$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/bdd46844-e081-4813-bfe2-0cfbeac92e08.mft File: bdd46844-e081-4813-bfe2-0cfbeac92e08.mft (raw, json) Hash identifier: xUItQ5JGlFZc+XnfyvfAwlmrnrgmfX0m01aoggGG0OE= Subject key identifier: DC:9C:B8:7B:77:66:2B:0A:45:3A:1E:D1:C6:9D:E2:B2:AE:1F:B0:5F Authority key identifier: FF:99:49:19:84:88:39:A6:03:55:7D:CC:8A:2D:A2:C6:77:B4:D5:B4 Certificate issuer: /CN=bdd46844-e081-4813-bfe2-0cfbeac92e08 Certificate serial: 010D0C9F432858498B046DA4A91B992BD949C540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/bdd46844-e081-4813-bfe2-0cfbeac92e08.mft Manifest number: 010D0C9F43285847DD1E0E87BACD33374237B73D Signing time: Wed 16 Apr 2025 08:00:03 +0000 Manifest this update: Wed 16 Apr 2025 08:00:03 +0000 Manifest next update: Sat 19 Apr 2025 08:00:00 +0000 Files and hashes: 1: bdd46844-e081-4813-bfe2-0cfbeac92e08.crl (hash: URA3xELVu6kiv9MDH4IJSHd5n0N7sIn9tCRzGUvK5NQ=) 2: ca4eafff-9365-3068-b787-140215783a30.roa (hash: 8d3iv+WhcPDaJmrFJWR1AgNPpo9t67PCWNocB+o5fGM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/bdd46844-e081-4813-bfe2-0cfbeac92e08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/bdd46844-e081-4813-bfe2-0cfbeac92e08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8b:04:6d:a4:a9:1b:99:2b:d9:49:c5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd46844-e081-4813-bfe2-0cfbeac92e08 Validity Not Before: Apr 16 08:00:03 2025 GMT Not After : Apr 19 08:00:00 2025 GMT Subject: CN=20571721-ffb0-40a3-a2b9-2126cf1364ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:10:ef:c6:ea:91:9f:11:d2:2f:e6:6a:7a:83: b1:04:b6:d8:cf:d5:a3:c4:18:db:b8:eb:31:46:e9: 77:2e:e1:ee:c5:fa:f5:f6:c5:99:da:d7:30:eb:b4: 1d:41:65:a7:64:cc:7d:46:27:f4:e2:77:1b:82:39: 06:13:10:9d:a3:33:69:fc:1b:43:94:66:a4:ae:05: 0d:2e:6e:0f:4d:2a:73:1d:42:2c:44:ce:f7:0e:c5: a8:82:23:32:57:34:5d:5e:20:5f:fc:ab:f8:8f:73: 11:25:63:52:d1:e5:5d:65:fe:d1:5a:b7:96:b3:3e: 4d:9f:5c:7b:08:5f:86:6b:bc:5d:d7:7b:a5:63:a6: c9:6c:28:45:ea:14:fe:3e:0a:58:c8:15:0c:ea:48: 44:f8:16:60:68:97:31:f3:e4:ea:1d:9e:50:99:e7: d7:08:6a:6b:94:43:60:8c:0b:f4:da:c1:6c:19:02: 03:1c:25:cc:6f:1f:54:79:00:50:e3:30:8c:24:40: d7:88:6a:0e:15:49:e8:77:67:e2:75:a7:4f:01:2d: c1:88:1c:51:2f:26:96:c6:d0:73:a5:e8:c2:b5:b8: 4f:55:37:62:7d:1c:97:ff:3c:ea:29:73:89:b9:3a: 56:27:d9:2a:e1:7f:af:45:08:e6:bb:71:35:3b:59: 67:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:9C:B8:7B:77:66:2B:0A:45:3A:1E:D1:C6:9D:E2:B2:AE:1F:B0:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/bdd46844-e081-4813-bfe2-0cfbeac92e08.