$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft File: 3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft (raw, json) Hash identifier: h1V/YKWuPpmXmpedQEwkYcUG0avOScY2LUo29XsmGuw= Subject key identifier: 30:4D:D1:7C:C7:EA:23:2F:E5:B4:5B:F2:92:3D:69:5F:82:AA:BA:81 Authority key identifier: 0A:AA:92:08:33:0F:0A:CE:C8:0E:39:69:7F:E1:85:63:D1:49:4A:50 Certificate issuer: /CN=3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7 Certificate serial: 010D0C9F4328584967C597443BF26D68FC14FF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft Manifest number: 010D0C9F43285844D615D248DD853730ADA3F9B1 Signing time: Thu 03 Apr 2025 17:00:07 +0000 Manifest this update: Thu 03 Apr 2025 17:00:07 +0000 Manifest next update: Sat 05 Apr 2025 18:00:00 +0000 Files and hashes: 1: 3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.crl (hash: dMZ6GlG4pBAjut+JBG1VTObu2Fqpmr0HKhQERkxK0B4=) 2: 7dae22f8-939a-3a54-b81c-8890233bc71a.roa (hash: mxdQX7Y619irzFGa/cUMI2xlhFeHtx9Od/Lt9rFaBxE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:c5:97:44:3b:f2:6d:68:fc:14:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7 Validity Not Before: Apr 3 17:00:07 2025 GMT Not After : Apr 5 18:00:00 2025 GMT Subject: CN=c67ae617-00ca-4c5e-81be-9f7fe146d4c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:0a:3f:b8:ce:b6:3c:c6:2c:7e:97:ce:0f:6c: 82:65:43:a2:44:af:65:bd:8d:c8:1e:a3:f4:0f:81: 17:1a:33:23:fe:29:3f:8d:bf:3b:08:3b:76:6b:74: 9e:69:78:c2:bb:80:e7:ad:b5:97:b7:74:f5:b7:89: 19:3e:30:4b:93:4e:ba:59:32:74:6d:c1:2b:d4:2f: 14:52:3f:7d:ae:5a:ef:9d:61:ca:0a:c4:06:36:38: c5:bf:f3:26:10:9d:60:3c:8e:a9:eb:53:d2:06:74: e9:95:b9:5f:8d:45:f7:42:69:f5:00:7d:99:b7:74: 8a:f4:2e:58:ba:d8:ef:21:56:be:64:4a:5b:26:8e: 57:54:eb:7f:59:89:9c:25:75:f7:f4:35:03:b1:44: 46:ec:38:1a:a5:5a:b7:36:d4:2a:32:f0:7f:d8:10: e2:39:07:57:9f:1c:6b:f1:c0:04:e9:67:55:2d:8f: c8:9f:2e:ae:fa:13:84:91:b2:29:2f:7e:6f:fe:89: 7a:ad:d1:67:95:a6:21:38:2c:c2:1f:2d:ee:7a:85: 57:1d:b5:88:6c:c5:fb:7a:2f:05:09:34:34:ae:48: 55:32:5f:66:ff:10:d2:a2:f1:85:c0:f5:ab:de:62: 04:ff:f9:2d:87:f5:a8:19:13:e5:99:c9:df:2e:98: bc:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:4D:D1:7C:C7:EA:23:2F:E5:B4:5B:F2:92:3D:69:5F:82:AA:BA:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.crl X509v3 Authority Key Identifier: keyid:0A:AA:92:08:33:0F:0A:CE:C8:0E:39:69:7F:E1:85:63:D1:49:4A:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:10:31:d3:0d:7a:5c:80:7b:56:c0:93:74:cc:39:fd:d8:12: 