$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft File: d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft (raw, json) Hash identifier: bA5GKIvv9DaV+kQ9bNglXT4S9qKx5y5YJ5ekWrU1qSs= Subject key identifier: AE:C2:6A:6C:FC:56:6C:9A:BD:FC:79:EF:14:5F:35:CD:90:54:E4:4D Authority key identifier: F8:E0:54:64:56:2E:06:FC:45:40:3B:F8:F6:1F:52:85:28:DA:22:CA Certificate issuer: /CN=d3c1e47f-2bd9-4e42-a950-0f81e45cd461 Certificate serial: 010D0C9F432858497C97ED79CA842FA8CCC89700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft Manifest number: 010D0C9F4328584073A83CCF3B74A2EBFF56430F Signing time: Fri 11 Apr 2025 04:00:07 +0000 Manifest this update: Fri 11 Apr 2025 04:00:07 +0000 Manifest next update: Mon 14 Apr 2025 04:00:00 +0000 Files and hashes: 1: 6fa801e3-3342-3f1c-a396-6f9201c0d56d.roa (hash: 3ks0MROC7gTrM3tEdwEYSUD2hgGJ8DiIOrRwCqkCX04=) 2: d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl (hash: JI4E9bMxc8JxKtzMBAhryYC4HJ81zNlTD9iPJ5gph4k=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7c:97:ed:79:ca:84:2f:a8:cc:c8:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3c1e47f-2bd9-4e42-a950-0f81e45cd461 Validity Not Before: Apr 11 04:00:07 2025 GMT Not After : Apr 14 04:00:00 2025 GMT Subject: CN=e62a04e4-bb1c-454d-b696-828c6d10bf66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8d:12:d5:c5:27:66:7c:e6:b3:12:c4:af:be: 00:f7:bf:12:aa:36:ef:a4:38:77:16:51:40:a9:e5: c0:1c:78:23:9b:88:c0:71:74:4c:a8:29:dc:b1:73: 35:96:28:7a:02:c5:64:41:05:24:07:30:db:09:37: 71:c1:f7:e7:5e:12:dc:40:7b:93:cf:45:41:28:0d: e5:e0:8b:2d:16:4d:0a:8f:73:7a:b6:40:b5:93:26: f0:cb:f4:c0:a2:12:be:85:7b:77:3a:bb:9c:f9:ef: 05:48:3c:85:a6:73:5d:7a:bd:f0:57:ec:8c:a1:ff: da:b4:3c:59:45:ef:a2:f3:6f:05:c2:e9:59:4e:aa: ff:41:7b:41:31:65:88:dd:b0:17:77:35:60:a6:06: 35:ff:f7:3a:90:cc:13:db:3c:70:8d:75:3e:31:fc: b1:9d:e8:42:aa:a6:1e:2f:74:d1:5a:fa:fc:4a:1d: 54:1b:17:2f:36:6b:3f:9b:6a:fc:3f:cd:fd:e8:88: f4:c7:08:1b:4a:cc:7c:49:05:d8:a5:6e:35:4c:dc: 29:2b:4f:b8:3c:35:14:17:53:aa:93:32:91:e6:a9: f1:7d:19:76:3e:16:a3:6d:68:ab:bd:94:33:a5:3b: 34:6c:94:7c:08:9e:cd:2d:2e:e2:9d:37:57:d0:79: 19:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C2:6A:6C:FC:56:6C:9A:BD:FC:79:EF:14:5F:35:CD:90:54:E4:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl X509v3 Authority Key Identifier: keyid:F8:E0:54:64:56:2E:06:FC:45:40:3B:F8:F6:1F:52:85:28:DA:22:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:fc:ed:fe:a0:c9:6e:bd:3c:e1:95:db:64:92:d6:27:eb:d9: