$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/66cf51f2-af3c-4c05-a781-3b923f753475.mft File: 66cf51f2-af3c-4c05-a781-3b923f753475.mft (raw, json) Hash identifier: 1o29zBR3E4sjPD1EMuMn7ZfhYYfYt9qB5a8BrYC+swQ= Subject key identifier: DA:47:77:04:EA:43:C5:67:8A:27:46:21:31:05:B7:17:AD:D5:DD:8E Authority key identifier: 2D:B1:B7:27:82:F7:13:63:1E:4C:00:C0:63:9F:AB:19:28:48:B0:32 Certificate issuer: /CN=66cf51f2-af3c-4c05-a781-3b923f753475 Certificate serial: 010D0C9F4328584970259A459509A3FC9468F556 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/66cf51f2-af3c-4c05-a781-3b923f753475.mft Manifest number: 010D0C9F4328584073A81AB5C49D6BF3C2F657E6 Signing time: Sun 06 Apr 2025 17:00:03 +0000 Manifest this update: Sun 06 Apr 2025 17:00:03 +0000 Manifest next update: Wed 09 Apr 2025 17:00:00 +0000 Files and hashes: 1: 66cf51f2-af3c-4c05-a781-3b923f753475.crl (hash: 9VzeEskklSGr2E7g5bGdmoFGVL7H5OQqL3MM905xJcw=) 2: d2e9a628-bb73-378c-9508-2db3fb689656.roa (hash: hfrEWj0GTJSQOG6+Bp7suyL5A9owY/H08IdV4q6hIRg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/66cf51f2-af3c-4c05-a781-3b923f753475.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/66cf51f2-af3c-4c05-a781-3b923f753475.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:70:25:9a:45:95:09:a3:fc:94:68:f5:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66cf51f2-af3c-4c05-a781-3b923f753475 Validity Not Before: Apr 6 17:00:03 2025 GMT Not After : Apr 9 17:00:00 2025 GMT Subject: CN=8eeaf5ba-1faa-4219-afa0-f1b771485176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:31:34:11:11:8a:88:24:2e:d0:a2:80:28:0a: 09:64:57:52:01:98:a0:32:fd:a4:15:51:67:1b:9f: 05:35:8c:75:11:7f:2c:b3:0b:62:b7:98:7a:81:df: a9:13:22:9a:8b:c9:ee:b2:14:0d:de:a6:84:fb:15: 14:30:a6:36:f2:6b:64:64:6d:fe:51:23:00:06:47: 55:37:21:90:44:af:ec:22:f7:2f:93:b8:4e:54:0f: fd:a8:2b:9d:8b:55:35:19:36:fd:1a:35:95:be:a7: 0e:d5:47:00:9a:f2:ea:fd:56:ef:11:e3:1b:40:03: 56:27:b7:2b:64:3b:4e:bf:f8:66:a9:39:9b:05:33: b1:bf:cd:0c:1b:bd:79:44:c6:44:a4:4b:c3:76:e9: 75:2c:e8:2a:d8:5b:a0:4f:38:9c:b7:05:e1:66:e5: c1:c1:4e:ec:be:2a:e6:d2:3c:a8:c0:70:e8:93:97: 6e:cb:59:0b:37:24:16:98:39:2e:eb:82:34:0b:fd: fb:fc:3a:0e:6b:2b:30:b1:d2:92:19:93:27:92:a5: 0f:b5:5d:00:e0:c5:2c:e9:4d:3a:99:7a:0a:ae:13: 87:da:7d:4b:61:6d:50:bc:48:dc:b9:95:6a:20:63: 5b:17:a4:f9:e1:b6:dc:ac:7c:07:19:19:ab:9c:bc: 2b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:47:77:04:EA:43:C5:67:8A:27:46:21:31:05:B7:17:AD:D5:DD:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/66cf51f2-af3c-4c05-a781-3b923f753475.