$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.mft File: 1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.mft (raw, json) Hash identifier: KuGoGCTBu6H+tnW5JUm24XGcKJ/4KLEIsA312xY0wAs= Subject key identifier: 6F:09:D3:54:FA:89:74:D1:17:DD:19:3D:E2:D6:42:20:43:AD:6D:D0 Authority key identifier: 74:22:1F:E6:ED:43:72:AC:5F:84:E8:0C:58:56:B8:4A:27:56:B5:F7 Certificate issuer: /CN=1cf9e56a-5cc3-47a2-a96d-3650c4de45a7 Certificate serial: 010D0C9F43285849518DE2C34CC825791FFFABC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.mft Manifest number: 010D0C9F4328584733F8223248709F44DB210647 Signing time: Wed 26 Mar 2025 18:00:07 +0000 Manifest this update: Wed 26 Mar 2025 18:00:07 +0000 Manifest next update: Sat 29 Mar 2025 18:00:00 +0000 Files and hashes: 1: 0545c8d8-2be5-3872-8fa1-55668d1f1902.roa (hash: gfSXQFHTgq90j4LXbCGJfpLVSlymf8Kh/P9V0qBZmO8=) 2: 1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.crl (hash: KJTl65GeSQmaVhNrQ6vPnZpfx6suajWbsqHejNnlq0A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:51:8d:e2:c3:4c:c8:25:79:1f:ff:ab:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cf9e56a-5cc3-47a2-a96d-3650c4de45a7 Validity Not Before: Mar 26 18:00:07 2025 GMT Not After : Mar 29 18:00:00 2025 GMT Subject: CN=1b2485b1-ccab-49f1-890a-49f5bb8ee53a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6c:68:2f:ab:05:20:b5:dd:7f:aa:6c:17:d9: 98:15:7d:fa:9a:23:bc:fe:09:3a:37:69:f1:c6:4e: c3:25:9f:3c:4a:48:ec:3a:e7:e9:03:23:5d:73:1c: f3:00:14:76:14:30:28:e8:15:58:6a:8f:8a:4f:c9: 6b:72:cf:e4:ce:ee:68:8d:21:e7:1f:2e:90:67:2a: fe:b5:36:9e:51:40:3d:35:ab:d0:f0:38:95:68:36: 9c:76:89:ee:b0:2f:25:7e:9f:41:e9:c0:d1:99:ca: df:38:83:7b:1d:ac:98:ad:63:3d:89:55:dd:66:95: 6b:c8:9f:8e:7d:87:3d:33:94:1c:dd:95:31:9a:43: 86:09:8f:88:a9:61:b9:05:98:b3:85:37:7f:b1:0e: 24:43:40:d5:a7:50:18:3d:9d:1c:7c:8e:a1:2c:8f: ba:75:d2:1f:88:0b:24:1a:40:2f:29:07:fb:18:1c: 76:91:2f:1d:35:3f:31:2e:0e:d9:df:f1:76:07:c4: 07:2c:fd:f9:67:0f:33:c7:15:da:c6:7d:d1:66:4a: 18:7a:ae:50:bf:03:67:f4:03:48:fc:63:ce:94:f1: f3:ed:cc:26:21:a3:5d:9a:f7:48:d6:bd:8a:8e:b3: 89:ec:dc:f6:e0:0e:9d:20:25:0d:22:79:b9:8b:b0: c7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:09:D3:54:FA:89:74:D1:17:DD:19:3D:E2:D6:42:20:43:AD:6D:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.crl X509v3 Authority Key Identifier: keyid:74:22:1F:E6:ED:43:72:AC:5F:84:E8:0C:58:56:B8:4A:27:56:B5:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:ec:2c:8e:0a:91:22:55:d8:78:63:85:b3:13:4c:a7:ea:bd: 