$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09716e22-4f48-41d8-87e0-e9b48691fcc5/09716e22-4f48-41d8-87e0-e9b48691fcc5.mft File: 09716e22-4f48-41d8-87e0-e9b48691fcc5.mft (raw, json) Hash identifier: zqsva1oK88FgmrAuTGdv9ddwg+Va4/gwiiZjsdf99BI= Subject key identifier: 80:32:3E:0F:0A:54:C5:AB:30:0C:68:72:0E:E8:7E:B7:94:09:3B:30 Authority key identifier: 74:A1:57:D1:3F:3C:74:FF:09:76:AE:A3:4C:78:AA:A9:75:63:04:60 Certificate issuer: /CN=09716e22-4f48-41d8-87e0-e9b48691fcc5 Certificate serial: 010D0C9F43285849AF318A0A75C323844D9A4F90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09716e22-4f48-41d8-87e0-e9b48691fcc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09716e22-4f48-41d8-87e0-e9b48691fcc5/09716e22-4f48-41d8-87e0-e9b48691fcc5.mft Manifest number: 010D0C9F4328584073A844991873C60A26AF698E Signing time: Tue 29 Apr 2025 07:00:03 +0000 Manifest this update: Tue 29 Apr 2025 07:00:03 +0000 Manifest next update: Fri 02 May 2025 07:00:00 +0000 Files and hashes: 1: 09716e22-4f48-41d8-87e0-e9b48691fcc5.crl (hash: rRGRTOK7DvY5hj2MZmNn+UyUYixbcgUJghJdN0k6nkE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09716e22-4f48-41d8-87e0-e9b48691fcc5/09716e22-4f48-41d8-87e0-e9b48691fcc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09716e22-4f48-41d8-87e0-e9b48691fcc5/09716e22-4f48-41d8-87e0-e9b48691fcc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09716e22-4f48-41d8-87e0-e9b48691fcc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:af:31:8a:0a:75:c3:23:84:4d:9a:4f:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09716e22-4f48-41d8-87e0-e9b48691fcc5 Validity Not Before: Apr 29 07:00:03 2025 GMT Not After : May 2 07:00:00 2025 GMT Subject: CN=a811b313-00c2-4524-b7f1-4c19aeae9406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f4:c4:4b:85:94:40:ff:e1:ff:98:22:e7:e0: 38:ec:25:99:40:b3:38:ba:e3:3c:c0:66:16:35:df: 0c:e0:e5:1e:70:d4:20:99:5f:c4:84:78:11:c7:1b: 1e:2c:ff:3a:36:0b:32:3e:de:d0:03:67:82:00:bd: 56:1a:65:44:2c:ae:02:c8:ee:8e:9e:fb:41:53:a1: 28:df:fc:f0:a9:96:67:b7:8a:11:91:e2:1f:6f:d6: 91:b8:34:48:69:09:34:52:c5:cc:88:84:fa:48:2c: ce:fc:60:1e:2f:80:92:19:f4:a9:35:25:1f:45:c3: cc:db:d4:1e:2c:4d:31:7a:36:5a:5f:f9:c1:f5:cd: 68:14:0a:f5:21:09:06:46:46:09:64:38:2d:12:21: 62:9c:1d:f3:f9:66:ce:85:d5:2d:89:fa:b2:8f:a8: 03:c0:4e:a9:2c:de:7a:9e:b6:68:dc:24:0e:99:20: a3:b6:3f:91:7c:00:89:60:04:06:53:1e:53:0e:86: 4e:b9:74:f4:c8:9c:29:1c:89:68:aa:c7:53:3d:71: dc:31:4a:1c:f1:5e:f9:e3:c4:f8:c7:b2:aa:92:39: 2b:c3:87:21:c1:ac:0d:a8:0c:90:9f:b1:a0:4b:ff: 65:e4:d6:bc:fe:33:f9:77:99:fc:e8:5a:f6:4e:23: 3e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:32:3E:0F:0A:54:C5:AB:30:0C:68:72:0E:E8:7E:B7:94:09:3B:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09716e22-4f48-41d8-87e0-e9b48691fcc5/09716e22-4f48-41d8-87e0-e9b48691fcc5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09716e22-4f48-41d8-87e0-e9b48691fcc5/09716e22-4f48-41d8-87e0-e9b48691fcc5.crl