$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.mft File: 40a485a4-e936-4174-8999-571e03203823.mft (raw, json) Hash identifier: jBBl+2gc0EDMxmnwtGXQk+gH49ut8T7bYitZcWzhRwI= Subject key identifier: C3:9E:B8:F5:08:ED:AE:0F:5B:06:7B:A1:EA:C9:FF:D4:FA:49:8E:D3 Authority key identifier: 8E:DB:72:14:EC:37:6A:68:7B:79:16:21:24:27:B4:B0:40:42:49:01 Certificate issuer: /CN=40a485a4-e936-4174-8999-571e03203823 Certificate serial: 010D0C9F432858497E7465BD4EA0859A4E1185C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.mft Manifest number: 010D0C9F4328584073A825D34C38BD0BF05689D1 Signing time: Fri 11 Apr 2025 20:00:07 +0000 Manifest this update: Fri 11 Apr 2025 20:00:07 +0000 Manifest next update: Sun 13 Apr 2025 20:00:00 +0000 Files and hashes: 1: 3296796c-a812-3fd9-8b79-c617f853bf28.roa (hash: wFQpabxSlzipCp7/qETD7I2A0TPXkBN3zdpzTeohceM=) 2: 40a485a4-e936-4174-8999-571e03203823.crl (hash: 3R9Mx9qgDNqW57kPRjVLy4D8KGHri/d1ChXI4S1Q+hI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7e:74:65:bd:4e:a0:85:9a:4e:11:85:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40a485a4-e936-4174-8999-571e03203823 Validity Not Before: Apr 11 20:00:07 2025 GMT Not After : Apr 13 20:00:00 2025 GMT Subject: CN=cd7f90cc-97df-4822-9e1d-d46146dd1265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:93:91:4e:53:56:32:69:4d:27:11:97:57:ee: aa:6f:4a:e1:2d:05:09:59:96:d6:9d:9e:aa:3f:ea: 6b:2d:af:f4:6e:3c:c2:59:08:99:dc:46:48:77:09: 54:70:bf:e6:70:3b:d7:ec:b7:d5:0e:bc:4f:a6:67: 11:c5:fd:0e:48:d9:07:29:cd:c8:bc:5f:44:18:81: 3d:ee:a2:25:e6:97:dc:d4:4c:4a:60:29:0a:60:8d: 74:9d:00:b2:29:49:f4:16:6f:57:52:e1:e5:50:de: 3d:e5:33:e1:e1:49:82:9a:12:e4:99:e2:f1:61:7e: 07:99:4b:57:17:98:01:2a:42:3d:98:61:cf:72:ce: 99:9d:03:b3:1b:ca:fa:4b:2b:db:44:84:95:a0:dc: 35:93:10:f8:0b:d4:69:40:dd:2f:b0:23:45:61:76: 17:27:fe:35:aa:0c:52:3b:45:99:4a:91:48:cd:39: 5d:3e:43:ad:73:05:c6:43:71:a1:d1:20:2a:b1:c4: 3c:4e:a0:57:6e:fb:c4:ad:08:ab:e0:2e:04:a8:13: a9:9c:01:2d:f7:04:56:33:43:e6:a1:a2:02:05:49: dd:74:d3:b1:4f:32:c1:32:1e:63:94:cf:e6:8d:15: 0f:d8:b8:ac:e5:f9:02:a2:8a:2d:09:27:03:0d:6f: 27:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:9E:B8:F5:08:ED:AE:0F:5B:06:7B:A1:EA:C9:FF:D4:FA:49:8E:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.crl X509v3 Authority Key Identifier: keyid:8E:DB:72:14:EC:37:6A:68:7B:79:16:21:24:27:B4:B0:40:42:49:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:68:27:ec:38:0c:1f:e3:9d:0d:d5:48:52:64:d4:20:4e:b9: 