$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca.mft File: 6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca.mft (raw, json) Hash identifier: DwZCJ4lWp2cx/qc28UisCx1JG24u5C9HFI7xEvnQgRM= Subject key identifier: 88:1C:F5:FA:16:1B:57:60:B2:6C:48:44:CA:41:4C:09:28:71:F9:FE Authority key identifier: B9:1F:DC:17:A2:A1:17:56:56:E7:50:27:96:16:9F:3F:BA:DA:1B:28 Certificate issuer: /CN=6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca Certificate serial: 010D0C9F4328584969A2072257FA7BE6A0B99580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca.mft Manifest number: 010D0C9F43285844A2E84682076D3353D626A141 Signing time: Fri 04 Apr 2025 09:00:07 +0000 Manifest this update: Fri 04 Apr 2025 09:00:07 +0000 Manifest next update: Mon 07 Apr 2025 09:00:00 +0000 Files and hashes: 1: 6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca.crl (hash: MhkDi/zxny9fW6r8nYYVPhjOASNCmSNLholjm6KfjDQ=) 2: d506be50-110d-3c8e-831e-c6184dd7b850.roa (hash: VZgBQcDww7sUS6yKwptJDbXMLE22HuuTsVsHuOOApco=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:69:a2:07:22:57:fa:7b:e6:a0:b9:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca Validity Not Before: Apr 4 09:00:07 2025 GMT Not After : Apr 7 09:00:00 2025 GMT Subject: CN=5b18fe2d-813b-4c7a-84a6-2d9d10396cfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3b:b8:b4:4f:ac:72:a3:63:4f:15:07:35:44: 94:d4:6a:fe:57:46:56:0e:a3:71:d8:a3:7c:e0:f4: b0:ee:81:c5:69:be:8f:96:d3:4a:17:cb:d7:57:f5: e4:11:a3:14:2e:11:55:4c:41:06:ca:e9:86:05:32: 37:dc:ea:1b:73:9e:47:0b:0b:9e:a2:19:80:c8:00: 4b:66:ae:34:a2:1b:94:8c:72:00:f9:08:7d:b4:d3: 07:36:c4:a6:14:c5:68:b1:17:98:8a:d6:03:30:b2: 49:45:48:6b:97:52:a0:a0:5f:78:f4:5b:f0:8b:90: 72:43:97:44:4e:8b:5e:28:dd:ad:2b:78:34:d2:b5: f7:35:f9:76:84:77:c4:e5:65:c2:bd:7e:26:71:29: 0c:89:36:52:8d:8c:e9:89:d6:15:4f:e3:74:a2:60: 19:41:20:49:b7:ae:d9:83:a5:40:51:c1:50:9f:85: 06:9b:b1:97:20:ec:16:84:ed:70:56:25:94:13:eb: 4f:d7:c3:dd:a5:88:8a:5d:9b:4d:95:85:19:2f:bb: c3:87:5d:9c:7c:59:c2:02:be:e2:21:28:80:65:a9: 42:4f:ce:08:57:03:a4:6b:bb:2f:35:16:40:61:4e: 6f:2c:e9:17:02:33:c2:0b:c2:d4:6a:fd:a1:3d:25: 3c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:1C:F5:FA:16:1B:57:60:B2:6C:48:44:CA:41:4C:09:28:71:F9:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca.crl X509v3 Authority Key Identifier: keyid:B9:1F:DC:17:A2:A1:17:56:56:E7:50:27:96:16:9F:3F:BA:DA:1B:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:f1:7b:15:ec:e9:6a:42:8b:44:82:55:6b:7d:b4:77:0b:ec: