$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65/d849c62d-50e4-4fcb-9dfe-8634d409fe65.mft File: d849c62d-50e4-4fcb-9dfe-8634d409fe65.mft (raw, json) Hash identifier: ealv/vZcCwaYpUlxhWdIeA7uc0unxVH5Eythi1AUc78= Subject key identifier: 25:2F:E1:2C:5B:EA:B1:B8:CD:32:14:54:31:8E:AD:CC:71:94:23:4B Authority key identifier: 6B:46:77:60:80:69:68:F3:21:4D:61:F9:72:1E:55:99:6C:AE:A7:41 Certificate issuer: /CN=d849c62d-50e4-4fcb-9dfe-8634d409fe65 Certificate serial: 010D0C9F432858496EFBD491575F619B68B2BA40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65/d849c62d-50e4-4fcb-9dfe-8634d409fe65.mft Manifest number: 010D0C9F4328584073A84644CE7934BA0CB60D4A Signing time: Sun 06 Apr 2025 07:00:07 +0000 Manifest this update: Sun 06 Apr 2025 07:00:07 +0000 Manifest next update: Tue 08 Apr 2025 07:00:00 +0000 Files and hashes: 1: 995d608d-8a76-3562-bd4f-eb0e92f36c5b.roa (hash: dLZbjAJD9A0xP4vgSWLhRR7lRCjjkxwKl3dCm4fwAq8=) 2: d849c62d-50e4-4fcb-9dfe-8634d409fe65.crl (hash: xdoMGEQ0D9j1Ron6zL83yuEqkyiNSq6Ana1QbxoSEcI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65/d849c62d-50e4-4fcb-9dfe-8634d409fe65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65/d849c62d-50e4-4fcb-9dfe-8634d409fe65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6e:fb:d4:91:57:5f:61:9b:68:b2:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d849c62d-50e4-4fcb-9dfe-8634d409fe65 Validity Not Before: Apr 6 07:00:07 2025 GMT Not After : Apr 8 07:00:00 2025 GMT Subject: CN=7333f128-fa34-4b64-9e01-d7ecfe2ea4ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2c:6f:3a:13:98:2c:5e:2b:e5:1f:99:8f:ae: 9f:e5:d2:ac:9b:88:41:2e:e2:bf:1d:25:88:f6:d8: 82:bf:94:d5:d7:05:4e:3e:ff:e1:11:a9:70:08:f1: 1f:5e:ad:6d:1e:c9:fc:5c:a3:a2:ed:f0:bc:c9:71: 6b:b6:34:07:95:35:c7:44:f6:69:95:5f:9f:e2:c9: 27:95:9a:21:fe:5c:6b:30:fa:bf:4e:c6:0b:4b:34: fc:85:51:94:41:7d:15:b6:ab:8c:e3:96:29:8c:b4: 80:ef:ff:20:f8:81:df:87:4d:51:86:7f:4b:a0:b2: e0:30:5a:fa:52:66:b0:61:0c:71:e2:7e:6f:2b:de: 9c:aa:e3:87:de:35:a1:36:a8:81:25:18:4d:be:a0: 93:36:7e:8b:f0:c2:2f:70:dd:b2:97:7a:30:6b:45: 00:49:40:12:95:3c:37:47:f6:81:e1:10:e7:e9:2b: 10:0b:98:29:83:76:68:ab:0a:1c:f1:2c:c4:9f:45: 22:ea:68:00:36:e0:98:9e:63:4f:54:6b:d6:f7:bd: 41:6e:33:6d:84:41:fb:00:70:58:a1:e6:4d:f1:cd: ca:ef:42:69:96:bf:bd:3b:24:ae:0b:93:50:62:2e: 3a:f9:e9:e5:6d:c1:fb:b1:ab:f8:48:ee:97:8c:5c: c5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:2F:E1:2C:5B:EA:B1:B8:CD:32:14:54:31:8E:AD:CC:71:94:23:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65/d849c62d-50e4-4fcb-9dfe-8634d409fe65.