$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.mft File: a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.mft (raw, json) Hash identifier: qAVEE0AgEQV4xdlf6aEYoMrrHeu8rh8P3m48uOKhUTA= Subject key identifier: 39:DB:C2:3E:04:BF:16:A1:C2:4B:E3:33:F2:16:24:C8:EC:C0:9B:FC Authority key identifier: 4B:18:E3:0E:AB:8D:D8:29:99:4E:6D:88:30:0F:C7:55:F6:2E:FB:31 Certificate issuer: /CN=a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b Certificate serial: 010D0C9F432858497007D72F6386095B10BB73C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.mft Manifest number: 010D0C9F4328584073A81AEA59FA9E40F91E9CCE Signing time: Sun 06 Apr 2025 16:00:07 +0000 Manifest this update: Sun 06 Apr 2025 16:00:07 +0000 Manifest next update: Wed 09 Apr 2025 16:00:00 +0000 Files and hashes: 1: a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.crl (hash: XqaaI59MmMO19UvrjPVm8ocIGvaeFtZo692YGP8/VyA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:70:07:d7:2f:63:86:09:5b:10:bb:73:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b Validity Not Before: Apr 6 16:00:07 2025 GMT Not After : Apr 9 16:00:00 2025 GMT Subject: CN=cba2ef3e-e86c-4601-8a8a-4fb7a726b7c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c5:22:e1:b8:c9:6f:00:87:12:65:cd:96:b5: 1c:f8:d6:68:2a:c9:a3:73:08:b4:cc:3f:ed:3c:34: d2:22:62:14:07:0b:9e:69:68:a2:96:69:39:ff:26: 1e:5e:ac:62:35:5f:2a:e9:a1:9b:fc:b3:cf:c8:12: 74:0a:6a:8b:f2:dc:20:36:af:01:3d:f4:bb:87:e4: 6b:ae:d1:de:4a:b1:f3:50:54:5e:16:6e:56:b1:da: 84:2b:44:99:a5:59:6a:94:2c:9e:da:22:58:ee:8a: de:dd:21:32:50:a6:e1:0c:a9:8d:69:e5:94:ee:ec: c5:22:12:8e:55:90:f8:50:d0:93:ef:50:6c:ab:2f: b6:57:a4:0b:c7:31:29:2b:8d:00:6c:46:f9:b2:80: 42:9b:b6:e8:6b:71:51:63:3b:83:17:f1:18:8e:dc: d8:b7:01:57:20:59:39:0e:6c:43:61:78:d1:1e:85: 55:13:06:85:8b:f9:9c:c7:3f:b3:a6:5a:84:b1:b9: 08:e0:aa:bd:bb:b5:56:2a:f5:8e:d3:fb:37:f9:13: 04:2a:98:50:3d:e9:01:00:40:d4:39:65:a3:88:9a: ee:6f:de:0e:d9:30:24:d8:9e:8d:7d:89:c9:54:a3: e3:0c:17:45:5e:04:e4:d2:7b:11:cd:4f:a0:3c:f5: 92:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:DB:C2:3E:04:BF:16:A1:C2:4B:E3:33:F2:16:24:C8:EC:C0:9B:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.crl X509v3 Authority Key Identifier: keyid:4B:18:E3:0E:AB:8D:D8:29:99:4E:6D:88:30:0F:C7:55:F6:2E:FB:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:11:06:d0:05:46:59:79:00:12:bd:4f:fa:0b:20:d9:ef:c5: