$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft File: 30d422dc-98d1-4304-9f8a-097127e15d5e.mft (raw, json) Hash identifier: xq/lHl1Vhfy351C76TfbLIK65ovfAiKIzqmxVkNwSwc= Subject key identifier: 2C:4E:8B:4B:1A:DA:94:5E:1C:BA:7B:CF:31:61:F5:4C:C1:0C:54:A0 Authority key identifier: D7:27:1A:B8:11:31:9C:15:97:44:55:D0:79:13:E2:34:B5:E0:86:31 Certificate issuer: /CN=30d422dc-98d1-4304-9f8a-097127e15d5e Certificate serial: 010D0C9F43285849A854A9E9EBBD29A51B31FC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft Manifest number: 010D0C9F4328584073A827DEF1520938C25784CF Signing time: Sat 26 Apr 2025 20:00:08 +0000 Manifest this update: Sat 26 Apr 2025 20:00:08 +0000 Manifest next update: Tue 29 Apr 2025 20:00:00 +0000 Files and hashes: 1: 1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer (hash: s+p+FBKETCmd04vQCNNv5Z6sQ1SwTgFIp4PdgPrzW/E=) 2: 30d422dc-98d1-4304-9f8a-097127e15d5e.crl (hash: NTecaAEuOfnMfu2ECAqNGGHSrZrovKwzszf81iMn+vc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:54:a9:e9:eb:bd:29:a5:1b:31:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30d422dc-98d1-4304-9f8a-097127e15d5e Validity Not Before: Apr 26 20:00:08 2025 GMT Not After : Apr 29 20:00:00 2025 GMT Subject: CN=63f9bcb7-4c10-45d9-a29b-0672a046807f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b5:d2:39:b1:43:99:74:d2:9a:71:d4:5f:c7: 09:cd:cc:cd:4f:77:b3:5a:06:54:a8:6a:ce:8e:df: eb:1f:92:c3:84:9c:22:a7:87:be:8b:f4:00:64:d7: cc:71:08:65:5d:15:8a:64:4a:a5:c4:42:01:6c:ae: 0c:fe:8a:64:fc:9d:90:34:65:3b:a6:6f:43:b9:25: ea:aa:2d:d6:d1:21:b4:3f:d1:4c:4d:f8:fb:be:4c: 12:51:6a:de:bd:7f:35:29:a2:bb:12:1b:80:aa:bf: 34:01:0c:6f:45:23:d7:75:6b:60:a3:e4:64:5d:a7: 74:8a:1a:aa:f0:cb:38:cd:0e:c0:7c:d6:b4:d6:16: f0:a7:2b:88:3b:22:08:1a:68:6f:d1:34:c8:60:f7: 3f:1f:ee:a7:69:b5:d5:20:d3:df:73:55:c8:ee:58: a2:bc:c1:e9:c9:dd:e2:4d:65:46:eb:07:f7:d2:bb: a8:03:1d:ef:91:3d:18:7a:97:e9:8d:d4:77:fd:ff: 92:cd:81:fa:33:f9:97:64:ff:95:a3:56:0f:ca:7b: c1:21:d1:fe:19:bf:a8:20:28:76:75:4c:c9:8f:76: 6e:c1:c4:b3:80:23:55:27:6b:d7:0a:bb:c0:3a:a0: 04:e0:6f:07:db:23:55:d0:a0:f1:69:62:df:66:44: 64:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:4E:8B:4B:1A:DA:94:5E:1C:BA:7B:CF:31:61:F5:4C:C1:0C:54:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl X509v3 Authority Key Identifier: keyid:D7:27:1A:B8:11:31:9C:15:97:44:55:D0:79:13:E2:34:B5:E0:86:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:8f:73:7e:6e:b6:45:91:d8:7a:d7:4a:65:08:c3:4b:83:5a: 