$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b422e9a5-59dc-4f5b-ae1a-7e82c51a3fde/b422e9a5-59dc-4f5b-ae1a-7e82c51a3fde.mft File: b422e9a5-59dc-4f5b-ae1a-7e82c51a3fde.mft (raw, json) Hash identifier: sLZqCYIm6e8exf1WxOfiQpNEPu60y22lYoNOp0L1/J4= Subject key identifier: 5A:22:52:CB:C0:B1:D4:1D:F4:E4:E1:20:B3:E9:B2:00:98:C1:0F:42 Authority key identifier: 67:7B:4A:AF:E7:55:C7:D2:A5:63:9A:AE:96:38:66:54:D4:26:AA:BB Certificate issuer: /CN=b422e9a5-59dc-4f5b-ae1a-7e82c51a3fde Certificate serial: 010D0C9F432858493BAF888B84BF1210BC8E47B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b422e9a5-59dc-4f5b-ae1a-7e82c51a3fde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b422e9a5-59dc-4f5b-ae1a-7e82c51a3fde/b422e9a5-59dc-4f5b-ae1a-7e82c51a3fde.mft Manifest number: 010D0C9F43285848C95642F822D2EE8CE8BDAF6A Signing time: Tue 18 Mar 2025 22:00:07 +0000 Manifest this update: Tue 18 Mar 2025 22:00:07 +0000 Manifest next update: Thu 20 Mar 2025 22:00:00 +0000 Files and hashes: 1: a55572ea-a2ef-3571-8109-383e114c8989.roa (hash: WfYOGYLqmzQHR0Hx3dR51Jwr8ToRuUXQ/ElQVRI6TFk=) 2: b422e9a5-59dc-4f5b-ae1a-7e82c51a3fde.crl (hash: QXA5DGoEqxkUW8yjlniHHeJBNDGOHA3VyzUCKJJZGOY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b422e9a5-59dc-4f5b-ae1a-7e82c51a3fde/b422e9a5-59dc-4f5b-ae1a-7e82c51a3fde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b422e9a5-59dc-4f5b-ae1a-7e82c51a3fde/b422e9a5-59dc-4f5b-ae1a-7e82c51a3fde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b422e9a5-59dc-4f5b-ae1a-7e82c51a3fde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Mar 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3b:af:88:8b:84:bf:12:10:bc:8e:47:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b422e9a5-59dc-4f5b-ae1a-7e82c51a3fde Validity Not Before: Mar 18 22:00:07 2025 GMT Not After : Mar 20 22:00:00 2025 GMT Subject: CN=3b94c042-1f92-46f5-a25c-46f9f67f6450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1e:39:17:35:3c:a3:e1:09:9d:e7:b7:a4:13: 4f:14:ee:ee:93:4a:04:b5:c1:5e:2b:97:8f:9e:aa: ce:6a:26:1a:d6:6c:5a:b3:fb:fb:da:23:64:a2:a9: e4:d6:f1:fb:d0:f5:8d:79:fb:b3:83:7c:6f:71:2e: 22:03:48:c9:1a:a0:f5:4b:29:3e:9a:ad:4d:54:45: 50:15:e9:2d:92:37:28:cf:fb:d6:99:a0:0d:39:4b: 7b:b0:48:5f:02:a2:50:d2:a7:0e:fa:6c:86:72:1a: dd:4f:1f:7a:9a:63:cc:18:5a:24:50:72:a7:eb:58: 53:bd:54:9e:03:a5:c2:03:43:21:1f:e0:6a:47:3a: 81:cd:31:cc:6b:95:5b:29:61:e1:96:85:65:41:dd: 00:39:6a:6e:94:7a:3d:6d:2c:19:c7:3d:69:eb:22: 4e:c3:0a:e6:c6:45:08:1b:b3:78:73:2d:4a:a1:c4: cb:21:ef:df:4e:e7:6e:70:50:3d:a1:0e:00:3c:58: d6:e0:4c:e1:c2:a7:80:91:37:10:57:b5:57:a3:2a: fc:9b:08:88:5a:ec:4f:72:ea:b2:94:cc:e0:00:cd: 58:29:5b:e5:3e:09:33:a2:55:92:be:ca:7d:c9:ce: d3:e8:c1:20:59:51:f4:09:07:54:02:16:8d:54:6f: 7f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:22:52:CB:C0:B1:D4:1D:F4:E4:E1:20:B3:E9:B2:00:98:C1:0F:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b422e9a5-59dc-4f5b-ae1a-7e82c51a3fde/b422e9a5-59dc-4f5b-ae1a-7e82c51a3fde.