$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.mft File: 978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.mft (raw, json) Hash identifier: vVUg5lYhkXdCcRsuPjr2SNOl70mSnPsuz2wL1/h6bQs= Subject key identifier: 65:52:F4:23:AD:35:82:B0:DB:06:D0:5A:B4:F3:F4:67:E6:96:1A:54 Authority key identifier: 4D:27:EF:33:4D:07:6A:91:5D:C7:56:79:D0:3B:B7:A2:B5:40:56:E3 Certificate issuer: /CN=978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9 Certificate serial: 010D0C9F4328584977B53256ED83991425D57100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.mft Manifest number: 010D0C9F4328584073A84D869EBC5D1C57BBEC4E Signing time: Wed 09 Apr 2025 10:00:03 +0000 Manifest this update: Wed 09 Apr 2025 10:00:03 +0000 Manifest next update: Sat 12 Apr 2025 10:00:00 +0000 Files and hashes: 1: 978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.crl (hash: 27xlARuEoiAPpM82sJhE7tmKd/wSXJoGPp/tfztIgng=) 2: ce2757a3-5b67-326d-b200-12e94dccea02.roa (hash: Nk07nEky2SKEB8b4YmrwAoaiaeQbAoxNbVuTdCDjDJQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:77:b5:32:56:ed:83:99:14:25:d5:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9 Validity Not Before: Apr 9 10:00:03 2025 GMT Not After : Apr 12 10:00:00 2025 GMT Subject: CN=20ad31cb-78a3-4498-bc56-18151b1c42c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f9:2c:d6:60:e1:86:74:80:3d:3a:fe:c8:1c: ae:f4:64:81:ae:0a:87:97:18:95:84:1f:2e:2a:a5: c4:68:93:87:87:81:f9:15:3d:e0:35:77:fd:10:1e: ae:18:9d:15:87:1a:c5:b6:d8:14:13:55:a3:a3:31: dc:34:fe:b8:e3:ef:cc:f7:4a:9a:dd:b3:89:8e:8a: 2a:6f:b9:10:57:9c:d3:92:db:0f:a3:b6:9a:b8:2b: 40:a6:59:5c:6b:c3:5b:e8:d5:1b:6e:93:e1:02:f8: e9:09:bd:3a:bd:c1:1f:73:5d:16:24:5d:e7:da:1e: ee:27:4e:da:05:1b:3d:f7:d7:0f:33:17:db:1f:3f: 5d:60:46:2e:c8:66:b9:06:9b:e6:f8:33:1b:01:38: 9d:f7:d4:41:26:ef:a5:1d:49:a3:3e:b0:a5:95:34: 81:79:96:52:8c:86:55:bb:d6:c5:f5:89:fc:36:5e: 11:51:7f:0d:6a:fb:c4:ca:f2:ec:60:05:5c:96:7a: 05:09:f9:bf:35:9b:4f:c2:69:7a:1b:78:ce:7c:e0: b4:82:db:f7:6e:01:43:8d:43:5a:bd:fd:57:11:04: e2:c4:45:f2:e4:e8:92:bc:5d:49:5f:a2:1b:b2:d9: b2:cd:1c:c8:a9:e0:83:dd:21:82:c2:ad:56:31:e7: cb:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:52:F4:23:AD:35:82:B0:DB:06:D0:5A:B4:F3:F4:67:E6:96:1A:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.crl X509v3 Authority Key Identifier: keyid:4D:27:EF:33:4D:07:6A:91:5D:C7:56:79:D0:3B:B7:A2:B5:40:56:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:10:9b:4f:08:dd:21:0a:7e:26:3d:bd:29:5c:28:2c:d7:f2: 