$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/604dd155-d846-413d-9d18-9c6d0f03ee8c.mft File: 604dd155-d846-413d-9d18-9c6d0f03ee8c.mft (raw, json) Hash identifier: bsTt7TzcIJ2Gh0XWsEGr2aoZMrMUx3DqwbplPFdJLBo= Subject key identifier: 23:5B:12:6D:32:97:1C:10:11:FF:25:15:39:7B:EE:3B:26:B9:AD:FD Authority key identifier: 00:51:50:EB:64:2D:CF:14:38:42:64:24:75:FB:18:0E:0E:43:B1:D7 Certificate issuer: /CN=604dd155-d846-413d-9d18-9c6d0f03ee8c Certificate serial: 010D0C9F4328584969843754443A0D1011377700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/604dd155-d846-413d-9d18-9c6d0f03ee8c.mft Manifest number: 010D0C9F4328584073A8468DFCDC747631CA8D49 Signing time: Fri 04 Apr 2025 08:00:03 +0000 Manifest this update: Fri 04 Apr 2025 08:00:03 +0000 Manifest next update: Sun 06 Apr 2025 08:00:00 +0000 Files and hashes: 1: 604dd155-d846-413d-9d18-9c6d0f03ee8c.crl (hash: +EiOI7n/iu5beyz7sx7ueZw98vqmt8GDJ6m2EHUUxxc=) 2: 7e4e5dd3-74fb-3038-a179-39719feb837d.roa (hash: hPuoEKeDZlSX5Lzd9Bk3QF1arMK8e8m6fm/NKy5UFTM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/604dd155-d846-413d-9d18-9c6d0f03ee8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/604dd155-d846-413d-9d18-9c6d0f03ee8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:69:84:37:54:44:3a:0d:10:11:37:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=604dd155-d846-413d-9d18-9c6d0f03ee8c Validity Not Before: Apr 4 08:00:03 2025 GMT Not After : Apr 6 08:00:00 2025 GMT Subject: CN=c9ec7924-b7ee-437b-97bb-ae7102e045a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:02:e6:61:3a:b7:04:38:6e:ca:1e:5a:99:ba: da:42:0a:7a:c8:2d:d9:e3:b1:48:e2:2b:b5:16:30: ea:ef:54:2a:8b:6e:0e:82:8e:8f:16:b3:42:0e:4b: 5c:a6:6c:da:cd:50:81:c4:d5:6c:c3:c1:70:fa:38: 3c:b8:2e:76:5b:89:f4:86:62:3a:c2:c9:f7:ab:d2: e8:04:2d:cb:65:a6:5d:c0:08:e7:91:be:51:9a:55: 0f:00:65:db:64:d8:0b:9e:d6:93:41:35:bc:73:cb: 11:c2:a8:ec:21:cc:5d:e3:d3:57:65:0b:a2:d2:22: 0f:79:95:07:d3:56:f9:08:22:d1:2a:dc:dc:05:b1: 5a:1c:e5:2f:73:dc:54:99:ec:c1:ee:e9:92:41:3a: 0e:56:2d:e4:43:a0:df:3c:e7:ec:a8:88:0b:c9:13: 86:8e:e4:e0:3f:cf:2f:90:ad:d3:1c:2c:1d:af:f2: 18:1a:ef:0f:5f:4e:ab:cf:aa:64:59:af:15:9d:cd: 65:7a:ab:ad:18:66:58:77:c1:c6:82:09:38:08:e4: 8c:92:29:46:47:7f:01:fd:13:5a:af:de:c4:de:07: 16:44:58:97:d6:5b:18:22:90:99:2e:f8:5e:75:4b: d3:24:b1:9a:00:e4:6b:9e:34:5d:09:b1:e2:bd:f9: 43:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:5B:12:6D:32:97:1C:10:11:FF:25:15:39:7B:EE:3B:26:B9:AD:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/604dd155-d846-413d-9d18-9c6d0f03ee8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/604dd155-d846-413d-9d18-9c6d0f03ee8c.crl