$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.mft File: b8fa95ca-aa42-4b86-891b-7be12d533da7.mft (raw, json) Hash identifier: sQH4LUzt0zLf3l+rYal5Bv2RNFtXCNM6BQAg/YQWavs= Subject key identifier: 44:7C:78:83:7F:25:29:2A:0B:A3:75:B8:2F:3B:00:73:7C:D6:1B:4A Authority key identifier: EE:C3:A3:27:2D:C4:BD:B3:60:BD:9A:79:33:99:80:FD:CD:91:D7:FD Certificate issuer: /CN=b8fa95ca-aa42-4b86-891b-7be12d533da7 Certificate serial: 010D0C9F432858497E38D57D0BECE881F8390900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.mft Manifest number: 010D0C9F43285844CDD9816FE539D09BB31841BC Signing time: Fri 11 Apr 2025 18:00:08 +0000 Manifest this update: Fri 11 Apr 2025 18:00:08 +0000 Manifest next update: Mon 14 Apr 2025 18:00:00 +0000 Files and hashes: 1: b8fa95ca-aa42-4b86-891b-7be12d533da7.crl (hash: JQQmwDGFI6AeuL5w0hvtcYBuo1syqtaz8pGwouhdLnw=) 2: f157d5a8-1f48-3fa1-a5c4-fd3f8b8206a4.roa (hash: oLgKcFC3CucUxORDITRfGqivuYeGIysLoBcpLAgUgkk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7e:38:d5:7d:0b:ec:e8:81:f8:39:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8fa95ca-aa42-4b86-891b-7be12d533da7 Validity Not Before: Apr 11 18:00:08 2025 GMT Not After : Apr 14 18:00:00 2025 GMT Subject: CN=e6246781-f4f9-46f4-ad52-6e888468d0c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:cd:e5:69:6c:8a:2b:24:e5:c8:7c:8a:73:49: d2:9e:3e:1a:30:b3:3d:4b:97:cd:d5:67:11:65:1e: 75:21:bb:94:c9:d2:fb:99:c5:e8:e9:12:53:6c:71: 66:2e:c7:b6:44:07:2e:0f:57:3b:35:41:33:b8:81: 07:73:01:0a:31:e8:d3:4f:87:04:cd:e8:b1:7d:f2: d5:3c:c6:81:02:55:63:1a:1a:78:55:95:ce:41:2d: c1:e4:de:6a:8c:13:84:b2:4c:f9:d4:47:bf:07:f9: 4c:04:9b:ca:d3:72:90:9a:a6:1b:4e:76:52:c4:84: f7:d5:7b:56:9b:c8:7c:bb:3d:8c:b3:8a:8b:4a:9c: 77:38:a9:3a:8e:f2:63:70:9d:7a:84:31:73:be:50: af:f6:28:36:7a:93:7f:b6:1f:1d:70:54:cf:8b:7d: 06:2c:c9:c4:a8:91:2d:66:0b:84:9c:d3:1c:91:3c: f6:e1:d5:40:09:17:f3:56:4e:91:d0:19:fd:eb:22: 2b:9e:71:e5:e1:50:f1:13:6d:2b:e2:40:28:a8:48: c8:f6:bf:df:dc:04:ec:61:d9:50:84:fc:9e:af:22: 85:52:39:1c:85:f3:ff:6e:a1:b0:d8:d0:d7:f6:83: ff:76:d1:22:ec:1a:3a:c0:13:a1:f8:87:0d:e5:27: fa:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:7C:78:83:7F:25:29:2A:0B:A3:75:B8:2F:3B:00:73:7C:D6:1B:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.crl X509v3 Authority Key Identifier: keyid:EE:C3:A3:27:2D:C4:BD:B3:60:BD:9A:79:33:99:80:FD:CD:91:D7:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:2a:91:3a:28:71:53:10:95:7b:37:58:aa:42:03:15:96:b4: