$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.mft File: d47a94a4-ac39-4383-91f3-389070353c6d.mft (raw, json) Hash identifier: ixN89Wp5x8DHKKHVTrZ51Yc0froOtlNXVzEOwgG9oiQ= Subject key identifier: CF:E3:78:FE:0A:B0:2F:A6:B8:BC:A0:D0:59:FD:88:CD:F4:4C:84:4D Authority key identifier: 3E:0C:D4:A2:7F:33:8F:7F:84:15:BB:CA:33:D1:2E:95:B9:EA:73:8D Certificate issuer: /CN=d47a94a4-ac39-4383-91f3-389070353c6d Certificate serial: 010D0C9F43285849AD90A611888A7C50B5728970 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.mft Manifest number: 010D0C9F43285840D2B61A936326539069E08FB5 Signing time: Mon 28 Apr 2025 17:00:03 +0000 Manifest this update: Mon 28 Apr 2025 17:00:03 +0000 Manifest next update: Thu 01 May 2025 17:00:00 +0000 Files and hashes: 1: 95b95446-035a-3b2b-aefd-734f3fb5f220.roa (hash: mM3mJdPuhi3rC4neSv/K+herRgTCaysM+ny2OmL4ruE=) 2: d47a94a4-ac39-4383-91f3-389070353c6d.crl (hash: FWRitiO7IKPU5OfJMv/bjV2pNmGLRZJhVN1FbxPCe/Y=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:90:a6:11:88:8a:7c:50:b5:72:89:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d47a94a4-ac39-4383-91f3-389070353c6d Validity Not Before: Apr 28 17:00:03 2025 GMT Not After : May 1 17:00:00 2025 GMT Subject: CN=fed12a54-20a3-42dd-b7b5-35e4f5732974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:68:81:aa:eb:9d:65:0d:24:de:e4:90:6b:76: 85:73:09:6e:c0:fe:3c:c6:79:a2:18:21:d9:7b:6f: 7c:c8:0e:88:1b:45:d4:f9:9e:40:f4:11:a3:c1:26: d8:02:32:07:d8:37:45:9d:3d:e0:11:55:6e:30:34: 92:9f:51:5f:d9:59:9a:e9:22:95:58:17:65:86:c8: 1f:4c:26:0f:74:e7:a2:2d:d8:df:7d:11:f9:da:07: d5:01:84:aa:15:4a:d7:76:96:28:76:f0:e6:00:d2: 57:49:61:68:2f:c6:c1:b4:c2:c1:37:06:88:ab:0a: e2:87:ac:1b:06:9c:49:fc:dc:a7:45:9e:ed:b0:d3: e2:a2:91:a8:9b:1b:47:63:bd:a4:8d:a5:5c:96:73: 04:d5:0c:d3:d5:f6:01:ef:ed:ba:51:e0:2c:d1:a2: 84:7a:92:ab:89:e5:b8:88:ec:b0:8d:36:04:74:b4: 97:48:d9:58:5e:3e:09:a9:6f:6a:8c:9f:2f:14:11: f6:54:e5:1e:94:da:5f:e1:9b:a5:b4:d9:b4:b8:76: 0d:1f:a1:ac:2d:8a:eb:a1:b1:ed:97:2d:32:24:c9: b2:2a:fe:07:4c:ff:11:59:87:0b:c0:94:0d:41:7a: 42:66:d2:e6:78:70:c8:d8:80:d9:ab:5a:b6:dc:35: 2a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E3:78:FE:0A:B0:2F:A6:B8:BC:A0:D0:59:FD:88:CD:F4:4C:84:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.crl X509v3 Authority Key Identifier: keyid:3E:0C:D4:A2:7F:33:8F:7F:84:15:BB:CA:33:D1:2E:95:B9:EA:73:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:d4:2b:50:16:c0:89:82:32:ec:7c:2a:2f:92:19:d8:bc:f1: 