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65/d849c62d-50e4-4fcb-9dfe-8634d409fe65.crl X509v3 Authority Key Identifier: keyid:6B:46:77:60:80:69:68:F3:21:4D:61:F9:72:1E:55:99:6C:AE:A7:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d849c62d-50e4-4fcb-9dfe-8634d409fe65.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:93:03:b7:32:04:df:99:78:85:d0:f3:3a:6f:3c:93:74:0e: 8f:c0:00:92:a0:ae:bd:0f:9e:ac:b5:f2:b7:1c:12:e1:1d:de: 2c:08:41:6e:ab:ff:84:68:10:b8:9b:14:a8:d3:2e:48:e5:e5: 03:65:9d:21:95:78:76:ce:44:a5:10:dd:fa:48:5b:00:f3:f9: 14:df:8e:72:78:27:c0:e9:09:a0:18:9c:8f:81:1c:39:e0:2d: 76:3e:d2:04:a0:33:ef:33:c0:f6:83:49:94:df:c9:5e:2f:af: d0:20:65:6f:47:e0:99:13:65:75:c5:7d:c0:f6:24:b1:fc:22: 7d:0f:37:1b:15:c4:09:69:3e:9c:e7:ff:af:88:0a:2a:00:4d: b6:aa:36:57:86:75:47:aa:0f:0d:05:db:a0:7c:e5:d2:e9:a9: a3:49:53:e8:1e:9e:fe:1c:90:4d:7f:9d:c1:e2:bc:0c:27:bd: f6:e4:b2:48:82:66:b1:79:d2:00:63:81:e2:61:27:06:88:9f: 46:1c:ef:05:fd:26:00:77:db:3d:00:3c:22:51:fd:bb:42:c6: bb:06:18:2b:68:ee:06:5f:5f:22:69:83:c7:79:8d:c9:ff:6b: 16:c2:5e:b8:b0:14:e1:4f:43:ed:ce:d4:08:a7:15:91:47:89: f2:0c:6d:01 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWElu+9SRV19hm2iyukAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg0OWM2MmQtNTBlNC00ZmNiLTlkZmUtODYzNGQ0MDlm ZTY1MB4XDTI1MDQwNjA3MDAwN1oXDTI1MDQwODA3MDAwMFowLzEtMCsGA1UEAxMk NzMzM2YxMjgtZmEzNC00YjY0LTllMDEtZDdlY2ZlMmVhNGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCxvOhOYLF4r5R+Zj66f5dKsm4hBLuK/HSWI 9tiCv5TV1wVOPv/hEalwCPEfXq1tHsn8XKOi7fC8yXFrtjQHlTXHRPZplV+f4skn lZoh/lxrMPq/TsYLSzT8hVGUQX0VtquM45YpjLSA7/8g+IHfh01Rhn9LoLLgMFr6 UmawYQxx4n5vK96cquOH3jWhNqiBJRhNvqCTNn6L8MIvcN2yl3owa0UASUASlTw3 R/aB4RDn6SsQC5gpg3Zoqwoc8SzEn0Ui6mgANuCYnmNPVGvW971BbjNthEH7AHBY oeZN8c3K70Jplr+9OySuC5NQYi46+enlbcH7sav4SO6XjFzF3wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCUv4Sxb6rG4zTIUVDGOrcxxlCNLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kODQ5 YzYyZC01MGU0LTRmY2ItOWRmZS04NjM0ZDQwOWZlNjUvZDg0OWM2MmQtNTBlNC00 ZmNiLTlkZmUtODYzNGQ0MDlmZTY1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDg0OWM2MmQtNTBlNC00ZmNiLTlk ZmUtODYzNGQ0MDlmZTY1L2Q4NDljNjJkLTUwZTQtNGZjYi05ZGZlLTg2MzRkNDA5 ZmU2NS5jcmwwHwYDVR0jBBgwFoAUa0Z3YIBpaPMhTWH5ch5VmWyup0EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kODQ5YzYyZC01MGU0LTRmY2ItOWRmZS04NjM0 ZDQwOWZlNjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQALkwO3MgTfmXiF0PM6bzyT dA6PwACSoK69D56stfK3HBLhHd4sCEFuq/+EaBC4mxSo0y5I5eUDZZ0hlXh2zkSl EN36SFsA8/kU345yeCfA6QmgGJyPgRw54C12PtIEoDPvM8D2g0mU38leL6/QIGVv R+CZE2V1xX3A9iSx/CJ9DzcbFcQJaT6c5/+viAoqAE22qjZXhnVHqg8NBdugfOXS 6amjSVPoHp7+HJBNf53B4rwMJ7325LJIgmaxedIAY4HiYScGiJ9GHO8F/SYAd9s9 ADwiUf27Qsa7BhgraO4GX18iaYPHeY3J/2sWwl64sBThT0PtztQIpxWRR4nyDG0B -----END CERTIFICATE-----Generated at Mon Apr 7 02:22:18 2025 by rpki-client