$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.mft File: 704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.mft (raw, json) Hash identifier: WIc0sAp+TGFUZbPuChtlee765a5EmmZTiy27OADwZOs= Subject key identifier: 5B:6E:34:21:63:03:52:DB:6F:59:41:B3:81:28:E0:23:4A:DD:29:D9 Authority key identifier: 45:56:08:A9:4F:3E:2E:30:2D:6A:A5:5C:A2:E8:E5:50:FD:5B:04:19 Certificate issuer: /CN=704595c3-6d92-4fc1-b7a8-d8e81a04aa7a Certificate serial: 010D0C9F43285849A8190AA73B778F1084E19080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.mft Manifest number: 010D0C9F432858494ED016D77EA200A665D4BBE1 Signing time: Sat 26 Apr 2025 18:00:03 +0000 Manifest this update: Sat 26 Apr 2025 18:00:03 +0000 Manifest next update: Tue 29 Apr 2025 18:00:00 +0000 Files and hashes: 1: 4775f2f1-0661-3006-a1eb-a486c369f840.roa (hash: 5FkYg2PwyNWr1vKLLddKrz1O/FTQ8xoyGPf86rZMz2g=) 2: 704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.crl (hash: /iaJbg6HSB12yTxjlhBsuISQRSFqvJBDeJkThuJEruo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:19:0a:a7:3b:77:8f:10:84:e1:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=704595c3-6d92-4fc1-b7a8-d8e81a04aa7a Validity Not Before: Apr 26 18:00:03 2025 GMT Not After : Apr 29 18:00:00 2025 GMT Subject: CN=65f3c761-cf1f-46e7-b166-a33e3da7a361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d8:0f:f0:a5:e5:82:54:55:a0:2d:f8:94:93: d7:ee:1b:54:44:5e:24:02:60:4a:fc:79:0c:b8:15: 02:52:81:7b:da:89:89:88:d4:15:b0:65:76:41:f0: a3:8f:41:7c:d5:df:30:73:f9:5e:82:ac:3e:e0:a7: 77:35:59:cf:c2:08:85:50:89:2f:fe:22:bb:30:34: 16:2b:f0:9a:cb:1a:1d:53:70:54:76:86:22:37:72: 4e:f7:d5:9f:1b:b6:a0:e4:6e:8d:88:5f:b8:f3:24: 9c:41:e6:c4:33:7a:20:be:24:13:74:51:0f:d1:8c: ba:68:c2:2f:7a:9e:8f:5b:29:08:3e:2b:60:66:c1: e5:7e:c3:b2:f2:6a:08:a8:9d:6c:46:ef:b9:8d:41: 91:18:6c:61:80:db:c9:f0:2a:34:b2:80:2d:38:3c: e8:ec:b9:d3:0c:86:91:80:56:24:f6:bf:ee:ef:e5: 33:34:04:da:06:70:51:f3:98:30:fc:84:af:e4:db: 54:8f:c4:5a:b4:40:42:74:1b:f1:11:51:74:52:02: d5:3c:fb:6f:2e:23:28:44:dc:62:06:6d:76:31:c1: 25:16:e9:fd:78:a8:a3:89:77:4e:20:a3:13:eb:11: 76:8a:70:1f:e9:c4:3d:03:e7:64:7e:3d:f1:46:2e: 17:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:6E:34:21:63:03:52:DB:6F:59:41:B3:81:28:E0:23:4A:DD:29:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.crl X509v3 Authority Key Identifier: keyid:45:56:08:A9:4F:3E:2E:30:2D:6A:A5:5C:A2:E8:E5:50:FD:5B:04:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:ea:e9:2a:72:24:2f:3b:ae:52:8a:87:e3:65:0e:79:df:8c: 