4c:8d:1e:e8:4b:34:84:a2:53:b4:da:19:38:aa:fb:7f:5f:1a: 3c:e9:85:06:f9:47:df:e7:45:7c:59:2d:bb:83:8a:a7:c5:0a: 3b:ec:ac:b3:a8:d9:c5:6e:92:3b:3d:82:41:ac:21:28:d8:5b: bf:65:27:66:57:4c:53:93:ef:94:26:b0:8c:ba:72:c3:e4:2b: cd:cc:f8:1b:a1:d3:d7:cd:65:80:ac:47:4c:05:c4:34:d4:e3: 7b:20:a1:93:a8:3e:ad:4e:cd:bb:0a:d9:da:fb:3f:00:39:ea: ee:d9:d8:5f:da:1f:b7:fd:12:95:c6:68:90:ce:25:b6:e2:b3: b8:f2:e3:c0:e8:a8:73:4c:45:51:fe:c0:ea:34:da:a2:d7:87: b3:cc:90:01:f1:17:e6:45:74:dc:23:84:d4:1b:87:ff:91:d7: 0a:ce:97:a1:9a:81:8c:89:8f:49:fc:49:a3:f4:68:03:00:a1: 6e:ee:74:fb:eb:51:38:2a:11:f6:81:80:1d:90:df:ad:89:2b: 04:7c:ba:60:56:c9:57:29:08:06:3a:4d:52:aa:5c:05:51:b4: d9:a2:bc:33:1b:71:a5:b4:5f:cb:c8:15:7a:12:6b:c4:a5:2f: ce:59:ac:98 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl+dGW9TqCFmk4RhcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBhNDg1YTQtZTkzNi00MTc0LTg5OTktNTcxZTAzMjAz ODIzMB4XDTI1MDQxMTIwMDAwN1oXDTI1MDQxMzIwMDAwMFowLzEtMCsGA1UEAxMk Y2Q3ZjkwY2MtOTdkZi00ODIyLTllMWQtZDQ2MTQ2ZGQxMjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35ORTlNWMmlNJxGXV+6qb0rhLQUJWZbWnZ6q P+prLa/0bjzCWQiZ3EZIdwlUcL/mcDvX7LfVDrxPpmcRxf0OSNkHKc3IvF9EGIE9 7qIl5pfc1ExKYCkKYI10nQCyKUn0Fm9XUuHlUN495TPh4UmCmhLkmeLxYX4HmUtX F5gBKkI9mGHPcs6ZnQOzG8r6SyvbRISVoNw1kxD4C9RpQN0vsCNFYXYXJ/41qgxS O0WZSpFIzTldPkOtcwXGQ3Gh0SAqscQ8TqBXbvvErQir4C4EqBOpnAEt9wRWM0Pm oaICBUnddNOxTzLBMh5jlM/mjRUP2Lis5fkCoootCScDDW8nVwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMOeuPUI7a4PWwZ7oerJ/9T6SY7TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MGE0 ODVhNC1lOTM2LTQxNzQtODk5OS01NzFlMDMyMDM4MjMvNDBhNDg1YTQtZTkzNi00 MTc0LTg5OTktNTcxZTAzMjAzODIzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDBhNDg1YTQtZTkzNi00MTc0LTg5 OTktNTcxZTAzMjAzODIzLzQwYTQ4NWE0LWU5MzYtNDE3NC04OTk5LTU3MWUwMzIw MzgyMy5jcmwwHwYDVR0jBBgwFoAUjttyFOw3amh7eRYhJCe0sEBCSQEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MGE0ODVhNC1lOTM2LTQxNzQtODk5OS01NzFl MDMyMDM4MjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA3aCfsOAwf450N1UhSZNQg TrlMjR7oSzSEolO02hk4qvt/Xxo86YUG+Uff50V8WS27g4qnxQo77KyzqNnFbpI7 PYJBrCEo2Fu/ZSdmV0xTk++UJrCMunLD5CvNzPgbodPXzWWArEdMBcQ01ON7IKGT qD6tTs27Ctna+z8AOeru2dhf2h+3/RKVxmiQziW24rO48uPA6KhzTEVR/sDqNNqi 14ezzJAB8RfmRXTcI4TUG4f/kdcKzpehmoGMiY9J/Emj9GgDAKFu7nT761E4KhH2 gYAdkN+tiSsEfLpgVslXKQgGOk1SqlwFUbTZorwzG3GltF/LyBV6EmvEpS/OWayY -----END CERTIFICATE-----Generated at Fri Apr 11 23:35:41 2025 by rpki-client