$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.mft File: da044fca-c418-4088-8a66-0c6896769f77.mft (raw, json) Hash identifier: W4mV/4hrSOQX4//qUwsRR8Z4M4IzK/TCbzdLJ8UgDGU= Subject key identifier: 7A:A6:C9:9E:16:F8:12:FD:23:64:41:0B:AF:F8:7A:74:8C:72:EE:AB Authority key identifier: 8D:CC:80:61:F8:BA:71:59:1D:2A:6C:45:3C:8B:25:9D:F5:9F:FD:38 Certificate issuer: /CN=da044fca-c418-4088-8a66-0c6896769f77 Certificate serial: 010D0C9F4328584997948101DC90407D6DE83E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.mft Manifest number: 010D0C9F4328584875513DB7F2A296348429526B Signing time: Sun 20 Apr 2025 20:00:03 +0000 Manifest this update: Sun 20 Apr 2025 20:00:03 +0000 Manifest next update: Wed 23 Apr 2025 20:00:00 +0000 Files and hashes: 1: 772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff.cer (hash: aNvRbIngd4MgrVJJyPtqL+yT8rTjYdfGr8ydQfBebRc=) 2: da044fca-c418-4088-8a66-0c6896769f77.crl (hash: zjRGhKGRLW4FD2O/ffHnLrt6r8hC22WzAjvrRcbSVUg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:97:94:81:01:dc:90:40:7d:6d:e8:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da044fca-c418-4088-8a66-0c6896769f77 Validity Not Before: Apr 20 20:00:03 2025 GMT Not After : Apr 23 20:00:00 2025 GMT Subject: CN=314754c8-e1d2-4992-8480-5499f0516503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0c:4d:2a:e4:aa:57:28:c5:45:02:3e:25:71: a2:18:56:7c:07:78:20:87:16:93:0e:ef:ef:02:94: 86:76:4a:3e:e2:f8:43:85:bb:e6:42:27:93:ed:7b: 4d:08:25:a6:82:0b:8c:6f:39:9b:0e:07:7c:d1:cd: aa:d9:01:cf:85:df:68:60:31:67:7e:5e:cb:d0:82: 6b:00:af:93:84:11:2b:2b:cf:4a:fd:3d:05:78:11: 59:9b:1b:3c:26:de:f4:0d:45:60:4a:25:ee:55:22: 33:9e:b4:93:18:6d:59:85:cf:42:8e:df:33:de:ab: ad:26:a4:ef:83:9a:37:0c:e3:fa:e8:cb:ff:0a:48: 54:9b:67:f5:aa:d4:26:8f:6e:63:aa:e9:47:c7:67: b6:89:16:76:81:9a:2d:fa:c5:16:3a:30:30:f4:04: 93:f5:27:f8:2f:39:99:c8:39:41:08:7e:40:67:79: f0:22:21:5c:8a:4c:06:03:ea:8e:e1:6f:b3:f0:36: bb:b5:b0:27:38:50:59:a9:0f:54:e2:84:07:c5:75: 19:73:01:29:9e:ce:22:ce:7c:f7:31:bd:18:a0:5a: 72:b8:d5:57:cc:da:90:63:f3:32:d7:46:fd:82:52: 51:b7:08:27:9b:33:14:5d:40:94:32:c5:0e:07:c5: 17:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A6:C9:9E:16:F8:12:FD:23:64:41:0B:AF:F8:7A:74:8C:72:EE:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.crl X509v3 Authority Key Identifier: keyid:8D:CC:80:61:F8:BA:71:59:1D:2A:6C:45:3C:8B:25:9D:F5:9F:FD:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:32:5d:8f:fb:0f:bf:6f:03:22:ca:74:7e:25:e8:76:02:c8: 