$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/12a9b198-d23d-4f41-8397-cc467b398bc3.mft File: 12a9b198-d23d-4f41-8397-cc467b398bc3.mft (raw, json) Hash identifier: jFwntYD6iSyzUZ6OHYQWfeHwLXIPzgsTUaDp1eg9iA8= Subject key identifier: BF:49:78:85:28:2A:18:2E:A1:31:6F:50:B9:51:50:8C:59:4F:E3:FA Authority key identifier: 72:84:0D:43:69:6F:2A:43:67:22:ED:6B:46:20:A3:82:9C:45:47:32 Certificate issuer: /CN=12a9b198-d23d-4f41-8397-cc467b398bc3 Certificate serial: 010D0C9F432858498B22330A473FC09ACAE1663C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/12a9b198-d23d-4f41-8397-cc467b398bc3.mft Manifest number: 010D0C9F4328584073A8494E35EF9969DC5DD455 Signing time: Wed 16 Apr 2025 09:00:03 +0000 Manifest this update: Wed 16 Apr 2025 09:00:03 +0000 Manifest next update: Fri 18 Apr 2025 09:00:00 +0000 Files and hashes: 1: 12a9b198-d23d-4f41-8397-cc467b398bc3.crl (hash: IGPN98t2oo21gvf6jW6X9EGdTXFgwPBxsLss5rIV830=) 2: e8d3ad61-dc23-3c3e-81df-ee5f8b0d7e45.roa (hash: fwNQE5rErSCdfeMD+p/PcirbZ2DRgVvn8hZOPBpJh18=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/12a9b198-d23d-4f41-8397-cc467b398bc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/12a9b198-d23d-4f41-8397-cc467b398bc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8b:22:33:0a:47:3f:c0:9a:ca:e1:66:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12a9b198-d23d-4f41-8397-cc467b398bc3 Validity Not Before: Apr 16 09:00:03 2025 GMT Not After : Apr 18 09:00:00 2025 GMT Subject: CN=6454b71c-8a37-417f-b0db-60f9bfdc2f71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:0d:1a:f7:28:4f:5b:46:a0:66:03:ed:62:b5: 3a:82:34:91:3c:fd:1f:7b:6c:9f:bd:16:e6:f3:39: 62:b0:62:05:82:1d:82:a6:1e:46:c6:49:77:68:85: 85:ac:b7:77:61:1c:e8:76:de:f9:b1:ca:f7:00:0c: aa:22:cf:87:70:c8:b1:20:3b:d5:60:17:eb:ed:70: ed:f0:ff:7f:19:ad:44:8b:2a:19:93:29:e5:c9:7d: a4:d4:7c:80:c6:7b:d3:b8:19:0f:7d:7d:da:8f:41: 2e:d7:75:0c:6c:5b:fd:61:d3:72:f9:47:cf:5c:c1: 75:77:8c:df:20:da:d3:9e:02:c6:f8:51:9e:cc:66: 28:61:0d:d2:89:76:35:42:a4:ea:0f:42:c9:bb:9f: c9:44:91:9b:80:46:a6:1a:74:40:1c:da:55:36:bf: 26:69:c1:88:48:c0:0a:1b:54:b3:04:22:0f:de:17: 39:49:51:21:e0:27:67:82:7c:3b:b7:24:d2:64:ba: 67:28:88:b0:f0:9c:98:22:1d:80:15:31:6b:cf:ef: a6:9c:e6:d3:1d:d1:2b:06:9e:8e:44:fa:5e:68:c5: f7:89:58:e1:f8:e1:c7:e4:b4:20:e7:44:15:c5:f2: d9:de:b2:82:1f:b0:d1:bf:df:bf:9d:6a:3e:d5:95: 05:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:49:78:85:28:2A:18:2E:A1:31:6F:50:B9:51:50:8C:59:4F:E3:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/12a9b198-d23d-4f41-8397-cc467b398bc3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/12a9b198-d23d-4f41-8397-cc467b398bc3.crl