$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4f9daf15-de63-453b-a389-ff5afab0a952/4f9daf15-de63-453b-a389-ff5afab0a952.mft File: 4f9daf15-de63-453b-a389-ff5afab0a952.mft (raw, json) Hash identifier: 21LvHIxI/jtwzn3BF3O3xhgXWUrYD/xm1g7B9SDvxRQ= Subject key identifier: 42:27:64:00:F6:F4:36:31:C3:63:D1:89:98:D5:D9:A6:FC:5D:1D:C3 Authority key identifier: C7:1B:05:E9:DC:84:27:A2:75:BC:F9:74:12:C8:06:6B:58:BB:B2:1A Certificate issuer: /CN=4f9daf15-de63-453b-a389-ff5afab0a952 Certificate serial: 010D0C9F43285849681EEBFEE14EF00DF59DD380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4f9daf15-de63-453b-a389-ff5afab0a952.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4f9daf15-de63-453b-a389-ff5afab0a952/4f9daf15-de63-453b-a389-ff5afab0a952.mft Manifest number: 010D0C9F432858459444AEA5DEC4A61CB84DB1A0 Signing time: Thu 03 Apr 2025 20:00:07 +0000 Manifest this update: Thu 03 Apr 2025 20:00:07 +0000 Manifest next update: Sat 05 Apr 2025 20:00:00 +0000 Files and hashes: 1: 01073802-359f-3fcc-8cd9-7191adb0b622.roa (hash: P6lkWkTsD354nfQmEumyfmFG8NxtIokGbweSLXAy/Pw=) 2: 4f9daf15-de63-453b-a389-ff5afab0a952.crl (hash: /1mDITbaUdWvn6UGrVJtU15F7XKRuyF533+MG1kAPyo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4f9daf15-de63-453b-a389-ff5afab0a952/4f9daf15-de63-453b-a389-ff5afab0a952.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4f9daf15-de63-453b-a389-ff5afab0a952/4f9daf15-de63-453b-a389-ff5afab0a952.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4f9daf15-de63-453b-a389-ff5afab0a952.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:68:1e:eb:fe:e1:4e:f0:0d:f5:9d:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f9daf15-de63-453b-a389-ff5afab0a952 Validity Not Before: Apr 3 20:00:07 2025 GMT Not After : Apr 5 20:00:00 2025 GMT Subject: CN=a668efc8-7c00-420a-803f-01d04b02019b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:65:7f:16:65:93:61:05:e4:b1:8d:a7:8b:7e: a1:da:4c:0e:b4:db:ed:2c:8e:69:3f:47:98:22:9f: 07:e7:fe:9d:af:66:88:3b:46:9b:8d:d6:38:72:76: 66:33:e7:c2:e1:62:33:94:50:7b:2e:d1:97:82:1a: ee:29:3f:0b:ba:46:bb:b0:18:b0:71:44:07:c9:6c: d6:fb:f3:92:ba:d7:64:90:90:c1:71:a7:0b:73:88: 09:9b:4e:11:b7:44:6b:c4:d0:7b:e7:7a:a4:97:67: c7:35:7a:09:d8:a9:cb:ab:1c:d0:cc:15:b5:64:8b: 3b:10:91:d3:bf:9f:05:f8:e3:6a:33:8f:2e:68:2c: 34:10:43:9a:2c:2b:89:ae:9e:fe:94:f5:35:4d:00: 01:cf:81:ff:ee:5a:1c:77:0c:a6:a5:88:ee:79:15: 5d:93:26:fb:29:69:78:eb:9f:29:7a:b1:1e:8c:78: ac:5c:79:46:69:8b:82:93:81:06:25:a0:d1:6f:71: e4:73:e5:0e:1a:32:22:09:01:d3:55:2f:14:56:d7: ce:da:e2:22:2a:9d:fe:ab:3c:3b:f1:56:34:7f:93: 6b:ca:8e:f1:3e:09:63:73:2f:cb:b8:79:c5:0b:53: 4e:61:ca:29:94:09:ae:ac:e0:3c:3f:7c:10:68:44: e7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:27:64:00:F6:F4:36:31:C3:63:D1:89:98:D5:D9:A6:FC:5D:1D:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4f9daf15-de63-453b-a389-ff5afab0a952/4f9daf15-de63-453b-a389-ff5afab0a952.