$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b4251da6-e12c-464e-918b-9c9e6f10c032/b4251da6-e12c-464e-918b-9c9e6f10c032.mft File: b4251da6-e12c-464e-918b-9c9e6f10c032.mft (raw, json) Hash identifier: DgvaHswck/acWNYkH6EGUzt1Leh7fdEO6TsRj/I3bO8= Subject key identifier: 48:DB:3F:BC:52:A8:3E:43:16:27:73:A6:6E:CD:12:E9:48:3D:03:C1 Authority key identifier: 28:53:14:50:AD:3E:41:C8:83:44:ED:44:E6:0B:D0:70:CF:69:9D:2B Certificate issuer: /CN=b4251da6-e12c-464e-918b-9c9e6f10c032 Certificate serial: 010D0C9F43285849ADAE6BBD1D4ED6BA9D5CFF60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b4251da6-e12c-464e-918b-9c9e6f10c032.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b4251da6-e12c-464e-918b-9c9e6f10c032/b4251da6-e12c-464e-918b-9c9e6f10c032.mft Manifest number: 010D0C9F43285841DEDE7B8C21BF2E359841A25A Signing time: Mon 28 Apr 2025 18:00:03 +0000 Manifest this update: Mon 28 Apr 2025 18:00:03 +0000 Manifest next update: Thu 01 May 2025 18:00:00 +0000 Files and hashes: 1: 733f4b75-21a2-3402-a1ba-b2033671249c.roa (hash: obyPy2Ez7VJfsg1zzwv6H3xU/Ul+xnuplOFItcgl81o=) 2: b4251da6-e12c-464e-918b-9c9e6f10c032.crl (hash: C48RwwGkznJSx+GKC45vuUkoH5PytjsdbCi0EJcCnhU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b4251da6-e12c-464e-918b-9c9e6f10c032/b4251da6-e12c-464e-918b-9c9e6f10c032.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b4251da6-e12c-464e-918b-9c9e6f10c032/b4251da6-e12c-464e-918b-9c9e6f10c032.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b4251da6-e12c-464e-918b-9c9e6f10c032.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:ae:6b:bd:1d:4e:d6:ba:9d:5c:ff:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4251da6-e12c-464e-918b-9c9e6f10c032 Validity Not Before: Apr 28 18:00:03 2025 GMT Not After : May 1 18:00:00 2025 GMT Subject: CN=8ce457c1-edc3-4f20-8b19-824402a03396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:16:06:a9:94:9c:17:9c:7c:49:fe:4f:fd:b4: ae:64:2d:7a:0b:32:ef:10:cb:00:86:cd:16:5e:6e: 22:39:5e:85:ba:37:b2:84:d9:d3:48:e9:2e:f6:89: ae:2b:c6:ea:2b:e6:9e:ae:30:2d:0e:79:05:10:96: 66:ec:2c:9b:9c:bf:10:29:c5:a3:4c:6e:87:e4:f4: 03:03:ba:80:68:45:13:9b:9e:5d:bd:b3:a8:93:49: 15:9f:83:25:b4:7c:99:ff:aa:ff:be:c5:ae:e1:c8: 21:80:76:c5:26:4a:d4:d0:a0:ec:d0:c0:c6:5a:39: 65:08:38:c4:c7:7e:76:e4:2b:3d:ed:30:6a:05:c2: e6:58:57:a1:d6:b9:68:53:53:f0:30:a5:dc:c4:d0: 19:c9:65:32:71:a6:fa:97:2b:35:68:d6:a6:7a:74: 1d:a5:30:4b:69:d9:47:2e:dc:f6:63:0d:43:d6:20: 9d:30:86:ce:4e:25:d6:9f:61:57:8b:cc:b5:c4:5f: f4:29:93:db:80:1b:5e:c3:d9:42:b2:22:98:8e:3d: 20:20:9d:dc:c6:db:9f:c7:2e:e8:c6:3b:94:9c:63: 10:b9:1d:49:a3:06:e1:ef:55:89:75:8a:43:9a:68: b3:e3:68:8c:cd:b1:6b:22:4c:11:67:87:19:97:52: d1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:DB:3F:BC:52:A8:3E:43:16:27:73:A6:6E:CD:12:E9:48:3D:03:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b4251da6-e12c-464e-918b-9c9e6f10c032/b4251da6-e12c-464e-918b-9c9e6f10c032.