X509v3 Authority Key Identifier: keyid:72:84:0D:43:69:6F:2A:43:67:22:ED:6B:46:20:A3:82:9C:45:47:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:97:65:09:6d:9f:d5:06:45:52:01:3e:6b:66:79:ba:6a:87: 1f:85:a5:a2:55:0c:62:1b:b1:28:45:f0:c6:9d:a0:25:a9:fe: e5:4f:34:31:22:45:cf:ff:7f:32:b1:c1:99:94:88:e8:9c:46: 66:d5:8b:38:af:f7:a7:a0:94:16:27:55:a7:38:aa:31:07:2f: a0:eb:a6:4f:c7:f6:ed:40:40:f8:70:4d:cf:62:ee:54:19:34: 26:7e:84:4f:52:be:dd:30:ef:b6:6f:46:5c:7b:a4:4f:b7:2e: 49:4b:b0:ab:8c:90:2a:4a:41:5e:3b:a3:22:11:21:ab:a1:00: a2:ac:12:70:88:b5:d4:27:32:0b:dd:60:d8:4f:bd:d4:73:62: e1:99:2b:18:d0:67:e0:e7:84:dc:54:df:2a:6b:41:e4:54:f4: c6:1c:73:ae:1e:08:6c:ab:0f:dc:fd:f3:99:1b:c2:5e:1b:95: 38:09:46:28:6a:59:5b:05:f8:2e:31:7b:8b:2a:01:de:ec:ed: f8:07:6f:bb:26:74:93:43:cb:0b:78:15:af:07:97:e2:94:56: 30:83:a4:6f:31:80:68:3e:b2:dd:17:4b:8d:b3:d1:fc:bc:91: 17:59:25:28:1a:2a:e8:e1:c8:70:39:c3:89:ed:b6:a2:96:9f: cc:55:19:4b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmLIjMKRz/AmsrhZjwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTJhOWIxOTgtZDIzZC00ZjQxLTgzOTctY2M0NjdiMzk4 YmMzMB4XDTI1MDQxNjA5MDAwM1oXDTI1MDQxODA5MDAwMFowLzEtMCsGA1UEAxMk NjQ1NGI3MWMtOGEzNy00MTdmLWIwZGItNjBmOWJmZGMyZjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6w0a9yhPW0agZgPtYrU6gjSRPP0fe2yfvRbm 8zlisGIFgh2Cph5Gxkl3aIWFrLd3YRzodt75scr3AAyqIs+HcMixIDvVYBfr7XDt 8P9/Ga1EiyoZkynlyX2k1HyAxnvTuBkPfX3aj0Eu13UMbFv9YdNy+UfPXMF1d4zf INrTngLG+FGezGYoYQ3SiXY1QqTqD0LJu5/JRJGbgEamGnRAHNpVNr8macGISMAK G1SzBCIP3hc5SVEh4Cdngnw7tyTSZLpnKIiw8JyYIh2AFTFrz++mnObTHdErBp6O RPpeaMX3iVjh+OHH5LQg50QVxfLZ3rKCH7DRv9+/nWo+1ZUFYQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL9JeIUoKhguoTFvULlRUIxZT+P6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xMmE5 YjE5OC1kMjNkLTRmNDEtODM5Ny1jYzQ2N2IzOThiYzMvMTJhOWIxOTgtZDIzZC00 ZjQxLTgzOTctY2M0NjdiMzk4YmMzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTJhOWIxOTgtZDIzZC00ZjQxLTgz OTctY2M0NjdiMzk4YmMzLzEyYTliMTk4LWQyM2QtNGY0MS04Mzk3LWNjNDY3YjM5 OGJjMy5jcmwwHwYDVR0jBBgwFoAUcoQNQ2lvKkNnIu1rRiCjgpxFRzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xMmE5YjE5OC1kMjNkLTRmNDEtODM5Ny1jYzQ2 N2IzOThiYzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBql2UJbZ/VBkVSAT5rZnm6 aocfhaWiVQxiG7EoRfDGnaAlqf7lTzQxIkXP/38yscGZlIjonEZm1Ys4r/enoJQW J1WnOKoxBy+g66ZPx/btQED4cE3PYu5UGTQmfoRPUr7dMO+2b0Zce6RPty5JS7Cr jJAqSkFeO6MiESGroQCirBJwiLXUJzIL3WDYT73Uc2LhmSsY0Gfg54TcVN8qa0Hk VPTGHHOuHghsqw/c/fOZG8JeG5U4CUYoallbBfguMXuLKgHe7O34B2+7JnSTQ8sL eBWvB5filFYwg6RvMYBoPrLdF0uNs9H8vJEXWSUoGiro4chwOcOJ7bailp/MVRlL -----END CERTIFICATE-----Generated at Wed Apr 16 17:06:05 2025 by rpki-client