$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.mft File: d709b40c-fe09-46e6-a38c-9cfe44ccdea2.mft (raw, json) Hash identifier: oAn8sONAHtV0xJjh6Lf5x0/bNwpwqYM4jRBTqmYOGkI= Subject key identifier: 5D:07:30:F3:75:50:34:71:BF:FF:54:05:AF:A1:BB:A9:6A:35:19:C1 Authority key identifier: 47:40:53:7B:7D:1B:E6:72:85:34:F3:D2:AA:65:E9:5F:67:8E:0F:8E Certificate issuer: /CN=d709b40c-fe09-46e6-a38c-9cfe44ccdea2 Certificate serial: 010D0C9F432858496BBA0177AF75A46B225201A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.mft Manifest number: 010D0C9F4328584073A8387DE519A5D299924A48 Signing time: Sat 05 Apr 2025 03:00:03 +0000 Manifest this update: Sat 05 Apr 2025 03:00:03 +0000 Manifest next update: Tue 08 Apr 2025 03:00:00 +0000 Files and hashes: 1: ab75e324-5884-3478-bcb0-f1254ed9f0bf.roa (hash: ILKZazRsVg9bn2u6lQ1nz9Y02b1+Hi76/wloYjRHpfI=) 2: d709b40c-fe09-46e6-a38c-9cfe44ccdea2.crl (hash: H2+2hyK7XbninPYqvuCiPuaeCJqOJQtvnk1LqkUjyLM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6b:ba:01:77:af:75:a4:6b:22:52:01:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d709b40c-fe09-46e6-a38c-9cfe44ccdea2 Validity Not Before: Apr 5 03:00:03 2025 GMT Not After : Apr 8 03:00:00 2025 GMT Subject: CN=f75cdf46-f10b-49a9-9dfa-d43cb355095c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:18:40:ab:ed:c1:15:a1:43:d1:bb:28:1c:2a: 18:ad:71:61:1b:44:9b:11:be:8d:9a:3d:ba:7e:ec: 16:f8:32:fb:0d:e3:d2:fb:ea:f5:47:37:08:e7:53: ba:d9:3d:86:38:02:37:5a:3c:1f:00:9d:19:60:22: c0:a3:6d:27:ec:36:01:67:bc:55:10:a4:f2:65:d8: db:ed:06:ae:8a:dc:3e:c4:18:af:df:09:9e:4e:ab: 1b:eb:75:6c:7b:47:e4:ec:60:0b:ef:7c:b2:6b:b7: 94:7e:6b:8a:22:e6:98:c7:81:6c:f8:22:3c:09:95: e4:86:46:87:c4:fa:48:11:71:ee:0c:01:52:d1:a8: fe:e6:23:05:d9:8f:5c:55:de:a0:ba:c9:69:0d:29: 27:40:62:3e:62:55:f3:5e:62:e8:08:e8:b4:77:85: 6f:a0:b0:55:d8:13:ae:de:f8:8a:f7:76:19:d8:9e: b2:6e:34:70:57:d4:e8:c8:66:0c:fe:d7:c0:5f:05: 00:19:cd:f4:f3:5b:93:f4:ff:81:ed:be:9a:26:98: 0d:34:28:d4:a8:43:48:b5:79:15:b9:65:fe:df:0a: c9:75:24:2d:4d:41:04:c8:58:71:1f:70:ec:47:0a: b3:7e:64:ec:6c:30:45:e1:60:ac:d5:3f:e2:d0:c4: a4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:07:30:F3:75:50:34:71:BF:FF:54:05:AF:A1:BB:A9:6A:35:19:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.crl X509v3 Authority Key Identifier: keyid:47:40:53:7B:7D:1B:E6:72:85:34:F3:D2:AA:65:E9:5F:67:8E:0F:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:22:a5:cd:cb:da:c5:21:d9:7c:d3:59:34:fb:e2:c1:65:5a: 