$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.mft File: 3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.mft (raw, json) Hash identifier: JWSstr9G75TVJBk35q8eZb3luQhqd4oRGf2jwkpDRVI= Subject key identifier: 6F:D0:7D:9A:A0:DB:DE:2D:A5:77:3D:9B:B2:7B:24:F5:FC:94:FD:ED Authority key identifier: 0F:17:1D:BE:80:A6:E2:81:10:8B:B7:67:F1:60:C9:37:79:07:C0:B8 Certificate issuer: /CN=3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c Certificate serial: 010D0C9F432858497C7A1B9A9A83D868E1AD0A40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.mft Manifest number: 010D0C9F4328584073A8393752AC1CE1AEC89551 Signing time: Fri 11 Apr 2025 03:00:03 +0000 Manifest this update: Fri 11 Apr 2025 03:00:03 +0000 Manifest next update: Mon 14 Apr 2025 03:00:00 +0000 Files and hashes: 1: 3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.crl (hash: 3phXNln52J5OwtUHVS2LZtR91gqDRuHmGxWYe+OX1vA=) 2: 6758e236-250b-3365-a146-9e1a9f1e2a79.roa (hash: d8O3nnfst6LggPzE7ZHanrFUFiPDx5wkprAbRuFuu8E=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7c:7a:1b:9a:9a:83:d8:68:e1:ad:0a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c Validity Not Before: Apr 11 03:00:03 2025 GMT Not After : Apr 14 03:00:00 2025 GMT Subject: CN=40c1dfc8-1dec-4404-a51d-22e40a2e7a28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:29:12:34:b3:87:df:64:b2:5c:e3:ff:72:e8: a7:1c:26:85:4c:e0:dd:de:24:94:ea:5a:6e:3f:2e: 3d:6a:ec:a4:5b:d0:5f:ae:bc:9f:ad:9b:75:cf:53: 96:e6:7e:ec:62:a7:52:2a:34:ae:dc:8f:79:d6:2f: b9:c7:78:03:c4:ef:c6:67:7c:3b:29:a1:c4:55:80: 64:cc:b2:b6:1c:23:69:9e:96:66:24:fa:60:c6:77: b0:44:e3:dc:7a:ea:e1:d3:b5:76:91:08:3c:f4:af: c2:4f:7f:55:eb:c6:eb:db:a0:ab:09:75:93:a9:ff: 68:ce:2f:3d:57:07:fc:5b:6c:fc:6f:d7:a0:e3:ef: 4e:62:d4:33:eb:d2:3b:f5:00:7e:23:21:b4:eb:c3: 91:71:8a:b4:cd:e8:2d:3b:1c:34:09:c1:1a:77:e5: 51:30:03:4b:64:ab:53:a9:0c:55:bc:d4:92:fb:8a: 26:dd:a6:64:4c:1f:5c:a3:06:d5:4d:fd:99:6e:c2: 79:41:6d:2d:6a:e5:3b:ca:23:5d:00:76:99:64:3d: 13:da:ee:a1:80:40:e8:18:a7:0b:4b:d8:1a:8e:c0: 04:d7:41:92:3a:54:c3:7c:a2:cb:68:ec:5c:e5:eb: 70:20:dd:5e:04:b0:16:d8:5e:bd:df:53:68:05:a8: 2b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D0:7D:9A:A0:DB:DE:2D:A5:77:3D:9B:B2:7B:24:F5:FC:94:FD:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.crl X509v3 Authority Key Identifier: keyid:0F:17:1D:BE:80:A6:E2:81:10:8B:B7:67:F1:60:C9:37:79:07:C0:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:1b:94:dd:b3:ff:46:f8:9f:59:3f:e0:a5:7b:6f:8e:13:de: 