$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/868a77c4-49cd-4821-b1f2-58d35028b0ed.mft File: 868a77c4-49cd-4821-b1f2-58d35028b0ed.mft (raw, json) Hash identifier: 9OvYHKi2geAkpoDnOf0gSQG9xgAweonu/JiuC7FwfvA= Subject key identifier: F1:EA:47:D6:7C:33:A9:71:93:65:29:7E:B6:22:B8:AA:AE:5D:37:24 Authority key identifier: A2:19:F0:EB:7A:5F:24:BB:20:59:03:C8:AB:8E:28:00:C8:56:AC:01 Certificate issuer: /CN=868a77c4-49cd-4821-b1f2-58d35028b0ed Certificate serial: 010D0C9F4328584979CD3BD0D899833E37B65580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/868a77c4-49cd-4821-b1f2-58d35028b0ed.mft Manifest number: 010D0C9F432858471C13A2BCD92E1239A14C76D9 Signing time: Thu 10 Apr 2025 04:00:07 +0000 Manifest this update: Thu 10 Apr 2025 04:00:07 +0000 Manifest next update: Sat 12 Apr 2025 04:00:00 +0000 Files and hashes: 1: 868a77c4-49cd-4821-b1f2-58d35028b0ed.crl (hash: 4v0T1SBhqnplKAGHJZpbZA25/LOJz68BqAHzrAzAi7g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/868a77c4-49cd-4821-b1f2-58d35028b0ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/868a77c4-49cd-4821-b1f2-58d35028b0ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:79:cd:3b:d0:d8:99:83:3e:37:b6:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=868a77c4-49cd-4821-b1f2-58d35028b0ed Validity Not Before: Apr 10 04:00:07 2025 GMT Not After : Apr 12 04:00:00 2025 GMT Subject: CN=dd25bb3c-a475-468b-a26b-4c4d09bb9249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ea:aa:32:e2:c1:42:92:2a:4d:eb:1b:c1:b8: cd:81:fa:75:ba:bf:14:35:08:a9:04:20:0d:88:f5: fe:31:cc:56:ff:d1:3a:37:67:62:d6:62:c5:7b:57: 24:a5:75:14:4d:31:6c:34:72:27:3e:10:e8:79:f2: 3e:93:d1:44:ff:f9:6f:cb:7e:2c:b0:00:a0:35:37: b4:44:0e:09:92:b6:45:d6:c4:d2:2e:95:37:12:6c: 1d:7e:3c:79:b6:b5:49:41:f1:ca:9d:68:fc:bb:c1: eb:69:66:64:53:b7:5d:7f:5b:79:b7:61:2d:43:7f: 83:a8:fd:8f:96:15:fe:bc:c2:d3:dd:0d:18:8b:e1: 97:56:b2:6a:fd:c0:aa:b6:20:e0:e5:cf:15:6b:1c: 38:6c:3f:94:cc:18:0b:d7:37:93:67:ed:ca:43:6a: 40:a4:53:56:1e:3e:45:16:1f:d7:71:30:60:21:1d: cd:a6:7a:46:98:48:71:ad:77:3e:c6:a8:ed:2a:39: 10:1d:28:95:8d:6e:38:f7:75:a8:bb:e4:58:30:71: a5:0a:25:66:d9:e5:b1:18:34:ec:fb:54:e7:c5:b6: b3:1a:9a:59:ed:c7:ff:be:8e:af:28:1f:28:c8:62: 3d:f6:10:38:02:fd:46:e6:c5:a7:fb:9f:6d:f5:fe: 31:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:EA:47:D6:7C:33:A9:71:93:65:29:7E:B6:22:B8:AA:AE:5D:37:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/868a77c4-49cd-4821-b1f2-58d35028b0ed.