$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/576c64a5-3cd2-44d5-80c3-626ccc84e087.mft File: 576c64a5-3cd2-44d5-80c3-626ccc84e087.mft (raw, json) Hash identifier: l3P+sqRV7eZ/3LlOoWcDrl0ZQA1Atu/L+h07Z6HT/gM= Subject key identifier: 94:38:7E:0A:6E:D8:93:CD:93:60:48:41:3D:51:0E:1C:F4:68:CB:F9 Authority key identifier: 93:40:CE:B6:71:96:DA:3E:FD:16:0C:87:23:2E:E0:A8:3B:C7:1C:89 Certificate issuer: /CN=576c64a5-3cd2-44d5-80c3-626ccc84e087 Certificate serial: 010D0C9F43285849803305FE224D2ABD3FE29E40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/576c64a5-3cd2-44d5-80c3-626ccc84e087.mft Manifest number: 010D0C9F4328584073A85142D98E51DBFB16A3C1 Signing time: Sat 12 Apr 2025 11:00:03 +0000 Manifest this update: Sat 12 Apr 2025 11:00:03 +0000 Manifest next update: Mon 14 Apr 2025 11:00:00 +0000 Files and hashes: 1: 576c64a5-3cd2-44d5-80c3-626ccc84e087.crl (hash: qbQ86pv6o8klFB5I8JtjSi9zNAv3yyaIHlxaS42gAsA=) 2: 9fd81086-d2ab-3b69-873f-c043d5f1123e.roa (hash: Znm4DmcLDjUvbS8q2vpQ0t9GI7WS9LbEDqlf3w+6ZUc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/576c64a5-3cd2-44d5-80c3-626ccc84e087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/576c64a5-3cd2-44d5-80c3-626ccc84e087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:33:05:fe:22:4d:2a:bd:3f:e2:9e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=576c64a5-3cd2-44d5-80c3-626ccc84e087 Validity Not Before: Apr 12 11:00:03 2025 GMT Not After : Apr 14 11:00:00 2025 GMT Subject: CN=2b135902-405d-4dd8-bc9f-6f51eeb81981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9b:16:5a:5f:34:e3:1b:2a:b2:49:9f:80:09: cb:d7:c0:14:10:e4:f6:36:1b:f3:70:19:6d:de:32: 01:11:b9:6c:47:eb:2d:b2:a8:ee:da:c8:7c:19:b2: 65:88:a5:46:77:5e:de:b1:59:de:9d:82:63:4d:f3: fc:c5:8e:02:8f:9b:99:27:fd:8a:99:1e:4f:90:1e: 0c:a1:6e:52:0b:5c:72:3a:d3:5d:84:87:69:19:a5: d0:a4:12:bb:e3:72:57:73:0d:5c:75:16:2b:5c:c5: af:3c:2a:58:6a:df:1f:9f:71:25:d1:b8:28:79:58: 2b:d6:c8:35:e7:53:a3:c4:47:66:b5:67:73:04:eb: 08:30:4c:75:42:d9:dd:c8:4f:28:01:4b:e0:f7:11: f4:10:d2:00:0c:04:c3:7d:24:ea:ea:da:90:4c:6d: f4:2f:b8:89:97:4c:a6:c4:d0:44:81:5f:6a:53:7a: 29:1c:f5:ae:a4:6f:60:8a:37:45:a5:61:76:cc:44: fa:4f:4d:97:06:13:b6:64:2f:61:0c:aa:6f:22:cd: 4f:9b:1b:4d:cc:88:49:5a:72:1e:8d:92:61:fc:ae: a0:9d:45:a0:4d:df:af:09:a6:d8:22:7b:16:da:47: 4a:6e:1d:d2:86:77:fc:95:39:e7:5c:e4:ae:9d:d7: aa:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:38:7E:0A:6E:D8:93:CD:93:60:48:41:3D:51:0E:1C:F4:68:CB:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/576c64a5-3cd2-44d5-80c3-626ccc84e087.