$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c.mft File: 1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c.mft (raw, json) Hash identifier: q75aku8JzOIVvzgBjtjO0IAkKRtezWNRTs/lB90oKP8= Subject key identifier: 67:05:68:7D:3D:3A:6B:06:52:96:F9:75:35:E2:A8:EC:5D:C1:9F:07 Authority key identifier: FB:8B:B7:0D:9A:A3:B9:DD:E0:D5:E3:13:1E:E8:88:D7:0E:04:79:0D Certificate issuer: /CN=1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c Certificate serial: 010D0C9F432858497D4A8F0429726BE4FE9FFB40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c.mft Manifest number: 010D0C9F4328584073A84C73C1B6789E4E91D0D0 Signing time: Fri 11 Apr 2025 10:00:03 +0000 Manifest this update: Fri 11 Apr 2025 10:00:03 +0000 Manifest next update: Mon 14 Apr 2025 10:00:00 +0000 Files and hashes: 1: 0f8069e4-fcf4-3fed-8d08-706747fddde5.roa (hash: KoRWMyCF+fmiKODDC1lG44QWXq0q4S54IOGp2d5PTww=) 2: 1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c.crl (hash: 0m/P6z4Xn8p6uuZfYAlOwX5dVXqcfx3OZM4mwAHovXM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:4a:8f:04:29:72:6b:e4:fe:9f:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c Validity Not Before: Apr 11 10:00:03 2025 GMT Not After : Apr 14 10:00:00 2025 GMT Subject: CN=a97cbaa3-d617-46ae-b7ef-04b673489d7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e7:34:10:93:9a:14:bb:01:50:45:8e:ea:b6: 01:5d:c1:e5:3a:c7:9b:3c:99:f2:5c:b7:13:17:f0: 55:8c:73:fe:9a:38:01:8b:60:24:be:ad:a3:58:aa: db:25:29:33:2c:19:7d:6d:11:75:91:4e:35:44:2e: 2c:c0:ea:2d:c9:79:5e:48:89:79:d4:40:39:21:7e: 5f:4f:fe:92:8c:31:2e:af:c4:1d:11:ca:b2:27:03: 10:63:38:00:38:04:7f:28:ab:93:0e:e1:24:6e:ec: 8e:4e:fd:71:49:5b:f9:aa:bb:3c:1f:d0:87:94:46: 77:52:20:7f:10:b5:d1:1a:49:5d:83:45:4b:47:0c: 77:77:f3:48:f4:30:4f:60:0b:28:e1:87:c5:34:27: 1b:eb:dd:ff:7d:08:d0:29:22:13:b9:a4:b0:93:ea: c8:39:c4:bb:a8:52:51:17:85:4c:92:96:3e:ff:7c: a3:6d:0b:a5:ee:bd:b5:0e:05:9d:51:aa:c3:ba:54: a7:ae:ce:25:bb:34:7e:8d:f0:8e:43:97:be:b9:d3: a1:b2:d9:34:af:be:cd:ee:60:0a:7e:41:79:b6:9c: 2a:49:0d:15:d1:f4:56:9a:18:46:0e:7b:b4:57:ab: 56:46:b5:fb:2b:dd:54:17:df:a4:8b:97:d3:34:74: 5b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:05:68:7D:3D:3A:6B:06:52:96:F9:75:35:E2:A8:EC:5D:C1:9F:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c.crl X509v3 Authority Key Identifier: keyid:FB:8B:B7:0D:9A:A3:B9:DD:E0:D5:E3:13:1E:E8:88:D7:0E:04:79:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:11:59:a1:90:b4:56:d5:99:fb:5f:31:a1:73:1a:e7:65:86: