$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.mft File: aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.mft (raw, json) Hash identifier: hkcPpXxSCDRbGwtxK+d/CiwNMO+VVwQFAnsxhVIn54E= Subject key identifier: 79:64:C4:23:07:06:32:1F:84:DF:3A:8C:FE:C3:23:74:0A:5C:BB:07 Authority key identifier: 33:67:08:05:95:F8:CB:22:BC:11:35:A5:B5:3E:0F:59:0F:DA:FD:70 Certificate issuer: /CN=aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2 Certificate serial: 010D0C9F432858496C6CAC9E265794C6AFBC3700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.mft Manifest number: 010D0C9F432858425E3306748870EF88DC1C8F87 Signing time: Sat 05 Apr 2025 09:00:03 +0000 Manifest this update: Sat 05 Apr 2025 09:00:03 +0000 Manifest next update: Mon 07 Apr 2025 09:00:00 +0000 Files and hashes: 1: aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.crl (hash: M/6FP9HviFMK0iQp5TMlO5OofbS0ciCA+PpuDeRZNpI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:6c:ac:9e:26:57:94:c6:af:bc:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2 Validity Not Before: Apr 5 09:00:03 2025 GMT Not After : Apr 7 09:00:00 2025 GMT Subject: CN=c74413c7-c8b6-4190-836b-3eea2edcaebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6d:7c:15:05:f5:fb:87:e9:88:4b:44:f4:f9: eb:ca:b9:1a:c6:46:90:a7:92:e1:c4:17:6f:85:99: 45:cf:44:ce:71:8a:22:0f:17:c5:36:ad:cd:f4:a5: 81:7f:ed:50:d7:af:26:95:12:97:62:44:90:f3:47: a5:0e:75:1f:70:03:72:07:10:a3:fa:0c:83:21:58: f8:72:e2:44:25:13:97:27:cc:09:e3:a8:e9:d7:7d: 35:cd:dd:00:77:b6:72:2e:b8:74:bd:40:2e:17:e7: 9c:c0:c2:71:4a:cd:a6:7e:7b:8a:08:55:e3:ad:49: 65:0e:e7:b2:64:1f:81:99:85:9f:3f:0f:1d:55:45: f9:2d:97:d4:83:56:b7:ba:ed:0c:92:2e:a1:d8:36: ee:2e:0e:88:b3:19:b3:ef:2b:b2:19:dc:8b:a6:27: b2:01:79:1f:0a:a8:e6:a4:9a:fa:ff:c8:4d:e3:1d: d0:c8:54:da:6b:06:c6:f4:93:cf:94:a7:7c:f9:2c: e7:0e:63:2a:0d:b0:8a:a6:2f:8f:a9:b4:0d:88:fc: f3:36:9d:b9:13:b0:34:3f:4a:13:11:73:2f:9b:e7: d3:78:5a:a1:ed:18:dc:09:c8:60:e8:19:3f:cb:ee: 7c:a8:a1:57:b6:c8:0f:a3:f2:52:a6:7c:29:73:14: 10:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:64:C4:23:07:06:32:1F:84:DF:3A:8C:FE:C3:23:74:0A:5C:BB:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.crl X509v3 Authority Key Identifier: keyid:33:67:08:05:95:F8:CB:22:BC:11:35:A5:B5:3E:0F:59:0F:DA:FD:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:45:85:d5:62:24:d9:8f:5e:64:cf:74:b7:0c:8a:c0:43:ee: 