$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft File: ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft (raw, json) Hash identifier: +qkTqMss6hfb1tRhcDMREahRV2SgsXdTe88NDFojT1c= Subject key identifier: 29:37:4B:58:68:A6:60:2A:75:81:32:DD:F8:82:6C:3C:87:B8:E0:10 Authority key identifier: F6:56:13:C6:17:1B:30:8D:E2:86:D6:42:AC:2B:1D:F8:3C:DE:43:71 Certificate issuer: /CN=ddf98c7a-ee22-4693-8170-c9b197bc9da0 Certificate serial: 010D0C9F432858496B60B5F6F3FA64C9F0A3BDA8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft Manifest number: 010D0C9F43285849286C32D062B377DCDAAACC99 Signing time: Sat 05 Apr 2025 00:00:07 +0000 Manifest this update: Sat 05 Apr 2025 00:00:07 +0000 Manifest next update: Tue 08 Apr 2025 00:00:00 +0000 Files and hashes: 1: ddf98c7a-ee22-4693-8170-c9b197bc9da0.crl (hash: KWXl8n/ir3dNL64CEOYa/OHG1491nBzPeUixF1QafQQ=) 2: f17090ed-14f3-32d9-9d34-9fc6bed092d1.roa (hash: NQuJVtt6KqKGNx2z6+oe9UMzxG2Q3jinHlQvDOE+azU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6b:60:b5:f6:f3:fa:64:c9:f0:a3:bd:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddf98c7a-ee22-4693-8170-c9b197bc9da0 Validity Not Before: Apr 5 00:00:07 2025 GMT Not After : Apr 8 00:00:00 2025 GMT Subject: CN=3c34bea2-6e68-42ca-9f94-c870974fdf07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:87:d4:66:03:f3:6b:7e:a0:57:80:e7:3d:86: 32:3a:8c:91:21:38:11:ef:6c:29:a4:bc:0d:d9:68: 8b:af:f8:40:06:47:60:91:05:69:a1:da:ea:4e:40: 58:31:5a:4d:29:bf:14:ba:28:60:1c:a7:ed:55:73: eb:cd:49:3a:e2:27:0c:81:76:8f:45:66:af:b5:95: 92:9c:3a:67:87:42:cb:f3:c6:47:82:b4:75:bb:1a: 28:cd:5d:29:df:74:21:40:11:ea:e1:d5:4f:64:eb: 2b:ce:9e:7b:61:7e:97:ac:ef:85:9a:33:51:12:a9: 39:5b:60:c1:ba:8f:c2:e5:b0:0a:a0:27:e1:6e:a2: 01:7e:0e:60:71:59:8d:f4:f9:6f:d6:38:44:ee:c6: b7:47:0d:d2:04:b2:c2:fc:4b:16:3b:5a:e1:79:ee: fc:21:a2:1c:0e:11:50:bb:3f:39:a1:1f:f3:d4:24: 44:ec:5f:c9:87:94:3f:e4:d3:ef:b3:dd:a0:24:e9: 4b:a9:21:b3:db:1b:cd:0d:b0:92:96:62:01:c6:19: a4:1f:89:42:cb:8f:de:7b:af:a8:6b:47:32:d0:10: a4:d9:c4:7c:ff:50:48:84:8b:46:49:a0:10:c3:bf: fd:ba:2b:be:fa:17:9b:cf:2f:ad:90:4d:bf:f3:69: 5a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:37:4B:58:68:A6:60:2A:75:81:32:DD:F8:82:6C:3C:87:B8:E0:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.crl X509v3 Authority Key Identifier: keyid:F6:56:13:C6:17:1B:30:8D:E2:86:D6:42:AC:2B:1D:F8:3C:DE:43:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:fd:1a:46:01:d5:41:47:ee:e2:09:61:50:a3:f2:4a:b5:28: 