$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.mft File: 3bbdd71c-c30e-44ac-90f8-ba443134d8dd.mft (raw, json) Hash identifier: tFYqE84lmaqL+4fQiCCYO9+PGuNk1rDOKmEPvmuQh84= Subject key identifier: 8E:B9:97:6F:35:F2:53:72:52:D6:A7:B8:77:B5:93:4A:92:4B:FA:2D Authority key identifier: B7:F4:1B:FB:03:A3:D7:21:03:F8:AE:08:6D:5E:76:BC:E6:BB:EC:73 Certificate issuer: /CN=3bbdd71c-c30e-44ac-90f8-ba443134d8dd Certificate serial: 010D0C9F43285849A8E97E38573C1ED1C0BDF850 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.mft Manifest number: 010D0C9F4328584073A83347C9F5954AECED651F Signing time: Sun 27 Apr 2025 01:00:03 +0000 Manifest this update: Sun 27 Apr 2025 01:00:03 +0000 Manifest next update: Wed 30 Apr 2025 01:00:00 +0000 Files and hashes: 1: 3bbdd71c-c30e-44ac-90f8-ba443134d8dd.crl (hash: iLkEX5PsSX/WWqmrs+NBRtrgEzmwujK8udeewCA7YkA=) 2: 870b3555-4770-357a-83a4-150807097e93.roa (hash: 8kuHzO1gEAFG+NHpY825uYgLF5IatwSL0RKvMUOpOug=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:e9:7e:38:57:3c:1e:d1:c0:bd:f8:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bbdd71c-c30e-44ac-90f8-ba443134d8dd Validity Not Before: Apr 27 01:00:03 2025 GMT Not After : Apr 30 01:00:00 2025 GMT Subject: CN=761e2367-d5bb-4a06-ba9c-d0c7123d9aa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:57:7a:d7:a3:93:03:ff:d0:0e:e9:cf:d8:fa: 42:64:82:b2:ae:b0:80:be:d0:af:2e:a9:e1:fe:41: 64:6d:a1:c9:c9:63:56:8f:59:07:9b:0e:aa:18:04: d4:82:d3:27:f3:78:d7:ff:e7:41:77:a4:ec:10:fb: 0d:cf:62:3f:ed:3b:f6:32:e6:38:3e:ff:af:d2:f8: 99:33:0a:a0:0d:49:89:81:93:09:87:c4:63:7d:6b: 47:51:6c:f3:ec:2c:51:fa:28:b3:3d:92:bd:f9:4d: 9b:6a:01:83:b3:25:38:5e:a2:52:cd:9b:53:b7:70: 9e:32:46:b9:e8:b4:61:21:2a:c7:5b:bc:cb:78:82: 52:f6:27:22:cf:be:dd:fc:a0:d6:e5:fd:79:3a:ab: e6:89:9d:93:4a:2f:ca:79:3a:03:54:b5:54:ed:50: 33:f1:9d:3c:67:03:07:3d:9e:88:de:e1:99:47:76: f0:24:7d:96:fa:2d:ef:bd:3a:b7:f9:ea:06:c1:68: d7:04:1e:1e:7c:9a:77:24:1e:cd:b7:cc:98:29:42: ab:c7:da:62:05:fb:20:bd:bc:6b:47:d2:b8:5e:9f: 01:fb:80:9c:de:96:7a:34:d9:11:81:8d:20:d8:fd: 12:64:da:30:74:a3:dd:75:ac:99:57:b0:2c:0f:36: 26:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B9:97:6F:35:F2:53:72:52:D6:A7:B8:77:B5:93:4A:92:4B:FA:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.crl X509v3 Authority Key Identifier: keyid:B7:F4:1B:FB:03:A3:D7:21:03:F8:AE:08:6D:5E:76:BC:E6:BB:EC:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:ab:63:36:b8:2f:eb:b8:d9:59:73:39:5e:1a:5c:e6:38:8a: 