96:22:77:b5:52:ca:9d:74:29:93:25:31:be:bc:58:0c:04:89: 7d:6c:23:20:3e:d1:47:b1:37:0b:ba:5c:2e:e0:a9:1e:0e:43: e1:b4:2f:2a:0e:f2:29:7a:c8:c1:49:0a:8d:91:d2:78:7e:91: 94:37:a4:7c:b9:05:e9:21:58:cd:87:17:aa:a0:a5:52:06:b4: 42:da:e4:e4:eb:1c:0c:bf:4b:3d:8c:86:3f:42:73:8a:dd:5e: 1a:44:de:2c:c4:d9:fa:dc:6c:89:91:f4:da:f2:12:73:34:27: f6:aa:59:f2:29:e4:6b:fb:eb:18:a1:45:5c:fb:fe:67:c7:8b: 92:d6:47:fb:b8:b5:b3:42:87:a8:f1:f2:08:71:12:69:0f:32: fa:26:44:0c:2a:99:29:ad:35:4b:39:c8:2a:57:72:2e:f2:dc: 61:c6:8c:fb:42:21:03:e1:ec:25:7c:dc:22:2f:07:6b:be:a9: 00:a0:0b:c2:7a:dc:e5:14:38:b6:f5:9a:7c:3d:bf:a0:84:45: 62:a4:54:23:d9:01:e2:ba:92:42:32:d6:62:fd:e5:4e:f7:c6: dd:fd:a6:97:db:49:3d:ed:02:aa:93:8e:18:90:ff:8f:39:ac: 3d:2f:47:c7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWElsbKyeJleUxq+8NwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5ODQ4YWQtNWVmOS00OGIxLTkxYzUtN2ZhZjY5ZTlm NmEyMB4XDTI1MDQwNTA5MDAwM1oXDTI1MDQwNzA5MDAwMFowLzEtMCsGA1UEAxMk Yzc0NDEzYzctYzhiNi00MTkwLTgzNmItM2VlYTJlZGNhZWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum18FQX1+4fpiEtE9PnryrkaxkaQp5LhxBdv hZlFz0TOcYoiDxfFNq3N9KWBf+1Q168mlRKXYkSQ80elDnUfcANyBxCj+gyDIVj4 cuJEJROXJ8wJ46jp1301zd0Ad7ZyLrh0vUAuF+ecwMJxSs2mfnuKCFXjrUllDuey ZB+BmYWfPw8dVUX5LZfUg1a3uu0Mki6h2DbuLg6Isxmz7yuyGdyLpieyAXkfCqjm pJr6/8hN4x3QyFTaawbG9JPPlKd8+SznDmMqDbCKpi+PqbQNiPzzNp25E7A0P0oT EXMvm+fTeFqh7RjcCchg6Bk/y+58qKFXtsgPo/JSpnwpcxQQiwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHlkxCMHBjIfhN86jP7DI3QKXLsHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYTk4 NDhhZC01ZWY5LTQ4YjEtOTFjNS03ZmFmNjllOWY2YTIvYWE5ODQ4YWQtNWVmOS00 OGIxLTkxYzUtN2ZhZjY5ZTlmNmEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWE5ODQ4YWQtNWVmOS00OGIxLTkx YzUtN2ZhZjY5ZTlmNmEyL2FhOTg0OGFkLTVlZjktNDhiMS05MWM1LTdmYWY2OWU5 ZjZhMi5jcmwwHwYDVR0jBBgwFoAUM2cIBZX4yyK8ETWltT4PWQ/a/XAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYTk4NDhhZC01ZWY5LTQ4YjEtOTFjNS03ZmFm NjllOWY2YTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB+RYXVYiTZj15kz3S3DIrA Q+6WIne1UsqddCmTJTG+vFgMBIl9bCMgPtFHsTcLulwu4KkeDkPhtC8qDvIpesjB SQqNkdJ4fpGUN6R8uQXpIVjNhxeqoKVSBrRC2uTk6xwMv0s9jIY/QnOK3V4aRN4s xNn63GyJkfTa8hJzNCf2qlnyKeRr++sYoUVc+/5nx4uS1kf7uLWzQoeo8fIIcRJp DzL6JkQMKpkprTVLOcgqV3Iu8txhxoz7QiED4ewlfNwiLwdrvqkAoAvCetzlFDi2 9Zp8Pb+ghEVipFQj2QHiupJCMtZi/eVO98bd/aaX20k97QKqk44YkP+POaw9L0fH -----END CERTIFICATE-----Generated at Sat Apr 5 12:09:59 2025 by rpki-client