00:52:28:01:c4:9b:a8:9c:16:41:dc:03:db:8d:49:ab:ca:31: 54:47:ab:a8:12:97:ee:8b:c0:58:6b:35:39:32:22:b2:8b:18: a3:b2:3b:47:c7:d4:16:e9:07:7d:7b:72:bf:a4:1f:ea:65:08: c1:71:61:79:72:61:bc:e0:b0:c1:05:ce:08:13:a6:fe:fe:50: 7c:41:15:4c:0a:05:26:fd:1a:18:e2:cc:22:33:9f:55:26:45: 5d:98:1d:77:bc:73:d0:66:15:61:a6:27:3f:db:8f:b1:a0:4a: 18:55:e4:8c:22:48:ee:8f:ba:6a:c2:cb:bd:67:3f:17:77:22: de:5c:75:2c:4f:c5:b4:36:92:71:a0:0f:54:2e:70:5f:18:a7: 7f:27:c3:87:d6:c8:7b:a0:a3:cd:fd:fa:b3:b7:19:3d:fe:89: 25:f5:89:33:0a:3e:34:f3:82:21:c1:fd:9c:f1:e4:93:a5:83: ad:4f:a4:98:ad:35:93:94:bb:5f:29:1b:69:46:15:f3:75:ae: 2a:0d:1c:d6:04:ed:21:ef:c3:ba:79:33:52:34:b2:83:d9:81: c2:3e:09:94:ad:8f:87:16:11:a6:88:4a:3f:ea:50:9d:22:30: 7c:16:20:84 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmXlIEB3JBAfW3oPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEwNDRmY2EtYzQxOC00MDg4LThhNjYtMGM2ODk2NzY5 Zjc3MB4XDTI1MDQyMDIwMDAwM1oXDTI1MDQyMzIwMDAwMFowLzEtMCsGA1UEAxMk MzE0NzU0YzgtZTFkMi00OTkyLTg0ODAtNTQ5OWYwNTE2NTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAxNKuSqVyjFRQI+JXGiGFZ8B3gghxaTDu/v ApSGdko+4vhDhbvmQieT7XtNCCWmgguMbzmbDgd80c2q2QHPhd9oYDFnfl7L0IJr AK+ThBErK89K/T0FeBFZmxs8Jt70DUVgSiXuVSIznrSTGG1Zhc9Cjt8z3qutJqTv g5o3DOP66Mv/CkhUm2f1qtQmj25jqulHx2e2iRZ2gZot+sUWOjAw9AST9Sf4LzmZ yDlBCH5AZ3nwIiFcikwGA+qO4W+z8Da7tbAnOFBZqQ9U4oQHxXUZcwEpns4iznz3 Mb0YoFpyuNVXzNqQY/My10b9glJRtwgnmzMUXUCUMsUOB8UXOwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHqmyZ4W+BL9I2RBC6/4enSMcu6rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYTA0 NGZjYS1jNDE4LTQwODgtOGE2Ni0wYzY4OTY3NjlmNzcvZGEwNDRmY2EtYzQxOC00 MDg4LThhNjYtMGM2ODk2NzY5Zjc3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGEwNDRmY2EtYzQxOC00MDg4LThh NjYtMGM2ODk2NzY5Zjc3L2RhMDQ0ZmNhLWM0MTgtNDA4OC04YTY2LTBjNjg5Njc2 OWY3Ny5jcmwwHwYDVR0jBBgwFoAUjcyAYfi6cVkdKmxFPIslnfWf/TgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYTA0NGZjYS1jNDE4LTQwODgtOGE2Ni0wYzY4 OTY3NjlmNzcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAUMl2P+w+/bwMiynR+Jeh2 AsgAUigBxJuonBZB3APbjUmryjFUR6uoEpfui8BYazU5MiKyixijsjtHx9QW6Qd9 e3K/pB/qZQjBcWF5cmG84LDBBc4IE6b+/lB8QRVMCgUm/RoY4swiM59VJkVdmB13 vHPQZhVhpic/24+xoEoYVeSMIkjuj7pqwsu9Zz8XdyLeXHUsT8W0NpJxoA9ULnBf GKd/J8OH1sh7oKPN/fqztxk9/okl9YkzCj4084Ihwf2c8eSTpYOtT6SYrTWTlLtf KRtpRhXzda4qDRzWBO0h78O6eTNSNLKD2YHCPgmUrY+HFhGmiEo/6lCdIjB8FiCE -----END CERTIFICATE-----Generated at Sun Apr 20 22:44:14 2025 by rpki-client