15:bf:85:99:be:ce:45:8a:c7:5e:06:f3:d3:a6:ac:a9:1d:f6: a2:57:b3:97:3b:82:65:b9:47:54:92:59:e9:9c:de:65:38:87: 63:30:85:97:a2:3f:21:70:72:d6:d5:88:84:ed:d4:82:4f:8d: 59:9d:80:43:32:05:81:ad:83:4e:c6:24:f3:db:fe:06:f7:bf: aa:3f:88:c9:cd:91:2a:79:80:7c:2f:68:c6:8c:c0:4d:47:73: b0:a6:95:0b:2d:5e:9f:f0:16:64:ef:9b:df:85:7f:87:75:49: 11:df:72:7b:cd:2c:3e:c6:58:80:66:57:42:40:ab:49:2f:70: 52:e8:cf:ab:87:4d:77:46:ef:1d:5d:4c:fe:d8:17:c2:32:e4: dc:61:49:5d:f0:93:4a:4e:03:13:69:1b:46:ab:2f:98:ec:5b: a2:69:f2:eb:21:81:11:1d:aa:6f:c5:58:fc:6d:72:b1:7a:24: b8:34:62:22:08:4e:48:f6:90:45:cf:67:60:9e:70:24:5f:ce: 77:53:40:81:3d:7a:76:2f:cb:8e:71:a8:2f:64:ee:88:a4:ce: 9a:2f:55:b5:9b:a3:3b:78:c7:d4:1a:b0:23:00:87:17:67:ca: 15:c4:64:6f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWElrugF3r3WkayJSAaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwOWI0MGMtZmUwOS00NmU2LWEzOGMtOWNmZTQ0Y2Nk ZWEyMB4XDTI1MDQwNTAzMDAwM1oXDTI1MDQwODAzMDAwMFowLzEtMCsGA1UEAxMk Zjc1Y2RmNDYtZjEwYi00OWE5LTlkZmEtZDQzY2IzNTUwOTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxhAq+3BFaFD0bsoHCoYrXFhG0SbEb6Nmj26 fuwW+DL7DePS++r1RzcI51O62T2GOAI3WjwfAJ0ZYCLAo20n7DYBZ7xVEKTyZdjb 7Qauitw+xBiv3wmeTqsb63Vse0fk7GAL73yya7eUfmuKIuaYx4Fs+CI8CZXkhkaH xPpIEXHuDAFS0aj+5iMF2Y9cVd6guslpDSknQGI+YlXzXmLoCOi0d4VvoLBV2BOu 3viK93YZ2J6ybjRwV9ToyGYM/tfAXwUAGc3081uT9P+B7b6aJpgNNCjUqENItXkV uWX+3wrJdSQtTUEEyFhxH3DsRwqzfmTsbDBF4WCs1T/i0MSkqwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF0HMPN1UDRxv/9UBa+hu6lqNRnBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNzA5 YjQwYy1mZTA5LTQ2ZTYtYTM4Yy05Y2ZlNDRjY2RlYTIvZDcwOWI0MGMtZmUwOS00 NmU2LWEzOGMtOWNmZTQ0Y2NkZWEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDcwOWI0MGMtZmUwOS00NmU2LWEz OGMtOWNmZTQ0Y2NkZWEyL2Q3MDliNDBjLWZlMDktNDZlNi1hMzhjLTljZmU0NGNj ZGVhMi5jcmwwHwYDVR0jBBgwFoAUR0BTe30b5nKFNPPSqmXpX2eOD44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNzA5YjQwYy1mZTA5LTQ2ZTYtYTM4Yy05Y2Zl NDRjY2RlYTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCYIqXNy9rFIdl801k0++LB ZVoVv4WZvs5FisdeBvPTpqypHfaiV7OXO4JluUdUklnpnN5lOIdjMIWXoj8hcHLW 1YiE7dSCT41ZnYBDMgWBrYNOxiTz2/4G97+qP4jJzZEqeYB8L2jGjMBNR3OwppUL LV6f8BZk75vfhX+HdUkR33J7zSw+xliAZldCQKtJL3BS6M+rh013Ru8dXUz+2BfC MuTcYUld8JNKTgMTaRtGqy+Y7FuiafLrIYERHapvxVj8bXKxeiS4NGIiCE5I9pBF z2dgnnAkX853U0CBPXp2L8uOcagvZO6IpM6aL1W1m6M7eMfUGrAjAIcXZ8oVxGRv -----END CERTIFICATE-----Generated at Sat Apr 5 10:51:19 2025 by rpki-client