$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.mft File: 3a033ee1-5d03-497a-8120-3969593cdf7e.mft (raw, json) Hash identifier: 1+gxqp7w/id7im+jJHK0mYZOflZ/D/MwRDyLnvAacOY= Subject key identifier: C1:DD:0D:7F:DA:BB:11:6F:89:98:5B:36:95:29:DF:12:69:49:25:32 Authority key identifier: F8:10:57:08:22:D1:4D:24:0B:47:33:71:7E:77:77:21:75:97:18:07 Certificate issuer: /CN=3a033ee1-5d03-497a-8120-3969593cdf7e Certificate serial: 010D0C9F432858496A726F79C7D330E91D37E340 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.mft Manifest number: 010D0C9F4328584534EC3BF001B4FD74E407FF8B Signing time: Fri 04 Apr 2025 16:00:03 +0000 Manifest this update: Fri 04 Apr 2025 16:00:03 +0000 Manifest next update: Mon 07 Apr 2025 16:00:00 +0000 Files and hashes: 1: 3a033ee1-5d03-497a-8120-3969593cdf7e.crl (hash: bTCsKneBDBnNDjGcTS7wdXWU2W1h5iynaQN3f+HD+pE=) 2: 9a8d9685-4393-3f04-898b-1b075a4b6c59.roa (hash: 5DZ44htpCienvXGnYlO05LFQPSB3dO6cexxaJnLjeXg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:72:6f:79:c7:d3:30:e9:1d:37:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a033ee1-5d03-497a-8120-3969593cdf7e Validity Not Before: Apr 4 16:00:03 2025 GMT Not After : Apr 7 16:00:00 2025 GMT Subject: CN=590b5851-9e7e-4580-a02f-afd7a2f6da98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:71:2d:d7:d9:e5:aa:85:b8:05:e4:29:68:73: 48:d0:3d:bb:a0:72:25:a5:f4:87:7d:fc:9d:70:a5: f1:6f:a1:67:a7:0a:1a:a0:68:4c:69:5b:69:21:d2: 7a:96:0a:bb:cd:24:b3:87:18:a3:8a:65:4c:b8:a1: a1:fb:63:8f:66:ae:b9:22:3e:88:96:de:56:06:64: 4a:4f:e8:e5:ad:39:28:b1:ee:a0:ad:f5:f5:cb:88: 2d:7b:c4:66:c4:9f:65:2e:00:0a:82:67:2a:21:f9: 2c:68:80:cc:2c:a2:88:80:fa:85:54:1c:15:d0:df: 0c:aa:c4:df:67:8f:81:52:20:b6:be:f6:37:49:f5: 18:04:30:4b:68:14:61:00:74:1c:64:6c:5d:d0:0b: 6e:b1:41:d9:b7:d8:13:bf:09:b6:91:dd:9a:83:3b: 15:ed:c2:b6:24:f4:94:52:c4:b6:78:29:c6:6a:f6: 17:e4:c5:c6:a5:6c:44:c4:18:39:6e:c4:66:3b:43: 83:f5:c0:db:ad:c3:e3:6f:fa:9f:8e:8a:06:aa:df: e3:fe:46:14:01:61:4e:3c:c5:33:58:55:d7:0d:54: 35:8d:4e:91:84:d9:bc:73:61:3c:c2:74:ad:ff:0b: aa:0f:0c:2f:7a:a3:3e:82:6b:f1:68:93:3a:f8:6f: 53:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:DD:0D:7F:DA:BB:11:6F:89:98:5B:36:95:29:DF:12:69:49:25:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.crl X509v3 Authority Key Identifier: keyid:F8:10:57:08:22:D1:4D:24:0B:47:33:71:7E:77:77:21:75:97:18:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:b9:6f:69:33:3d:e7:45:09:35:67:ba:30:6b:bc:24:74:82: