$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/243c3de0-1aa4-456a-9c88-0a48721292f8/243c3de0-1aa4-456a-9c88-0a48721292f8.mft File: 243c3de0-1aa4-456a-9c88-0a48721292f8.mft (raw, json) Hash identifier: mbAnDrzvhl1OvLseQ0DVKOY2BX4P07t3sC6qKsIM/2I= Subject key identifier: 85:1A:58:48:0A:53:70:5C:E9:4E:4F:09:2C:F6:3E:C7:A0:41:22:CB Authority key identifier: 27:3C:24:EA:0A:2A:72:8D:EF:1B:B6:3C:0F:C9:9A:C2:6B:AB:27:FF Certificate issuer: /CN=243c3de0-1aa4-456a-9c88-0a48721292f8 Certificate serial: 010D0C9F432858497DDF8163E966A645D540CA40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/243c3de0-1aa4-456a-9c88-0a48721292f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/243c3de0-1aa4-456a-9c88-0a48721292f8/243c3de0-1aa4-456a-9c88-0a48721292f8.mft Manifest number: 010D0C9F43285847DB37B80BB4B47B907D009D96 Signing time: Fri 11 Apr 2025 15:00:07 +0000 Manifest this update: Fri 11 Apr 2025 15:00:07 +0000 Manifest next update: Mon 14 Apr 2025 15:00:00 +0000 Files and hashes: 1: 243c3de0-1aa4-456a-9c88-0a48721292f8.crl (hash: K9WJi/P9KZC4VW6XdEmQffsQ/x+XKpsVC5MqDJaL33Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/243c3de0-1aa4-456a-9c88-0a48721292f8/243c3de0-1aa4-456a-9c88-0a48721292f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/243c3de0-1aa4-456a-9c88-0a48721292f8/243c3de0-1aa4-456a-9c88-0a48721292f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/243c3de0-1aa4-456a-9c88-0a48721292f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:df:81:63:e9:66:a6:45:d5:40:ca:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=243c3de0-1aa4-456a-9c88-0a48721292f8 Validity Not Before: Apr 11 15:00:07 2025 GMT Not After : Apr 14 15:00:00 2025 GMT Subject: CN=e9fa787f-a06b-4fef-bd14-8bb1776c7d86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ca:c9:11:03:49:e7:70:f2:2d:99:85:ae:dc: 3a:78:13:f5:eb:b9:43:43:1e:b9:24:cf:bc:7c:03: 31:51:ee:17:13:7f:29:2f:6c:94:2d:b9:90:a1:87: c1:4c:ce:2c:c9:f2:25:cd:6a:28:be:d4:e8:6f:a3: 12:41:30:ac:a7:6d:52:36:fb:41:6d:63:90:30:d7: 4b:c6:07:6d:f8:58:86:4d:3e:b0:48:bd:7f:f7:2f: 2d:4a:85:29:a6:ab:b1:29:62:d2:ac:41:88:45:f7: 3c:27:c1:d2:89:6b:90:ae:e7:6f:45:32:09:06:25: b7:b9:95:fc:6e:4f:f8:b9:ad:1e:5c:2c:6b:86:72: b8:b4:4f:12:b1:84:b0:86:dc:a2:77:2c:2b:12:13: e6:09:25:72:39:89:8c:f6:af:f0:1a:f8:a2:71:c9: 25:b2:b4:3b:06:8a:3e:15:3e:c7:22:e9:61:28:f3: 46:8a:d3:2b:55:69:ca:f1:eb:dd:15:4b:d0:45:37: fb:43:21:e8:df:13:c1:4b:d8:a9:db:f7:fd:7c:36: 80:e9:bb:c5:b6:51:d7:bd:cc:3c:5d:70:8f:02:8b: f0:ee:bd:c8:2b:b8:0d:4d:b0:68:03:94:59:d0:7e: 79:80:cc:8c:d4:39:44:a6:32:60:4a:da:ac:77:82: 9c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:1A:58:48:0A:53:70:5C:E9:4E:4F:09:2C:F6:3E:C7:A0:41:22:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/243c3de0-1aa4-456a-9c88-0a48721292f8/243c3de0-1aa4-456a-9c88-0a48721292f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/243c3de0-1aa4-456a-9c88-0a48721292f8/243c3de0-1aa4-456a-9c88-0a48721292f8.crl