$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/500a41ff-bb2f-4415-8f47-796f36c37ec0/500a41ff-bb2f-4415-8f47-796f36c37ec0.mft File: 500a41ff-bb2f-4415-8f47-796f36c37ec0.mft (raw, json) Hash identifier: gnllFbFzOVyfGPKoEZ4UDss9my7TmD29JdDQsPrEeLY= Subject key identifier: A3:6D:A9:7B:D2:55:42:3C:FC:28:63:53:00:7B:BD:4D:B3:FA:39:D3 Authority key identifier: C9:4D:56:DD:A6:66:DB:17:55:F5:D1:92:AF:AD:7E:F1:A5:C8:90:60 Certificate issuer: /CN=500a41ff-bb2f-4415-8f47-796f36c37ec0 Certificate serial: 010D0C9F432858496A1925070DA1705AAA915F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/500a41ff-bb2f-4415-8f47-796f36c37ec0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/500a41ff-bb2f-4415-8f47-796f36c37ec0/500a41ff-bb2f-4415-8f47-796f36c37ec0.mft Manifest number: 010D0C9F4328584073A85573B0954A8002FEDF49 Signing time: Fri 04 Apr 2025 13:00:07 +0000 Manifest this update: Fri 04 Apr 2025 13:00:07 +0000 Manifest next update: Sun 06 Apr 2025 13:00:00 +0000 Files and hashes: 1: 393b44f8-5adf-321e-86dd-e66161f45087.roa (hash: aLKjTAQYUQSJr1yaIqomvcxSjaHRtdnvy/7v/oLJC3A=) 2: 500a41ff-bb2f-4415-8f47-796f36c37ec0.crl (hash: 0jJugkSMeeFZlsd5eSPtt0i5vuGeucJtE/X2XXQGhok=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/500a41ff-bb2f-4415-8f47-796f36c37ec0/500a41ff-bb2f-4415-8f47-796f36c37ec0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/500a41ff-bb2f-4415-8f47-796f36c37ec0/500a41ff-bb2f-4415-8f47-796f36c37ec0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/500a41ff-bb2f-4415-8f47-796f36c37ec0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:25:07:0d:a1:70:5a:aa:91:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=500a41ff-bb2f-4415-8f47-796f36c37ec0 Validity Not Before: Apr 4 13:00:07 2025 GMT Not After : Apr 6 13:00:00 2025 GMT Subject: CN=592ce37a-8951-4944-a6d7-15d67167d595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cf:25:46:99:75:c9:09:d4:9b:bd:4b:b6:23: 75:49:54:f0:70:18:da:ce:94:e9:76:1a:76:47:fd: 05:06:84:e9:69:58:35:01:3f:69:9b:49:4e:e4:11: 26:32:5b:b1:e9:f1:a9:35:65:1e:f4:ea:98:c9:dc: d0:06:1c:64:b4:62:6f:c5:6e:08:72:da:fb:06:7d: 03:16:79:aa:f9:21:0f:c5:4e:fa:c1:cd:9e:27:1a: 4d:5e:9d:8b:ed:f2:ab:82:d6:a5:40:2b:a7:81:17: 5a:19:28:f3:86:4a:ff:b6:39:1e:6d:01:9d:3b:8e: 3f:55:74:40:7e:e1:50:d5:df:66:c0:96:d2:b6:10: 87:e9:99:d2:67:71:8b:6d:f1:84:47:fa:8e:d9:16: be:bc:df:84:2b:f0:a3:d3:d1:6c:23:ac:55:80:32: 5f:ad:19:9e:f2:5a:e2:7b:03:96:4e:26:36:b6:29: 7c:7a:f3:6e:82:d8:7f:e6:df:cc:9d:10:75:8d:68: 3b:00:eb:61:d4:09:56:94:75:a9:d2:4b:4f:a9:a2: 02:20:5e:e3:cc:a5:0a:2d:c1:17:22:9a:b1:4e:0c: ea:fe:28:71:bc:c9:b4:2c:ef:a1:f7:14:77:7e:1a: 37:5e:c2:04:35:08:48:1c:8e:8f:9b:23:08:1d:4e: 0d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:6D:A9:7B:D2:55:42:3C:FC:28:63:53:00:7B:BD:4D:B3:FA:39:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/500a41ff-bb2f-4415-8f47-796f36c37ec0/500a41ff-bb2f-4415-8f47-796f36c37ec0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/500a41ff-bb2f-4415-8f47-796f36c37ec0/500a41ff-bb2f-4415-8f47-796f36c37ec0.crl