d5:e3:ff:ac:93:7a:0b:dc:0d:ef:e7:18:ed:ac:9e:a9:6e:18: a4:3d:79:b1:b3:98:c1:71:43:41:d9:e3:1d:5e:86:28:bb:6e: 0f:6a:62:49:64:40:a8:82:3d:ce:72:7b:b5:a1:b9:80:61:5f: 91:d0:d9:9e:39:07:9c:9d:eb:81:10:df:5f:6b:c4:fa:67:f0: 50:80:62:56:1d:b2:be:e8:41:f2:50:24:97:93:12:9f:29:06: 0f:8a:91:56:73:60:7b:8e:2a:55:5e:19:8e:ec:ed:c9:1a:09: 13:da:15:e7:88:73:1d:66:bb:b3:8a:a8:52:9d:2e:63:ae:e4: 99:5b:2a:e1:12:a2:11:1a:29:27:a0:fb:7b:e7:d8:0d:27:99: a5:dd:98:06:6f:85:d0:cb:39:d1:89:f6:b8:ea:7f:a5:4e:e5: 57:64:70:42:ab:cb:89:49:7e:64:6b:14:c2:df:90:4b:b8:b3: 4b:47:93:90:71:3a:55:0f:a8:dd:70:f8:89:dd:30:6b:34:37: 43:1a:d7:02:5d:4c:30:1d:c6:f6:d0:b8:1a:7a:ea:46:47:b7: 40:11:d6:b4:6f:e5:bd:df:66:77:55:fc:eb:62:f5:74:06:d9: 90:d0:2f:e8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl8l+15yoQvqMzIlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDNjMWU0N2YtMmJkOS00ZTQyLWE5NTAtMGY4MWU0NWNk NDYxMB4XDTI1MDQxMTA0MDAwN1oXDTI1MDQxNDA0MDAwMFowLzEtMCsGA1UEAxMk ZTYyYTA0ZTQtYmIxYy00NTRkLWI2OTYtODI4YzZkMTBiZjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzY0S1cUnZnzmsxLEr74A978SqjbvpDh3FlFA qeXAHHgjm4jAcXRMqCncsXM1lih6AsVkQQUkBzDbCTdxwffnXhLcQHuTz0VBKA3l 4IstFk0Kj3N6tkC1kybwy/TAohK+hXt3Oruc+e8FSDyFpnNder3wV+yMof/atDxZ Re+i828FwulZTqr/QXtBMWWI3bAXdzVgpgY1//c6kMwT2zxwjXU+MfyxnehCqqYe L3TRWvr8Sh1UGxcvNms/m2r8P8396Ij0xwgbSsx8SQXYpW41TNwpK0+4PDUUF1Oq kzKR5qnxfRl2PhajbWirvZQzpTs0bJR8CJ7NLS7inTdX0HkZzwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFK7Camz8Vmyavfx57xRfNc2QVORNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kM2Mx ZTQ3Zi0yYmQ5LTRlNDItYTk1MC0wZjgxZTQ1Y2Q0NjEvZDNjMWU0N2YtMmJkOS00 ZTQyLWE5NTAtMGY4MWU0NWNkNDYxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDNjMWU0N2YtMmJkOS00ZTQyLWE5 NTAtMGY4MWU0NWNkNDYxL2QzYzFlNDdmLTJiZDktNGU0Mi1hOTUwLTBmODFlNDVj ZDQ2MS5jcmwwHwYDVR0jBBgwFoAU+OBUZFYuBvxFQDv49h9ShSjaIsowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kM2MxZTQ3Zi0yYmQ5LTRlNDItYTk1MC0wZjgx ZTQ1Y2Q0NjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAo/O3+oMluvTzhldtkktYn 69nV4/+sk3oL3A3v5xjtrJ6pbhikPXmxs5jBcUNB2eMdXoYou24PamJJZECogj3O cnu1obmAYV+R0NmeOQecneuBEN9fa8T6Z/BQgGJWHbK+6EHyUCSXkxKfKQYPipFW c2B7jipVXhmO7O3JGgkT2hXniHMdZruziqhSnS5jruSZWyrhEqIRGiknoPt759gN J5ml3ZgGb4XQyznRifa46n+lTuVXZHBCq8uJSX5kaxTC35BLuLNLR5OQcTpVD6jd cPiJ3TBrNDdDGtcCXUwwHcb20LgaeupGR7dAEda0b+W932Z3VfzrYvV0BtmQ0C/o -----END CERTIFICATE-----Generated at Fri Apr 11 21:02:28 2025 by rpki-client