X509v3 Authority Key Identifier: keyid:27:3C:24:EA:0A:2A:72:8D:EF:1B:B6:3C:0F:C9:9A:C2:6B:AB:27:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/243c3de0-1aa4-456a-9c88-0a48721292f8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:8d:35:a0:39:a2:55:a4:4b:96:40:fe:c7:39:b6:d6:2d:0e: a2:2d:b3:1f:ee:82:85:fe:63:3c:7f:9a:c3:e9:c1:da:3a:66: bd:ec:77:40:43:ab:89:d7:c5:8f:29:7f:4f:79:66:e6:fe:38: 06:47:18:b8:a5:c6:b5:07:3b:da:41:d2:17:ab:43:da:aa:a2: 80:bd:80:71:e4:c3:f8:8e:89:74:f9:b3:0f:19:d0:53:53:2b: d8:cd:23:72:f5:ed:32:d1:af:29:25:9a:41:a0:b6:d4:a6:66: 27:f3:ac:b6:06:56:4c:6e:f9:e2:81:13:19:0c:6f:ed:3c:72: f3:4f:23:20:eb:88:0f:43:fd:41:bb:9d:5c:bd:5d:bb:76:33: 43:de:87:3a:65:8e:ae:29:36:6a:e6:d5:63:dc:b6:46:f8:71: c2:6a:07:a2:6d:bc:eb:95:e6:46:00:91:23:22:18:dd:12:30: 48:c5:65:4b:6d:47:6a:f9:7f:a7:29:a9:41:cd:89:84:4a:c5: b4:0d:08:11:f9:05:6e:4f:f1:33:ac:ad:5c:67:41:50:be:1e: ac:91:6d:7f:b8:d8:1a:00:ee:1f:89:42:9d:b8:03:4c:6b:45: 30:57:2e:98:c1:21:c6:33:c3:55:f3:40:6b:a8:1c:14:8c:6b: a9:c8:ce:31 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl934Fj6WamRdVAykAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQzYzNkZTAtMWFhNC00NTZhLTljODgtMGE0ODcyMTI5 MmY4MB4XDTI1MDQxMTE1MDAwN1oXDTI1MDQxNDE1MDAwMFowLzEtMCsGA1UEAxMk ZTlmYTc4N2YtYTA2Yi00ZmVmLWJkMTQtOGJiMTc3NmM3ZDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsrJEQNJ53DyLZmFrtw6eBP167lDQx65JM+8 fAMxUe4XE38pL2yULbmQoYfBTM4syfIlzWoovtTob6MSQTCsp21SNvtBbWOQMNdL xgdt+FiGTT6wSL1/9y8tSoUppquxKWLSrEGIRfc8J8HSiWuQrudvRTIJBiW3uZX8 bk/4ua0eXCxrhnK4tE8SsYSwhtyidywrEhPmCSVyOYmM9q/wGviiccklsrQ7Boo+ FT7HIulhKPNGitMrVWnK8evdFUvQRTf7QyHo3xPBS9ip2/f9fDaA6bvFtlHXvcw8 XXCPAovw7r3IK7gNTbBoA5RZ0H55gMyM1DlEpjJgStqsd4Kc0QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIUaWEgKU3Bc6U5PCSz2PsegQSLLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDNj M2RlMC0xYWE0LTQ1NmEtOWM4OC0wYTQ4NzIxMjkyZjgvMjQzYzNkZTAtMWFhNC00 NTZhLTljODgtMGE0ODcyMTI5MmY4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQzYzNkZTAtMWFhNC00NTZhLTlj ODgtMGE0ODcyMTI5MmY4LzI0M2MzZGUwLTFhYTQtNDU2YS05Yzg4LTBhNDg3MjEy OTJmOC5jcmwwHwYDVR0jBBgwFoAUJzwk6goqco3vG7Y8D8mawmurJ/8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDNjM2RlMC0xYWE0LTQ1NmEtOWM4OC0wYTQ4 NzIxMjkyZjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCZjTWgOaJVpEuWQP7HObbW LQ6iLbMf7oKF/mM8f5rD6cHaOma97HdAQ6uJ18WPKX9PeWbm/jgGRxi4pca1Bzva QdIXq0PaqqKAvYBx5MP4jol0+bMPGdBTUyvYzSNy9e0y0a8pJZpBoLbUpmYn86y2 BlZMbvnigRMZDG/tPHLzTyMg64gPQ/1Bu51cvV27djND3oc6ZY6uKTZq5tVj3LZG +HHCageibbzrleZGAJEjIhjdEjBIxWVLbUdq+X+nKalBzYmESsW0DQgR+QVuT/Ez rK1cZ0FQvh6skW1/uNgaAO4fiUKduANMa0UwVy6YwSHGM8NV80BrqBwUjGupyM4x -----END CERTIFICATE-----Generated at Fri Apr 11 21:50:41 2025 by rpki-client