$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/0de37d17-2664-4c85-9be4-a35baf0fd2b3.mft File: 0de37d17-2664-4c85-9be4-a35baf0fd2b3.mft (raw, json) Hash identifier: 1P5AYxq4Oy9oVEocRl5Vewlw+tiMSIeOCk6d3w2OB9U= Subject key identifier: B4:66:D1:BE:0D:8D:78:A7:C3:26:4E:6F:FB:A3:BB:CF:BA:C3:65:77 Authority key identifier: 4D:73:9C:88:EF:4B:17:58:90:09:43:09:76:8C:0E:3B:F8:65:EB:4F Certificate issuer: /CN=0de37d17-2664-4c85-9be4-a35baf0fd2b3 Certificate serial: 010D0C9F432858497F9E229B60E36FE77AC5BDA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/0de37d17-2664-4c85-9be4-a35baf0fd2b3.mft Manifest number: 010D0C9F4328584073A8419EE8E3E5AE11DFE451 Signing time: Sat 12 Apr 2025 06:00:03 +0000 Manifest this update: Sat 12 Apr 2025 06:00:03 +0000 Manifest next update: Mon 14 Apr 2025 06:00:00 +0000 Files and hashes: 1: 0de37d17-2664-4c85-9be4-a35baf0fd2b3.crl (hash: mAfG5PjR/Ud7iVkaIko4Zhj3m7bP2c2yAMoDHrM9L7k=) 2: 6cd0bba9-129b-39b1-b942-efb9d16b311f.roa (hash: 2DL2ZAK3lM8S3JCEIeX5J/z65CZD/XzDs9icDKSpvHQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/0de37d17-2664-4c85-9be4-a35baf0fd2b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/0de37d17-2664-4c85-9be4-a35baf0fd2b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7f:9e:22:9b:60:e3:6f:e7:7a:c5:bd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0de37d17-2664-4c85-9be4-a35baf0fd2b3 Validity Not Before: Apr 12 06:00:03 2025 GMT Not After : Apr 14 06:00:00 2025 GMT Subject: CN=b16f6dea-f73d-477e-b5c6-729dcffc4d8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:be:40:dd:b8:52:dc:5e:aa:08:4e:da:d3:c3: 2f:29:eb:d9:3d:5e:4f:6a:b9:e5:4d:82:6d:20:ba: 94:36:3c:2a:73:57:a4:cd:b6:7d:85:4e:3c:98:38: 46:9f:1d:f9:95:43:1e:5b:e1:f1:54:1d:9e:a1:87: 69:3a:78:82:3b:58:96:42:51:6c:23:ea:f6:ff:0e: 52:8c:bd:17:01:ec:08:9c:0c:d3:40:4e:63:33:69: eb:4e:c9:96:b4:79:ba:9a:32:f5:49:d4:fb:4d:9f: 62:e0:3d:2d:7d:88:78:4f:4e:4a:94:91:60:7a:a3: 4f:ac:d9:f2:06:39:45:26:5a:17:cd:95:98:87:7e: 1d:90:28:a5:2b:40:c2:d5:85:8e:20:90:ae:07:f6: da:23:99:44:8c:18:ea:0d:a6:c8:a4:06:f9:86:63: ae:9b:02:a4:8c:ad:94:e1:69:5c:90:54:31:54:20: 5e:b1:6b:dc:08:a6:90:12:43:f2:7b:2e:f8:e8:7d: f9:73:2d:fa:c9:7c:6b:8b:2d:30:b7:75:09:1d:41: 15:c3:5d:34:62:43:63:85:6a:e4:df:53:77:42:0e: 8c:e4:4f:ab:47:ed:51:48:df:06:e6:5b:7e:7c:b6: 3a:7b:fb:cf:7a:93:61:78:ff:0c:5f:95:0c:f5:76: cf:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:66:D1:BE:0D:8D:78:A7:C3:26:4E:6F:FB:A3:BB:CF:BA:C3:65:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/0de37d17-2664-4c85-9be4-a35baf0fd2b3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/0de37d17-2664-4c85-9be4-a35baf0fd2b3.crl