6d:0c:20:8a:6b:e0:6c:8b:02:9d:2b:2a:2a:a6:39:71:67:e5: 2f:07:1f:82:8b:36:54:3e:23:75:da:52:31:ed:82:53:81:67: 62:36:37:0f:5b:09:c4:c9:d7:c5:8f:bb:71:d4:57:b5:a4:df: 9d:ca:0d:e4:de:c7:70:01:04:14:86:10:f4:76:e7:d6:c4:d3: cd:a3:0d:51:dd:f0:a1:44:14:a5:4a:4c:c4:f0:91:5d:6c:71: dc:45:f3:b6:60:2c:b6:c0:b9:04:df:36:4d:b5:9b:0c:5e:eb: 05:05:8f:5f:05:23:09:be:41:10:5a:6a:bd:9a:cd:7f:2c:39: f0:d1:9e:44:e9:89:90:72:59:6d:8d:12:53:32:4b:15:97:b1: ac:1a:b1:8b:52:0a:e5:4d:d2:ef:cb:2d:06:80:e1:40:7d:24: 45:4f:f2:67:13:af:8e:c5:99:61:88:a7:59:69:15:13:af:fb: 7e:a8:29:e2:5a:ef:21:a9:9d:5a:34:07:ef:41:ad:a4:d5:e7: d2:68:8b:6e:10:35:e8:8f:fb:e6:04:57:44:06:6f:23:22:66: 8d:84:ab:74:f4:f6:b9:95:31:3b:22:dd:2d:45:cb:8a:fc:46: 6d:45:ec:9a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmtkKYRiIp8ULVyiXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ3YTk0YTQtYWMzOS00MzgzLTkxZjMtMzg5MDcwMzUz YzZkMB4XDTI1MDQyODE3MDAwM1oXDTI1MDUwMTE3MDAwMFowLzEtMCsGA1UEAxMk ZmVkMTJhNTQtMjBhMy00MmRkLWI3YjUtMzVlNGY1NzMyOTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2iBquudZQ0k3uSQa3aFcwluwP48xnmiGCHZ e298yA6IG0XU+Z5A9BGjwSbYAjIH2DdFnT3gEVVuMDSSn1Ff2Vma6SKVWBdlhsgf TCYPdOeiLdjffRH52gfVAYSqFUrXdpYodvDmANJXSWFoL8bBtMLBNwaIqwrih6wb BpxJ/NynRZ7tsNPiopGomxtHY72kjaVclnME1QzT1fYB7+26UeAs0aKEepKrieW4 iOywjTYEdLSXSNlYXj4JqW9qjJ8vFBH2VOUelNpf4ZultNm0uHYNH6GsLYrrobHt ly0yJMmyKv4HTP8RWYcLwJQNQXpCZtLmeHDI2IDZq1q23DUqXwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFM/jeP4KsC+muLyg0Fn9iM30TIRNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNDdh OTRhNC1hYzM5LTQzODMtOTFmMy0zODkwNzAzNTNjNmQvZDQ3YTk0YTQtYWMzOS00 MzgzLTkxZjMtMzg5MDcwMzUzYzZkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDQ3YTk0YTQtYWMzOS00MzgzLTkx ZjMtMzg5MDcwMzUzYzZkL2Q0N2E5NGE0LWFjMzktNDM4My05MWYzLTM4OTA3MDM1 M2M2ZC5jcmwwHwYDVR0jBBgwFoAUPgzUon8zj3+EFbvKM9Eulbnqc40wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kNDdhOTRhNC1hYzM5LTQzODMtOTFmMy0zODkw NzAzNTNjNmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAI1CtQFsCJgjLsfCovkhnY vPFtDCCKa+BsiwKdKyoqpjlxZ+UvBx+CizZUPiN12lIx7YJTgWdiNjcPWwnEydfF j7tx1Fe1pN+dyg3k3sdwAQQUhhD0dufWxNPNow1R3fChRBSlSkzE8JFdbHHcRfO2 YCy2wLkE3zZNtZsMXusFBY9fBSMJvkEQWmq9ms1/LDnw0Z5E6YmQclltjRJTMksV l7GsGrGLUgrlTdLvyy0GgOFAfSRFT/JnE6+OxZlhiKdZaRUTr/t+qCniWu8hqZ1a NAfvQa2k1efSaItuEDXoj/vmBFdEBm8jImaNhKt09Pa5lTE7It0tRcuK/EZtReya -----END CERTIFICATE-----Generated at Tue Apr 29 11:27:05 2025 by rpki-client