26:e8:2d:94:a2:dd:f0:5a:06:d3:fc:4c:a9:a1:70:e1:8f:d2: 2b:15:6f:da:54:9f:99:ae:32:0a:23:0e:c2:5e:2d:60:f5:6e: 3f:78:ad:b6:85:b4:92:aa:42:05:22:c3:6e:a0:0d:64:b4:d9: 64:2b:02:cf:23:e9:f5:c3:90:97:5d:cd:41:c6:b7:d1:25:3f: bd:a4:69:74:75:67:02:4b:86:3e:15:26:09:13:1a:2a:9b:54: a6:3a:31:68:9b:d8:7b:5f:fe:da:94:9a:80:6d:3f:ed:10:5a: e2:36:23:68:c6:8e:ca:08:e5:65:eb:85:d3:e0:d5:9e:6f:14: 13:30:2e:73:ce:ea:f3:0f:06:b1:30:1a:f7:f2:ae:8e:e8:65: 63:18:ae:24:9a:6c:53:69:fa:5b:f3:a5:c0:88:3f:9b:54:e8: 41:b5:ae:f5:80:a4:82:ba:39:56:bc:1d:b1:04:84:09:54:7f: 72:36:d1:b7:f9:a0:11:6f:35:d6:2b:67:e0:d3:f7:5a:c1:04: 37:e1:24:fb:f0:59:03:6e:ee:16:8f:63:c1:1e:a3:3b:c2:7e: e5:94:c6:50:54:83:06:6c:d6:00:7e:d1:4e:16:73:7d:ff:96: bb:4f:1a:aa -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWElrYLX28/pkyfCjvagwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGRmOThjN2EtZWUyMi00NjkzLTgxNzAtYzliMTk3YmM5 ZGEwMB4XDTI1MDQwNTAwMDAwN1oXDTI1MDQwODAwMDAwMFowLzEtMCsGA1UEAxMk M2MzNGJlYTItNmU2OC00MmNhLTlmOTQtYzg3MDk3NGZkZjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYfUZgPza36gV4DnPYYyOoyRITgR72wppLwN 2WiLr/hABkdgkQVpodrqTkBYMVpNKb8UuihgHKftVXPrzUk64icMgXaPRWavtZWS nDpnh0LL88ZHgrR1uxoozV0p33QhQBHq4dVPZOsrzp57YX6XrO+FmjNREqk5W2DB uo/C5bAKoCfhbqIBfg5gcVmN9Plv1jhE7sa3Rw3SBLLC/EsWO1rhee78IaIcDhFQ uz85oR/z1CRE7F/Jh5Q/5NPvs92gJOlLqSGz2xvNDbCSlmIBxhmkH4lCy4/ee6+o a0cy0BCk2cR8/1BIhItGSaAQw7/9uiu++hebzy+tkE2/82lawQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCk3S1hopmAqdYEy3fiCbDyHuOAQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZGY5 OGM3YS1lZTIyLTQ2OTMtODE3MC1jOWIxOTdiYzlkYTAvZGRmOThjN2EtZWUyMi00 NjkzLTgxNzAtYzliMTk3YmM5ZGEwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGRmOThjN2EtZWUyMi00NjkzLTgx NzAtYzliMTk3YmM5ZGEwL2RkZjk4YzdhLWVlMjItNDY5My04MTcwLWM5YjE5N2Jj OWRhMC5jcmwwHwYDVR0jBBgwFoAU9lYTxhcbMI3ihtZCrCsd+DzeQ3EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZGY5OGM3YS1lZTIyLTQ2OTMtODE3MC1jOWIx OTdiYzlkYTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBO/RpGAdVBR+7iCWFQo/JK tSgm6C2Uot3wWgbT/EypoXDhj9IrFW/aVJ+ZrjIKIw7CXi1g9W4/eK22hbSSqkIF IsNuoA1ktNlkKwLPI+n1w5CXXc1BxrfRJT+9pGl0dWcCS4Y+FSYJExoqm1SmOjFo m9h7X/7alJqAbT/tEFriNiNoxo7KCOVl64XT4NWebxQTMC5zzurzDwaxMBr38q6O 6GVjGK4kmmxTafpb86XAiD+bVOhBta71gKSCujlWvB2xBIQJVH9yNtG3+aARbzXW K2fg0/dawQQ34ST78FkDbu4Wj2PBHqM7wn7llMZQVIMGbNYAftFOFnN9/5a7Txqq -----END CERTIFICATE-----Generated at Sat Apr 5 06:31:38 2025 by rpki-client