$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88/2fd6704c-2109-476c-8d4f-fea2428a7b88.mft File: 2fd6704c-2109-476c-8d4f-fea2428a7b88.mft (raw, json) Hash identifier: 4ZgIVNscq+8Ziy+SYkpwba5/juxFjvGn/g7DwfC0Y2g= Subject key identifier: 42:FB:92:F2:94:DE:A1:12:C2:D9:1D:BA:31:36:A8:62:6F:1F:8B:DD Authority key identifier: EA:D2:1E:7F:A7:5D:1C:A7:CB:5B:3A:E0:E3:D1:F7:DE:9A:F3:2D:7C Certificate issuer: /CN=2fd6704c-2109-476c-8d4f-fea2428a7b88 Certificate serial: 010D0C9F43285849AAC5F32FDE814955D12EC080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88/2fd6704c-2109-476c-8d4f-fea2428a7b88.mft Manifest number: 010D0C9F43285841854021A083A391EE824E5BEE Signing time: Sun 27 Apr 2025 17:00:03 +0000 Manifest this update: Sun 27 Apr 2025 17:00:03 +0000 Manifest next update: Tue 29 Apr 2025 17:00:00 +0000 Files and hashes: 1: 2fd6704c-2109-476c-8d4f-fea2428a7b88.crl (hash: rtt2llUd9RhjxHv4cNiU7V8ymhFc+ie9BdgI2vgFq8o=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88/2fd6704c-2109-476c-8d4f-fea2428a7b88.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88/2fd6704c-2109-476c-8d4f-fea2428a7b88.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:c5:f3:2f:de:81:49:55:d1:2e:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fd6704c-2109-476c-8d4f-fea2428a7b88 Validity Not Before: Apr 27 17:00:03 2025 GMT Not After : Apr 29 17:00:00 2025 GMT Subject: CN=737597ff-1817-4d0a-a25e-84e86089f0df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:3b:76:02:11:fb:12:22:00:bf:03:06:b7:c1: ca:0b:fb:37:9b:91:66:84:93:e9:97:d9:b6:7b:f5: 99:bb:d0:76:c3:cf:9f:f2:cb:8f:75:ab:d0:b3:45: 9b:90:60:e1:70:ad:13:a9:ae:85:52:6a:df:d4:d1: ef:83:c2:c0:ea:8b:bd:15:d0:5f:0f:3f:45:3a:83: e1:48:4d:5b:b6:6d:77:7c:2a:ae:8a:a6:1b:ca:0d: c7:cc:99:cb:17:a3:98:2d:17:6c:9c:80:6a:04:1f: 78:48:d9:5a:ab:59:db:41:21:a2:f9:b3:aa:de:25: 94:00:cb:56:a1:d0:9b:f6:0f:1e:42:51:9b:e0:87: b8:1c:85:21:87:be:2a:03:14:4e:61:84:90:c4:09: 3b:3f:c9:9f:db:c2:ae:b1:5f:bf:3b:9b:07:00:c2: 84:cb:e5:4a:84:15:4b:b8:cb:71:28:5e:75:b0:4a: 09:54:4e:35:9c:87:e2:7d:8c:58:a7:d2:26:c5:2e: 0d:1f:91:2b:0b:06:98:df:b9:3b:a5:c6:a1:ab:91: 24:ac:38:45:52:32:79:cd:2f:76:87:fe:b9:d0:ab: 72:b8:60:49:bf:07:be:94:1f:47:f1:3a:fd:eb:9e: 94:47:87:08:1a:7d:28:06:46:b2:b1:7a:b1:f2:3d: 8e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:FB:92:F2:94:DE:A1:12:C2:D9:1D:BA:31:36:A8:62:6F:1F:8B:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88/2fd6704c-2109-476c-8d4f-fea2428a7b88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88/2fd6704c-2109-476c-8d4f-fea2428a7b88.crl X509v3 Authority Key Identifier: