$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da.mft File: 97e6dc25-3cc3-4f4e-ad93-6bcf11c844da.mft (raw, json) Hash identifier: EIKkYGQI9BnTng5U0efoGam0emXQEe5/0vmKYk4GWxY= Subject key identifier: 9D:29:93:6A:21:C5:9B:F7:CD:E7:F6:72:E6:97:C8:AD:E0:B8:12:7E Authority key identifier: 74:F3:80:33:A5:3E:5F:68:0E:7F:C5:24:F2:B4:7B:2A:8B:76:52:BC Certificate issuer: /CN=97e6dc25-3cc3-4f4e-ad93-6bcf11c844da Certificate serial: 010D0C9F4328584953881D6F0BBF390A0AFB9FC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da.mft Manifest number: 010D0C9F4328584073A850FF1BBBD788E3E2ED3F Signing time: Thu 27 Mar 2025 11:00:07 +0000 Manifest this update: Thu 27 Mar 2025 11:00:07 +0000 Manifest next update: Sat 29 Mar 2025 11:00:00 +0000 Files and hashes: 1: 97e6dc25-3cc3-4f4e-ad93-6bcf11c844da.crl (hash: lv4JLYr+slwiAN9FGxYoifMagJMnTHfWmgMaJwOofGA=) 2: a3098e02-dc6d-3360-a4a6-69143dbb4b74.roa (hash: z808e0Weyfd/1sD2keyL9dZKU6YHqtmrfUn3jqEJ5CY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Mar 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:88:1d:6f:0b:bf:39:0a:0a:fb:9f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97e6dc25-3cc3-4f4e-ad93-6bcf11c844da Validity Not Before: Mar 27 11:00:07 2025 GMT Not After : Mar 29 11:00:00 2025 GMT Subject: CN=607bb06c-b35d-4f17-ab00-4638bb7cd3ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:18:c5:d9:dd:9e:32:80:be:9f:df:e8:cc:96: 55:bb:ec:fd:c9:0c:9c:1d:6a:17:66:b8:1c:1a:26: f7:b7:52:88:8e:2e:e7:71:42:8a:34:c5:58:f7:47: 45:ed:c8:d5:2e:07:5d:46:96:e3:e5:52:75:d8:77: 10:f9:18:99:9f:d2:ba:01:05:0c:99:f2:58:08:88: 2f:c5:1c:d3:b1:cd:29:08:93:8e:53:44:9f:c2:b6: a4:db:1b:85:58:5d:59:4f:15:7c:78:2c:74:6a:50: f6:88:d4:f0:07:19:53:48:47:cc:04:9f:a7:dd:06: 3d:d3:a4:3a:3e:e0:ee:0f:b4:23:ce:5f:ef:09:a5: cd:89:28:ad:54:f0:0f:f8:2c:3a:7d:06:93:1e:3a: aa:5a:71:12:9d:ce:12:3c:37:7f:3f:c9:69:6a:55: 86:2b:d4:03:2d:5b:ef:0e:aa:aa:cd:e3:2a:85:0d: 67:72:f1:7d:42:aa:1a:d0:7b:95:09:79:00:39:97: 87:fa:d0:29:0c:07:d1:f8:2c:d2:4d:2b:e7:68:38: a6:68:80:89:ea:42:1f:ca:ac:28:a5:15:9d:0c:57: 4e:69:9a:cf:7a:10:c8:1b:52:52:3a:fe:cb:88:bb: ee:64:f0:c5:b8:03:94:7e:8b:4b:e4:8b:7b:5b:8e: 41:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:29:93:6A:21:C5:9B:F7:CD:E7:F6:72:E6:97:C8:AD:E0:B8:12:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da.crl X509v3 Authority Key Identifier: keyid:74:F3:80:33:A5:3E:5F:68:0E:7F:C5:24:F2:B4:7B:2A:8B:76:52:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97e6dc25-3cc3-4f4e-ad93-6bcf11c844da.