a9:29:8a:d7:f9:99:76:ed:3f:9b:32:30:2c:da:6d:61:18:9b: e5:97:e8:ea:e1:89:fb:32:a3:a1:56:4c:62:17:df:c1:9b:90: f6:27:6c:ea:15:83:c7:82:11:78:a3:a1:52:2d:dd:a2:8a:b2: 65:15:bf:64:2b:b9:39:8a:c4:49:7f:79:e7:23:c8:d8:5f:33: de:eb:2c:d6:52:ba:5f:77:f6:09:94:c4:65:b2:47:6e:ab:0c: 25:b1:c7:df:6c:d3:0d:78:ce:84:e7:cc:79:33:5d:b6:61:56: a8:ee:c9:5b:01:b5:9a:1a:0a:04:a2:34:e9:e5:95:3e:b4:6a: 66:85:48:ef:90:d4:bb:ff:a1:4a:c0:b5:ca:92:2c:1f:32:88: 36:a9:b7:96:92:f7:42:ca:82:9a:00:31:e8:69:59:7e:43:73: 02:da:df:c9:59:39:b4:f9:0a:87:a8:e0:dc:96:ce:bf:07:32: 34:2b:dd:e2:1a:52:af:3b:88:ff:b0:22:b9:38:ea:79:88:25: 8a:d2:00:6a:7b:fe:f9:b6:a3:7e:c4:05:8b:92:69:96:76:36: 0b:39:e0:b5:7e:72:82:21:51:08:53:66:41:43:a7:68:cc:9c: 2e:98:83:d3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl+ONV9C+zogfg5CQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhmYTk1Y2EtYWE0Mi00Yjg2LTg5MWItN2JlMTJkNTMz ZGE3MB4XDTI1MDQxMTE4MDAwOFoXDTI1MDQxNDE4MDAwMFowLzEtMCsGA1UEAxMk ZTYyNDY3ODEtZjRmOS00NmY0LWFkNTItNmU4ODg0NjhkMGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhs3laWyKKyTlyHyKc0nSnj4aMLM9S5fN1WcR ZR51IbuUydL7mcXo6RJTbHFmLse2RAcuD1c7NUEzuIEHcwEKMejTT4cEzeixffLV PMaBAlVjGhp4VZXOQS3B5N5qjBOEskz51Ee/B/lMBJvK03KQmqYbTnZSxIT31XtW m8h8uz2Ms4qLSpx3OKk6jvJjcJ16hDFzvlCv9ig2epN/th8dcFTPi30GLMnEqJEt ZguEnNMckTz24dVACRfzVk6R0Bn96yIrnnHl4VDxE20r4kAoqEjI9r/f3ATsYdlQ hPyeryKFUjkchfP/bqGw2NDX9oP/dtEi7Bo6wBOh+IcN5Sf61QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFER8eIN/JSkqC6N1uC87AHN81htKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iOGZh OTVjYS1hYTQyLTRiODYtODkxYi03YmUxMmQ1MzNkYTcvYjhmYTk1Y2EtYWE0Mi00 Yjg2LTg5MWItN2JlMTJkNTMzZGE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjhmYTk1Y2EtYWE0Mi00Yjg2LTg5 MWItN2JlMTJkNTMzZGE3L2I4ZmE5NWNhLWFhNDItNGI4Ni04OTFiLTdiZTEyZDUz M2RhNy5jcmwwHwYDVR0jBBgwFoAU7sOjJy3EvbNgvZp5M5mA/c2R1/0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iOGZhOTVjYS1hYTQyLTRiODYtODkxYi03YmUx MmQ1MzNkYTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAgKpE6KHFTEJV7N1iqQgMV lrSpKYrX+Zl27T+bMjAs2m1hGJvll+jq4Yn7MqOhVkxiF9/Bm5D2J2zqFYPHghF4 o6FSLd2iirJlFb9kK7k5isRJf3nnI8jYXzPe6yzWUrpfd/YJlMRlskduqwwlscff bNMNeM6E58x5M122YVao7slbAbWaGgoEojTp5ZU+tGpmhUjvkNS7/6FKwLXKkiwf Mog2qbeWkvdCyoKaADHoaVl+Q3MC2t/JWTm0+QqHqODcls6/BzI0K93iGlKvO4j/ sCK5OOp5iCWK0gBqe/75tqN+xAWLkmmWdjYLOeC1fnKCIVEIU2ZBQ6dozJwumIPT -----END CERTIFICATE-----Generated at Fri Apr 11 23:18:24 2025 by rpki-client