$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.mft File: 2149afff-d907-4d42-a1e9-e162fad34f0d.mft (raw, json) Hash identifier: 0PnBXn0oNurXqt57azWURCY25zBU7pJa6OcubyQp8uw= Subject key identifier: B6:20:EB:2D:B2:68:FB:9C:7B:D3:ED:6C:55:42:AC:03:51:F6:97:FC Authority key identifier: 2F:51:9D:35:2E:74:34:BE:31:27:9C:22:B1:C5:33:D7:B8:1F:6E:47 Certificate issuer: /CN=2149afff-d907-4d42-a1e9-e162fad34f0d Certificate serial: 010D0C9F4328584967A7C47D911DA3C7C2BEE640 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.mft Manifest number: 010D0C9F432858449B57AC092D104FF3C5F042F8 Signing time: Thu 03 Apr 2025 16:00:03 +0000 Manifest this update: Thu 03 Apr 2025 16:00:03 +0000 Manifest next update: Sun 06 Apr 2025 16:00:00 +0000 Files and hashes: 1: 2149afff-d907-4d42-a1e9-e162fad34f0d.crl (hash: rM3XWFsRusNy1wN4Csa1zHsKtuM4Cd0khZXU79mjLks=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:a7:c4:7d:91:1d:a3:c7:c2:be:e6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2149afff-d907-4d42-a1e9-e162fad34f0d Validity Not Before: Apr 3 16:00:03 2025 GMT Not After : Apr 6 16:00:00 2025 GMT Subject: CN=0c54ef79-1666-4dc2-97fb-63539f1e1fb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1d:e9:f2:9b:07:2e:67:ef:1f:51:62:fa:9c: de:37:88:c3:34:d1:a6:7f:d6:af:15:b9:6c:db:7d: 66:9c:e9:09:d8:97:5c:34:de:50:3f:f3:e1:66:99: 50:d6:0a:a2:49:2c:1f:c9:7d:e9:57:6f:ad:5a:24: 2c:90:61:ad:50:89:f6:f9:e7:a5:54:85:4d:e7:d3: b1:50:13:7a:7f:8d:91:e2:4b:d8:cb:f7:4a:b5:11: bd:d0:c8:cf:f8:09:5b:d4:ce:c9:11:51:72:51:b5: 0f:ee:07:65:94:4a:4b:86:90:b5:99:62:ad:e7:09: 12:c8:c5:d9:22:cf:3e:75:40:f0:b2:81:74:f0:ca: 52:66:17:b5:b2:00:e3:18:04:3a:ec:e2:8e:2c:bf: 5a:b9:f6:71:ae:34:19:05:7d:a8:bb:0a:63:d8:7f: 2b:31:5c:d5:38:a4:0b:d3:ce:7b:ce:73:86:ad:7b: 8e:d4:e8:b4:3f:cc:80:6e:76:e3:e9:cc:7b:1a:58: 5b:cd:64:97:e0:34:a5:4d:d4:1d:eb:23:dc:60:09: 36:81:9e:e6:47:c7:1c:d2:11:68:ba:53:30:71:bc: 10:69:f7:da:d4:e7:01:e5:c1:dc:6d:eb:84:b0:2d: a0:4b:e6:28:69:2d:f3:fb:d9:3c:3e:06:5e:9f:9b: 49:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:20:EB:2D:B2:68:FB:9C:7B:D3:ED:6C:55:42:AC:03:51:F6:97:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.crl X509v3 Authority Key Identifier: keyid:2F:51:9D:35:2E:74:34:BE:31:27:9C:22:B1:C5:33:D7:B8:1F:6E:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:70:1e:e7:ae:d5:56:a2:46:87:ad:45:42:02:5a:40:d3:21: 6f:98:34:b1:b6:5a:d1:64:d4:37:70:e6:40:62:1f:7f:4c:c2: 