X509v3 Authority Key Identifier: keyid:C9:4D:56:DD:A6:66:DB:17:55:F5:D1:92:AF:AD:7E:F1:A5:C8:90:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/500a41ff-bb2f-4415-8f47-796f36c37ec0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:36:5c:df:d4:c0:39:e0:61:07:16:46:79:9e:94:75:32:75: cc:87:6b:53:95:59:25:32:70:13:d0:3a:c1:f8:16:f3:78:01: d1:43:dc:b8:f2:9a:42:a9:d7:f1:e3:19:fc:c9:e7:d3:6e:4b: 60:82:d5:f7:5f:b2:f8:a1:e1:6e:80:dd:a5:25:cd:13:05:23: b6:0c:42:c8:17:75:e6:63:2d:61:3a:09:cd:29:89:ff:06:49: 02:55:b5:5d:53:08:b0:eb:e7:f8:8c:40:32:46:72:f3:f9:b9: e8:77:b0:1b:82:59:32:8b:78:05:3f:21:46:ac:5c:67:2d:d6: 03:4b:2d:cd:83:2e:52:59:25:24:a4:de:68:c4:c8:cc:b2:f5: 3f:bf:32:07:66:88:02:81:ff:a6:e8:61:2e:a5:24:dc:4f:53: e1:81:0f:d9:ec:d7:9e:6d:a3:d7:36:8e:d1:15:ad:9f:95:c1: 05:b4:59:02:d1:2e:8a:a6:75:db:f0:12:3d:85:63:96:de:5a: 70:95:d6:b9:de:31:6c:e3:9b:da:2b:d3:25:1d:18:22:83:48: 7c:d5:8e:e5:dc:9b:28:fa:0a:28:87:34:e4:47:50:35:05:cb: 9b:16:7b:a9:e4:a5:d3:29:d6:bd:ad:f6:58:cc:58:c1:d0:0e: 0a:53:1d:f2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWElqGSUHDaFwWqqRX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTAwYTQxZmYtYmIyZi00NDE1LThmNDctNzk2ZjM2YzM3 ZWMwMB4XDTI1MDQwNDEzMDAwN1oXDTI1MDQwNjEzMDAwMFowLzEtMCsGA1UEAxMk NTkyY2UzN2EtODk1MS00OTQ0LWE2ZDctMTVkNjcxNjdkNTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyc8lRpl1yQnUm71LtiN1SVTwcBjazpTpdhp2 R/0FBoTpaVg1AT9pm0lO5BEmMlux6fGpNWUe9OqYydzQBhxktGJvxW4Ictr7Bn0D Fnmq+SEPxU76wc2eJxpNXp2L7fKrgtalQCungRdaGSjzhkr/tjkebQGdO44/VXRA fuFQ1d9mwJbSthCH6ZnSZ3GLbfGER/qO2Ra+vN+EK/Cj09FsI6xVgDJfrRme8lri ewOWTiY2til8evNugth/5t/MnRB1jWg7AOth1AlWlHWp0ktPqaICIF7jzKUKLcEX IpqxTgzq/ihxvMm0LO+h9xR3fho3XsIENQhIHI6PmyMIHU4NPwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKNtqXvSVUI8/ChjUwB7vU2z+jnTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MDBh NDFmZi1iYjJmLTQ0MTUtOGY0Ny03OTZmMzZjMzdlYzAvNTAwYTQxZmYtYmIyZi00 NDE1LThmNDctNzk2ZjM2YzM3ZWMwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTAwYTQxZmYtYmIyZi00NDE1LThm NDctNzk2ZjM2YzM3ZWMwLzUwMGE0MWZmLWJiMmYtNDQxNS04ZjQ3LTc5NmYzNmMz N2VjMC5jcmwwHwYDVR0jBBgwFoAUyU1W3aZm2xdV9dGSr61+8aXIkGAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MDBhNDFmZi1iYjJmLTQ0MTUtOGY0Ny03OTZm MzZjMzdlYzAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBJNlzf1MA54GEHFkZ5npR1 MnXMh2tTlVklMnAT0DrB+BbzeAHRQ9y48ppCqdfx4xn8yefTbktggtX3X7L4oeFu gN2lJc0TBSO2DELIF3XmYy1hOgnNKYn/BkkCVbVdUwiw6+f4jEAyRnLz+bnod7Ab glkyi3gFPyFGrFxnLdYDSy3Ngy5SWSUkpN5oxMjMsvU/vzIHZogCgf+m6GEupSTc T1PhgQ/Z7NeebaPXNo7RFa2flcEFtFkC0S6KpnXb8BI9hWOW3lpwlda53jFs45va K9MlHRgig0h81Y7l3Jso+goohzTkR1A1BcubFnup5KXTKda9rfZYzFjB0A4KUx3y -----END CERTIFICATE-----Generated at Sat Apr 5 09:06:26 2025 by rpki-client