83:7a:49:8a:b9:16:1b:8e:61:64:b6:ea:4b:01:4b:f4:ef:bb: df:27:15:dd:9a:fb:25:ac:76:ee:96:e9:96:a0:65:25:b3:2e: 65:38:71:cd:3e:0e:32:08:73:6d:d3:e6:e3:b4:1b:ea:73:e3: cc:9b:20:9f:fb:15:68:3c:ae:a9:b1:d2:9a:4d:98:db:37:c1: a7:91:8e:de:2c:58:73:78:4f:90:89:77:97:0a:05:37:6c:27: b3:1d:40:45:b8:52:fc:96:8e:e4:45:66:4a:f1:5b:89:46:bc: d1:16:e4:aa:d9:a6:36:95:0b:68:2f:22:bb:c8:56:ae:d7:ce: e0:a7:4a:08:b6:b4:1e:05:1d:74:bf:1e:8f:55:08:d5:45:4f: 76:6d:05:e8:22:f2:24:bc:3a:3f:e2:67:e2:8e:8f:ef:14:46: ce:8f:5f:8c:ee:0a:c8:97:ba:f8:26:4c:10:76:5b:e0:ea:8c: 0a:b2:29:b8:3c:52:40:e4:8d:0a:a1:30:6b:4e:8f:c4:f2:59: d0:49:fc:3b:06:1d:67:43:43:80:fb:68:73:9f:58:a2:d9:a7: 92:38:0c:83:9d:11:90:48:c7:f1:a3:ec:51:04:a0:77:62:d8: b5:14:a9:5d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmoVKnp670ppRsx/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzBkNDIyZGMtOThkMS00MzA0LTlmOGEtMDk3MTI3ZTE1 ZDVlMB4XDTI1MDQyNjIwMDAwOFoXDTI1MDQyOTIwMDAwMFowLzEtMCsGA1UEAxMk NjNmOWJjYjctNGMxMC00NWQ5LWEyOWItMDY3MmEwNDY4MDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirXSObFDmXTSmnHUX8cJzczNT3ezWgZUqGrO jt/rH5LDhJwip4e+i/QAZNfMcQhlXRWKZEqlxEIBbK4M/opk/J2QNGU7pm9DuSXq qi3W0SG0P9FMTfj7vkwSUWrevX81KaK7EhuAqr80AQxvRSPXdWtgo+RkXad0ihqq 8Ms4zQ7AfNa01hbwpyuIOyIIGmhv0TTIYPc/H+6nabXVINPfc1XI7liivMHpyd3i TWVG6wf30ruoAx3vkT0YepfpjdR3/f+SzYH6M/mXZP+Vo1YPynvBIdH+Gb+oICh2 dUzJj3ZuwcSzgCNVJ2vXCrvAOqAE4G8H2yNV0KDxaWLfZkRksQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCxOi0sa2pReHLp7zzFh9UzBDFSgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zMGQ0 MjJkYy05OGQxLTQzMDQtOWY4YS0wOTcxMjdlMTVkNWUvMzBkNDIyZGMtOThkMS00 MzA0LTlmOGEtMDk3MTI3ZTE1ZDVlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzBkNDIyZGMtOThkMS00MzA0LTlm OGEtMDk3MTI3ZTE1ZDVlLzMwZDQyMmRjLTk4ZDEtNDMwNC05ZjhhLTA5NzEyN2Ux NWQ1ZS5jcmwwHwYDVR0jBBgwFoAU1ycauBExnBWXRFXQeRPiNLXghjEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zMGQ0MjJkYy05OGQxLTQzMDQtOWY4YS0wOTcx MjdlMTVkNWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBtj3N+brZFkdh610plCMNL g1qDekmKuRYbjmFktupLAUv077vfJxXdmvslrHbulumWoGUlsy5lOHHNPg4yCHNt 0+bjtBvqc+PMmyCf+xVoPK6psdKaTZjbN8GnkY7eLFhzeE+QiXeXCgU3bCezHUBF uFL8lo7kRWZK8VuJRrzRFuSq2aY2lQtoLyK7yFau187gp0oItrQeBR10vx6PVQjV RU92bQXoIvIkvDo/4mfijo/vFEbOj1+M7grIl7r4JkwQdlvg6owKsim4PFJA5I0K oTBrTo/E8lnQSfw7Bh1nQ0OA+2hzn1ii2aeSOAyDnRGQSMfxo+xRBKB3Yti1FKld -----END CERTIFICATE-----Generated at Sun Apr 27 02:49:34 2025 by rpki-client