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/868a77c4-49cd-4821-b1f2-58d35028b0ed.crl X509v3 Authority Key Identifier: keyid:A2:19:F0:EB:7A:5F:24:BB:20:59:03:C8:AB:8E:28:00:C8:56:AC:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:f9:3c:b0:cd:0f:60:76:50:bf:c7:74:d3:a1:be:a0:88:d3: ea:de:a4:b0:11:89:7f:88:a2:34:02:9f:8d:8c:1f:81:b1:67: c2:4c:5e:27:d4:54:4a:1e:e0:78:d6:14:23:c7:3a:c5:fe:f6: ac:36:b5:40:b6:5d:52:43:27:7f:1a:5a:61:2e:a2:f2:06:23: 9c:25:41:f2:f7:c7:0a:8c:d4:44:95:07:ef:c1:95:99:20:c6: 7f:85:da:e1:fb:64:b9:1d:34:f5:0c:89:e0:f9:67:5a:04:c3: 04:59:e3:6b:eb:c3:90:ca:c7:db:be:41:bc:08:27:20:e8:e6: 09:96:c2:9a:50:73:a4:71:9c:d8:a8:ad:a4:6e:47:ed:f1:72: d6:7c:4b:31:0a:7a:8e:e9:63:26:42:42:d5:fd:fd:fe:9e:2f: 40:ed:5e:75:f3:28:4a:2f:9c:a0:0e:31:13:12:f4:73:1a:26: 95:a7:18:e3:62:cd:49:84:68:9e:02:5d:8c:c5:68:8a:13:60: 65:96:0b:b5:8f:44:6e:fc:68:65:e6:93:51:9f:5f:41:b2:64: db:c5:85:24:2f:7f:24:2f:fd:b5:ab:27:ba:c6:d6:1a:9b:7b: cb:7d:51:d2:27:4e:ea:33:1a:14:cb:51:07:07:e0:bf:18:64: 37:57:d3:bf -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl5zTvQ2JmDPje2VYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODY4YTc3YzQtNDljZC00ODIxLWIxZjItNThkMzUwMjhi MGVkMB4XDTI1MDQxMDA0MDAwN1oXDTI1MDQxMjA0MDAwMFowLzEtMCsGA1UEAxMk ZGQyNWJiM2MtYTQ3NS00NjhiLWEyNmItNGM0ZDA5YmI5MjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuqqMuLBQpIqTesbwbjNgfp1ur8UNQipBCAN iPX+McxW/9E6N2di1mLFe1ckpXUUTTFsNHInPhDoefI+k9FE//lvy34ssACgNTe0 RA4JkrZF1sTSLpU3Emwdfjx5trVJQfHKnWj8u8HraWZkU7ddf1t5t2EtQ3+DqP2P lhX+vMLT3Q0Yi+GXVrJq/cCqtiDg5c8Vaxw4bD+UzBgL1zeTZ+3KQ2pApFNWHj5F Fh/XcTBgIR3NpnpGmEhxrXc+xqjtKjkQHSiVjW4493Wou+RYMHGlCiVm2eWxGDTs +1TnxbazGppZ7cf/vo6vKB8oyGI99hA4Av1G5sWn+59t9f4x/QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPHqR9Z8M6lxk2UpfrYiuKquXTckMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84Njhh NzdjNC00OWNkLTQ4MjEtYjFmMi01OGQzNTAyOGIwZWQvODY4YTc3YzQtNDljZC00 ODIxLWIxZjItNThkMzUwMjhiMGVkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODY4YTc3YzQtNDljZC00ODIxLWIx ZjItNThkMzUwMjhiMGVkLzg2OGE3N2M0LTQ5Y2QtNDgyMS1iMWYyLTU4ZDM1MDI4 YjBlZC5jcmwwHwYDVR0jBBgwFoAUohnw63pfJLsgWQPIq44oAMhWrAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NjhhNzdjNC00OWNkLTQ4MjEtYjFmMi01OGQz NTAyOGIwZWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBH+TywzQ9gdlC/x3TTob6g iNPq3qSwEYl/iKI0Ap+NjB+BsWfCTF4n1FRKHuB41hQjxzrF/vasNrVAtl1SQyd/ GlphLqLyBiOcJUHy98cKjNRElQfvwZWZIMZ/hdrh+2S5HTT1DIng+WdaBMMEWeNr 68OQysfbvkG8CCcg6OYJlsKaUHOkcZzYqK2kbkft8XLWfEsxCnqO6WMmQkLV/f3+ ni9A7V518yhKL5ygDjETEvRzGiaVpxjjYs1JhGieAl2MxWiKE2Bllgu1j0Ru/Ghl 5pNRn19BsmTbxYUkL38kL/21qye6xtYam3vLfVHSJ07qMxoUy1EHB+C/GGQ3V9O/ -----END CERTIFICATE-----Generated at Thu Apr 10 21:24:50 2025 by rpki-client