$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.mft File: d20c4c38-abc3-4fac-8a76-61a9560a23a3.mft (raw, json) Hash identifier: 8AqsyMamyLxsOkojIS7Laa4Pblu+xi9Pv6CFnw5qp6k= Subject key identifier: 92:1E:DB:28:AF:BB:8C:A0:7B:5B:99:03:B3:68:AF:81:76:BA:F7:74 Authority key identifier: 28:09:40:63:2A:32:38:2E:BD:8C:66:D5:1A:D4:0C:5E:BE:71:14:69 Certificate issuer: /CN=d20c4c38-abc3-4fac-8a76-61a9560a23a3 Certificate serial: 010D0C9F4328584967E3590FC01AA208BFFC2580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.mft Manifest number: 010D0C9F43285845245DC2C2FF212572DC4AD850 Signing time: Thu 03 Apr 2025 18:00:07 +0000 Manifest this update: Thu 03 Apr 2025 18:00:07 +0000 Manifest next update: Sat 05 Apr 2025 18:00:00 +0000 Files and hashes: 1: 87d71f1f-6031-3c07-a5be-87011997fac7.roa (hash: 6+AsH96OShejCCoEzVvGRwti5+mTLJnM1zIrdJLQwgA=) 2: d20c4c38-abc3-4fac-8a76-61a9560a23a3.crl (hash: /fcIFAj4zsDzcTy8kjvZHrbu2roPVHLFxLBckoDudyU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:e3:59:0f:c0:1a:a2:08:bf:fc:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d20c4c38-abc3-4fac-8a76-61a9560a23a3 Validity Not Before: Apr 3 18:00:07 2025 GMT Not After : Apr 5 18:00:00 2025 GMT Subject: CN=b8b4e981-001d-48df-b4e1-6d394f18cd4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:21:bb:3d:6a:df:a7:9f:13:15:55:7a:04:9b: 7d:7a:ea:ce:6d:e8:f2:81:7c:a7:35:13:b3:8c:a5: 7c:cb:a8:01:b2:fb:d5:38:0a:df:2f:5d:0d:76:62: 60:d5:36:42:32:73:be:90:1a:f1:4f:64:b1:dc:83: 27:0c:4d:5a:dd:5e:25:7a:b2:d8:4f:f6:86:a4:1a: 5a:6d:59:c3:8f:ff:71:4c:dc:f0:54:4f:20:81:96: fa:bb:45:4f:46:66:90:1a:65:e1:32:13:07:c1:1f: 0b:84:8f:53:97:f3:f3:9a:99:88:8c:e9:1d:2a:46: 82:6c:f2:bc:5c:c6:9e:ed:90:8a:51:6e:c4:f4:9c: 7d:ee:49:02:82:6e:33:55:90:6e:d6:b6:eb:fb:80: 5d:3d:15:7f:a4:01:08:98:36:f1:b0:43:9e:ed:cf: 40:09:56:55:75:a3:eb:c1:c1:b1:3d:c6:6c:53:0a: 2e:25:50:2e:99:49:79:59:1e:ed:bd:de:d1:74:ce: 27:2b:15:2b:d1:7b:3a:b9:eb:f2:c2:15:e1:af:8f: 19:ee:d3:2c:13:f1:24:5c:04:84:76:93:40:4d:7f: 26:ae:b5:92:a0:52:c5:15:e3:77:a8:e1:7c:d1:a3: b4:57:95:e2:82:c3:11:52:b3:2c:ba:49:63:21:42: 32:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:1E:DB:28:AF:BB:8C:A0:7B:5B:99:03:B3:68:AF:81:76:BA:F7:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.crl X509v3 Authority Key Identifier: keyid:28:09:40:63:2A:32:38:2E:BD:8C:66:D5:1A:D4:0C:5E:BE:71:14:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:e3:8a:c9:8d:55:88:bf:55:2b:9d:05:59:5d:ec:c5:de:f8: 