$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.mft File: 3ccb9ed0-7870-4a4a-bf28-cb86bca49137.mft (raw, json) Hash identifier: YJSCm+l7hwbwy2mWHwQzq+vXHyuP0Wg+nzp8UYyrdT4= Subject key identifier: E1:FF:22:65:0F:45:46:20:24:22:7A:07:F1:83:76:D0:DB:EA:B9:9D Authority key identifier: 92:A8:7E:36:E1:2A:E3:B9:02:AD:CD:7B:CD:EA:42:EF:B1:8D:20:22 Certificate issuer: /CN=3ccb9ed0-7870-4a4a-bf28-cb86bca49137 Certificate serial: 010D0C9F43285849803303E119EF040FD6D10040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.mft Manifest number: 010D0C9F4328584073A85062F6BEE4FE45767650 Signing time: Sat 12 Apr 2025 11:00:03 +0000 Manifest this update: Sat 12 Apr 2025 11:00:03 +0000 Manifest next update: Mon 14 Apr 2025 11:00:00 +0000 Files and hashes: 1: 3ccb9ed0-7870-4a4a-bf28-cb86bca49137.crl (hash: RI7zysbk8Xz+bijHe3uk1wpcGq0LBTUnethe6rLRTFM=) 2: f5ad0dde-a733-3deb-81db-42293449a543.roa (hash: 0G1if/JcmlV5qa07cFlFNsNKw7fvoQ+JogBEnpCVZ7U=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:33:03:e1:19:ef:04:0f:d6:d1:00:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ccb9ed0-7870-4a4a-bf28-cb86bca49137 Validity Not Before: Apr 12 11:00:03 2025 GMT Not After : Apr 14 11:00:00 2025 GMT Subject: CN=87f166ef-4746-46ae-ad4e-478a3c12b483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b7:9b:37:d3:1d:58:9d:8f:f8:23:d3:df:29: 20:ea:65:95:76:36:70:d2:2c:5b:20:6a:66:5c:75: 7c:c9:18:5b:3d:fa:ca:19:b4:f0:36:77:29:19:93: a2:f9:cb:4c:c7:04:9b:50:f8:cf:38:41:8c:71:05: 92:5d:57:6a:a6:97:ad:c4:12:6d:85:5e:ed:0a:7c: 2d:9f:34:59:69:d3:71:94:36:92:61:b9:64:a5:01: e4:88:ba:ac:6d:82:76:8c:d7:f0:09:ed:6a:19:3a: ec:19:94:03:ca:ea:4d:78:9c:ce:57:99:85:66:0a: e4:a0:c9:8c:1d:1c:b9:48:5d:c8:2b:ea:be:1d:21: 62:12:35:67:44:ae:f6:be:b7:15:9b:e3:d8:76:18: 5d:eb:42:84:33:2d:e8:5b:06:be:58:a6:a1:5c:5f: 29:9c:7f:8f:22:8c:2f:45:ba:07:2b:de:ce:5c:ac: 7b:33:c0:a2:fe:18:f8:6e:62:bf:3d:5b:c3:1b:6f: d8:a4:db:d4:26:b8:a3:eb:7c:92:2c:66:2f:62:79: 3c:01:99:c6:a4:2c:56:f5:8d:a5:3a:d0:37:0e:c7: d9:8c:67:dd:fb:43:d8:41:20:db:9c:e3:51:29:ce: 18:45:9f:37:ea:4a:c0:b3:90:96:8c:bd:55:6c:ed: 61:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:FF:22:65:0F:45:46:20:24:22:7A:07:F1:83:76:D0:DB:EA:B9:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.crl X509v3 Authority Key Identifier: keyid:92:A8:7E:36:E1:2A:E3:B9:02:AD:CD:7B:CD:EA:42:EF:B1:8D:20:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:47:ba:88:de:bb:21:0f:2f:8e:0d:6d:58:b2:a6:b6:b5:b6: 