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b4251da6-e12c-464e-918b-9c9e6f10c032/b4251da6-e12c-464e-918b-9c9e6f10c032.crl X509v3 Authority Key Identifier: keyid:28:53:14:50:AD:3E:41:C8:83:44:ED:44:E6:0B:D0:70:CF:69:9D:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b4251da6-e12c-464e-918b-9c9e6f10c032.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:ee:d0:c9:7e:75:63:ac:34:a3:38:77:be:fd:94:e7:c7:23: 5c:c0:11:1b:c6:1e:90:22:c7:5e:05:5e:58:7e:7e:b0:fa:dd: b7:5b:d9:b9:04:00:94:14:5f:9b:0c:5b:25:d1:26:71:61:97: 65:24:8f:80:69:72:68:6e:0b:45:bd:9d:35:19:93:b4:54:42: a1:61:16:06:ea:23:c2:06:e0:4c:57:c1:0d:45:e8:c3:91:a4: d4:a3:ad:b5:fe:df:96:b1:1e:e8:07:ca:b3:4b:08:b8:ac:80: 27:e2:e0:8d:22:72:68:91:da:74:8d:a1:d0:d4:e0:de:c9:77: 47:d3:4e:fc:6f:92:61:30:b0:c8:65:d1:24:3e:43:e3:d2:77: 52:8d:07:44:88:a4:83:a4:77:dc:61:f1:3c:a0:fc:cd:90:6e: de:d5:04:e8:e0:0a:21:e8:e8:9b:37:9f:e4:a4:38:59:f0:a3: 50:26:15:2e:68:bd:44:7a:5e:55:a4:f0:f3:17:f2:71:bd:44: 19:82:38:55:19:d8:3b:b2:c0:b4:53:73:17:e8:ba:bd:44:f0: 96:b5:bf:7c:52:3b:cd:a4:39:6a:92:14:cd:4d:8a:cc:f3:f4: fc:22:55:89:c9:29:fa:f2:ec:71:b5:12:3e:3f:34:1b:b8:1f: 33:a9:c6:c0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmtrmu9HU7Wup1c/2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQyNTFkYTYtZTEyYy00NjRlLTkxOGItOWM5ZTZmMTBj MDMyMB4XDTI1MDQyODE4MDAwM1oXDTI1MDUwMTE4MDAwMFowLzEtMCsGA1UEAxMk OGNlNDU3YzEtZWRjMy00ZjIwLThiMTktODI0NDAyYTAzMzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxYGqZScF5x8Sf5P/bSuZC16CzLvEMsAhs0W Xm4iOV6FujeyhNnTSOku9omuK8bqK+aerjAtDnkFEJZm7CybnL8QKcWjTG6H5PQD A7qAaEUTm55dvbOok0kVn4MltHyZ/6r/vsWu4cghgHbFJkrU0KDs0MDGWjllCDjE x3525Cs97TBqBcLmWFeh1rloU1PwMKXcxNAZyWUycab6lys1aNamenQdpTBLadlH Ltz2Yw1D1iCdMIbOTiXWn2FXi8y1xF/0KZPbgBtew9lCsiKYjj0gIJ3cxtufxy7o xjuUnGMQuR1Jowbh71WJdYpDmmiz42iMzbFrIkwRZ4cZl1LR0QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEjbP7xSqD5DFidzpm7NEulIPQPBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iNDI1 MWRhNi1lMTJjLTQ2NGUtOTE4Yi05YzllNmYxMGMwMzIvYjQyNTFkYTYtZTEyYy00 NjRlLTkxOGItOWM5ZTZmMTBjMDMyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjQyNTFkYTYtZTEyYy00NjRlLTkx OGItOWM5ZTZmMTBjMDMyL2I0MjUxZGE2LWUxMmMtNDY0ZS05MThiLTljOWU2ZjEw YzAzMi5jcmwwHwYDVR0jBBgwFoAUKFMUUK0+QciDRO1E5gvQcM9pnSswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iNDI1MWRhNi1lMTJjLTQ2NGUtOTE4Yi05Yzll NmYxMGMwMzIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBT7tDJfnVjrDSjOHe+/ZTn xyNcwBEbxh6QIsdeBV5Yfn6w+t23W9m5BACUFF+bDFsl0SZxYZdlJI+AaXJobgtF vZ01GZO0VEKhYRYG6iPCBuBMV8ENRejDkaTUo621/t+WsR7oB8qzSwi4rIAn4uCN InJokdp0jaHQ1ODeyXdH0078b5JhMLDIZdEkPkPj0ndSjQdEiKSDpHfcYfE8oPzN kG7e1QTo4Aoh6OibN5/kpDhZ8KNQJhUuaL1Eel5VpPDzF/JxvUQZgjhVGdg7ssC0 U3MX6Lq9RPCWtb98UjvNpDlqkhTNTYrM8/T8IlWJySn68uxxtRI+PzQbuB8zqcbA -----END CERTIFICATE-----Generated at Mon Apr 28 22:16:58 2025 by rpki-client