1c:7d:ad:89:02:99:2e:e2:14:0b:92:ab:53:82:a9:02:dd:f9: cd:fd:6a:6f:0f:d4:3e:14:34:4b:ac:fa:c2:e0:cc:17:60:e8: 59:3e:16:b8:0c:f4:e5:21:a6:53:29:e2:78:b7:31:d1:3a:b9: 10:b1:0f:8c:90:b2:bb:db:dd:fa:2d:e4:43:f9:8f:3f:1b:b9: 35:e5:2f:f0:b0:43:4d:34:0c:3b:ea:c1:85:a6:13:53:40:38: bd:39:94:a7:66:20:e2:5c:65:91:50:df:dd:da:c8:3e:a1:da: c5:65:65:4b:21:92:45:26:cd:97:72:28:22:dc:85:8c:c2:bf: e5:b1:ac:a2:26:59:d0:c0:89:8c:4e:70:28:7c:11:a2:88:8c: d3:c1:00:fe:77:ce:cd:3c:6c:2e:56:41:9b:6f:f5:73:82:6c: 55:03:0e:08:04:8b:22:9c:18:36:af:62:2e:cf:8a:f6:61:bf: 80:75:59:f2:0b:c1:d4:0e:ce:3f:a7:a9:68:84:05:49:43:3c: 21:2c:b3:9c:7c:91:9e:7e:6c:49:37:02:e3:bc:ab:8b:17:f7: 72:33:ea:41:1f:91:f0:98:7d:ea:7c:4e:ed:22:bf:49:e6:dd: 72:ed:21:6f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmo6X44Vzwe0cC9+FAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JiZGQ3MWMtYzMwZS00NGFjLTkwZjgtYmE0NDMxMzRk OGRkMB4XDTI1MDQyNzAxMDAwM1oXDTI1MDQzMDAxMDAwMFowLzEtMCsGA1UEAxMk NzYxZTIzNjctZDViYi00YTA2LWJhOWMtZDBjNzEyM2Q5YWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVd616OTA//QDunP2PpCZIKyrrCAvtCvLqnh /kFkbaHJyWNWj1kHmw6qGATUgtMn83jX/+dBd6TsEPsNz2I/7Tv2MuY4Pv+v0viZ MwqgDUmJgZMJh8RjfWtHUWzz7CxR+iizPZK9+U2bagGDsyU4XqJSzZtTt3CeMka5 6LRhISrHW7zLeIJS9iciz77d/KDW5f15OqvmiZ2TSi/KeToDVLVU7VAz8Z08ZwMH PZ6I3uGZR3bwJH2W+i3vvTq3+eoGwWjXBB4efJp3JB7Nt8yYKUKrx9piBfsgvbxr R9K4Xp8B+4Cc3pZ6NNkRgY0g2P0SZNowdKPddayZV7AsDzYm4wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFI65l2818lNyUtanuHe1k0qSS/otMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zYmJk ZDcxYy1jMzBlLTQ0YWMtOTBmOC1iYTQ0MzEzNGQ4ZGQvM2JiZGQ3MWMtYzMwZS00 NGFjLTkwZjgtYmE0NDMxMzRkOGRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2JiZGQ3MWMtYzMwZS00NGFjLTkw ZjgtYmE0NDMxMzRkOGRkLzNiYmRkNzFjLWMzMGUtNDRhYy05MGY4LWJhNDQzMTM0 ZDhkZC5jcmwwHwYDVR0jBBgwFoAUt/Qb+wOj1yED+K4IbV52vOa77HMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zYmJkZDcxYy1jMzBlLTQ0YWMtOTBmOC1iYTQ0 MzEzNGQ4ZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC7q2M2uC/ruNlZczleGlzm OIocfa2JApku4hQLkqtTgqkC3fnN/WpvD9Q+FDRLrPrC4MwXYOhZPha4DPTlIaZT KeJ4tzHROrkQsQ+MkLK72936LeRD+Y8/G7k15S/wsENNNAw76sGFphNTQDi9OZSn ZiDiXGWRUN/d2sg+odrFZWVLIZJFJs2Xcigi3IWMwr/lsayiJlnQwImMTnAofBGi iIzTwQD+d87NPGwuVkGbb/VzgmxVAw4IBIsinBg2r2Iuz4r2Yb+AdVnyC8HUDs4/ p6lohAVJQzwhLLOcfJGefmxJNwLjvKuLF/dyM+pBH5HwmH3qfE7tIr9J5t1y7SFv -----END CERTIFICATE-----Generated at Mon Apr 28 02:17:05 2025 by rpki-client