46:ba:62:48:0a:99:7c:49:4d:bb:10:ea:52:5a:5b:c4:b7:20: 35:58:5e:1c:30:3b:a9:8f:f8:80:b7:95:7e:6d:c8:c9:7d:15: 93:e0:21:9a:ff:f2:91:a1:bc:1f:d1:81:6e:9c:a0:6d:41:26: 4c:49:b1:40:82:1f:81:9a:5b:cf:cc:d2:53:4a:bd:38:bb:54: e6:31:5f:35:36:0d:c6:cf:a2:b3:d9:e5:f0:d2:71:2a:bd:e6: f3:96:73:1e:15:d1:10:ce:65:4f:12:ae:b9:0c:d1:cd:e5:1d: d6:f6:a7:f2:3a:4d:a9:ed:90:48:04:b2:68:90:34:d7:0e:17: 78:0b:75:7a:fd:e6:e2:66:d8:62:bd:6f:a5:71:83:d0:9e:04: 1b:cb:3d:6d:0d:a5:48:43:68:bb:c3:8a:7e:b3:52:77:f2:89: 7a:15:f0:6e:e0:08:f6:24:7f:2f:2f:ad:16:7d:1d:58:a3:85: 73:89:4c:fc:c2:64:dc:77:bf:6a:a7:76:30:d3:04:82:3e:13: cc:2f:70:26:28:39:cd:86:63:8a:33:8d:e1:23:78:ea:c2:d2: d9:3b:e3:37:e0:a5:09:d6:57:16:a0:a4:19:11:fa:59:5c:d4: d4:fa:e1:f8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl8ehuamoPYaOGtCkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M5ZjYwZDQtY2ZiZC00ZjZkLTk3YmYtZTUxYmEwMjlk NDRjMB4XDTI1MDQxMTAzMDAwM1oXDTI1MDQxNDAzMDAwMFowLzEtMCsGA1UEAxMk NDBjMWRmYzgtMWRlYy00NDA0LWE1MWQtMjJlNDBhMmU3YTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqykSNLOH32SyXOP/cuinHCaFTODd3iSU6lpu Py49auykW9BfrryfrZt1z1OW5n7sYqdSKjSu3I951i+5x3gDxO/GZ3w7KaHEVYBk zLK2HCNpnpZmJPpgxnewROPceurh07V2kQg89K/CT39V68br26CrCXWTqf9ozi89 Vwf8W2z8b9eg4+9OYtQz69I79QB+IyG068ORcYq0zegtOxw0CcEad+VRMANLZKtT qQxVvNSS+4om3aZkTB9cowbVTf2ZbsJ5QW0tauU7yiNdAHaZZD0T2u6hgEDoGKcL S9gajsAE10GSOlTDfKLLaOxc5etwIN1eBLAW2F6931NoBagreQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFG/QfZqg294tpXc9m7J7JPX8lP3tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYzlm NjBkNC1jZmJkLTRmNmQtOTdiZi1lNTFiYTAyOWQ0NGMvM2M5ZjYwZDQtY2ZiZC00 ZjZkLTk3YmYtZTUxYmEwMjlkNDRjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2M5ZjYwZDQtY2ZiZC00ZjZkLTk3 YmYtZTUxYmEwMjlkNDRjLzNjOWY2MGQ0LWNmYmQtNGY2ZC05N2JmLWU1MWJhMDI5 ZDQ0Yy5jcmwwHwYDVR0jBBgwFoAUDxcdvoCm4oEQi7dn8WDJN3kHwLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYzlmNjBkNC1jZmJkLTRmNmQtOTdiZi1lNTFi YTAyOWQ0NGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCIG5Tds/9G+J9ZP+Cle2+O E95GumJICpl8SU27EOpSWlvEtyA1WF4cMDupj/iAt5V+bcjJfRWT4CGa//KRobwf 0YFunKBtQSZMSbFAgh+BmlvPzNJTSr04u1TmMV81Ng3Gz6Kz2eXw0nEqvebzlnMe FdEQzmVPEq65DNHN5R3W9qfyOk2p7ZBIBLJokDTXDhd4C3V6/ebiZthivW+lcYPQ ngQbyz1tDaVIQ2i7w4p+s1J38ol6FfBu4Aj2JH8vL60WfR1Yo4VziUz8wmTcd79q p3Yw0wSCPhPML3AmKDnNhmOKM43hI3jqwtLZO+M34KUJ1lcWoKQZEfpZXNTU+uH4 -----END CERTIFICATE-----Generated at Fri Apr 11 21:38:17 2025 by rpki-client