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b422e9a5-59dc-4f5b-ae1a-7e82c51a3fde/b422e9a5-59dc-4f5b-ae1a-7e82c51a3fde.crl X509v3 Authority Key Identifier: keyid:67:7B:4A:AF:E7:55:C7:D2:A5:63:9A:AE:96:38:66:54:D4:26:AA:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b422e9a5-59dc-4f5b-ae1a-7e82c51a3fde.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:c4:9d:04:07:f1:9c:72:e1:46:3f:9e:5e:ef:1e:c9:8b:fb: 91:31:00:1d:64:f4:06:03:94:ac:7c:a2:ad:a2:60:64:48:1a: 39:d1:c2:4a:64:0e:fb:e1:aa:74:e1:6d:5d:59:ea:b7:c9:ea: d2:fd:1b:97:be:b8:4a:4b:29:2f:b1:9a:de:78:53:bf:b0:ce: 48:24:b6:2c:30:94:d6:e3:3e:6d:5e:06:3b:d6:ff:70:20:67: 96:7b:ed:de:2a:94:ec:44:22:e0:05:c9:97:98:0c:85:51:f9: 72:99:42:cf:51:05:29:04:81:54:15:e3:9b:e2:0b:90:ec:14: e1:48:8b:2c:44:c9:60:64:d9:ed:08:e3:62:e6:a8:8e:69:1c: a3:c2:ff:1e:8e:2b:b5:b0:5e:3a:c7:00:3d:71:d5:ba:8d:cf: 8d:a3:e6:b9:a4:9b:97:57:96:e3:1d:e0:d1:ed:02:2c:e8:48: b7:46:a4:24:19:83:3c:e2:da:5b:3b:ed:6c:f7:df:5d:ed:4c: b8:01:95:8b:9a:3e:25:d6:a5:a0:a8:12:e7:22:c8:0c:91:25: 67:5c:4d:18:a1:b5:0c:45:74:ec:e4:dd:d2:e4:c3:6f:aa:fa: d6:74:c8:0c:36:21:b1:60:fb:d4:91:64:d0:1b:91:25:70:b0: cb:0a:e4:32 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEk7r4iLhL8SELyOR7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQyMmU5YTUtNTlkYy00ZjViLWFlMWEtN2U4MmM1MWEz ZmRlMB4XDTI1MDMxODIyMDAwN1oXDTI1MDMyMDIyMDAwMFowLzEtMCsGA1UEAxMk M2I5NGMwNDItMWY5Mi00NmY1LWEyNWMtNDZmOWY2N2Y2NDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnR45FzU8o+EJnee3pBNPFO7uk0oEtcFeK5eP nqrOaiYa1mxas/v72iNkoqnk1vH70PWNefuzg3xvcS4iA0jJGqD1Syk+mq1NVEVQ Fektkjcoz/vWmaANOUt7sEhfAqJQ0qcO+myGchrdTx96mmPMGFokUHKn61hTvVSe A6XCA0MhH+BqRzqBzTHMa5VbKWHhloVlQd0AOWpulHo9bSwZxz1p6yJOwwrmxkUI G7N4cy1KocTLIe/fTuducFA9oQ4APFjW4EzhwqeAkTcQV7VXoyr8mwiIWuxPcuqy lMzgAM1YKVvlPgkzolWSvsp9yc7T6MEgWVH0CQdUAhaNVG9/JwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFoiUsvAsdQd9OThILPpsgCYwQ9CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNDIy ZTlhNS01OWRjLTRmNWItYWUxYS03ZTgyYzUxYTNmZGUvYjQyMmU5YTUtNTlkYy00 ZjViLWFlMWEtN2U4MmM1MWEzZmRlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjQyMmU5YTUtNTlkYy00ZjViLWFl MWEtN2U4MmM1MWEzZmRlL2I0MjJlOWE1LTU5ZGMtNGY1Yi1hZTFhLTdlODJjNTFh M2ZkZS5jcmwwHwYDVR0jBBgwFoAUZ3tKr+dVx9KlY5quljhmVNQmqrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNDIyZTlhNS01OWRjLTRmNWItYWUxYS03ZTgy YzUxYTNmZGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCgxJ0EB/GccuFGP55e7x7J i/uRMQAdZPQGA5SsfKKtomBkSBo50cJKZA774ap04W1dWeq3yerS/RuXvrhKSykv sZreeFO/sM5IJLYsMJTW4z5tXgY71v9wIGeWe+3eKpTsRCLgBcmXmAyFUflymULP UQUpBIFUFeOb4guQ7BThSIssRMlgZNntCONi5qiOaRyjwv8ejiu1sF46xwA9cdW6 jc+No+a5pJuXV5bjHeDR7QIs6Ei3RqQkGYM84tpbO+1s999d7Uy4AZWLmj4l1qWg qBLnIsgMkSVnXE0YobUMRXTs5N3S5MNvqvrWdMgMNiGxYPvUkWTQG5ElcLDLCuQy -----END CERTIFICATE-----Generated at Wed Mar 19 22:21:55 2025 by rpki-client