$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/627331bd-3468-4a2e-8d59-a1229df28b6e/627331bd-3468-4a2e-8d59-a1229df28b6e.mft File: 627331bd-3468-4a2e-8d59-a1229df28b6e.mft (raw, json) Hash identifier: O64aqPOKMDp+kByidlqLqsfA2jemH8++gJHvle0KulI= Subject key identifier: CA:C7:37:06:D8:FE:F3:5D:ED:CE:AB:97:09:10:70:D5:CD:19:CB:D1 Authority key identifier: 19:B0:31:21:1D:43:DD:BD:7D:84:CF:EE:B1:0E:B6:98:41:CB:15:14 Certificate issuer: /CN=627331bd-3468-4a2e-8d59-a1229df28b6e Certificate serial: 010D0C9F4328584968EF5B9199E901CDADCBB360 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/627331bd-3468-4a2e-8d59-a1229df28b6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/627331bd-3468-4a2e-8d59-a1229df28b6e/627331bd-3468-4a2e-8d59-a1229df28b6e.mft Manifest number: 010D0C9F432858450980E9497EA11D8E02EF9523 Signing time: Fri 04 Apr 2025 03:00:07 +0000 Manifest this update: Fri 04 Apr 2025 03:00:07 +0000 Manifest next update: Sun 06 Apr 2025 03:00:00 +0000 Files and hashes: 1: 627331bd-3468-4a2e-8d59-a1229df28b6e.crl (hash: flU8RdEnAVFohv5SWMxLJ2+DKCJRCRQcfo/kMHwvXCk=) 2: 9460c0e6-9922-3d3a-9318-25c5413d9115.roa (hash: yBS4Xr8j9iQBQg3nAVdzxiYLnoIcqv7ii4glDX8Ps2A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/627331bd-3468-4a2e-8d59-a1229df28b6e/627331bd-3468-4a2e-8d59-a1229df28b6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/627331bd-3468-4a2e-8d59-a1229df28b6e/627331bd-3468-4a2e-8d59-a1229df28b6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/627331bd-3468-4a2e-8d59-a1229df28b6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:68:ef:5b:91:99:e9:01:cd:ad:cb:b3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=627331bd-3468-4a2e-8d59-a1229df28b6e Validity Not Before: Apr 4 03:00:07 2025 GMT Not After : Apr 6 03:00:00 2025 GMT Subject: CN=4e3a1e48-fd79-4db9-a468-5183a21bac01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:56:3b:3f:f3:9d:77:3b:89:9d:06:b2:be:ef: 91:e9:31:99:39:74:ed:a1:ac:7f:78:ae:aa:91:3c: 82:8c:9c:9a:a1:a2:81:d7:84:b9:01:19:4c:6a:11: dc:18:87:af:93:66:88:2c:29:d3:d6:f0:20:4f:6a: 11:fc:fa:21:87:33:86:d7:98:d8:ec:99:0b:e2:e3: 7f:01:bb:6c:4f:8c:d3:d3:e0:70:1e:1c:26:b9:b9: 6b:d6:96:68:6f:04:81:54:36:41:6a:38:5e:3f:a8: 3c:31:3b:9f:db:8d:3c:d6:38:81:24:9f:d9:c6:68: 7a:10:0b:49:30:93:76:67:76:9f:13:fe:d2:42:e1: b7:59:e9:82:f9:57:3e:a0:37:50:1b:9c:6a:55:51: c1:29:bc:34:1d:e0:c8:b8:66:c8:b7:ee:cf:56:e9: 7c:a3:49:a7:a8:48:f4:2b:bd:7b:b2:a8:bc:98:8c: 88:f9:7d:6e:6c:8e:28:8f:6e:7d:c5:7c:82:91:02: 64:58:75:94:63:fc:89:9b:97:4f:29:70:09:3f:af: e5:0b:a3:61:79:46:72:69:39:60:fa:3b:01:d6:02: 5b:4f:96:2d:9e:43:75:67:71:0f:8d:f4:5d:f5:8a: cd:26:47:40:ba:72:41:62:5d:4c:fe:79:c7:f9:5e: 6e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C7:37:06:D8:FE:F3:5D:ED:CE:AB:97:09:10:70:D5:CD:19:CB:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/627331bd-3468-4a2e-8d59-a1229df28b6e/627331bd-3468-4a2e-8d59-a1229df28b6e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/627331bd-3468-4a2e-8d59-a1229df28b6e/627331bd-3468-4a2e-8d59-a1229df28b6e.crl