33:53:2b:4b:dc:e4:4c:c5:31:7f:b3:1b:15:58:1a:a7:c4:0e: 47:34:f3:82:9b:f2:c1:53:84:73:43:f5:b7:d0:2b:9d:91:d8: d9:fc:1b:96:62:0e:fe:52:02:7d:e7:fd:ca:d4:27:02:57:8d: ef:b3:7d:06:ad:7c:2a:9e:1a:bf:d0:60:fc:0b:f4:ce:24:3e: 5b:34:60:57:bd:66:41:cd:25:03:7b:ef:04:1d:c6:2e:67:01: b5:9a:06:42:80:a5:a3:d2:d4:88:b5:83:d3:98:c0:85:62:82: 32:36:9b:dc:fa:1c:9e:33:ce:65:10:99:52:72:3d:25:17:2e: fe:75:20:06:cd:8c:fc:0b:7f:0d:ef:58:81:9b:ce:17:b5:b2: 0e:a5:f2:f8:f3:b9:fa:17:73:b1:9c:e3:9d:c9:22:87:4c:b4: 0c:58:73:8a:6a:18:1a:48:83:58:38:99:3f:25:b6:41:09:e8: 37:8c:14:79:99:ab:76:9f:86:d0:93:04:a2:b4:bf:aa:87:dc: 67:cf:34:56:30:d5:04:2b:78:86:42:5c:50:02:40:a9:a0:48: d0:98:17:d5:27:72:23:10:11:bc:46:b7:da:88:0b:db:89:8f: 7c:a6:ca:e2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWElRjeLDTMgleR//q8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmOWU1NmEtNWNjMy00N2EyLWE5NmQtMzY1MGM0ZGU0 NWE3MB4XDTI1MDMyNjE4MDAwN1oXDTI1MDMyOTE4MDAwMFowLzEtMCsGA1UEAxMk MWIyNDg1YjEtY2NhYi00OWYxLTg5MGEtNDlmNWJiOGVlNTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWxoL6sFILXdf6psF9mYFX36miO8/gk6N2nx xk7DJZ88SkjsOufpAyNdcxzzABR2FDAo6BVYao+KT8lrcs/kzu5ojSHnHy6QZyr+ tTaeUUA9NavQ8DiVaDacdonusC8lfp9B6cDRmcrfOIN7HayYrWM9iVXdZpVryJ+O fYc9M5Qc3ZUxmkOGCY+IqWG5BZizhTd/sQ4kQ0DVp1AYPZ0cfI6hLI+6ddIfiAsk GkAvKQf7GBx2kS8dNT8xLg7Z3/F2B8QHLP35Zw8zxxXaxn3RZkoYeq5QvwNn9ANI /GPOlPHz7cwmIaNdmvdI1r2KjrOJ7Nz24A6dICUNInm5i7DHJwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFG8J01T6iXTRF90ZPeLWQiBDrW3QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xY2Y5 ZTU2YS01Y2MzLTQ3YTItYTk2ZC0zNjUwYzRkZTQ1YTcvMWNmOWU1NmEtNWNjMy00 N2EyLWE5NmQtMzY1MGM0ZGU0NWE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWNmOWU1NmEtNWNjMy00N2EyLWE5 NmQtMzY1MGM0ZGU0NWE3LzFjZjllNTZhLTVjYzMtNDdhMi1hOTZkLTM2NTBjNGRl NDVhNy5jcmwwHwYDVR0jBBgwFoAUdCIf5u1DcqxfhOgMWFa4SidWtfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xY2Y5ZTU2YS01Y2MzLTQ3YTItYTk2ZC0zNjUw YzRkZTQ1YTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBO7CyOCpEiVdh4Y4WzE0yn 6r0zUytL3ORMxTF/sxsVWBqnxA5HNPOCm/LBU4RzQ/W30CudkdjZ/BuWYg7+UgJ9 5/3K1CcCV43vs30GrXwqnhq/0GD8C/TOJD5bNGBXvWZBzSUDe+8EHcYuZwG1mgZC gKWj0tSItYPTmMCFYoIyNpvc+hyeM85lEJlScj0lFy7+dSAGzYz8C38N71iBm84X tbIOpfL487n6F3OxnOOdySKHTLQMWHOKahgaSINYOJk/JbZBCeg3jBR5mat2n4bQ kwSitL+qh9xnzzRWMNUEK3iGQlxQAkCpoEjQmBfVJ3IjEBG8RrfaiAvbiY98psri -----END CERTIFICATE-----Generated at Thu Mar 27 13:37:15 2025 by rpki-client