0a:d1:10:97:4f:16:4e:6e:90:39:1a:d0:6a:5d:58:34:08:d4: 96:9e:ba:f7:fb:ab:35:02:c9:4a:4d:b9:db:fd:d9:cb:52:60: 28:10:32:4e:c9:e2:1a:93:bb:e9:e0:f8:fd:bc:a9:9d:08:01: bd:07:cb:b7:b1:79:cd:7e:3b:4a:6e:58:2c:cd:a9:31:bf:b3: db:4e:7f:78:2f:44:98:11:84:a3:80:3c:36:d1:bd:76:37:fb: 59:e6:bb:4a:a4:72:3b:27:18:e7:e9:f2:a7:ee:58:86:e3:aa: 3c:36:91:36:fb:b9:c1:03:fe:96:98:9e:39:1e:e3:90:26:67: e4:6d:ac:ba:cd:a1:55:2e:6c:58:28:f6:ce:90:57:c4:c5:f4: c6:9e:82:a5:c6:1d:12:6c:d0:5b:91:5a:4b:c7:f8:9c:60:71: 2d:9e:61:ea:b6:d0:e8:17:91:11:5a:7d:87:52:14:8a:cd:7f: 5b:45:fb:79:ae:bb:8a:30:b7:de:5c:2b:fa:91:df:36:50:64: d3:f6:5e:b5:9e:c0:72:3a:a3:3c:39:9c:d8:2d:6b:21:bf:6b: 35:2b:2f:62:26:4b:8b:5a:5b:a5:99:8c:b1:a5:f7:d1:63:6e: 30:96:3f:28 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmAMwPhGe8ED9bRAEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2NjYjllZDAtNzg3MC00YTRhLWJmMjgtY2I4NmJjYTQ5 MTM3MB4XDTI1MDQxMjExMDAwM1oXDTI1MDQxNDExMDAwMFowLzEtMCsGA1UEAxMk ODdmMTY2ZWYtNDc0Ni00NmFlLWFkNGUtNDc4YTNjMTJiNDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrebN9MdWJ2P+CPT3ykg6mWVdjZw0ixbIGpm XHV8yRhbPfrKGbTwNncpGZOi+ctMxwSbUPjPOEGMcQWSXVdqppetxBJthV7tCnwt nzRZadNxlDaSYblkpQHkiLqsbYJ2jNfwCe1qGTrsGZQDyupNeJzOV5mFZgrkoMmM HRy5SF3IK+q+HSFiEjVnRK72vrcVm+PYdhhd60KEMy3oWwa+WKahXF8pnH+PIowv RboHK97OXKx7M8Ci/hj4bmK/PVvDG2/YpNvUJrij63ySLGYvYnk8AZnGpCxW9Y2l OtA3DsfZjGfd+0PYQSDbnONRKc4YRZ836krAs5CWjL1VbO1h6QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOH/ImUPRUYgJCJ6B/GDdtDb6rmdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zY2Ni OWVkMC03ODcwLTRhNGEtYmYyOC1jYjg2YmNhNDkxMzcvM2NjYjllZDAtNzg3MC00 YTRhLWJmMjgtY2I4NmJjYTQ5MTM3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2NjYjllZDAtNzg3MC00YTRhLWJm MjgtY2I4NmJjYTQ5MTM3LzNjY2I5ZWQwLTc4NzAtNGE0YS1iZjI4LWNiODZiY2E0 OTEzNy5jcmwwHwYDVR0jBBgwFoAUkqh+NuEq47kCrc17zepC77GNICIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zY2NiOWVkMC03ODcwLTRhNGEtYmYyOC1jYjg2 YmNhNDkxMzcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAjR7qI3rshDy+ODW1Ysqa2 tbYK0RCXTxZObpA5GtBqXVg0CNSWnrr3+6s1AslKTbnb/dnLUmAoEDJOyeIak7vp 4Pj9vKmdCAG9B8u3sXnNfjtKblgszakxv7PbTn94L0SYEYSjgDw20b12N/tZ5rtK pHI7Jxjn6fKn7liG46o8NpE2+7nBA/6WmJ45HuOQJmfkbay6zaFVLmxYKPbOkFfE xfTGnoKlxh0SbNBbkVpLx/icYHEtnmHqttDoF5ERWn2HUhSKzX9bRft5rruKMLfe XCv6kd82UGTT9l61nsByOqM8OZzYLWshv2s1Ky9iJkuLWlulmYyxpffRY24wlj8o -----END CERTIFICATE-----Generated at Sat Apr 12 17:16:10 2025 by rpki-client