e9:c4:33:55:17:67:54:b8:50:8a:7a:90:27:6a:c3:c6:8c:70: ae:08:ad:80:93:19:79:bd:8e:8b:3d:39:31:e4:db:4a:3d:46: 00:f6:58:27:6f:15:92:99:69:3f:b9:f7:68:77:ab:2a:59:f1: b6:40:90:14:e9:67:83:8e:91:24:bf:62:68:6a:95:e7:6b:cc: 90:82:02:79:d5:7f:48:88:b4:0d:c9:40:0f:f3:b9:b6:b0:8f: 63:fa:b5:ca:3a:fc:e8:0c:48:03:a2:2b:b5:16:14:8f:66:64: 1c:72:e0:0e:fa:24:d7:e6:66:7c:ae:ef:00:ae:04:12:f3:cd: 19:76:26:00:2f:74:58:39:6a:89:cb:f1:2d:45:68:29:f2:65: 6a:82:92:77:b2:18:a4:3f:18:c3:60:53:78:0a:18:32:35:c6: 07:bd:98:5c:4e:43:b1:34:fe:57:d8:b4:ec:21:58:61:d5:58: 0c:91:c4:5f:fa:2d:34:7f:12:d8:7a:03:50:b8:be:38:e5:65: 11:17:bc:62:a2:ed:46:61:ad:bf:49:71:ac:e5:27:d8:b4:e6: d6:5d:7e:92:f6:dc:dd:eb:2d:89:98:03:b5:0e:3c:16:c3:6f: f9:39:dc:f4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWElwB9cvY4YJWxC7c8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTVjYzg5ZDYtNzA5ZS00MzJiLTlhNmUtMjhhN2UzZmU0 YzJiMB4XDTI1MDQwNjE2MDAwN1oXDTI1MDQwOTE2MDAwMFowLzEtMCsGA1UEAxMk Y2JhMmVmM2UtZTg2Yy00NjAxLThhOGEtNGZiN2E3MjZiN2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsUi4bjJbwCHEmXNlrUc+NZoKsmjcwi0zD/t PDTSImIUBwueaWiilmk5/yYeXqxiNV8q6aGb/LPPyBJ0CmqL8twgNq8BPfS7h+Rr rtHeSrHzUFReFm5WsdqEK0SZpVlqlCye2iJY7ore3SEyUKbhDKmNaeWU7uzFIhKO VZD4UNCT71Bsqy+2V6QLxzEpK40AbEb5soBCm7boa3FRYzuDF/EYjtzYtwFXIFk5 DmxDYXjRHoVVEwaFi/mcxz+zplqEsbkI4Kq9u7VWKvWO0/s3+RMEKphQPekBAEDU OWWjiJrub94O2TAk2J6NfYnJVKPjDBdFXgTk0nsRzU+gPPWSzwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDnbwj4EvxahwkvjM/IWJMjswJv8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNWNj ODlkNi03MDllLTQzMmItOWE2ZS0yOGE3ZTNmZTRjMmIvYTVjYzg5ZDYtNzA5ZS00 MzJiLTlhNmUtMjhhN2UzZmU0YzJiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTVjYzg5ZDYtNzA5ZS00MzJiLTlh NmUtMjhhN2UzZmU0YzJiL2E1Y2M4OWQ2LTcwOWUtNDMyYi05YTZlLTI4YTdlM2Zl NGMyYi5jcmwwHwYDVR0jBBgwFoAUSxjjDquN2CmZTm2IMA/HVfYu+zEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNWNjODlkNi03MDllLTQzMmItOWE2ZS0yOGE3 ZTNmZTRjMmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBAEQbQBUZZeQASvU/6CyDZ 78XpxDNVF2dUuFCKepAnasPGjHCuCK2Akxl5vY6LPTkx5NtKPUYA9lgnbxWSmWk/ ufdod6sqWfG2QJAU6WeDjpEkv2JoapXna8yQggJ51X9IiLQNyUAP87m2sI9j+rXK OvzoDEgDoiu1FhSPZmQccuAO+iTX5mZ8ru8ArgQS880ZdiYAL3RYOWqJy/EtRWgp 8mVqgpJ3shikPxjDYFN4ChgyNcYHvZhcTkOxNP5X2LTsIVhh1VgMkcRf+i00fxLY egNQuL445WURF7xiou1GYa2/SXGs5SfYtObWXX6S9tzd6y2JmAO1DjwWw2/5Odz0 -----END CERTIFICATE-----Generated at Mon Apr 7 10:34:07 2025 by rpki-client