$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft File: 38a96a9a-6257-4a63-a149-21f6ad67ae15.mft (raw, json) Hash identifier: Y4lxW/Xf7Q1inELeai/w1kU/dXedgqi/3lNGuiN5Xeo= Subject key identifier: 1F:66:01:E9:33:CC:61:86:34:3E:CB:B3:B0:C1:A4:35:D6:F1:6F:B3 Authority key identifier: 16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C Certificate issuer: /CN=38a96a9a-6257-4a63-a149-21f6ad67ae15 Certificate serial: 010D0C9F432858497C0309F1A0FCBD9E28E46640 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft Manifest number: 010D0C9F4328584073A82F4C20B1986E476CBA4F Signing time: Thu 10 Apr 2025 23:00:07 +0000 Manifest this update: Thu 10 Apr 2025 23:00:07 +0000 Manifest next update: Sun 13 Apr 2025 23:00:00 +0000 Files and hashes: 1: 2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa (hash: F5g1J8XDc1/3uoeyDNhfCIbCDrTzuKcwWlMCDHzjPAY=) 2: 38a96a9a-6257-4a63-a149-21f6ad67ae15.crl (hash: f8lHp6DqyXtee6t5aJLPsrgc3bRXeK+LTBM2TZnjuec=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7c:03:09:f1:a0:fc:bd:9e:28:e4:66:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a96a9a-6257-4a63-a149-21f6ad67ae15 Validity Not Before: Apr 10 23:00:07 2025 GMT Not After : Apr 13 23:00:00 2025 GMT Subject: CN=4a4ed869-709e-4349-9172-b8805c535a0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:9d:d1:61:63:21:46:b6:b0:e2:7b:3d:d3:e9: ce:96:77:88:0c:66:83:b3:b2:fb:aa:c8:79:e0:2e: f1:30:2e:40:4e:65:dc:7e:19:77:91:60:9a:93:51: d3:6c:2c:fe:ec:a0:5f:60:1e:05:75:74:0a:30:08: 40:d9:45:e0:50:a4:03:cc:c6:4a:7d:38:c3:40:cc: 69:a2:80:b3:43:9c:5e:c8:71:c0:38:06:34:23:6f: 98:cc:56:70:2f:6f:c4:da:7a:34:c9:11:17:50:df: 23:ad:3e:b0:5f:bb:3e:ab:9e:9a:ed:67:c2:c9:bc: 20:92:44:c4:91:a6:ae:d6:0e:1d:43:31:57:72:91: a6:2d:c8:ad:b2:4d:74:6a:71:15:98:8b:33:aa:7d: a5:55:e1:80:a0:dd:3d:b1:2f:44:04:34:6a:1d:f0: 5b:bb:9e:4c:a9:28:fd:28:96:2e:77:7f:3e:75:b7: 2f:a3:7e:0a:2d:3d:b7:85:c4:d6:99:68:09:88:d6: b9:fd:9f:bd:f4:e0:a6:3b:0b:d9:dc:65:67:0d:41: 3f:e9:02:07:e0:be:5d:33:03:04:cd:ed:1a:39:95: f7:d0:aa:8d:99:c1:af:79:6f:12:61:71:a2:11:e9: e2:c3:26:47:5e:af:f0:68:87:e3:d1:b9:a2:97:4d: f2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:66:01:E9:33:CC:61:86:34:3E:CB:B3:B0:C1:A4:35:D6:F1:6F:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl X509v3 Authority Key Identifier: keyid:16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:82:48:e9:cf:d8:e3:be:36:cd:64:17:ab:88:dd:67:30:cf: 50:8a:df:6a:ba:ae:5d:04:a0:24:4b:de:71:39:a2:52:7c:bf: 