d6:fd:b9:cd:43:94:8d:21:86:50:cd:2b:cd:75:75:45:d2:e8: 4b:ae:20:42:56:74:ea:a3:d9:b2:19:84:fc:ed:b5:ae:86:83: 63:4c:1f:e0:79:c6:4f:15:dd:6a:8d:fb:49:fe:24:e4:5d:b7: 02:e0:f6:e8:86:d9:fe:01:36:23:41:d3:57:e1:a7:b0:1e:b5: ee:2d:b2:41:1a:22:81:1d:77:74:83:63:e1:2c:26:37:b2:2c: ba:a5:f5:c3:ba:7f:52:4c:1b:68:a7:2f:f4:9e:40:51:df:55: 0f:02:07:b6:b4:0d:9d:6a:2f:fb:da:ca:6e:f3:db:53:1a:3e: fe:a2:3d:9b:99:50:1f:ee:a0:7f:87:08:10:a7:9a:ab:e9:47: 8e:51:54:cf:cd:3e:66:d7:fa:1b:7f:ff:28:5b:26:b7:07:d4: 20:67:a9:9d:31:fa:25:a1:05:46:9c:eb:49:c1:82:3a:9c:40: cd:c6:94:f7:32:90:07:4a:6d:3c:c6:44:73:8f:be:7e:2c:b7: 2f:fc:29:5d:35:9a:25:b2:03:30:10:b9:89:3b:db:ee:67:72: 47:1b:ae:88:da:ac:43:94:46:ef:dc:37:5e:16:50:2f:f2:79: bf:17:b0:97 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl9So8EKXJr5P6f+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ4YzZhMjYtZTNjZi00Y2E1LWJmMmUtZTU3MjU3NWE4 ZDdjMB4XDTI1MDQxMTEwMDAwM1oXDTI1MDQxNDEwMDAwMFowLzEtMCsGA1UEAxMk YTk3Y2JhYTMtZDYxNy00NmFlLWI3ZWYtMDRiNjczNDg5ZDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoec0EJOaFLsBUEWO6rYBXcHlOsebPJnyXLcT F/BVjHP+mjgBi2Akvq2jWKrbJSkzLBl9bRF1kU41RC4swOotyXleSIl51EA5IX5f T/6SjDEur8QdEcqyJwMQYzgAOAR/KKuTDuEkbuyOTv1xSVv5qrs8H9CHlEZ3UiB/ ELXRGkldg0VLRwx3d/NI9DBPYAso4YfFNCcb693/fQjQKSITuaSwk+rIOcS7qFJR F4VMkpY+/3yjbQul7r21DgWdUarDulSnrs4luzR+jfCOQ5e+udOhstk0r77N7mAK fkF5tpwqSQ0V0fRWmhhGDnu0V6tWRrX7K91UF9+ki5fTNHRbSwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGcFaH09OmsGUpb5dTXiqOxdwZ8HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZDhj NmEyNi1lM2NmLTRjYTUtYmYyZS1lNTcyNTc1YThkN2MvMWQ4YzZhMjYtZTNjZi00 Y2E1LWJmMmUtZTU3MjU3NWE4ZDdjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWQ4YzZhMjYtZTNjZi00Y2E1LWJm MmUtZTU3MjU3NWE4ZDdjLzFkOGM2YTI2LWUzY2YtNGNhNS1iZjJlLWU1NzI1NzVh OGQ3Yy5jcmwwHwYDVR0jBBgwFoAU+4u3DZqjud3g1eMTHuiI1w4EeQ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZDhjNmEyNi1lM2NmLTRjYTUtYmYyZS1lNTcy NTc1YThkN2MuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQATEVmhkLRW1Zn7XzGhcxrn ZYbW/bnNQ5SNIYZQzSvNdXVF0uhLriBCVnTqo9myGYT87bWuhoNjTB/gecZPFd1q jftJ/iTkXbcC4Pbohtn+ATYjQdNX4aewHrXuLbJBGiKBHXd0g2PhLCY3siy6pfXD un9STBtopy/0nkBR31UPAge2tA2dai/72spu89tTGj7+oj2bmVAf7qB/hwgQp5qr 6UeOUVTPzT5m1/obf/8oWya3B9QgZ6mdMfoloQVGnOtJwYI6nEDNxpT3MpAHSm08 xkRzj75+LLcv/CldNZolsgMwELmJO9vuZ3JHG66I2qxDlEbv3DdeFlAv8nm/F7CX -----END CERTIFICATE-----Generated at Sat Apr 12 01:36:35 2025 by rpki-client