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:63:f8:e7:9b:1a:fa:9a:51:23:65:cc:d2:9e:1e:45:16:99: af:6c:f7:c0:3d:b2:dd:d2:be:5d:0d:2c:e0:8d:f8:56:d2:ae: e1:7e:e3:3b:26:5e:07:09:83:7f:0f:2c:46:d6:28:6c:96:c0: 8a:48:81:c7:83:6a:07:a9:2b:eb:c3:d5:53:25:09:73:b6:e0: d4:55:fd:38:b5:f3:8c:20:81:e0:fb:ab:85:ed:0e:97:c0:09: 2f:cf:df:21:31:3c:08:b8:6d:b2:59:ca:04:85:85:0a:73:30: 42:de:ed:d9:56:10:a8:86:27:88:85:a8:90:6d:22:77:f2:ef: 6b:ac:95:e1:66:a5:e4:67:bf:fb:8e:96:07:04:4a:1c:88:1a: 60:29:ed:6e:75:83:8a:c1:54:11:19:23:a9:d1:2e:e4:d9:75: 7a:cf:59:ec:36:7a:e4:a5:eb:10:76:bd:cf:57:3e:57:d8:72: df:09:15:18:a9:cb:e7:48:33:e1:4d:fe:6f:c2:7e:11:93:9d: 62:24:b4:84:2e:62:be:91:21:61:f8:81:66:4c:4f:71:9a:c0: 09:1f:96:fc:32:59:b1:8d:2a:46:52:7f:73:e4:2d:64:9b:dc: 8d:92:04:00:df:54:d5:d5:0a:48:56:d5:39:11:a8:c6:d6:6a: fe:6f:7b:f5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWElTiB1vC785Cgr7n8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTdlNmRjMjUtM2NjMy00ZjRlLWFkOTMtNmJjZjExYzg0 NGRhMB4XDTI1MDMyNzExMDAwN1oXDTI1MDMyOTExMDAwMFowLzEtMCsGA1UEAxMk NjA3YmIwNmMtYjM1ZC00ZjE3LWFiMDAtNDYzOGJiN2NkM2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhjF2d2eMoC+n9/ozJZVu+z9yQycHWoXZrgc Gib3t1KIji7ncUKKNMVY90dF7cjVLgddRpbj5VJ12HcQ+RiZn9K6AQUMmfJYCIgv xRzTsc0pCJOOU0Sfwrak2xuFWF1ZTxV8eCx0alD2iNTwBxlTSEfMBJ+n3QY906Q6 PuDuD7Qjzl/vCaXNiSitVPAP+Cw6fQaTHjqqWnESnc4SPDd/P8lpalWGK9QDLVvv DqqqzeMqhQ1ncvF9Qqoa0HuVCXkAOZeH+tApDAfR+CzSTSvnaDimaICJ6kIfyqwo pRWdDFdOaZrPehDIG1JSOv7LiLvuZPDFuAOUfotL5It7W45BAwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJ0pk2ohxZv3zef2cuaXyK3guBJ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85N2U2 ZGMyNS0zY2MzLTRmNGUtYWQ5My02YmNmMTFjODQ0ZGEvOTdlNmRjMjUtM2NjMy00 ZjRlLWFkOTMtNmJjZjExYzg0NGRhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTdlNmRjMjUtM2NjMy00ZjRlLWFk OTMtNmJjZjExYzg0NGRhLzk3ZTZkYzI1LTNjYzMtNGY0ZS1hZDkzLTZiY2YxMWM4 NDRkYS5jcmwwHwYDVR0jBBgwFoAUdPOAM6U+X2gOf8Uk8rR7Kot2UrwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85N2U2ZGMyNS0zY2MzLTRmNGUtYWQ5My02YmNm MTFjODQ0ZGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA/Y/jnmxr6mlEjZczSnh5F FpmvbPfAPbLd0r5dDSzgjfhW0q7hfuM7Jl4HCYN/DyxG1ihslsCKSIHHg2oHqSvr w9VTJQlztuDUVf04tfOMIIHg+6uF7Q6XwAkvz98hMTwIuG2yWcoEhYUKczBC3u3Z VhCohieIhaiQbSJ38u9rrJXhZqXkZ7/7jpYHBEociBpgKe1udYOKwVQRGSOp0S7k 2XV6z1nsNnrkpesQdr3PVz5X2HLfCRUYqcvnSDPhTf5vwn4Rk51iJLSELmK+kSFh +IFmTE9xmsAJH5b8MlmxjSpGUn9z5C1km9yNkgQA31TV1QpIVtU5EajG1mr+b3v1 -----END CERTIFICATE-----Generated at Thu Mar 27 14:33:08 2025 by rpki-client