13:41:d9:78:05:c1:26:cd:37:00:63:b8:3e:cc:af:78:f9:e8: f6:9b:0d:0c:c3:72:e3:62:7b:8e:4f:ee:c7:2e:24:49:fb:4a: 85:ec:d7:a7:ed:70:43:c3:c3:0e:82:25:3c:d6:22:cc:50:84: 63:6f:5e:ea:68:8e:d2:92:a3:82:bd:3d:88:86:ec:3e:8f:db: ff:cf:4f:37:c8:0c:11:fd:b7:47:4f:69:2e:e6:17:37:45:14: ba:fc:38:a1:5b:6e:d6:5d:af:c4:67:02:05:5d:d7:16:97:4e: 6e:81:48:3b:4c:06:5a:cc:ea:b2:65:9d:f3:14:f8:c6:0e:77: e1:e1:91:17:74:4e:97:d2:8d:ef:59:e1:ae:61:92:8b:1b:01: c9:b8:54:d2:85:4d:7a:69:b0:8f:17:e5:47:ea:af:4f:88:c7: 91:57:f3:00:b2:34:45:61:55:31:2c:40:1f:9b:79:fa:23:a2: 0d:d1:a9:a8:6a:29:de:89:7d:5b:c6:c2:50:ab:80:bd:1a:75: 53:2e:88:58:1b:c0:2e:cd:65:df:05:6b:a0:ff:c7:15:d2:98: 18:a6:6b:03 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl8AwnxoPy9nijkZkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhhOTZhOWEtNjI1Ny00YTYzLWExNDktMjFmNmFkNjdh ZTE1MB4XDTI1MDQxMDIzMDAwN1oXDTI1MDQxMzIzMDAwMFowLzEtMCsGA1UEAxMk NGE0ZWQ4NjktNzA5ZS00MzQ5LTkxNzItYjg4MDVjNTM1YTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZ3RYWMhRraw4ns90+nOlneIDGaDs7L7qsh5 4C7xMC5ATmXcfhl3kWCak1HTbCz+7KBfYB4FdXQKMAhA2UXgUKQDzMZKfTjDQMxp ooCzQ5xeyHHAOAY0I2+YzFZwL2/E2no0yREXUN8jrT6wX7s+q56a7WfCybwgkkTE kaau1g4dQzFXcpGmLcitsk10anEVmIszqn2lVeGAoN09sS9EBDRqHfBbu55MqSj9 KJYud38+dbcvo34KLT23hcTWmWgJiNa5/Z+99OCmOwvZ3GVnDUE/6QIH4L5dMwME ze0aOZX30KqNmcGveW8SYXGiEeniwyZHXq/waIfj0bmil03yvQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFB9mAekzzGGGND7Ls7DBpDXW8W+zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOGE5 NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2YWQ2N2FlMTUvMzhhOTZhOWEtNjI1Ny00 YTYzLWExNDktMjFmNmFkNjdhZTE1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzhhOTZhOWEtNjI1Ny00YTYzLWEx NDktMjFmNmFkNjdhZTE1LzM4YTk2YTlhLTYyNTctNGE2My1hMTQ5LTIxZjZhZDY3 YWUxNS5jcmwwHwYDVR0jBBgwFoAUFi4QRHzVqs+6NigDq0Tj6g6tSVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zOGE5NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2 YWQ2N2FlMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQArgkjpz9jjvjbNZBeriN1n MM9Qit9quq5dBKAkS95xOaJSfL8TQdl4BcEmzTcAY7g+zK94+ej2mw0Mw3LjYnuO T+7HLiRJ+0qF7Nen7XBDw8MOgiU81iLMUIRjb17qaI7SkqOCvT2Ihuw+j9v/z083 yAwR/bdHT2ku5hc3RRS6/DihW27WXa/EZwIFXdcWl05ugUg7TAZazOqyZZ3zFPjG Dnfh4ZEXdE6X0o3vWeGuYZKLGwHJuFTShU16abCPF+VH6q9PiMeRV/MAsjRFYVUx LEAfm3n6I6IN0amoaineiX1bxsJQq4C9GnVTLohYG8AuzWXfBWug/8cV0pgYpmsD -----END CERTIFICATE-----Generated at Fri Apr 11 22:47:45 2025 by rpki-client