$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc/4b2ad884-5960-46cd-bf60-910c222c8cfc.mft File: 4b2ad884-5960-46cd-bf60-910c222c8cfc.mft (raw, json) Hash identifier: FapRkNg08VTWLdCQ3SN/ZSPJrAvd+RzhE9LB0uLmwPc= Subject key identifier: 2D:07:2D:F5:F3:D0:D6:D5:A5:32:6D:0F:82:5B:F3:F8:F8:2C:D9:89 Authority key identifier: 39:6E:8F:38:F6:0D:E5:AE:A9:FC:82:8E:9F:82:C6:52:BF:D9:F1:82 Certificate issuer: /CN=4b2ad884-5960-46cd-bf60-910c222c8cfc Certificate serial: 010D0C9F4328584970436117850219DDA7DCA940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc/4b2ad884-5960-46cd-bf60-910c222c8cfc.mft Manifest number: 010D0C9F43285843229417832873A3606DB2BE31 Signing time: Sun 06 Apr 2025 18:00:03 +0000 Manifest this update: Sun 06 Apr 2025 18:00:03 +0000 Manifest next update: Wed 09 Apr 2025 18:00:00 +0000 Files and hashes: 1: 4b2ad884-5960-46cd-bf60-910c222c8cfc.crl (hash: AHzsVmIo886bExbxGRQgWpv6tL0A3/vqqBZVoNKcHEA=) 2: ce4d1c8d-ee6d-3784-9fc8-ae9d4c245bd8.roa (hash: 4cxW94+6Cg7APiM+WMrAkLK+dVSDVkviL/vkUkW7a7Y=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc/4b2ad884-5960-46cd-bf60-910c222c8cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc/4b2ad884-5960-46cd-bf60-910c222c8cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:70:43:61:17:85:02:19:dd:a7:dc:a9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b2ad884-5960-46cd-bf60-910c222c8cfc Validity Not Before: Apr 6 18:00:03 2025 GMT Not After : Apr 9 18:00:00 2025 GMT Subject: CN=0079a1df-14dc-4e2a-84bd-b354b2ade5e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1c:52:bb:ba:7b:80:ea:5c:f4:66:74:9c:25: e8:dc:be:15:33:31:02:0f:5d:88:f7:8a:29:1c:02: 90:61:cc:24:b9:de:a4:c9:27:4e:f5:ba:ce:61:78: 48:c8:01:fc:3d:1d:2c:35:41:c3:2f:e0:e4:e5:00: 9c:48:71:e9:01:a4:3f:ba:ea:f3:bc:91:e7:9e:ff: 19:c3:47:0b:5a:04:f2:a0:6a:a7:f9:11:05:da:fe: ba:10:a9:60:5c:d2:8e:e8:89:c6:20:de:3c:ae:30: 13:b0:93:1d:38:cf:f0:fb:4c:78:7f:75:e0:6f:a4: 67:fe:93:95:c0:89:db:30:8f:8d:fd:d7:88:10:1f: 60:20:61:51:48:d4:96:0c:76:c8:c6:3d:bb:24:c4: 28:a2:c8:ee:4f:c1:e4:63:7d:b4:86:01:ab:7c:d2: 6e:2b:18:c8:7e:39:44:68:09:3e:40:2e:13:53:c0: 08:f0:be:73:f9:03:e4:f1:b9:2e:cb:e7:90:71:55: c9:06:af:d3:8a:54:9e:12:74:a2:ea:88:fe:ef:83: 92:cf:71:a6:57:a1:77:20:32:79:e5:5e:ce:8f:de: 79:6a:ee:a4:bc:3b:92:f5:25:c7:e0:93:2b:ec:55: d6:d3:e0:02:0b:c3:52:ba:7c:9d:6c:86:95:f6:dd: 6a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:07:2D:F5:F3:D0:D6:D5:A5:32:6D:0F:82:5B:F3:F8:F8:2C:D9:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc/4b2ad884-5960-46cd-bf60-910c222c8cfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc/4b2ad884-5960-46cd-bf60-910c222c8cfc.crl