$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9649fa89-0c65-41f5-b212-91670d3c5fbe/9649fa89-0c65-41f5-b212-91670d3c5fbe.mft File: 9649fa89-0c65-41f5-b212-91670d3c5fbe.mft (raw, json) Hash identifier: VYqbEokiz47MoKA4OU9RVRjXhMonHyx8OL+MVbXxUCk= Subject key identifier: 43:62:65:AC:B6:D0:62:32:6B:22:3B:E9:AB:73:BC:5E:73:C2:A9:91 Authority key identifier: 7D:83:94:2F:63:B0:98:BC:ED:28:2D:EE:9B:76:7D:89:78:2E:D3:AB Certificate issuer: /CN=9649fa89-0c65-41f5-b212-91670d3c5fbe Certificate serial: 010D0C9F43285849683CA719EEDFF8E488E84800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9649fa89-0c65-41f5-b212-91670d3c5fbe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9649fa89-0c65-41f5-b212-91670d3c5fbe/9649fa89-0c65-41f5-b212-91670d3c5fbe.mft Manifest number: 010D0C9F43285844ACB2A0634024333F37B1CAF6 Signing time: Thu 03 Apr 2025 21:00:03 +0000 Manifest this update: Thu 03 Apr 2025 21:00:03 +0000 Manifest next update: Sun 06 Apr 2025 21:00:00 +0000 Files and hashes: 1: 9649fa89-0c65-41f5-b212-91670d3c5fbe.crl (hash: N0qi+sCH0qpFxgHNWICp4HvVazuJTrKC7YZs8WTzgng=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9649fa89-0c65-41f5-b212-91670d3c5fbe/9649fa89-0c65-41f5-b212-91670d3c5fbe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9649fa89-0c65-41f5-b212-91670d3c5fbe/9649fa89-0c65-41f5-b212-91670d3c5fbe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9649fa89-0c65-41f5-b212-91670d3c5fbe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:68:3c:a7:19:ee:df:f8:e4:88:e8:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9649fa89-0c65-41f5-b212-91670d3c5fbe Validity Not Before: Apr 3 21:00:03 2025 GMT Not After : Apr 6 21:00:00 2025 GMT Subject: CN=27f89b50-8a5e-4a6b-ad23-f1376132110c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3f:0f:0a:3a:85:3f:1a:ac:8f:64:a3:ba:9e: d8:ff:98:f5:76:d1:04:bf:4f:6d:bd:50:fa:40:cf: 8e:dd:f6:f8:3b:49:38:6f:20:21:b3:c1:ee:0c:86: 5d:47:21:ca:a7:9d:ed:7a:5d:84:2f:88:c7:19:a5: 45:3a:19:3a:02:de:c9:bb:13:26:19:81:4e:23:ab: ef:05:a5:c3:27:85:7c:ed:1a:2e:ee:11:57:1f:26: b2:11:6b:20:4a:52:54:36:ef:70:8f:ba:9f:fe:93: 01:59:d7:59:33:4b:06:48:d0:48:39:be:bb:6a:c4: b3:82:f8:ab:57:cf:60:ed:45:d8:62:35:2d:e3:b8: 28:2e:b1:a7:bf:4a:c4:2b:da:2d:98:6d:83:39:ba: f3:42:63:5c:85:c8:a0:62:07:4a:61:0f:de:6e:3b: eb:c7:11:b2:2d:db:0c:7c:ae:ad:98:49:6e:a9:bf: ab:24:d3:23:3e:d7:25:46:fd:73:41:c9:86:cc:b5: 9c:04:ae:1c:82:3a:c9:19:44:ae:36:4c:dc:95:7f: 95:56:e7:6b:8e:80:f6:13:42:98:03:5f:59:89:7b: e9:bd:1c:9f:e5:70:4f:ff:e1:41:1b:83:80:5a:b5: 53:67:0e:ff:aa:77:d7:71:76:cf:e1:28:97:94:a9: d7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:62:65:AC:B6:D0:62:32:6B:22:3B:E9:AB:73:BC:5E:73:C2:A9:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9649fa89-0c65-41f5-b212-91670d3c5fbe/9649fa89-0c65-41f5-b212-91670d3c5fbe.