X509v3 Authority Key Identifier: keyid:00:51:50:EB:64:2D:CF:14:38:42:64:24:75:FB:18:0E:0E:43:B1:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:a2:bb:a8:d7:56:b9:f6:2f:4b:8c:b1:2f:f2:a3:b9:46:66: b5:75:dc:bc:78:98:af:03:d9:4e:12:27:b8:d3:98:7f:2e:b2: b8:d1:90:1e:2d:4c:8b:9d:db:3d:f0:ce:3b:32:81:79:35:47: d2:14:9e:ef:34:7f:c2:33:86:a1:af:83:e1:38:4e:07:a5:21: da:f0:ce:8c:80:a7:28:c8:b2:43:6a:17:33:4e:ba:f3:07:dc: 61:c2:54:18:85:ba:14:95:be:55:86:b0:b9:bf:cc:8a:f6:30: 84:87:0e:e8:68:c2:c8:9a:75:c3:76:ef:26:c1:cd:21:d1:9c: dd:bf:e4:a8:22:d4:5f:ad:e1:86:18:29:85:8b:9a:15:68:7f: fd:ca:23:69:56:0a:f0:81:9b:d1:71:5d:7c:bd:68:6c:3e:6e: b3:84:b0:ad:2b:0c:db:d2:cb:99:1f:2e:86:89:e2:ec:97:4a: 1d:3f:82:bc:d4:5e:91:a4:6c:23:d8:4a:44:67:e4:94:63:d8: ea:a6:24:69:26:63:cf:1b:0b:78:71:fa:75:f1:11:4f:f1:b8: 4d:b0:0c:d5:5e:13:cf:5d:b4:cf:46:48:cd:83:c1:59:59:14: 4d:4b:e4:66:49:8f:9b:6b:57:e2:26:67:93:35:f0:60:ff:5b: 63:58:57:4e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWElphDdURDoNEBE3dwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjA0ZGQxNTUtZDg0Ni00MTNkLTlkMTgtOWM2ZDBmMDNl ZThjMB4XDTI1MDQwNDA4MDAwM1oXDTI1MDQwNjA4MDAwMFowLzEtMCsGA1UEAxMk YzllYzc5MjQtYjdlZS00MzdiLTk3YmItYWU3MTAyZTA0NWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygLmYTq3BDhuyh5ambraQgp6yC3Z47FI4iu1 FjDq71Qqi24Ogo6PFrNCDktcpmzazVCBxNVsw8Fw+jg8uC52W4n0hmI6wsn3q9Lo BC3LZaZdwAjnkb5RmlUPAGXbZNgLntaTQTW8c8sRwqjsIcxd49NXZQui0iIPeZUH 01b5CCLRKtzcBbFaHOUvc9xUmezB7umSQToOVi3kQ6DfPOfsqIgLyROGjuTgP88v kK3THCwdr/IYGu8PX06rz6pkWa8Vnc1lequtGGZYd8HGggk4COSMkilGR38B/RNa r97E3gcWRFiX1lsYIpCZLvhedUvTJLGaAORrnjRdCbHivflDLwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCNbEm0ylxwQEf8lFTl77jsmua39MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MDRk ZDE1NS1kODQ2LTQxM2QtOWQxOC05YzZkMGYwM2VlOGMvNjA0ZGQxNTUtZDg0Ni00 MTNkLTlkMTgtOWM2ZDBmMDNlZThjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjA0ZGQxNTUtZDg0Ni00MTNkLTlk MTgtOWM2ZDBmMDNlZThjLzYwNGRkMTU1LWQ4NDYtNDEzZC05ZDE4LTljNmQwZjAz ZWU4Yy5jcmwwHwYDVR0jBBgwFoAUAFFQ62QtzxQ4QmQkdfsYDg5DsdcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MDRkZDE1NS1kODQ2LTQxM2QtOWQxOC05YzZk MGYwM2VlOGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCQoruo11a59i9LjLEv8qO5 Rma1ddy8eJivA9lOEie405h/LrK40ZAeLUyLnds98M47MoF5NUfSFJ7vNH/CM4ah r4PhOE4HpSHa8M6MgKcoyLJDahczTrrzB9xhwlQYhboUlb5VhrC5v8yK9jCEhw7o aMLImnXDdu8mwc0h0Zzdv+SoItRfreGGGCmFi5oVaH/9yiNpVgrwgZvRcV18vWhs Pm6zhLCtKwzb0suZHy6GieLsl0odP4K81F6RpGwj2EpEZ+SUY9jqpiRpJmPPGwt4 cfp18RFP8bhNsAzVXhPPXbTPRkjNg8FZWRRNS+RmSY+ba1fiJmeTNfBg/1tjWFdO -----END CERTIFICATE-----Generated at Sat Apr 5 05:24:53 2025 by rpki-client