X509v3 Authority Key Identifier: keyid:39:6E:8F:38:F6:0D:E5:AE:A9:FC:82:8E:9F:82:C6:52:BF:D9:F1:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:1e:f0:8e:83:0f:81:d2:f6:a8:31:aa:c2:65:6d:4b:a3:80: 3c:83:fb:cc:fe:0c:59:ea:52:56:30:25:48:e0:30:4c:0f:f4: eb:cb:fd:8a:85:91:d8:f4:bb:54:fa:77:23:3a:99:24:bf:49: da:cf:42:f3:c0:46:9a:9e:ee:52:76:e9:dc:b2:4b:6a:cd:dc: d0:72:8b:f2:95:35:c4:84:17:5b:12:f5:f8:a8:d3:1e:e6:78: 73:48:9b:45:41:24:d9:12:80:e9:28:92:9d:66:95:91:44:38: 24:a9:b3:7e:af:e6:50:ad:55:36:c4:79:3c:69:f7:5e:5a:f0: 81:69:0e:62:84:02:0f:9b:3d:a6:7c:09:9b:99:f1:ae:5a:82: 70:dc:43:60:ea:f9:29:73:f5:75:bb:74:24:73:63:e2:8c:83: 25:65:7f:31:ad:7e:63:23:35:ca:b5:3b:b9:ab:40:fa:d6:51: f1:fd:f2:f2:8f:0b:a2:02:c4:34:c2:db:f3:8f:75:82:57:57: f0:24:0f:c0:c8:a5:88:f2:93:cd:01:38:20:91:57:8b:7d:f3: bb:a0:07:7d:2a:f3:37:63:4a:85:64:04:f3:27:a2:64:89:e8: 08:85:a8:a9:dd:7d:da:12:c2:41:ba:ea:22:ef:ba:8b:f4:cc: 10:e5:df:4c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWElwQ2EXhQIZ3afcqUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGIyYWQ4ODQtNTk2MC00NmNkLWJmNjAtOTEwYzIyMmM4 Y2ZjMB4XDTI1MDQwNjE4MDAwM1oXDTI1MDQwOTE4MDAwMFowLzEtMCsGA1UEAxMk MDA3OWExZGYtMTRkYy00ZTJhLTg0YmQtYjM1NGIyYWRlNWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxxSu7p7gOpc9GZ0nCXo3L4VMzECD12I94op HAKQYcwkud6kySdO9brOYXhIyAH8PR0sNUHDL+Dk5QCcSHHpAaQ/uurzvJHnnv8Z w0cLWgTyoGqn+REF2v66EKlgXNKO6InGIN48rjATsJMdOM/w+0x4f3Xgb6Rn/pOV wInbMI+N/deIEB9gIGFRSNSWDHbIxj27JMQoosjuT8HkY320hgGrfNJuKxjIfjlE aAk+QC4TU8AI8L5z+QPk8bkuy+eQcVXJBq/TilSeEnSi6oj+74OSz3GmV6F3IDJ5 5V7Oj955au6kvDuS9SXH4JMr7FXW0+ACC8NSunydbIaV9t1qswIDAQABo4IDbjCC A2owHQYDVR0OBBYEFC0HLfXz0NbVpTJtD4Jb8/j4LNmJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YjJh ZDg4NC01OTYwLTQ2Y2QtYmY2MC05MTBjMjIyYzhjZmMvNGIyYWQ4ODQtNTk2MC00 NmNkLWJmNjAtOTEwYzIyMmM4Y2ZjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGIyYWQ4ODQtNTk2MC00NmNkLWJm NjAtOTEwYzIyMmM4Y2ZjLzRiMmFkODg0LTU5NjAtNDZjZC1iZjYwLTkxMGMyMjJj OGNmYy5jcmwwHwYDVR0jBBgwFoAUOW6POPYN5a6p/IKOn4LGUr/Z8YIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjJhZDg4NC01OTYwLTQ2Y2QtYmY2MC05MTBj MjIyYzhjZmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAKHvCOgw+B0vaoMarCZW1L o4A8g/vM/gxZ6lJWMCVI4DBMD/Try/2KhZHY9LtU+ncjOpkkv0naz0LzwEaanu5S duncsktqzdzQcovylTXEhBdbEvX4qNMe5nhzSJtFQSTZEoDpKJKdZpWRRDgkqbN+ r+ZQrVU2xHk8afdeWvCBaQ5ihAIPmz2mfAmbmfGuWoJw3ENg6vkpc/V1u3Qkc2Pi jIMlZX8xrX5jIzXKtTu5q0D61lHx/fLyjwuiAsQ0wtvzj3WCV1fwJA/AyKWI8pPN ATggkVeLffO7oAd9KvM3Y0qFZATzJ6JkiegIhaip3X3aEsJBuuoi77qL9MwQ5d9M -----END CERTIFICATE-----Generated at Mon Apr 7 12:37:06 2025 by rpki-client