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/576c64a5-3cd2-44d5-80c3-626ccc84e087.crl X509v3 Authority Key Identifier: keyid:93:40:CE:B6:71:96:DA:3E:FD:16:0C:87:23:2E:E0:A8:3B:C7:1C:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:a2:e3:6a:83:29:ac:77:7e:5d:f0:b8:e3:0b:c1:10:b6:bc: 77:d0:0b:cf:43:ca:c8:5b:59:2f:44:7a:de:a9:4e:2b:28:a3: 48:5d:b3:c8:31:20:15:98:f4:a6:60:be:58:c0:cd:c1:4e:0b: 7a:bd:28:fa:ed:a4:34:8e:69:da:cf:47:6c:fe:6d:45:4a:19: fe:12:9f:2f:18:5d:ab:28:54:90:65:b5:46:2e:70:b7:c9:55: be:0f:fa:66:57:b7:db:56:cb:b9:3c:39:94:b3:d5:c4:d4:be: cf:7c:4e:b8:97:8f:4b:70:79:00:df:96:16:7c:11:8b:76:b1: 50:0c:45:04:db:82:83:54:7e:d2:8b:5d:aa:eb:86:ed:1a:c9: a7:43:3b:fd:8b:10:da:67:10:59:e5:d7:8b:9e:ae:36:f5:d8: d7:de:b7:b0:b7:44:dc:d9:f2:ba:2c:d4:f2:55:21:2d:2a:24: d0:26:52:65:af:07:3a:a8:90:27:7e:1f:27:3b:24:df:c1:93: 7e:e9:61:4d:78:ec:33:f6:36:c1:66:e8:34:34:41:ce:f0:fa: fe:db:15:be:4a:41:bf:08:d0:cc:bf:2d:3a:9e:22:16:60:53: 49:58:a4:83:65:7f:1d:4e:67:7a:4d:8a:d3:3d:a2:aa:05:96: 86:19:d2:f6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmAMwX+Ik0qvT/inkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTc2YzY0YTUtM2NkMi00NGQ1LTgwYzMtNjI2Y2NjODRl MDg3MB4XDTI1MDQxMjExMDAwM1oXDTI1MDQxNDExMDAwMFowLzEtMCsGA1UEAxMk MmIxMzU5MDItNDA1ZC00ZGQ4LWJjOWYtNmY1MWVlYjgxOTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5sWWl804xsqskmfgAnL18AUEOT2NhvzcBlt 3jIBEblsR+stsqju2sh8GbJliKVGd17esVnenYJjTfP8xY4Cj5uZJ/2KmR5PkB4M oW5SC1xyOtNdhIdpGaXQpBK743JXcw1cdRYrXMWvPCpYat8fn3El0bgoeVgr1sg1 51OjxEdmtWdzBOsIMEx1QtndyE8oAUvg9xH0ENIADATDfSTq6tqQTG30L7iJl0ym xNBEgV9qU3opHPWupG9gijdFpWF2zET6T02XBhO2ZC9hDKpvIs1PmxtNzIhJWnIe jZJh/K6gnUWgTd+vCabYInsW2kdKbh3Shnf8lTnnXOSundeqNQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJQ4fgpu2JPNk2BIQT1RDhz0aMv5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81NzZj NjRhNS0zY2QyLTQ0ZDUtODBjMy02MjZjY2M4NGUwODcvNTc2YzY0YTUtM2NkMi00 NGQ1LTgwYzMtNjI2Y2NjODRlMDg3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTc2YzY0YTUtM2NkMi00NGQ1LTgw YzMtNjI2Y2NjODRlMDg3LzU3NmM2NGE1LTNjZDItNDRkNS04MGMzLTYyNmNjYzg0 ZTA4Ny5jcmwwHwYDVR0jBBgwFoAUk0DOtnGW2j79FgyHIy7gqDvHHIkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81NzZjNjRhNS0zY2QyLTQ0ZDUtODBjMy02MjZj Y2M4NGUwODcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBaouNqgymsd35d8LjjC8EQ trx30AvPQ8rIW1kvRHreqU4rKKNIXbPIMSAVmPSmYL5YwM3BTgt6vSj67aQ0jmna z0ds/m1FShn+Ep8vGF2rKFSQZbVGLnC3yVW+D/pmV7fbVsu5PDmUs9XE1L7PfE64 l49LcHkA35YWfBGLdrFQDEUE24KDVH7Si12q64btGsmnQzv9ixDaZxBZ5deLnq42 9djX3rewt0Tc2fK6LNTyVSEtKiTQJlJlrwc6qJAnfh8nOyTfwZN+6WFNeOwz9jbB Zug0NEHO8Pr+2xW+SkG/CNDMvy06niIWYFNJWKSDZX8dTmd6TYrTPaKqBZaGGdL2 -----END CERTIFICATE-----Generated at Sun Apr 13 00:41:16 2025 by rpki-client