$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc2d813-8d01-4075-b634-fe23d86a0b9b/4bc2d813-8d01-4075-b634-fe23d86a0b9b.mft File: 4bc2d813-8d01-4075-b634-fe23d86a0b9b.mft (raw, json) Hash identifier: wy3j8a4InC3ihDe+87F0opquu0/XHfCj6ft36TElJv4= Subject key identifier: F6:C9:98:1E:07:DA:E9:91:54:E0:1B:63:B6:AA:BF:C8:55:7C:06:DC Authority key identifier: BE:1F:2B:E9:4D:F8:71:B5:4A:0D:BC:6C:41:D7:87:59:FA:A0:55:F0 Certificate issuer: /CN=4bc2d813-8d01-4075-b634-fe23d86a0b9b Certificate serial: 010D0C9F4328584997947F60FB92BA655E64C4C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc2d813-8d01-4075-b634-fe23d86a0b9b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc2d813-8d01-4075-b634-fe23d86a0b9b/4bc2d813-8d01-4075-b634-fe23d86a0b9b.mft Manifest number: 010D0C9F43285848780C0A793B36A9A4CADB2868 Signing time: Sun 20 Apr 2025 20:00:03 +0000 Manifest this update: Sun 20 Apr 2025 20:00:03 +0000 Manifest next update: Tue 22 Apr 2025 20:00:00 +0000 Files and hashes: 1: 4bc2d813-8d01-4075-b634-fe23d86a0b9b.crl (hash: meZVmTi/zHvpS8wD+s0mvTgCOohructEXn79vB+HUFg=) 2: 8f538484e613ac07fb533d1cb63022443c0a799196d2ab210e.cer (hash: PDJTqXIWqu77/obtIsXmFFn5Wa8Rqrv5R9Q/xUcDz2k=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc2d813-8d01-4075-b634-fe23d86a0b9b/4bc2d813-8d01-4075-b634-fe23d86a0b9b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc2d813-8d01-4075-b634-fe23d86a0b9b/4bc2d813-8d01-4075-b634-fe23d86a0b9b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc2d813-8d01-4075-b634-fe23d86a0b9b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:97:94:7f:60:fb:92:ba:65:5e:64:c4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bc2d813-8d01-4075-b634-fe23d86a0b9b Validity Not Before: Apr 20 20:00:03 2025 GMT Not After : Apr 22 20:00:00 2025 GMT Subject: CN=d220fa0b-b825-4c29-8123-bc8afd3ec312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:54:eb:f4:64:da:5e:96:fe:76:18:2b:87:59: dc:51:d5:b7:48:b3:91:26:57:ab:37:1b:46:79:b4: e4:96:07:71:c3:e5:55:8f:ef:af:3c:d3:e4:a9:10: 71:79:8f:90:26:31:c0:ec:37:48:57:1a:d4:d1:9d: a7:c5:3b:86:ff:62:77:91:60:72:cb:97:be:c6:3e: d0:d8:3d:a8:48:7f:bb:87:75:93:6d:cd:63:22:78: 63:f4:18:91:f1:eb:f1:ab:3f:13:8e:ad:03:83:c9: 85:78:a7:79:c8:30:d8:0d:63:50:c9:36:67:2c:51: a2:57:8d:bc:5d:7c:df:7a:92:2a:34:c9:66:cb:f7: a5:11:d9:78:3a:61:26:5e:6f:65:47:95:51:4c:fe: 07:3d:46:e9:27:2a:17:9f:98:8b:8a:96:83:31:5e: ed:ac:1b:50:21:79:68:1e:b6:33:61:17:49:29:8d: c6:dd:24:dd:51:b0:b7:7b:a5:cd:57:ea:85:ae:34: 19:ba:ef:7e:10:ba:b5:ab:45:db:fb:7c:36:b0:be: 2a:95:ac:69:6b:48:7d:cf:3d:2c:ff:9f:0f:95:46: 96:7f:ec:cd:00:f6:aa:fd:76:10:63:18:ea:42:f2: 1a:34:8c:7b:61:98:c2:58:cd:06:1b:7d:2f:20:64: 7e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C9:98:1E:07:DA:E9:91:54:E0:1B:63:B6:AA:BF:C8:55:7C:06:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc2d813-8d01-4075-b634-fe23d86a0b9b/4bc2d813-8d01-4075-b634-fe23d86a0b9b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc2d813-8d01-4075-b634-fe23d86a0b9b/4bc2d813-8d01-4075-b634-fe23d86a0b9b.crl