$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.mft File: 64a6009d-12b8-4b34-95f9-d26180d8bf4c.mft (raw, json) Hash identifier: dvApelVG4j6NQaAIz1qVupOngdO2P3RJT8iKNVtE+4E= Subject key identifier: 0C:BF:42:2E:EE:0D:9E:BC:0E:3B:60:1E:41:AE:FA:79:3E:19:BD:4D Authority key identifier: F7:18:5E:88:BA:94:F1:D1:B6:C1:14:FF:F6:CF:D5:09:C5:AA:5F:E7 Certificate issuer: /CN=64a6009d-12b8-4b34-95f9-d26180d8bf4c Certificate serial: 010D0C9F432858497F093B12A63B6BE877303818 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.mft Manifest number: 010D0C9F4328584073A8338FE8C46476050B20D0 Signing time: Sat 12 Apr 2025 01:00:03 +0000 Manifest this update: Sat 12 Apr 2025 01:00:03 +0000 Manifest next update: Mon 14 Apr 2025 01:00:00 +0000 Files and hashes: 1: 64a6009d-12b8-4b34-95f9-d26180d8bf4c.crl (hash: yZgFuJfvCgzzrpPLIJav0yBqloXKZYjx8vV7YnT2iEY=) 2: af0a8e4a-42b9-3667-8ce3-865564983774.roa (hash: 3zGvmh1WkSZYydARQLFdW5wRzjZn3SacSRkvE3bIkT0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7f:09:3b:12:a6:3b:6b:e8:77:30:38:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64a6009d-12b8-4b34-95f9-d26180d8bf4c Validity Not Before: Apr 12 01:00:03 2025 GMT Not After : Apr 14 01:00:00 2025 GMT Subject: CN=1fa68dd4-38f3-4b8a-be87-a48604f849e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:76:c6:8d:f4:69:df:e3:26:1d:4d:df:c8:8d: a7:39:70:92:87:e6:09:20:29:e0:9c:06:ab:5b:45: cb:ed:8b:8d:fd:8a:0e:56:8c:7e:98:7b:50:fd:ca: 36:ad:5b:da:f6:17:4d:67:ab:71:fa:0d:04:2c:c0: ad:7c:af:90:2b:3d:10:20:12:5e:e7:39:95:80:98: 22:19:63:3b:29:91:41:25:ec:b2:83:a0:68:9a:c0: 2f:bd:8b:73:6d:fc:2a:43:6c:0d:9a:ba:7d:3f:96: bb:de:9b:df:e5:f3:ff:2d:86:a3:36:f5:22:68:9f: e2:67:50:c6:e1:2e:15:69:ec:5a:52:2f:22:d3:1f: ef:65:b7:aa:69:71:31:53:1e:1a:86:3c:a8:b9:c4: 19:76:07:0e:67:bf:a4:a8:03:5a:74:ce:6e:54:6b: 1a:4d:a9:10:53:be:7e:a3:09:8b:d9:80:35:e6:1b: 9b:02:84:61:86:a3:80:a9:16:04:1f:3c:4b:52:4f: 6f:76:5c:35:37:29:4b:a3:5e:b4:a8:31:fd:1a:01: 66:2c:06:88:bc:3b:82:b6:f9:73:d1:a9:90:c4:98: 11:8b:c1:be:ed:8a:a9:03:5b:ed:2b:60:60:ff:ac: 40:10:ee:d0:dc:c2:99:5c:54:a8:3b:a4:90:05:1e: 29:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:BF:42:2E:EE:0D:9E:BC:0E:3B:60:1E:41:AE:FA:79:3E:19:BD:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.crl X509v3 Authority Key Identifier: keyid:F7:18:5E:88:BA:94:F1:D1:B6:C1:14:FF:F6:CF:D5:09:C5:AA:5F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:34:62:ee:99:46:f3:fa:ef:82:4b:6f:5c:cc:e2:0e:99:56: fe:02:84:57:9c:ca:56:9c:84:0c:41:b1:78:c3:a2:a3:67:8e: 18:47:b5:5c:c3:ae:1b:cc:4d:9e:ff:5c:42:c4:d7:37:2c:02: 36:1d:9f:d3:09:5d:e6:5d:33:09:c3:41:f3:e4:56:4e:68:65: 01:d7:6e:c0:75:e7:a2:be:7e:81:74:4a:58:16:59:f6:b3:11: 0c:e3:45:26:f5:b1:67:82:59:32:5a:27:2b:79:d8:c5:85:d4: a4:e9:bd:72:07:98:bb:01:bf:25:55:8d:c3:60:5e:c8:c7:a7: c5:4b:1c:3b:52:80:3a:ac:ab:8c:b6:94:31:8b:7a:2b:03:49: 7d:e0:1c:a9:27:06:fe:56:91:aa:79:15:e4:e6:97:87:0c:c2: 5f:cb:a3:ed:23:bb:55:0a:0b:e9:bf:de:3f:5a:5e:53:ea:de: 17:81:6f:95:22:ed:97:d8:18:71:92:e8:12:1e:e6:64:c6:0c: b3:dc:e6:31:8a:fa:74:8f:cf:58:9a:e3:15:5f:af:dd:16:d6: 83:42:c7:a4:d9:90:c9:af:c5:c6:4e:c5:98:7c:c0:9f:49:19: 88:9b:05:f9:c3:87:ba:b4:40:9c:00:f4:eb:03:37:aa:25:17: 26:63:27:4d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl/CTsSpjtr6HcwOBgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjRhNjAwOWQtMTJiOC00YjM0LTk1ZjktZDI2MTgwZDhi ZjRjMB4XDTI1MDQxMjAxMDAwM1oXDTI1MDQxNDAxMDAwMFowLzEtMCsGA1UEAxMk MWZhNjhkZDQtMzhmMy00YjhhLWJlODctYTQ4NjA0Zjg0OWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03bGjfRp3+MmHU3fyI2nOXCSh+YJICngnAar W0XL7YuN/YoOVox+mHtQ/co2rVva9hdNZ6tx+g0ELMCtfK+QKz0QIBJe5zmVgJgi GWM7KZFBJeyyg6BomsAvvYtzbfwqQ2wNmrp9P5a73pvf5fP/LYajNvUiaJ/iZ1DG 4S4VaexaUi8i0x/vZbeqaXExUx4ahjyoucQZdgcOZ7+kqANadM5uVGsaTakQU75+ owmL2YA15hubAoRhhqOAqRYEHzxLUk9vdlw1NylLo160qDH9GgFmLAaIvDuCtvlz 0amQxJgRi8G+7YqpA1vtK2Bg/6xAEO7Q3MKZXFSoO6SQBR4p8QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAy/Qi7uDZ68DjtgHkGu+nk+Gb1NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NGE2 MDA5ZC0xMmI4LTRiMzQtOTVmOS1kMjYxODBkOGJmNGMvNjRhNjAwOWQtMTJiOC00 YjM0LTk1ZjktZDI2MTgwZDhiZjRjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjRhNjAwOWQtMTJiOC00YjM0LTk1 ZjktZDI2MTgwZDhiZjRjLzY0YTYwMDlkLTEyYjgtNGIzNC05NWY5LWQyNjE4MGQ4 YmY0Yy5jcmwwHwYDVR0jBBgwFoAU9xheiLqU8dG2wRT/9s/VCcWqX+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NGE2MDA5ZC0xMmI4LTRiMzQtOTVmOS1kMjYx ODBkOGJmNGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBMNGLumUbz+u+CS29czOIO mVb+AoRXnMpWnIQMQbF4w6KjZ44YR7Vcw64bzE2e/1xCxNc3LAI2HZ/TCV3mXTMJ w0Hz5FZOaGUB127Adeeivn6BdEpYFln2sxEM40Um9bFnglkyWicredjFhdSk6b1y B5i7Ab8lVY3DYF7Ix6fFSxw7UoA6rKuMtpQxi3orA0l94BypJwb+VpGqeRXk5peH DMJfy6PtI7tVCgvpv94/Wl5T6t4XgW+VIu2X2BhxkugSHuZkxgyz3OYxivp0j89Y muMVX6/dFtaDQsek2ZDJr8XGTsWYfMCfSRmImwX5w4e6tECcAPTrAzeqJRcmYydN -----END CERTIFICATE-----Generated at Sat Apr 12 15:09:44 2025 by rpki-client