X509v3 Authority Key Identifier: keyid:4D:73:9C:88:EF:4B:17:58:90:09:43:09:76:8C:0E:3B:F8:65:EB:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:72:ba:30:45:de:50:ce:f9:c6:7b:da:83:07:8a:c6:ac:48: b5:4c:48:b2:a8:f4:dd:b9:f0:70:cf:5e:7e:d3:ba:06:6a:6f: 84:06:5d:e6:31:4c:5f:34:ed:b0:4b:ce:bc:e1:ad:20:aa:a0: 9c:70:87:ed:cc:db:17:a6:51:9f:54:79:1f:95:dc:56:e0:5c: ef:78:28:42:ed:8e:c1:c8:11:e9:b7:b6:ad:3f:2d:b4:b5:a4: c8:29:a2:54:72:cf:37:83:95:e9:16:a4:f9:11:3f:b7:7d:4b: 06:59:68:7e:75:54:78:58:88:f5:aa:fa:a3:05:5d:73:21:6f: 51:a4:48:07:17:da:d6:3a:38:14:c7:da:ba:85:f3:8d:4d:91: bc:29:93:27:b9:23:af:24:af:e7:65:b8:d4:8f:a4:d6:c0:16: 7d:34:13:59:6a:95:fe:f0:46:6f:9a:a1:c0:0b:b7:08:b1:5f: e1:fd:b4:b3:b8:7a:31:21:28:f5:3b:c0:30:96:59:a9:c7:f7: a3:fb:bb:2b:63:c1:98:53:99:e7:34:c5:bf:94:38:83:ed:33: b2:35:50:97:ef:e9:25:ac:3c:2d:14:1e:b8:62:73:1b:ca:5c: 93:1a:2e:2e:1b:c3:4e:a7:c9:ac:e7:6e:2b:62:a3:41:14:9b: f0:fa:f8:21 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl/niKbYONv53rFvaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRlMzdkMTctMjY2NC00Yzg1LTliZTQtYTM1YmFmMGZk MmIzMB4XDTI1MDQxMjA2MDAwM1oXDTI1MDQxNDA2MDAwMFowLzEtMCsGA1UEAxMk YjE2ZjZkZWEtZjczZC00NzdlLWI1YzYtNzI5ZGNmZmM0ZDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs75A3bhS3F6qCE7a08MvKevZPV5ParnlTYJt ILqUNjwqc1ekzbZ9hU48mDhGnx35lUMeW+HxVB2eoYdpOniCO1iWQlFsI+r2/w5S jL0XAewInAzTQE5jM2nrTsmWtHm6mjL1SdT7TZ9i4D0tfYh4T05KlJFgeqNPrNny BjlFJloXzZWYh34dkCilK0DC1YWOIJCuB/baI5lEjBjqDabIpAb5hmOumwKkjK2U 4WlckFQxVCBesWvcCKaQEkPyey746H35cy36yXxriy0wt3UJHUEVw100YkNjhWrk 31N3Qg6M5E+rR+1RSN8G5lt+fLY6e/vPepNheP8MX5UM9XbPSQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLRm0b4NjXinwyZOb/uju8+6w2V3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wZGUz N2QxNy0yNjY0LTRjODUtOWJlNC1hMzViYWYwZmQyYjMvMGRlMzdkMTctMjY2NC00 Yzg1LTliZTQtYTM1YmFmMGZkMmIzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGRlMzdkMTctMjY2NC00Yzg1LTli ZTQtYTM1YmFmMGZkMmIzLzBkZTM3ZDE3LTI2NjQtNGM4NS05YmU0LWEzNWJhZjBm ZDJiMy5jcmwwHwYDVR0jBBgwFoAUTXOciO9LF1iQCUMJdowOO/hl608wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wZGUzN2QxNy0yNjY0LTRjODUtOWJlNC1hMzVi YWYwZmQyYjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAocrowRd5QzvnGe9qDB4rG rEi1TEiyqPTdufBwz15+07oGam+EBl3mMUxfNO2wS8684a0gqqCccIftzNsXplGf VHkfldxW4FzveChC7Y7ByBHpt7atPy20taTIKaJUcs83g5XpFqT5ET+3fUsGWWh+ dVR4WIj1qvqjBV1zIW9RpEgHF9rWOjgUx9q6hfONTZG8KZMnuSOvJK/nZbjUj6TW wBZ9NBNZapX+8EZvmqHAC7cIsV/h/bSzuHoxISj1O8Awllmpx/ej+7srY8GYU5nn NMW/lDiD7TOyNVCX7+klrDwtFB64YnMbylyTGi4uG8NOp8ms524rYqNBFJvw+vgh -----END CERTIFICATE-----Generated at Sat Apr 12 17:00:04 2025 by rpki-client