d5:25:88:9a:e5:c1:63:78:f3:bb:2e:bc:89:89:8d:27:a5:c3: 5b:e9:46:8f:ed:f7:d3:8b:13:16:09:48:70:e4:34:8f:be:fa: 92:b4:51:46:81:24:71:b6:67:6c:a0:df:0b:4d:ce:0f:7e:29: 1e:3b:6f:71:69:3a:a8:aa:99:ee:d2:76:62:fb:00:f5:f3:90: 6e:f8:e7:12:a0:cc:11:a6:2a:20:1f:e6:fd:5b:48:9f:8c:b2: 8e:a4:32:8e:1f:b1:51:3f:ef:d8:79:7c:d1:65:1c:07:04:5d: 66:c5:03:f7:86:25:54:4c:64:4e:93:9f:1f:7b:bf:48:4d:7d: 38:9a:ac:6d:d3:79:1b:2e:41:05:62:74:43:02:7d:da:18:8c: ca:37:04:f3:0b:ab:40:c5:cd:e8:aa:db:12:88:13:d8:34:ab: 95:42:44:50:4a:3e:0c:1c:87:79:56:24:a5:42:43:27:d9:74: 4f:97:3a:ff:7a:00:d7:f2:e3:c1:19:c1:f5:de:6b:3e:53:80: f6:55:ce:26:f3:fb:5f:d9:aa:c8:ca:9a:a3:ac:e5:9a:e5:27: d4:f9:fa:47:5f:fd:a6:ca:ab:3c:a1:6c:3d:fc:cf:a2:ec:a3: fb:c0:95:5c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWElpogciV/p75qC5lYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY0ZDhlNmItZTY2ZS00NmY5LThlZjItZjJkYTE5ODFj YmNhMB4XDTI1MDQwNDA5MDAwN1oXDTI1MDQwNzA5MDAwMFowLzEtMCsGA1UEAxMk NWIxOGZlMmQtODEzYi00YzdhLTg0YTYtMmQ5ZDEwMzk2Y2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTu4tE+scqNjTxUHNUSU1Gr+V0ZWDqNx2KN8 4PSw7oHFab6PltNKF8vXV/XkEaMULhFVTEEGyumGBTI33Oobc55HCwueohmAyABL Zq40ohuUjHIA+Qh9tNMHNsSmFMVosReYitYDMLJJRUhrl1KgoF949Fvwi5ByQ5dE ToteKN2tK3g00rX3Nfl2hHfE5WXCvX4mcSkMiTZSjYzpidYVT+N0omAZQSBJt67Z g6VAUcFQn4UGm7GXIOwWhO1wViWUE+tP18PdpYiKXZtNlYUZL7vDh12cfFnCAr7i ISiAZalCT84IVwOka7svNRZAYU5vLOkXAjPCC8LUav2hPSU8BwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIgc9foWG1dgsmxIRMpBTAkocfn+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82ZjRk OGU2Yi1lNjZlLTQ2ZjktOGVmMi1mMmRhMTk4MWNiY2EvNmY0ZDhlNmItZTY2ZS00 NmY5LThlZjItZjJkYTE5ODFjYmNhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY0ZDhlNmItZTY2ZS00NmY5LThl ZjItZjJkYTE5ODFjYmNhLzZmNGQ4ZTZiLWU2NmUtNDZmOS04ZWYyLWYyZGExOTgx Y2JjYS5jcmwwHwYDVR0jBBgwFoAUuR/cF6KhF1ZW51AnlhafP7raGygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82ZjRkOGU2Yi1lNjZlLTQ2ZjktOGVmMi1mMmRh MTk4MWNiY2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAO8XsV7OlqQotEglVrfbR3 C+zVJYia5cFjePO7LryJiY0npcNb6UaP7ffTixMWCUhw5DSPvvqStFFGgSRxtmds oN8LTc4PfikeO29xaTqoqpnu0nZi+wD185Bu+OcSoMwRpiogH+b9W0ifjLKOpDKO H7FRP+/YeXzRZRwHBF1mxQP3hiVUTGROk58fe79ITX04mqxt03kbLkEFYnRDAn3a GIzKNwTzC6tAxc3oqtsSiBPYNKuVQkRQSj4MHId5ViSlQkMn2XRPlzr/egDX8uPB GcH13ms+U4D2Vc4m8/tf2arIypqjrOWa5SfU+fpHX/2myqs8oWw9/M+i7KP7wJVc -----END CERTIFICATE-----Generated at Fri Apr 4 15:58:38 2025 by rpki-client