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9649fa89-0c65-41f5-b212-91670d3c5fbe/9649fa89-0c65-41f5-b212-91670d3c5fbe.crl X509v3 Authority Key Identifier: keyid:7D:83:94:2F:63:B0:98:BC:ED:28:2D:EE:9B:76:7D:89:78:2E:D3:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9649fa89-0c65-41f5-b212-91670d3c5fbe.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:cb:d9:31:f1:9c:44:b3:fa:21:bd:fe:99:80:af:d3:d1:af: 82:09:fa:45:30:90:75:50:32:29:c1:5d:95:a8:9b:ef:ca:70: ac:8e:b8:16:59:11:be:af:d9:e7:b0:57:3d:99:93:5b:cc:d0: a8:41:98:c1:ad:24:89:42:4b:30:41:fe:7f:85:90:e7:b0:e0: 6a:13:3b:d5:b6:64:3a:03:d9:18:54:af:ba:12:1f:44:44:b4: 6a:f3:df:4c:7f:af:7e:f7:ee:33:6b:4d:b0:d7:03:e0:93:88: d8:e8:44:ec:e4:47:23:60:c7:9e:5e:bc:d6:ed:b6:1f:ac:0f: 4e:8b:a2:2c:8f:8f:50:b9:d5:2f:da:f1:4c:04:73:55:a2:90: c3:28:10:12:fa:ab:26:d7:80:cc:08:70:c0:80:8c:bb:ba:0b: 1b:a6:04:14:d4:47:3c:76:5e:76:da:c5:55:32:14:5c:18:f6: 2a:14:a3:48:0c:8e:50:0f:25:24:a5:5a:b5:59:1f:ad:b3:e7: 3c:07:ed:bc:3e:88:e6:fc:e2:e6:ff:ec:6c:8c:49:92:cd:1e: 2b:af:22:74:fa:08:8a:fd:f8:e5:a8:12:02:9e:1a:a2:16:22: 6b:8b:5d:88:43:6f:72:93:b7:00:00:48:c0:80:b9:6c:a7:9a: 40:05:a5:72 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEloPKcZ7t/45IjoSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY0OWZhODktMGM2NS00MWY1LWIyMTItOTE2NzBkM2M1 ZmJlMB4XDTI1MDQwMzIxMDAwM1oXDTI1MDQwNjIxMDAwMFowLzEtMCsGA1UEAxMk MjdmODliNTAtOGE1ZS00YTZiLWFkMjMtZjEzNzYxMzIxMTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiz8PCjqFPxqsj2Sjup7Y/5j1dtEEv09tvVD6 QM+O3fb4O0k4byAhs8HuDIZdRyHKp53tel2EL4jHGaVFOhk6At7JuxMmGYFOI6vv BaXDJ4V87Rou7hFXHyayEWsgSlJUNu9wj7qf/pMBWddZM0sGSNBIOb67asSzgvir V89g7UXYYjUt47goLrGnv0rEK9otmG2DObrzQmNchcigYgdKYQ/ebjvrxxGyLdsM fK6tmEluqb+rJNMjPtclRv1zQcmGzLWcBK4cgjrJGUSuNkzclX+VVudrjoD2E0KY A19ZiXvpvRyf5XBP/+FBG4OAWrVTZw7/qnfXcXbP4SiXlKnX/QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFENiZay20GIyayI76atzvF5zwqmRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85NjQ5 ZmE4OS0wYzY1LTQxZjUtYjIxMi05MTY3MGQzYzVmYmUvOTY0OWZhODktMGM2NS00 MWY1LWIyMTItOTE2NzBkM2M1ZmJlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTY0OWZhODktMGM2NS00MWY1LWIy MTItOTE2NzBkM2M1ZmJlLzk2NDlmYTg5LTBjNjUtNDFmNS1iMjEyLTkxNjcwZDNj NWZiZS5jcmwwHwYDVR0jBBgwFoAUfYOUL2OwmLztKC3um3Z9iXgu06swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85NjQ5ZmE4OS0wYzY1LTQxZjUtYjIxMi05MTY3 MGQzYzVmYmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAhy9kx8ZxEs/ohvf6ZgK/T 0a+CCfpFMJB1UDIpwV2VqJvvynCsjrgWWRG+r9nnsFc9mZNbzNCoQZjBrSSJQksw Qf5/hZDnsOBqEzvVtmQ6A9kYVK+6Eh9ERLRq899Mf69+9+4za02w1wPgk4jY6ETs 5EcjYMeeXrzW7bYfrA9Oi6Isj49QudUv2vFMBHNVopDDKBAS+qsm14DMCHDAgIy7 ugsbpgQU1Ec8dl522sVVMhRcGPYqFKNIDI5QDyUkpVq1WR+ts+c8B+28Pojm/OLm /+xsjEmSzR4rryJ0+giK/fjlqBICnhqiFiJri12IQ29yk7cAAEjAgLlsp5pABaVy -----END CERTIFICATE-----Generated at Fri Apr 4 16:22:47 2025 by rpki-client