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4f9daf15-de63-453b-a389-ff5afab0a952/4f9daf15-de63-453b-a389-ff5afab0a952.crl X509v3 Authority Key Identifier: keyid:C7:1B:05:E9:DC:84:27:A2:75:BC:F9:74:12:C8:06:6B:58:BB:B2:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4f9daf15-de63-453b-a389-ff5afab0a952.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:04:3e:22:61:03:01:8a:5d:e6:a4:da:bb:ff:b8:27:ac:6a: 90:d9:da:04:17:e6:9c:69:20:29:ec:77:12:e3:1a:ea:21:c6: 8e:53:d2:bb:55:b7:2e:ea:6b:c6:c1:c6:7d:e0:a8:d3:ce:0a: 4f:2a:1d:a9:24:72:79:d7:e0:1d:b9:cd:3b:0f:a5:97:fe:b7: eb:e5:ab:d0:c6:7f:78:ca:8f:cd:5e:e2:35:d7:89:f9:0c:7d: 93:e1:20:ed:4b:d7:0a:3b:6c:f4:61:34:c1:0b:e9:de:cb:61: 61:18:47:79:c8:d1:8c:34:c3:b1:43:1a:a8:86:de:fa:9a:34: 33:92:b0:90:0c:b9:39:6c:38:96:09:92:ce:8b:d4:74:89:79: 5f:39:6d:05:d7:55:2d:08:0a:69:5e:99:94:d7:bc:28:65:ab: 0c:96:27:42:ab:34:e6:8f:99:cd:9b:e7:35:df:9b:ae:34:a7: 67:64:75:7e:05:fa:c5:a4:4d:ac:a2:8a:dd:1c:fc:23:51:fc: f0:08:d1:21:1e:84:b9:1a:77:9d:c7:e8:d4:66:96:e4:88:39: 88:d6:c3:7d:9b:06:ca:2e:95:ed:5b:10:e4:be:db:38:32:4d: fc:8a:ad:c6:16:f0:65:36:77:40:c2:90:38:1c:e2:79:2f:9d: b9:88:54:4c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEloHuv+4U7wDfWd04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY5ZGFmMTUtZGU2My00NTNiLWEzODktZmY1YWZhYjBh OTUyMB4XDTI1MDQwMzIwMDAwN1oXDTI1MDQwNTIwMDAwMFowLzEtMCsGA1UEAxMk YTY2OGVmYzgtN2MwMC00MjBhLTgwM2YtMDFkMDRiMDIwMTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWV/FmWTYQXksY2ni36h2kwOtNvtLI5pP0eY Ip8H5/6dr2aIO0abjdY4cnZmM+fC4WIzlFB7LtGXghruKT8Luka7sBiwcUQHyWzW +/OSutdkkJDBcacLc4gJm04Rt0RrxNB753qkl2fHNXoJ2KnLqxzQzBW1ZIs7EJHT v58F+ONqM48uaCw0EEOaLCuJrp7+lPU1TQABz4H/7locdwympYjueRVdkyb7KWl4 658perEejHisXHlGaYuCk4EGJaDRb3Hkc+UOGjIiCQHTVS8UVtfO2uIiKp3+qzw7 8VY0f5Nryo7xPgljcy/LuHnFC1NOYcoplAmurOA8P3wQaETnAwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEInZAD29DYxw2PRiZjV2ab8XR3DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80Zjlk YWYxNS1kZTYzLTQ1M2ItYTM4OS1mZjVhZmFiMGE5NTIvNGY5ZGFmMTUtZGU2My00 NTNiLWEzODktZmY1YWZhYjBhOTUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGY5ZGFmMTUtZGU2My00NTNiLWEz ODktZmY1YWZhYjBhOTUyLzRmOWRhZjE1LWRlNjMtNDUzYi1hMzg5LWZmNWFmYWIw YTk1Mi5jcmwwHwYDVR0jBBgwFoAUxxsF6dyEJ6J1vPl0EsgGa1i7showDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80ZjlkYWYxNS1kZTYzLTQ1M2ItYTM4OS1mZjVh ZmFiMGE5NTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBuBD4iYQMBil3mpNq7/7gn rGqQ2doEF+acaSAp7HcS4xrqIcaOU9K7Vbcu6mvGwcZ94KjTzgpPKh2pJHJ51+Ad uc07D6WX/rfr5avQxn94yo/NXuI114n5DH2T4SDtS9cKO2z0YTTBC+ney2FhGEd5 yNGMNMOxQxqoht76mjQzkrCQDLk5bDiWCZLOi9R0iXlfOW0F11UtCAppXpmU17wo ZasMlidCqzTmj5nNm+c135uuNKdnZHV+BfrFpE2soordHPwjUfzwCNEhHoS5Gned x+jUZpbkiDmI1sN9mwbKLpXtWxDkvts4Mk38iq3GFvBlNndAwpA4HOJ5L525iFRM -----END CERTIFICATE-----Generated at Fri Apr 4 16:08:55 2025 by rpki-client