42:06:14:1e:c4:e2:6a:d4:5e:34:1f:e1:fe:d9:5b:54:87:7a: 1b:85:23:22:14:d4:eb:1d:fe:cd:11:4e:ad:09:fd:fb:e2:00: 08:0c:df:ed:b1:7c:d0:61:b7:50:ba:70:9e:ee:34:cc:69:cc: b1:f8:33:80:9d:16:ca:b9:15:74:c1:06:cc:18:1a:7d:2b:db: f7:31:04:95:19:be:46:40:c4:99:cc:1f:7f:e6:d6:ef:25:eb: 71:c1:38:c0:c8:5f:21:64:c0:ce:2b:d0:ef:eb:20:25:7f:77: 54:d0:58:c2:23:d1:e1:77:e4:e2:8f:04:d4:c8:56:7d:ab:ba: 9e:c5:ff:c6:20:83:2a:5a:f6:5c:48:41:9e:44:52:5c:95:b8: 8f:ec:68:9c:fc:8e:5d:6b:45:e0:db:6c:35:94:fe:b9:9f:d7: e5:69:fe:61:26:9f:25:73:e7:11:6a:20:b8:d7:89:04:15:a2: ba:79:75:d6:d1:b6:12:f9:32:47:1a:10:4c:5d:98:c8:2c:4b: 47:90:05:a6:fc:da:a6:5e:94:d5:41:c8:98:ed:15:1d:e3:29: 50:00:21:8e:20:19:64:8f:2c:df:09:04:76:74:73:89:20:c5: 44:92:9f:0e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmoGQqnO3ePEIThkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA0NTk1YzMtNmQ5Mi00ZmMxLWI3YTgtZDhlODFhMDRh YTdhMB4XDTI1MDQyNjE4MDAwM1oXDTI1MDQyOTE4MDAwMFowLzEtMCsGA1UEAxMk NjVmM2M3NjEtY2YxZi00NmU3LWIxNjYtYTMzZTNkYTdhMzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dgP8KXlglRVoC34lJPX7htURF4kAmBK/HkM uBUCUoF72omJiNQVsGV2QfCjj0F81d8wc/legqw+4Kd3NVnPwgiFUIkv/iK7MDQW K/CayxodU3BUdoYiN3JO99WfG7ag5G6NiF+48yScQebEM3ogviQTdFEP0Yy6aMIv ep6PWykIPitgZsHlfsOy8moIqJ1sRu+5jUGRGGxhgNvJ8Co0soAtODzo7LnTDIaR gFYk9r/u7+UzNATaBnBR85gw/ISv5NtUj8RatEBCdBvxEVF0UgLVPPtvLiMoRNxi Bm12McElFun9eKijiXdOIKMT6xF2inAf6cQ9A+dkfj3xRi4XbwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFtuNCFjA1Lbb1lBs4Eo4CNK3SnZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy83MDQ1 OTVjMy02ZDkyLTRmYzEtYjdhOC1kOGU4MWEwNGFhN2EvNzA0NTk1YzMtNmQ5Mi00 ZmMxLWI3YTgtZDhlODFhMDRhYTdhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNzA0NTk1YzMtNmQ5Mi00ZmMxLWI3 YTgtZDhlODFhMDRhYTdhLzcwNDU5NWMzLTZkOTItNGZjMS1iN2E4LWQ4ZTgxYTA0 YWE3YS5jcmwwHwYDVR0jBBgwFoAURVYIqU8+LjAtaqVcoujlUP1bBBkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy83MDQ1OTVjMy02ZDkyLTRmYzEtYjdhOC1kOGU4 MWEwNGFhN2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAx6ukqciQvO65SiofjZQ55 34xCBhQexOJq1F40H+H+2VtUh3obhSMiFNTrHf7NEU6tCf374gAIDN/tsXzQYbdQ unCe7jTMacyx+DOAnRbKuRV0wQbMGBp9K9v3MQSVGb5GQMSZzB9/5tbvJetxwTjA yF8hZMDOK9Dv6yAlf3dU0FjCI9Hhd+TijwTUyFZ9q7qexf/GIIMqWvZcSEGeRFJc lbiP7Gic/I5da0Xg22w1lP65n9flaf5hJp8lc+cRaiC414kEFaK6eXXW0bYS+TJH GhBMXZjILEtHkAWm/NqmXpTVQciY7RUd4ylQACGOIBlkjyzfCQR2dHOJIMVEkp8O -----END CERTIFICATE-----Generated at Sun Apr 27 13:09:16 2025 by rpki-client