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/66cf51f2-af3c-4c05-a781-3b923f753475.crl X509v3 Authority Key Identifier: keyid:2D:B1:B7:27:82:F7:13:63:1E:4C:00:C0:63:9F:AB:19:28:48:B0:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:8f:c4:0f:6a:2b:e8:bd:97:b6:76:4e:f7:b5:45:3a:2c:ee: 79:a1:9d:79:da:9e:46:54:80:00:6a:b9:2b:0a:64:13:80:7a: bf:6b:88:2a:8c:79:54:0c:a5:ba:99:9d:96:21:95:4d:67:ad: d6:06:f0:6c:63:da:bb:50:97:b5:ea:cb:dd:9f:9c:d8:a0:66: cf:be:3f:ff:18:8e:78:b4:a0:34:c9:d2:f3:af:9a:13:e8:e1: ab:d1:e8:67:6a:80:53:cc:5d:2b:04:a1:17:92:01:d8:d7:87: 39:51:82:ef:88:6c:d1:fe:b2:e6:a3:b0:1c:6d:f2:b5:63:af: 2a:d1:8c:9c:e3:d4:03:b8:d4:a4:04:66:4a:0e:ea:d2:c6:bd: 8f:21:42:4a:f3:fc:ca:7e:70:c9:4e:b7:46:d0:a4:e6:76:e4: dd:c5:8e:95:3d:08:1b:d5:6a:4c:51:6e:3a:4b:58:2f:e0:47: c5:fb:6e:03:02:c9:fb:75:89:b1:78:71:9b:00:a6:1e:c3:0a: 3e:b5:28:db:a8:00:85:8f:57:65:8b:7d:ce:22:d5:5b:ec:86: 2e:4f:19:5d:60:7b:f8:2a:e3:a2:66:2b:56:3f:8e:a4:aa:e4: db:92:4a:08:36:20:a7:04:80:0e:65:2f:80:a1:c7:53:70:10: 4f:f9:d5:02 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWElwJZpFlQmj/JRo9VYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZjZjUxZjItYWYzYy00YzA1LWE3ODEtM2I5MjNmNzUz NDc1MB4XDTI1MDQwNjE3MDAwM1oXDTI1MDQwOTE3MDAwMFowLzEtMCsGA1UEAxMk OGVlYWY1YmEtMWZhYS00MjE5LWFmYTAtZjFiNzcxNDg1MTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijE0ERGKiCQu0KKAKAoJZFdSAZigMv2kFVFn G58FNYx1EX8sswtit5h6gd+pEyKai8nushQN3qaE+xUUMKY28mtkZG3+USMABkdV NyGQRK/sIvcvk7hOVA/9qCudi1U1GTb9GjWVvqcO1UcAmvLq/VbvEeMbQANWJ7cr ZDtOv/hmqTmbBTOxv80MG715RMZEpEvDdul1LOgq2FugTzictwXhZuXBwU7svirm 0jyowHDok5duy1kLNyQWmDku64I0C/37/DoOayswsdKSGZMnkqUPtV0A4MUs6U06 mXoKrhOH2n1LYW1QvEjcuZVqIGNbF6T54bbcrHwHGRmrnLwr0QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNpHdwTqQ8VniidGITEFtxet1d2OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NmNm NTFmMi1hZjNjLTRjMDUtYTc4MS0zYjkyM2Y3NTM0NzUvNjZjZjUxZjItYWYzYy00 YzA1LWE3ODEtM2I5MjNmNzUzNDc1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjZjZjUxZjItYWYzYy00YzA1LWE3 ODEtM2I5MjNmNzUzNDc1LzY2Y2Y1MWYyLWFmM2MtNGMwNS1hNzgxLTNiOTIzZjc1 MzQ3NS5jcmwwHwYDVR0jBBgwFoAULbG3J4L3E2MeTADAY5+rGShIsDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NmNmNTFmMi1hZjNjLTRjMDUtYTc4MS0zYjky M2Y3NTM0NzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBAj8QPaivovZe2dk73tUU6 LO55oZ152p5GVIAAarkrCmQTgHq/a4gqjHlUDKW6mZ2WIZVNZ63WBvBsY9q7UJe1 6svdn5zYoGbPvj//GI54tKA0ydLzr5oT6OGr0ehnaoBTzF0rBKEXkgHY14c5UYLv iGzR/rLmo7AcbfK1Y68q0Yyc49QDuNSkBGZKDurSxr2PIUJK8/zKfnDJTrdG0KTm duTdxY6VPQgb1WpMUW46S1gv4EfF+24DAsn7dYmxeHGbAKYewwo+tSjbqACFj1dl i33OItVb7IYuTxldYHv4KuOiZitWP46kquTbkkoINiCnBIAOZS+AocdTcBBP+dUC -----END CERTIFICATE-----Generated at Mon Apr 7 05:49:09 2025 by rpki-client