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/bdd46844-e081-4813-bfe2-0cfbeac92e08.crl X509v3 Authority Key Identifier: keyid:FF:99:49:19:84:88:39:A6:03:55:7D:CC:8A:2D:A2:C6:77:B4:D5:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:17:22:93:81:c8:7d:81:41:89:ff:17:b1:b5:a2:3b:96:63: d2:88:e3:5c:e8:ab:d9:ff:1e:96:50:6f:1a:5f:e9:5c:7e:a7: 61:0f:6e:a0:3b:ec:20:7c:cd:30:9f:62:83:2f:93:0b:f4:60: 3e:0d:85:3a:78:8a:ae:f6:db:be:59:10:9f:31:66:eb:43:31: a2:7a:cb:d4:26:03:84:10:da:09:8c:75:84:d3:d0:72:38:07: cb:ed:90:cb:73:f7:d5:2c:98:46:5f:58:2a:32:05:55:af:90: a8:11:06:3a:56:f6:c9:6f:3c:db:fc:f1:98:05:e1:98:bd:9b: 82:11:26:d9:9a:10:1d:ab:67:b7:43:0e:a4:cb:29:22:94:55: e0:a9:8c:79:fc:cb:51:67:fb:65:24:64:4d:66:87:c3:18:14: 5d:53:40:db:67:9a:cf:f4:da:01:1a:27:20:e8:e4:b5:2b:f8: 67:cd:f4:74:d6:36:ee:08:ef:c2:cf:cc:bf:90:10:bd:48:59: f3:97:8f:64:10:17:b4:8e:a7:0a:b1:57:ef:24:2c:2a:f6:99: 50:08:23:68:a0:16:e4:ac:f0:9c:b9:43:07:1a:49:f6:dc:bf: 3d:02:f2:82:f9:0b:f3:b9:d5:a0:48:50:41:3c:65:25:ea:bf: 86:9e:62:1a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmLBG2kqRuZK9lJxUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRkNDY4NDQtZTA4MS00ODEzLWJmZTItMGNmYmVhYzky ZTA4MB4XDTI1MDQxNjA4MDAwM1oXDTI1MDQxOTA4MDAwMFowLzEtMCsGA1UEAxMk MjA1NzE3MjEtZmZiMC00MGEzLWEyYjktMjEyNmNmMTM2NGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hDvxuqRnxHSL+ZqeoOxBLbYz9WjxBjbuOsx Rul3LuHuxfr19sWZ2tcw67QdQWWnZMx9Rif04ncbgjkGExCdozNp/BtDlGakrgUN Lm4PTSpzHUIsRM73DsWogiMyVzRdXiBf/Kv4j3MRJWNS0eVdZf7RWreWsz5Nn1x7 CF+Ga7xd13ulY6bJbChF6hT+PgpYyBUM6khE+BZgaJcx8+TqHZ5QmefXCGprlENg jAv02sFsGQIDHCXMbx9UeQBQ4zCMJEDXiGoOFUnod2fidadPAS3BiBxRLyaWxtBz pejCtbhPVTdifRyX/zzqKXOJuTpWJ9kq4X+vRQjmu3E1O1lnQwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNycuHt3ZisKRToe0cad4rKuH7BfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZGQ0 Njg0NC1lMDgxLTQ4MTMtYmZlMi0wY2ZiZWFjOTJlMDgvYmRkNDY4NDQtZTA4MS00 ODEzLWJmZTItMGNmYmVhYzkyZTA4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmRkNDY4NDQtZTA4MS00ODEzLWJm ZTItMGNmYmVhYzkyZTA4L2JkZDQ2ODQ0LWUwODEtNDgxMy1iZmUyLTBjZmJlYWM5 MmUwOC5jcmwwHwYDVR0jBBgwFoAU/5lJGYSIOaYDVX3Mii2ixne01bQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZGQ0Njg0NC1lMDgxLTQ4MTMtYmZlMi0wY2Zi ZWFjOTJlMDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBoFyKTgch9gUGJ/xextaI7 lmPSiONc6KvZ/x6WUG8aX+lcfqdhD26gO+wgfM0wn2KDL5ML9GA+DYU6eIqu9tu+ WRCfMWbrQzGiesvUJgOEENoJjHWE09ByOAfL7ZDLc/fVLJhGX1gqMgVVr5CoEQY6 VvbJbzzb/PGYBeGYvZuCESbZmhAdq2e3Qw6kyykilFXgqYx5/MtRZ/tlJGRNZofD GBRdU0DbZ5rP9NoBGicg6OS1K/hnzfR01jbuCO/Cz8y/kBC9SFnzl49kEBe0jqcK sVfvJCwq9plQCCNooBbkrPCcuUMHGkn23L89AvKC+QvzudWgSFBBPGUl6r+GnmIa -----END CERTIFICATE-----Generated at Wed Apr 16 17:06:05 2025 by rpki-client