60:7e:d4:15:5f:11:9a:b5:88:e0:90:ae:4e:ff:08:59:5c:54: 07:fa:c9:7f:0c:02:a6:35:38:63:85:8a:09:9c:02:d5:71:04: 71:67:51:a9:02:fd:4f:25:fb:cc:1e:7f:68:70:9d:f2:fb:4c: d3:3c:23:3c:24:f7:06:bc:8f:6f:41:e8:8e:d8:58:ee:d0:bf: 5a:db:81:5a:f5:33:ef:62:65:f0:7d:f2:25:c7:7b:e3:5c:5e: 0b:5c:7d:82:62:bd:71:0e:07:c5:18:ad:4a:31:e8:c5:58:11: a9:4a:3c:40:1a:40:3a:5f:e3:c0:f4:ea:0a:c2:31:13:f2:31: 45:68:a6:69:1d:81:4a:e2:ce:f3:ed:c8:82:af:89:a8:d2:e2: 94:53:56:4b:3f:36:96:30:5c:6e:a4:40:09:60:86:87:79:fe: fc:2b:a9:3b:e1:43:f2:ee:99:f8:23:a6:6e:2f:b6:3f:d6:1f: e7:0b:cb:0b:49:d1:2c:ac:ed:76:80:39:7a:9d:a7:6c:f6:a3: ff:4b:07:e7:d5:ab:6f:e7:94:53:d6:df:de:72:33:b8:b3:b6: 48:6c:cd:55 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWElnp8R9kR2jx8K+5kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE0OWFmZmYtZDkwNy00ZDQyLWExZTktZTE2MmZhZDM0 ZjBkMB4XDTI1MDQwMzE2MDAwM1oXDTI1MDQwNjE2MDAwMFowLzEtMCsGA1UEAxMk MGM1NGVmNzktMTY2Ni00ZGMyLTk3ZmItNjM1MzlmMWUxZmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlR3p8psHLmfvH1Fi+pzeN4jDNNGmf9avFbls 231mnOkJ2JdcNN5QP/PhZplQ1gqiSSwfyX3pV2+tWiQskGGtUIn2+eelVIVN59Ox UBN6f42R4kvYy/dKtRG90MjP+Alb1M7JEVFyUbUP7gdllEpLhpC1mWKt5wkSyMXZ Is8+dUDwsoF08MpSZhe1sgDjGAQ67OKOLL9aufZxrjQZBX2ouwpj2H8rMVzVOKQL 0857znOGrXuO1Oi0P8yAbnbj6cx7GlhbzWSX4DSlTdQd6yPcYAk2gZ7mR8cc0hFo ulMwcbwQaffa1OcB5cHcbeuEsC2gS+YoaS3z+9k8PgZen5tJIwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLYg6y2yaPuce9PtbFVCrANR9pf8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yMTQ5 YWZmZi1kOTA3LTRkNDItYTFlOS1lMTYyZmFkMzRmMGQvMjE0OWFmZmYtZDkwNy00 ZDQyLWExZTktZTE2MmZhZDM0ZjBkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjE0OWFmZmYtZDkwNy00ZDQyLWEx ZTktZTE2MmZhZDM0ZjBkLzIxNDlhZmZmLWQ5MDctNGQ0Mi1hMWU5LWUxNjJmYWQz NGYwZC5jcmwwHwYDVR0jBBgwFoAUL1GdNS50NL4xJ5wiscUz17gfbkcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yMTQ5YWZmZi1kOTA3LTRkNDItYTFlOS1lMTYy ZmFkMzRmMGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCYcB7nrtVWokaHrUVCAlpA 0yFvmDSxtlrRZNQ3cOZAYh9/TMJgftQVXxGatYjgkK5O/whZXFQH+sl/DAKmNThj hYoJnALVcQRxZ1GpAv1PJfvMHn9ocJ3y+0zTPCM8JPcGvI9vQeiO2Fju0L9a24Fa 9TPvYmXwffIlx3vjXF4LXH2CYr1xDgfFGK1KMejFWBGpSjxAGkA6X+PA9OoKwjET 8jFFaKZpHYFK4s7z7ciCr4mo0uKUU1ZLPzaWMFxupEAJYIaHef78K6k74UPy7pn4 I6ZuL7Y/1h/nC8sLSdEsrO12gDl6nads9qP/Swfn1atv55RT1t/ecjO4s7ZIbM1V -----END CERTIFICATE-----Generated at Fri Apr 4 15:57:47 2025 by rpki-client