keyid:EA:D2:1E:7F:A7:5D:1C:A7:CB:5B:3A:E0:E3:D1:F7:DE:9A:F3:2D:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:b5:68:b5:e1:27:50:b9:a6:f7:18:6b:80:f5:39:f6:ab:f1: 30:aa:82:e3:37:0e:55:f5:93:60:91:80:a9:03:cc:6e:0c:29: 11:a4:8b:5f:df:2b:85:1b:0e:13:c3:77:96:e0:53:9a:c4:0c: b0:83:a3:4a:88:df:25:bd:67:5e:11:3e:b7:c5:99:96:02:36: 88:8c:c1:18:5d:df:81:fd:39:30:69:e4:95:a0:cf:f9:ac:b0: a9:00:33:a8:93:55:e1:60:4d:e4:2d:e2:14:ff:17:da:7e:30: ce:ef:17:97:34:93:f2:54:c6:89:08:21:fe:78:1b:59:eb:69: 48:a5:b8:d6:7a:1d:38:f9:d8:fe:ad:a4:3e:b1:97:6c:48:7f: 2a:00:e2:6c:53:8c:df:36:b7:87:ed:9f:26:82:ec:d2:f2:d1: 6b:d9:05:da:71:40:64:5a:60:9c:ae:f0:2e:15:da:2b:2f:e7: 0d:56:1a:fe:f9:a0:7b:16:4e:e5:10:15:ca:6a:1c:90:64:16: 05:68:ee:f2:07:a0:89:90:05:8c:cc:f2:15:44:7d:34:e0:9a: 4b:ac:65:c4:d0:13:06:83:dd:43:8f:0a:13:e6:45:cb:6a:54: cc:46:e7:e4:64:ac:4b:e8:ba:71:36:19:66:44:03:3d:f6:a7: ce:68:e4:02 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmqxfMv3oFJVdEuwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZkNjcwNGMtMjEwOS00NzZjLThkNGYtZmVhMjQyOGE3 Yjg4MB4XDTI1MDQyNzE3MDAwM1oXDTI1MDQyOTE3MDAwMFowLzEtMCsGA1UEAxMk NzM3NTk3ZmYtMTgxNy00ZDBhLWEyNWUtODRlODYwODlmMGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Tt2AhH7EiIAvwMGt8HKC/s3m5FmhJPpl9m2 e/WZu9B2w8+f8suPdavQs0WbkGDhcK0Tqa6FUmrf1NHvg8LA6ou9FdBfDz9FOoPh SE1btm13fCquiqYbyg3HzJnLF6OYLRdsnIBqBB94SNlaq1nbQSGi+bOq3iWUAMtW odCb9g8eQlGb4Ie4HIUhh74qAxROYYSQxAk7P8mf28KusV+/O5sHAMKEy+VKhBVL uMtxKF51sEoJVE41nIfifYxYp9ImxS4NH5ErCwaY37k7pcahq5EkrDhFUjJ5zS92 h/650KtyuGBJvwe+lB9H8Tr9656UR4cIGn0oBkaysXqx8j2O/wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEL7kvKU3qESwtkdujE2qGJvH4vdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yZmQ2 NzA0Yy0yMTA5LTQ3NmMtOGQ0Zi1mZWEyNDI4YTdiODgvMmZkNjcwNGMtMjEwOS00 NzZjLThkNGYtZmVhMjQyOGE3Yjg4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmZkNjcwNGMtMjEwOS00NzZjLThk NGYtZmVhMjQyOGE3Yjg4LzJmZDY3MDRjLTIxMDktNDc2Yy04ZDRmLWZlYTI0Mjhh N2I4OC5jcmwwHwYDVR0jBBgwFoAU6tIef6ddHKfLWzrg49H33przLXwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yZmQ2NzA0Yy0yMTA5LTQ3NmMtOGQ0Zi1mZWEy NDI4YTdiODguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBbtWi14SdQuab3GGuA9Tn2 q/EwqoLjNw5V9ZNgkYCpA8xuDCkRpItf3yuFGw4Tw3eW4FOaxAywg6NKiN8lvWde ET63xZmWAjaIjMEYXd+B/TkwaeSVoM/5rLCpADOok1XhYE3kLeIU/xfafjDO7xeX NJPyVMaJCCH+eBtZ62lIpbjWeh04+dj+raQ+sZdsSH8qAOJsU4zfNreH7Z8mguzS 8tFr2QXacUBkWmCcrvAuFdorL+cNVhr++aB7Fk7lEBXKahyQZBYFaO7yB6CJkAWM zPIVRH004JpLrGXE0BMGg91DjwoT5kXLalTMRufkZKxL6LpxNhlmRAM99qfOaOQC -----END CERTIFICATE-----Generated at Mon Apr 28 06:30:59 2025 by rpki-client