$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft File: 704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft (raw, json) Hash identifier: keZB2tjqCr3RSKCoG1emu7sovMw7zsfiTydeqiT53gU= Subject key identifier: 47:33:97:96:78:F8:4D:BA:40:1B:49:02:F9:44:99:01:57:78:EA:0D Authority key identifier: 52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97 Certificate issuer: /CN=704a761f-b71a-4fa2-b0e7-db5278e23dc3 Certificate serial: 010D0C9F432858497D2CC7D584EE055FC4378B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft Manifest number: 010D0C9F4328584073A84BBB6D274A47E144028F Signing time: Fri 11 Apr 2025 09:00:03 +0000 Manifest this update: Fri 11 Apr 2025 09:00:03 +0000 Manifest next update: Mon 14 Apr 2025 09:00:00 +0000 Files and hashes: 1: 704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl (hash: spHZmw/ovZLHbkZbZ99RXylt8hmmarXvngq/kMRQ9uM=) 2: e6965540-cbd0-3930-b638-a04886e69eac.roa (hash: /rIblcKEmq7cHoFaepGfJcX8rmjtsszK4w5tIcGlNJU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:2c:c7:d5:84:ee:05:5f:c4:37:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=704a761f-b71a-4fa2-b0e7-db5278e23dc3 Validity Not Before: Apr 11 09:00:03 2025 GMT Not After : Apr 14 09:00:00 2025 GMT Subject: CN=7c93690f-ab27-4773-adf9-01f6f71503f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c6:bd:a9:c2:45:b1:e6:05:a1:73:1c:d6:9e: f8:c7:e5:25:bb:45:1b:37:9f:40:68:10:aa:f2:a6: 40:d7:1e:05:54:1d:72:cd:13:3e:f2:5c:01:9b:d8: 4f:00:11:fb:b6:c8:3d:05:20:a3:41:e8:aa:34:35: 90:b1:d8:0e:10:f4:f1:18:76:2c:0d:a3:10:75:cb: 56:44:2d:36:54:37:bd:62:75:d9:c9:84:e4:a3:94: 2f:78:0c:28:45:fd:62:fc:5a:f8:3a:17:7a:34:2b: 32:09:d6:b3:c1:2b:25:7a:ec:03:ca:2a:58:36:e8: 7f:18:df:c3:ea:c1:af:ac:a9:29:01:02:9d:e0:e9: a7:12:60:a0:e7:98:05:81:51:ab:1d:b0:fa:74:20: aa:f3:3a:e8:da:83:f8:34:5a:ad:27:92:a5:df:b2: 5a:4b:8b:5f:e1:75:e0:d2:8e:7f:34:40:0d:3d:dc: aa:2f:f4:2c:ed:ff:18:fd:ef:79:82:06:65:ac:fc: b8:af:83:91:a5:7f:9b:23:6b:b3:01:d6:d1:62:03: 74:b0:20:e5:75:f6:7e:1d:ea:41:3f:9d:22:ec:92: 82:d0:b3:4e:6f:75:f9:6a:de:68:0f:ff:7e:08:14: ac:f5:48:6f:72:01:9f:69:68:cf:e9:44:f3:3f:89: 36:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:33:97:96:78:F8:4D:BA:40:1B:49:02:F9:44:99:01:57:78:EA:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl X509v3 Authority Key Identifier: keyid:52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:2f:dc:ed:68:b6:67:0a:79:cc:2b:71:62:38:53:25:5f:3a: 