X509v3 Authority Key Identifier: keyid:BE:1F:2B:E9:4D:F8:71:B5:4A:0D:BC:6C:41:D7:87:59:FA:A0:55:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc2d813-8d01-4075-b634-fe23d86a0b9b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:7c:00:9f:4c:4c:e5:98:99:99:5d:27:be:b1:f6:68:4b:b7: d7:4a:95:c4:ef:43:bc:02:01:92:69:ab:ec:4a:5a:59:d3:4a: 4a:7a:c7:f4:4e:d2:3d:13:de:f5:43:2b:3b:b6:c2:a5:da:4f: 45:63:1f:d8:5c:32:3d:0e:50:85:e3:0c:80:65:5d:41:81:eb: 18:38:86:96:14:26:75:d2:9d:28:9d:55:65:2d:f2:b1:31:37: 67:24:8b:d3:27:05:20:11:b3:33:f5:ab:8a:70:fa:4f:b5:3f: 35:67:b7:3c:d6:b4:63:9f:3c:61:44:da:f3:79:7a:ee:25:e9: 42:8e:d9:6d:19:b1:4e:40:4b:0e:94:d9:a9:9a:b2:74:ea:b5: 27:14:12:a9:e9:8a:46:87:99:24:e9:0f:37:91:15:b1:31:d5: ed:9d:c6:28:11:41:f7:7f:80:22:12:ad:92:2f:2c:d7:ed:84: 76:2c:36:84:c0:00:96:b7:3a:de:4c:fb:07:39:0b:cf:24:80: 9d:80:6c:95:43:63:df:bf:4b:67:25:5f:86:4e:62:b6:5c:d2: 19:e4:28:48:99:c2:05:bd:0a:da:ad:67:00:e3:51:f7:8b:26: a3:ca:20:fa:ce:9c:b7:1d:78:51:84:f8:31:b1:aa:a8:a2:89: 5c:0f:a6:2d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmXlH9g+5K6ZV5kxMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJjMmQ4MTMtOGQwMS00MDc1LWI2MzQtZmUyM2Q4NmEw YjliMB4XDTI1MDQyMDIwMDAwM1oXDTI1MDQyMjIwMDAwMFowLzEtMCsGA1UEAxMk ZDIyMGZhMGItYjgyNS00YzI5LTgxMjMtYmM4YWZkM2VjMzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFTr9GTaXpb+dhgrh1ncUdW3SLORJlerNxtG ebTklgdxw+VVj++vPNPkqRBxeY+QJjHA7DdIVxrU0Z2nxTuG/2J3kWByy5e+xj7Q 2D2oSH+7h3WTbc1jInhj9BiR8evxqz8Tjq0Dg8mFeKd5yDDYDWNQyTZnLFGiV428 XXzfepIqNMlmy/elEdl4OmEmXm9lR5VRTP4HPUbpJyoXn5iLipaDMV7trBtQIXlo HrYzYRdJKY3G3STdUbC3e6XNV+qFrjQZuu9+ELq1q0Xb+3w2sL4qlaxpa0h9zz0s /58PlUaWf+zNAPaq/XYQYxjqQvIaNIx7YZjCWM0GG30vIGR+YwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPbJmB4H2umRVOAbY7aqv8hVfAbcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80YmMy ZDgxMy04ZDAxLTQwNzUtYjYzNC1mZTIzZDg2YTBiOWIvNGJjMmQ4MTMtOGQwMS00 MDc1LWI2MzQtZmUyM2Q4NmEwYjliLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGJjMmQ4MTMtOGQwMS00MDc1LWI2 MzQtZmUyM2Q4NmEwYjliLzRiYzJkODEzLThkMDEtNDA3NS1iNjM0LWZlMjNkODZh MGI5Yi5jcmwwHwYDVR0jBBgwFoAUvh8r6U34cbVKDbxsQdeHWfqgVfAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80YmMyZDgxMy04ZDAxLTQwNzUtYjYzNC1mZTIz ZDg2YTBiOWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBofACfTEzlmJmZXSe+sfZo S7fXSpXE70O8AgGSaavsSlpZ00pKesf0TtI9E971Qys7tsKl2k9FYx/YXDI9DlCF 4wyAZV1BgesYOIaWFCZ10p0onVVlLfKxMTdnJIvTJwUgEbMz9auKcPpPtT81Z7c8 1rRjnzxhRNrzeXruJelCjtltGbFOQEsOlNmpmrJ06rUnFBKp6YpGh5kk6Q83kRWx MdXtncYoEUH3f4AiEq2SLyzX7YR2LDaEwACWtzreTPsHOQvPJICdgGyVQ2Pfv0tn JV+GTmK2XNIZ5ChImcIFvQrarWcA41H3iyajyiD6zpy3HXhRhPgxsaqooolcD6Yt -----END CERTIFICATE-----Generated at Mon Apr 21 06:32:34 2025 by rpki-client