11:f1:5e:9a:0d:6f:c6:96:38:75:6a:38:e5:4b:a3:37:e9:66: 41:b1:63:57:15:ea:b0:4c:e5:de:59:ff:32:c2:75:e0:d7:24: 3a:ee:dc:7e:ca:60:50:7d:82:bb:f5:3b:4a:c3:90:ac:7b:31: 41:c1:e1:8e:e1:36:a3:8f:1e:a2:e1:fb:f7:99:91:b4:05:7c: f8:3c:d6:c3:36:ee:b1:65:38:15:01:61:5f:ae:cf:af:1d:a6: 7b:90:d7:17:d5:99:3f:83:c5:b0:96:19:1c:8d:17:84:2d:e0: 3a:83:fd:84:d0:0d:60:55:5b:9c:98:c2:61:40:53:61:a7:a4: 10:5a:d6:05:81:e1:ef:15:2f:27:6c:f7:6b:3c:f3:6a:dc:31: a4:f9:63:11:a2:89:b2:ad:66:b1:79:d0:a0:1e:43:53:89:1b: f4:6d:0d:f6:5e:cd:2f:9a:af:fa:01:0b:3f:1f:5d:cb:c8:b2: ba:e3:5b:c2:3e:27:a6:cd:ce:67:ea:64:81:93:0c:92:9e:35: 3e:01:23:54:fe:e1:29:14:66:e8:4e:4a:86:7a:a8:f2:d0:0d: 00:00:6c:93:13:43:4c:78:ee:30:7e:9f:a8:d3:bc:de:e6:11: a1:c0:61:23 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWElnxZdEO/JtaPwU/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2YyZDM3OGQtMjBlMS00YjVmLTg1YjktZThjNGNiYTVk NWQ3MB4XDTI1MDQwMzE3MDAwN1oXDTI1MDQwNTE4MDAwMFowLzEtMCsGA1UEAxMk YzY3YWU2MTctMDBjYS00YzVlLTgxYmUtOWY3ZmUxNDZkNGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwo/uM62PMYsfpfOD2yCZUOiRK9lvY3IHqP0 D4EXGjMj/ik/jb87CDt2a3SeaXjCu4DnrbWXt3T1t4kZPjBLk066WTJ0bcEr1C8U Uj99rlrvnWHKCsQGNjjFv/MmEJ1gPI6p61PSBnTplblfjUX3Qmn1AH2Zt3SK9C5Y utjvIVa+ZEpbJo5XVOt/WYmcJXX39DUDsURG7DgapVq3NtQqMvB/2BDiOQdXnxxr 8cAE6WdVLY/Iny6u+hOEkbIpL35v/ol6rdFnlaYhOCzCHy3ueoVXHbWIbMX7ei8F CTQ0rkhVMl9m/xDSovGFwPWr3mIE//kth/WoGRPlmcnfLpi8owIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDBN0XzH6iMv5bRb8pI9aV+CqrqBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZjJk Mzc4ZC0yMGUxLTRiNWYtODViOS1lOGM0Y2JhNWQ1ZDcvM2YyZDM3OGQtMjBlMS00 YjVmLTg1YjktZThjNGNiYTVkNWQ3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2YyZDM3OGQtMjBlMS00YjVmLTg1 YjktZThjNGNiYTVkNWQ3LzNmMmQzNzhkLTIwZTEtNGI1Zi04NWI5LWU4YzRjYmE1 ZDVkNy5jcmwwHwYDVR0jBBgwFoAUCqqSCDMPCs7IDjlpf+GFY9FJSlAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZjJkMzc4ZC0yMGUxLTRiNWYtODViOS1lOGM0 Y2JhNWQ1ZDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCyEDHTDXpcgHtWwJN0zDn9 2BIR8V6aDW/Gljh1ajjlS6M36WZBsWNXFeqwTOXeWf8ywnXg1yQ67tx+ymBQfYK7 9TtKw5CsezFBweGO4Tajjx6i4fv3mZG0BXz4PNbDNu6xZTgVAWFfrs+vHaZ7kNcX 1Zk/g8WwlhkcjReELeA6g/2E0A1gVVucmMJhQFNhp6QQWtYFgeHvFS8nbPdrPPNq 3DGk+WMRoomyrWaxedCgHkNTiRv0bQ32Xs0vmq/6AQs/H13LyLK641vCPiemzc5n 6mSBkwySnjU+ASNU/uEpFGboTkqGeqjy0A0AAGyTE0NMeO4wfp+o07ze5hGhwGEj -----END CERTIFICATE-----Generated at Fri Apr 4 18:57:00 2025 by rpki-client