:0d:cb: c2:44:be:85:94:aa:92:eb:c4:02:ae:47:e0:83:e2: 6a:3c:d6:37:75:df:6c:34:3c:e6:60:64:87:0b:ec: 0a:5d:e9:5a:5e:0b:c4:a4:91:14:87:0a:63:d7:eb: 86:d7:57:32:26:5d:64:6b:8b:6f:43:39:c0:86:1d: 04:02:7b:a8:ab:6b:5b:96:e0:24:86:89:78:38:45: d9:d6:8b:fc:56:87:69:8c:88:03:92:eb:ae:49:b9: 5b:26:af:80:a5:ed:a9:a5:d1:0c:4f:33:61:c8:87: 3f:d4:24:56:a1:bf:f9:ae:1a:d6:17:9a:98:07:32: 89:69:39:94:b2:9c:58:42:d7:c4:99:ee:9f:e8:42: 14:36:2d:d5:e4:99:9d:d2:83:91:57:f4:c9:7e:55: 8f:36:31:e1:db:4c:80:b1:25:f5:4f:27:ec:83:01: 79:ab:66:ab:66:f1:ab:b2:e2:97:09:d3:5b:d5:18: 60:b1:16:13:59:5d:d6:1a:85:f0:e5:a7:8c:68:c1: 75:86:ac:e3:91:c1:21:da:10:cd:00:ec:1d:65:58: 28:ba:82:d6:69:a3:5e:34:d2:53:15:2f:d9:71:4d: 16:64:64:46:3d:f3:a2:33:6f:97:b6:5c:77:25:d5: b2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:B3:5F:41:FF:6F:10:E0:4F:36:AC:43:82:0C:9A:2E:5D:0A:3B:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.crl X509v3 Authority Key Identifier: keyid:7F:4C:A4:22:A3:CB:BB:A5:D6:77:9C:25:01:F3:7F:E5:D9:0E:B4:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:a7:35:42:8c:a6:be:3d:7a:69:2d:a0:87:58:83:63:68:6a: 85:20:75:28:c3:c6:8a:7e:46:8b:e9:70:43:df:f4:e8:5c:f3: 7d:21:e7:57:99:0b:6c:e1:bc:41:09:f4:08:53:ca:bc:45:a7: 06:57:c4:83:55:55:c9:31:4d:29:ef:bb:02:be:e5:7f:60:7d: bb:e9:3b:53:81:ca:c3:7c:b7:13:1c:ec:af:5e:d8:7a:30:57: a7:45:33:79:63:4e:29:df:a5:dd:82:0c:90:c2:ab:cd:c1:88: d8:66:c8:9f:e0:14:2d:e0:09:53:b6:d5:5a:b2:20:ee:32:52: 8d:c0:f3:5e:b6:80:91:f0:a6:17:6e:ab:1e:8e:69:c2:32:a0: 15:64:35:f2:f4:26:f2:66:e0:3c:38:96:ff:3d:f6:b0:ea:89: 37:b1:06:e3:d3:40:6d:c9:94:77:94:2b:2d:61:46:e1:29:4e: 90:7f:f4:cb:c5:8a:f8:a3:f5:74:5f:aa:55:ce:44:ff:9c:5f: 0a:92:9a:43:a2:cd:16:75:b8:1d:a2:18:33:b5:60:bd:bf:fd: 7a:b6:68:0f:0d:09:d6:9b:4c:f1:97:9b:4e:63:83:76:b0:fc: ac:33:31:fe:15:26:5c:0e:06:44:9a:f5:b4:be:25:5e:a4:7a: d4:71:d7:da -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmykR1YgmO6i+rieZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBkZGFkMzMtNTVlYi00MTI1LTkyMjEtMDEyOTE2OGE2 NDViMB4XDTI1MDQzMDEyMDAwM1oXDTI1MDUwMzEyMDAwMFowLzEtMCsGA1UEAxMk NjdkM2ZlN2MtNDFmMy00MjhjLWE0ZjgtOGQ5NTgyYjVjMWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gurxr2Hj13Zqpa3DcvCRL6FlKqS68QCrkfg g+JqPNY3dd9sNDzmYGSHC+wKXelaXgvEpJEUhwpj1+uG11cyJl1ka4tvQznAhh0E Anuoq2tbluAkhol4OEXZ1ov8VodpjIgDkuuuSblbJq+Ape2ppdEMTzNhyIc/1CRW ob/5rhrWF5qYBzKJaTmUspxYQtfEme6f6EIUNi3V5Jmd0oORV/TJflWPNjHh20yA sSX1TyfsgwF5q2arZvGrsuKXCdNb1RhgsRYTWV3WGoXw5aeMaMF1hqzjkcEh2hDN AOwdZVgouoLWaaNeNNJTFS/ZcU0WZGRGPfOiM2+Xtlx3JdWyiwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKKzX0H/bxDgTzasQ4IMmi5dCjuKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MGRk YWQzMy01NWViLTQxMjUtOTIyMS0wMTI5MTY4YTY0NWIvNzBkZGFkMzMtNTVlYi00 MTI1LTkyMjEtMDEyOTE2OGE2NDViLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzBkZGFkMzMtNTVlYi00MTI1LTky MjEtMDEyOTE2OGE2NDViLzcwZGRhZDMzLTU1ZWItNDEyNS05MjIxLTAxMjkxNjhh NjQ1Yi5jcmwwHwYDVR0jBBgwFoAUf0ykIqPLu6XWd5wlAfN/5dkOtL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83MGRkYWQzMy01NWViLTQxMjUtOTIyMS0wMTI5 MTY4YTY0NWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAXpzVCjKa+PXppLaCHWINj aGqFIHUow8aKfkaL6XBD3/ToXPN9IedXmQts4bxBCfQIU8q8RacGV8SDVVXJMU0p 77sCvuV/YH276TtTgcrDfLcTHOyvXth6MFenRTN5Y04p36XdggyQwqvNwYjYZsif 4BQt4AlTttVasiDuMlKNwPNetoCR8KYXbqsejmnCMqAVZDXy9CbyZuA8OJb/Pfaw 6ok3sQbj00BtyZR3lCstYUbhKU6Qf/TLxYr4o/V0X6pVzkT/nF8KkppDos0Wdbgd ohgztWC9v/16tmgPDQnWm0zxl5tOY4N2sPysMzH+FSZcDgZEmvW0viVepHrUcdfa -----END CERTIFICATE-----Generated at Wed Apr 30 19:18:11 2025 by rpki-client