91:41:a4:09:cc:cb:3b:1d:78:f6:1d:9c:24:50:5d:f1:e8:d5: 02:5f:d6:6f:88:e1:0a:b2:27:82:4e:8f:dc:b2:10:75:15:81: bf:6c:21:ea:3f:87:8b:2b:a8:52:e6:b8:d5:c1:7b:70:78:2c: 54:48:73:a6:28:c9:ce:df:63:e8:52:c3:65:13:25:81:9e:cc: b8:c1:03:e8:7a:53:86:22:9d:e4:aa:2d:10:af:45:0a:bd:e7: 08:f9:72:68:be:74:e3:0a:50:b4:c5:c2:1b:f5:1a:95:16:89: 3d:e3:29:fc:a6:8a:cc:73:d8:bf:64:93:aa:59:ca:0c:f2:d9: e4:8e:0d:97:90:fd:c4:f8:87:46:57:61:0a:10:8d:2f:e3:a2: ac:d9:9f:30:7c:6c:5b:11:7c:05:60:3f:db:b9:76:8d:92:11: 2f:57:c0:fe:a8:00:35:03:eb:f8:0a:fe:89:00:9b:f9:f5:b1: 48:cc:7b:d1:05:10:49:66:56:9f:ec:e3:ac:bd:21:95:cf:2d: 7c:44:6b:58:b7:ba:96:89:e6:71:dc:78:68:59:12:5f:0c:90: 40:38:8e:b8:b2:17:b7:fd:25:7b:7f:e8:24:02:24:5e:10:48: 62:64:d1:0e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl3tTJW7YOZFCXVcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTc4ZGZkNTItZTRlMS00Y2FhLWJkYWUtMjFmMWNjZDlh NGI5MB4XDTI1MDQwOTEwMDAwM1oXDTI1MDQxMjEwMDAwMFowLzEtMCsGA1UEAxMk MjBhZDMxY2ItNzhhMy00NDk4LWJjNTYtMTgxNTFiMWM0MmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvks1mDhhnSAPTr+yByu9GSBrgqHlxiVhB8u KqXEaJOHh4H5FT3gNXf9EB6uGJ0VhxrFttgUE1WjozHcNP644+/M90qa3bOJjooq b7kQV5zTktsPo7aauCtApllca8Nb6NUbbpPhAvjpCb06vcEfc10WJF3n2h7uJ07a BRs999cPMxfbHz9dYEYuyGa5Bpvm+DMbATid99RBJu+lHUmjPrCllTSBeZZSjIZV u9bF9Yn8Nl4RUX8NavvEyvLsYAVclnoFCfm/NZtPwml6G3jOfOC0gtv3bgFDjUNa vf1XEQTixEXy5OiSvF1JX6IbstmyzRzIqeCD3SGCwq1WMefL8QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGVS9COtNYKw2wbQWrTz9GfmlhpUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85Nzhk ZmQ1Mi1lNGUxLTRjYWEtYmRhZS0yMWYxY2NkOWE0YjkvOTc4ZGZkNTItZTRlMS00 Y2FhLWJkYWUtMjFmMWNjZDlhNGI5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTc4ZGZkNTItZTRlMS00Y2FhLWJk YWUtMjFmMWNjZDlhNGI5Lzk3OGRmZDUyLWU0ZTEtNGNhYS1iZGFlLTIxZjFjY2Q5 YTRiOS5jcmwwHwYDVR0jBBgwFoAUTSfvM00HapFdx1Z50Du3orVAVuMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85NzhkZmQ1Mi1lNGUxLTRjYWEtYmRhZS0yMWYx Y2NkOWE0YjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAREJtPCN0hCn4mPb0pXCgs 1/KRQaQJzMs7HXj2HZwkUF3x6NUCX9ZviOEKsieCTo/cshB1FYG/bCHqP4eLK6hS 5rjVwXtweCxUSHOmKMnO32PoUsNlEyWBnsy4wQPoelOGIp3kqi0Qr0UKvecI+XJo vnTjClC0xcIb9RqVFok94yn8porMc9i/ZJOqWcoM8tnkjg2XkP3E+IdGV2EKEI0v 46Ks2Z8wfGxbEXwFYD/buXaNkhEvV8D+qAA1A+v4Cv6JAJv59bFIzHvRBRBJZlaf 7OOsvSGVzy18RGtYt7qWieZx3HhoWRJfDJBAOI64she3/SV7f+gkAiReEEhiZNEO -----END CERTIFICATE-----Generated at Wed Apr 9 17:14:47 2025 by rpki-client