31:5f:b1:3f:68:2e:45:af:83:05:f4:68:2e:66:ae:e0:aa:63: 4a:d9:13:c4:2c:ad:79:d9:23:38:2c:1d:68:95:87:34:cb:45: a6:38:ea:03:5e:79:eb:af:02:c1:51:0e:c5:a5:c2:35:b2:01: 14:79:e0:05:ea:a9:52:83:b5:2c:a6:7a:db:e6:7e:83:35:c2: 1f:48:b7:e7:f1:2a:5b:8d:70:d2:5c:9c:65:46:ea:d5:12:ab: b2:5b:df:5b:30:96:c2:83:2a:09:1e:33:af:03:89:d1:fe:29: 8b:80:1c:fd:26:74:44:08:59:ff:c2:52:c8:fe:ab:66:6f:1f: 8e:08:29:75:a4:b0:ed:67:ec:e9:55:6a:86:f2:56:38:ec:82: 88:7b:b2:c7:7d:0b:e6:51:24:0b:1c:4b:cc:1b:2e:80:f7:9e: 02:3f:b1:49:a5:53:5a:9f:cc:81:a3:c7:af:28:61:69:a6:27: d4:f1:10:12:38:de:ac:cc:86:84:c7:93:7a:d5:be:b3:d0:11: 8f:11:28:9a:bb:af:f8:3c:ee:ca:3e:14:fe:9c:80:83:4c:dc: ca:ec:d6:49:bd:b4:81:6a:ee:0c:34:b5:ce:a1:fe:85:d2:49: 0b:7b:6a:97 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl9LMfVhO4FX8Q3iwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA0YTc2MWYtYjcxYS00ZmEyLWIwZTctZGI1Mjc4ZTIz ZGMzMB4XDTI1MDQxMTA5MDAwM1oXDTI1MDQxNDA5MDAwMFowLzEtMCsGA1UEAxMk N2M5MzY5MGYtYWIyNy00NzczLWFkZjktMDFmNmY3MTUwM2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjca9qcJFseYFoXMc1p74x+Ulu0UbN59AaBCq 8qZA1x4FVB1yzRM+8lwBm9hPABH7tsg9BSCjQeiqNDWQsdgOEPTxGHYsDaMQdctW RC02VDe9YnXZyYTko5QveAwoRf1i/Fr4Ohd6NCsyCdazwSsleuwDyipYNuh/GN/D 6sGvrKkpAQKd4OmnEmCg55gFgVGrHbD6dCCq8zro2oP4NFqtJ5Kl37JaS4tf4XXg 0o5/NEANPdyqL/Qs7f8Y/e95ggZlrPy4r4ORpX+bI2uzAdbRYgN0sCDldfZ+HepB P50i7JKC0LNOb3X5at5oD/9+CBSs9UhvcgGfaWjP6UTzP4k2CQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEczl5Z4+E26QBtJAvlEmQFXeOoNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDRh NzYxZi1iNzFhLTRmYTItYjBlNy1kYjUyNzhlMjNkYzMvNzA0YTc2MWYtYjcxYS00 ZmEyLWIwZTctZGI1Mjc4ZTIzZGMzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzA0YTc2MWYtYjcxYS00ZmEyLWIw ZTctZGI1Mjc4ZTIzZGMzLzcwNGE3NjFmLWI3MWEtNGZhMi1iMGU3LWRiNTI3OGUy M2RjMy5jcmwwHwYDVR0jBBgwFoAUUi3Wa4cFBpviRD6NQcu1N8w4MZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MDRhNzYxZi1iNzFhLTRmYTItYjBlNy1kYjUy NzhlMjNkYzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAWL9ztaLZnCnnMK3FiOFMl XzoxX7E/aC5Fr4MF9GguZq7gqmNK2RPELK152SM4LB1olYc0y0WmOOoDXnnrrwLB UQ7FpcI1sgEUeeAF6qlSg7Uspnrb5n6DNcIfSLfn8SpbjXDSXJxlRurVEquyW99b MJbCgyoJHjOvA4nR/imLgBz9JnRECFn/wlLI/qtmbx+OCCl1pLDtZ+zpVWqG8lY4 7IKIe7LHfQvmUSQLHEvMGy6A954CP7FJpVNan8yBo8evKGFppifU8RASON6szIaE x5N61b6z0BGPESiau6/4PO7KPhT+nICDTNzK7NZJvbSBau4MNLXOof6F0kkLe2qX -----END CERTIFICATE-----Generated at Fri Apr 11 21:33:17 2025 by rpki-client