X509v3 Authority Key Identifier: keyid:74:A1:57:D1:3F:3C:74:FF:09:76:AE:A3:4C:78:AA:A9:75:63:04:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09716e22-4f48-41d8-87e0-e9b48691fcc5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:33:90:c6:99:a1:2b:49:c7:cb:da:52:9b:6f:3c:98:54:31: f7:bc:0d:06:cb:2c:8e:29:f0:33:5d:68:e8:23:bb:87:be:19: d8:70:cd:05:25:20:3e:20:68:bb:9e:0c:f8:97:de:69:d9:53: d9:6a:f0:8a:1b:52:41:0d:07:20:31:4e:20:ca:7c:83:f6:e8: 56:b9:00:f6:88:b7:ba:18:fa:5a:4e:63:20:34:7e:09:4b:7b: 7b:47:f8:01:5a:85:4b:65:5c:8c:67:05:71:70:d3:6b:5f:89: 62:78:a6:c7:79:6b:08:23:4a:bd:ee:dc:b4:2d:ee:9a:37:64: 8c:0c:4f:da:e4:58:69:a8:82:6e:d6:08:a8:b2:7e:29:b0:0b: 91:f5:5e:f3:b5:d0:ab:a7:77:ee:49:c2:36:c3:36:02:47:bf: 9c:19:ba:2d:5d:bd:5f:05:69:ce:51:1e:25:18:db:23:08:88: d0:dd:8e:1a:18:f1:59:f6:0d:b2:8f:26:ca:f7:69:a4:32:f8: 22:90:c1:c1:70:68:fc:66:97:b9:e6:00:77:ca:39:44:57:ed: 11:f7:5b:1c:43:52:80:a7:19:de:2b:b3:55:15:79:d6:37:39: d0:30:c7:96:91:ea:7e:c5:46:26:b0:eb:f5:99:a5:fc:95:dd: 8b:72:9a:b2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmvMYoKdcMjhE2aT5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDk3MTZlMjItNGY0OC00MWQ4LTg3ZTAtZTliNDg2OTFm Y2M1MB4XDTI1MDQyOTA3MDAwM1oXDTI1MDUwMjA3MDAwMFowLzEtMCsGA1UEAxMk YTgxMWIzMTMtMDBjMi00NTI0LWI3ZjEtNGMxOWFlYWU5NDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfTES4WUQP/h/5gi5+A47CWZQLM4uuM8wGYW Nd8M4OUecNQgmV/EhHgRxxseLP86NgsyPt7QA2eCAL1WGmVELK4CyO6OnvtBU6Eo 3/zwqZZnt4oRkeIfb9aRuDRIaQk0UsXMiIT6SCzO/GAeL4CSGfSpNSUfRcPM29Qe LE0xejZaX/nB9c1oFAr1IQkGRkYJZDgtEiFinB3z+WbOhdUtifqyj6gDwE6pLN56 nrZo3CQOmSCjtj+RfACJYAQGUx5TDoZOuXT0yJwpHIloqsdTPXHcMUoc8V7548T4 x7Kqkjkrw4chwawNqAyQn7GgS/9l5Na8/jP5d5n86Fr2TiM+KwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIAyPg8KVMWrMAxocg7ofreUCTswMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wOTcx NmUyMi00ZjQ4LTQxZDgtODdlMC1lOWI0ODY5MWZjYzUvMDk3MTZlMjItNGY0OC00 MWQ4LTg3ZTAtZTliNDg2OTFmY2M1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDk3MTZlMjItNGY0OC00MWQ4LTg3 ZTAtZTliNDg2OTFmY2M1LzA5NzE2ZTIyLTRmNDgtNDFkOC04N2UwLWU5YjQ4Njkx ZmNjNS5jcmwwHwYDVR0jBBgwFoAUdKFX0T88dP8Jdq6jTHiqqXVjBGAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wOTcxNmUyMi00ZjQ4LTQxZDgtODdlMC1lOWI0 ODY5MWZjYzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCbM5DGmaErScfL2lKbbzyY VDH3vA0GyyyOKfAzXWjoI7uHvhnYcM0FJSA+IGi7ngz4l95p2VPZavCKG1JBDQcg MU4gynyD9uhWuQD2iLe6GPpaTmMgNH4JS3t7R/gBWoVLZVyMZwVxcNNrX4lieKbH eWsII0q97ty0Le6aN2SMDE/a5FhpqIJu1giosn4psAuR9V7ztdCrp3fuScI2wzYC R7+cGbotXb1fBWnOUR4lGNsjCIjQ3Y4aGPFZ9g2yjybK92mkMvgikMHBcGj8Zpe5 5gB3yjlEV+0R91scQ1KApxneK7NVFXnWNznQMMeWkep+xUYmsOv1maX8ld2Lcpqy -----END CERTIFICATE-----Generated at Tue Apr 29 14:26:54 2025 by rpki-client