4f:27:f1:6c:73:90:d6:a3:dc:cf:34:17:6a:91:fb:54:a9:de: 66:f4:58:3a:55:e0:3b:67:8a:1c:f5:a2:0f:20:0d:2e:c1:46: 8a:c3:8d:4b:13:f7:1e:35:a5:b5:38:f5:1a:b2:0c:23:38:de: 01:d4:5e:ea:1b:5c:f1:10:be:cc:5c:3a:52:ed:08:80:b3:9c: 2b:da:b1:56:18:94:0b:fb:82:5a:80:dd:f4:0f:d0:c4:21:a8: 87:64:87:99:3a:09:26:6c:3b:99:fe:23:9e:33:96:8c:94:90: 63:1a:1a:e6:86:75:0f:bf:ec:b0:33:a6:30:50:a0:60:db:d3: 05:09:fd:0b:e5:8f:da:15:a2:a1:a4:5e:e7:43:21:de:21:4b: 10:df:72:8b:35:e2:7d:14:64:fd:e3:3f:55:fa:8a:2e:01:57: 4f:b8:1d:66:19:62:f7:77:49:ac:ce:3f:67:81:a7:b9:ae:5c: 8d:79:c4:52:8d:0c:c2:ce:7e:86:5e:04:81:70:1a:4a:35:f5: 46:2e:44:f5:ba:6b:e1:51:cf:ef:28:8b:d0:e4:f6:e7:83:52: c5:c5:e9:70:0a:43:8e:89:60:52:43:a0:96:37:03:10:b7:3f: cd:f4:41:4e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEln41kPwBqiCL/8JYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIwYzRjMzgtYWJjMy00ZmFjLThhNzYtNjFhOTU2MGEy M2EzMB4XDTI1MDQwMzE4MDAwN1oXDTI1MDQwNTE4MDAwMFowLzEtMCsGA1UEAxMk YjhiNGU5ODEtMDAxZC00OGRmLWI0ZTEtNmQzOTRmMThjZDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCG7PWrfp58TFVV6BJt9eurObejygXynNROz jKV8y6gBsvvVOArfL10NdmJg1TZCMnO+kBrxT2Sx3IMnDE1a3V4lerLYT/aGpBpa bVnDj/9xTNzwVE8ggZb6u0VPRmaQGmXhMhMHwR8LhI9Tl/PzmpmIjOkdKkaCbPK8 XMae7ZCKUW7E9Jx97kkCgm4zVZBu1rbr+4BdPRV/pAEImDbxsEOe7c9ACVZVdaPr wcGxPcZsUwouJVAumUl5WR7tvd7RdM4nKxUr0Xs6uevywhXhr48Z7tMsE/EkXASE dpNATX8mrrWSoFLFFeN3qOF80aO0V5XigsMRUrMsukljIUIynwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJIe2yivu4yge1uZA7Nor4F2uvd0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kMjBj NGMzOC1hYmMzLTRmYWMtOGE3Ni02MWE5NTYwYTIzYTMvZDIwYzRjMzgtYWJjMy00 ZmFjLThhNzYtNjFhOTU2MGEyM2EzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDIwYzRjMzgtYWJjMy00ZmFjLThh NzYtNjFhOTU2MGEyM2EzL2QyMGM0YzM4LWFiYzMtNGZhYy04YTc2LTYxYTk1NjBh MjNhMy5jcmwwHwYDVR0jBBgwFoAUKAlAYyoyOC69jGbVGtQMXr5xFGkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kMjBjNGMzOC1hYmMzLTRmYWMtOGE3Ni02MWE5 NTYwYTIzYTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCg44rJjVWIv1UrnQVZXezF 3vhPJ/Fsc5DWo9zPNBdqkftUqd5m9Fg6VeA7Z4oc9aIPIA0uwUaKw41LE/ceNaW1 OPUasgwjON4B1F7qG1zxEL7MXDpS7QiAs5wr2rFWGJQL+4JagN30D9DEIaiHZIeZ OgkmbDuZ/iOeM5aMlJBjGhrmhnUPv+ywM6YwUKBg29MFCf0L5Y/aFaKhpF7nQyHe IUsQ33KLNeJ9FGT94z9V+oouAVdPuB1mGWL3d0mszj9ngae5rlyNecRSjQzCzn6G XgSBcBpKNfVGLkT1umvhUc/vKIvQ5Pbng1LFxelwCkOOiWBSQ6CWNwMQtz/N9EFO -----END CERTIFICATE-----Generated at Fri Apr 4 18:53:45 2025 by rpki-client