X509v3 Authority Key Identifier: keyid:19:B0:31:21:1D:43:DD:BD:7D:84:CF:EE:B1:0E:B6:98:41:CB:15:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/627331bd-3468-4a2e-8d59-a1229df28b6e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:cd:2f:86:cf:55:dc:ba:58:51:5e:3d:b7:e6:27:7d:57:8a: de:be:fb:ab:7a:69:48:10:5b:fb:98:47:10:2e:9d:36:ec:f0: 55:5d:d3:fd:f3:00:2e:66:0b:7a:49:53:d6:55:ff:3c:a7:67: 91:3a:f3:f0:b4:4d:b1:f1:8f:a0:31:ef:48:d9:48:4e:c9:38: 65:f7:5b:79:b2:74:5d:cb:2a:fb:9c:f7:05:90:26:9f:b5:e2: 6e:e7:91:5b:05:61:71:c7:4f:b3:61:86:79:e5:b1:e5:2f:96: 0f:ea:74:e2:24:b9:5a:df:bf:02:48:f3:34:f1:f5:b5:eb:50: 25:38:c3:74:e0:70:d4:19:45:ac:d1:9b:b5:c7:ba:05:ac:97: e2:ff:6a:41:57:12:7d:4f:4c:b2:9e:b6:34:7c:ee:88:8b:2f: 7b:ea:81:9f:e3:25:a4:10:d8:30:1c:26:f2:8d:ef:c0:e7:f6: e2:57:31:e6:f4:80:04:90:59:bd:e8:30:76:b3:30:1d:31:65: 24:c6:6a:8d:17:49:30:80:fb:53:51:98:2c:f9:b6:9e:b7:15: f4:07:eb:12:4f:34:b8:54:c8:74:65:e2:ce:29:8c:5b:6b:22: 23:ba:d2:e6:f2:5b:73:b2:f2:09:b2:87:eb:be:20:37:05:11: a8:d8:53:f9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWElo71uRmekBza3Ls2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjI3MzMxYmQtMzQ2OC00YTJlLThkNTktYTEyMjlkZjI4 YjZlMB4XDTI1MDQwNDAzMDAwN1oXDTI1MDQwNjAzMDAwMFowLzEtMCsGA1UEAxMk NGUzYTFlNDgtZmQ3OS00ZGI5LWE0NjgtNTE4M2EyMWJhYzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVY7P/OddzuJnQayvu+R6TGZOXTtoax/eK6q kTyCjJyaoaKB14S5ARlMahHcGIevk2aILCnT1vAgT2oR/PohhzOG15jY7JkL4uN/ AbtsT4zT0+BwHhwmublr1pZobwSBVDZBajheP6g8MTuf24081jiBJJ/Zxmh6EAtJ MJN2Z3afE/7SQuG3WemC+Vc+oDdQG5xqVVHBKbw0HeDIuGbIt+7PVul8o0mnqEj0 K717sqi8mIyI+X1ubI4oj259xXyCkQJkWHWUY/yJm5dPKXAJP6/lC6NheUZyaTlg +jsB1gJbT5YtnkN1Z3EPjfRd9YrNJkdAunJBYl1M/nnH+V5uDQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMrHNwbY/vNd7c6rlwkQcNXNGcvRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Mjcz MzFiZC0zNDY4LTRhMmUtOGQ1OS1hMTIyOWRmMjhiNmUvNjI3MzMxYmQtMzQ2OC00 YTJlLThkNTktYTEyMjlkZjI4YjZlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjI3MzMxYmQtMzQ2OC00YTJlLThk NTktYTEyMjlkZjI4YjZlLzYyNzMzMWJkLTM0NjgtNGEyZS04ZDU5LWExMjI5ZGYy OGI2ZS5jcmwwHwYDVR0jBBgwFoAUGbAxIR1D3b19hM/usQ62mEHLFRQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82MjczMzFiZC0zNDY4LTRhMmUtOGQ1OS1hMTIy OWRmMjhiNmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBKzS+Gz1XculhRXj235id9 V4revvuremlIEFv7mEcQLp027PBVXdP98wAuZgt6SVPWVf88p2eROvPwtE2x8Y+g Me9I2UhOyThl91t5snRdyyr7nPcFkCafteJu55FbBWFxx0+zYYZ55bHlL5YP6nTi JLla378CSPM08fW161AlOMN04HDUGUWs0Zu1x7oFrJfi/2pBVxJ9T0yynrY0fO6I iy976oGf4yWkENgwHCbyje/A5/biVzHm9IAEkFm96DB2szAdMWUkxmqNF0kwgPtT UZgs+baetxX0B+sSTzS4VMh0ZeLOKYxbayIjutLm8ltzsvIJsofrviA3BRGo2FP5 -----END CERTIFICATE-----Generated at Fri Apr 4 19:59:47 2025 by rpki-client