c1:a0:24:c0:e7:bb:fe:60:8a:0d:13:12:b4:17:56:c8:83:92: 5e:76:77:da:12:6e:9e:d2:e7:5d:c4:1f:da:2c:82:d6:9b:97: 2a:de:f6:fb:3e:9c:a8:2e:ab:c3:f2:fe:d4:ae:a4:b8:f4:8f: 6d:d6:59:99:0b:12:05:2a:cb:7b:f5:e6:9a:a3:16:7a:80:4d: f5:2b:85:d0:59:de:53:30:d1:0b:e7:26:af:c0:21:62:e4:00: fb:c1:b0:89:39:8e:1e:ae:fd:28:96:38:16:44:68:b3:eb:dc: 5a:e1:7e:6d:97:72:7c:1f:ee:cd:f8:96:75:5f:6f:35:7f:0a: 2e:1c:16:66:82:3e:1c:79:31:de:4e:a9:9e:27:f9:16:02:e4: c6:4e:f0:07:4e:5f:1d:4a:b3:ac:04:50:c6:a6:8a:e5:1d:ca: 00:53:b2:96:77:f7:18:62:7c:ce:13:e0:96:61:2b:e1:09:97: 24:a2:e5:8b:d2:d9:6b:9d:75:55:2e:9b:2d:46:d4:27:71:37: 19:87:c7:0a:c4:dc:b7:d7:f3:0b:39:56:99:00:d5:3b:fc:7c: 47:43:d4:ea:0f:79:e3:2e:6f:e6:8f:08:24:db:85:47:40:c0: 4d:bb:8a:94 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWElqcm95x9Mw6R0340AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2EwMzNlZTEtNWQwMy00OTdhLTgxMjAtMzk2OTU5M2Nk ZjdlMB4XDTI1MDQwNDE2MDAwM1oXDTI1MDQwNzE2MDAwMFowLzEtMCsGA1UEAxMk NTkwYjU4NTEtOWU3ZS00NTgwLWEwMmYtYWZkN2EyZjZkYTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnEt19nlqoW4BeQpaHNI0D27oHIlpfSHffyd cKXxb6FnpwoaoGhMaVtpIdJ6lgq7zSSzhxijimVMuKGh+2OPZq65Ij6Ilt5WBmRK T+jlrTkose6grfX1y4gte8RmxJ9lLgAKgmcqIfksaIDMLKKIgPqFVBwV0N8MqsTf Z4+BUiC2vvY3SfUYBDBLaBRhAHQcZGxd0AtusUHZt9gTvwm2kd2agzsV7cK2JPSU UsS2eCnGavYX5MXGpWxExBg5bsRmO0OD9cDbrcPjb/qfjooGqt/j/kYUAWFOPMUz WFXXDVQ1jU6RhNm8c2E8wnSt/wuqDwwveqM+gmvxaJM6+G9T5wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMHdDX/auxFviZhbNpUp3xJpSSUyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYTAz M2VlMS01ZDAzLTQ5N2EtODEyMC0zOTY5NTkzY2RmN2UvM2EwMzNlZTEtNWQwMy00 OTdhLTgxMjAtMzk2OTU5M2NkZjdlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2EwMzNlZTEtNWQwMy00OTdhLTgx MjAtMzk2OTU5M2NkZjdlLzNhMDMzZWUxLTVkMDMtNDk3YS04MTIwLTM5Njk1OTNj ZGY3ZS5jcmwwHwYDVR0jBBgwFoAU+BBXCCLRTSQLRzNxfnd3IXWXGAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYTAzM2VlMS01ZDAzLTQ5N2EtODEyMC0zOTY5 NTkzY2RmN2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAuuW9pMz3nRQk1Z7owa7wk dILBoCTA57v+YIoNExK0F1bIg5JednfaEm6e0uddxB/aLILWm5cq3vb7PpyoLqvD 8v7UrqS49I9t1lmZCxIFKst79eaaoxZ6gE31K4XQWd5TMNEL5yavwCFi5AD7wbCJ OY4erv0oljgWRGiz69xa4X5tl3J8H+7N+JZ1X281fwouHBZmgj4ceTHeTqmeJ/kW AuTGTvAHTl8dSrOsBFDGporlHcoAU7KWd/cYYnzOE+CWYSvhCZckouWL0tlrnXVV LpstRtQncTcZh8cKxNy31/MLOVaZANU7/HxHQ9TqD3njLm/mjwgk24VHQMBNu4qU -----END CERTIFICATE-----Generated at Sat Apr 5 04:42:18 2025 by rpki-client