$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a76266ac-94ff-42fd-8d98-3392ccde7989/a76266ac-94ff-42fd-8d98-3392ccde7989.mft File: a76266ac-94ff-42fd-8d98-3392ccde7989.mft (raw, json) Hash identifier: tAixZ0ERxlLDz2So+2/whVlSIZ5EXF7mVjm0NgZU6w4= Subject key identifier: 91:40:0F:8D:CB:A2:F3:16:77:5F:79:57:DA:73:79:E3:72:85:38:C6 Authority key identifier: A7:93:92:CE:0F:C3:4C:83:6D:FE:92:65:B1:57:4F:8F:20:0B:16:68 Certificate issuer: /CN=a76266ac-94ff-42fd-8d98-3392ccde7989 Certificate serial: 010D0C9F432858496E66E7613762D325C51BAC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a76266ac-94ff-42fd-8d98-3392ccde7989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a76266ac-94ff-42fd-8d98-3392ccde7989/a76266ac-94ff-42fd-8d98-3392ccde7989.mft Manifest number: 010D0C9F43285847566595CCC3E605BD796B49C5 Signing time: Sun 06 Apr 2025 02:00:03 +0000 Manifest this update: Sun 06 Apr 2025 02:00:03 +0000 Manifest next update: Wed 09 Apr 2025 02:00:00 +0000 Files and hashes: 1: a76266ac-94ff-42fd-8d98-3392ccde7989.crl (hash: qruEXXIyitjpKTKBaZXSrcNdakv+mGgOAjfk8fLi/T0=) 2: d91f3da0-2452-3539-93fa-a235b907b699.roa (hash: +duVJxWkQMALqqR2z0of37bCHOiFWSt0mYsoW5h7Wh4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a76266ac-94ff-42fd-8d98-3392ccde7989/a76266ac-94ff-42fd-8d98-3392ccde7989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a76266ac-94ff-42fd-8d98-3392ccde7989/a76266ac-94ff-42fd-8d98-3392ccde7989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a76266ac-94ff-42fd-8d98-3392ccde7989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6e:66:e7:61:37:62:d3:25:c5:1b:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a76266ac-94ff-42fd-8d98-3392ccde7989 Validity Not Before: Apr 6 02:00:03 2025 GMT Not After : Apr 9 02:00:00 2025 GMT Subject: CN=1fd978cd-ba4f-44c4-b22f-370b06972a7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:55:cc:e7:07:3c:90:9e:8d:1d:8f:52:52:9e: f9:59:65:c0:ed:b3:27:38:64:d1:9a:17:85:d9:c6: 86:37:58:9e:cd:36:2a:5d:40:6f:de:da:67:2b:3c: db:c2:fd:dc:67:8c:60:42:82:47:cf:45:2f:95:24: 96:01:34:18:85:14:52:c5:ed:f9:34:0e:f7:4a:74: 5e:8d:ac:05:9d:86:08:15:07:02:14:9d:4f:34:c4: 1c:ce:be:ba:47:b3:22:7c:ad:17:53:f8:1e:b7:c1: d8:9c:d6:19:9c:59:bd:3f:e9:fd:56:74:3a:df:f8: 51:3b:2d:e9:61:a5:fe:e6:cc:c6:32:dd:04:2b:d2: 14:63:1e:53:c1:c8:8d:e9:ac:15:2f:c9:66:68:fc: 50:0d:47:ed:8a:da:da:37:39:6a:f7:47:68:4b:9c: bd:80:a1:a7:1b:40:02:a7:d8:f6:b4:3a:39:2f:8f: 8c:59:85:dc:07:a7:d6:3c:58:35:db:ae:40:8c:c5: 50:3c:c8:55:52:38:ea:c5:fa:0d:ed:db:8f:c2:56: 3b:26:b5:09:11:a9:e8:0c:a9:94:4c:ed:11:93:aa: be:58:c4:5f:8f:ea:b0:bc:6d:da:e1:44:bd:c7:cd: 57:54:0c:2d:da:86:f2:c3:9b:2e:f8:0c:7e:c6:ca: 3d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:40:0F:8D:CB:A2:F3:16:77:5F:79:57:DA:73:79:E3:72:85:38:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a76266ac-94ff-42fd-8d98-3392ccde7989/a76266ac-94ff-42fd-8d98-3392ccde7989.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a76266ac-94ff-42fd-8d98-3392ccde7989/a76266ac-94ff-42fd-8d98-3392ccde7989.crl X509v3 Authority Key Identifier: keyid:A7:93:92:CE:0F:C3:4C:83:6D:FE:92:65:B1:57:4F:8F:20:0B:16:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a76266ac-94ff-42fd-8d98-3392ccde7989.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:fc:7e:ca:51:d2:b0:2a:21:a7:e3:2c:0e:35:e5:69:b2:ed: 45:8e:06:56:a9:42:43:3c:92:55:7e:66:d4:0e:2f:b9:0a:4b: ea:db:10:8a:90:58:d4:4c:0f:23:21:6d:88:ab:61:5c:78:13: d8:79:e9:77:d1:0b:35:1a:38:19:ea:63:cc:80:5a:79:df:82: 0c:21:c0:e2:03:01:c3:47:47:90:44:81:50:12:14:42:a6:b5: 5a:90:27:dd:b1:4f:69:06:b5:e5:10:0c:e4:96:6c:fd:47:01: 27:d5:d9:63:89:59:9e:c9:a0:83:ee:dc:52:cd:61:62:02:f0: 8a:4c:d9:83:90:f1:a0:c5:37:e4:0f:f5:8e:82:47:cb:ea:34: ce:13:a4:e9:90:4f:dd:f3:b4:00:e1:b4:f8:aa:73:51:1e:f8: 86:cf:d7:c6:24:0c:22:5c:21:4c:a9:9e:21:b2:20:ef:54:3e: 80:44:a6:98:b9:ab:67:a5:18:be:2f:6c:38:b8:b7:16:db:67: 3c:23:29:69:96:78:a4:7f:1c:82:97:04:c4:93:32:99:fc:07: 74:9f:38:b3:53:c1:9a:35:29:3c:5f:cf:0d:a4:e4:0c:87:17: 58:c5:a8:31:81:01:cb:cc:5e:57:bc:7a:d1:cc:c8:a7:f2:be: 90:69:7d:82 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEluZudhN2LTJcUbrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc2MjY2YWMtOTRmZi00MmZkLThkOTgtMzM5MmNjZGU3 OTg5MB4XDTI1MDQwNjAyMDAwM1oXDTI1MDQwOTAyMDAwMFowLzEtMCsGA1UEAxMk MWZkOTc4Y2QtYmE0Zi00NGM0LWIyMmYtMzcwYjA2OTcyYTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVXM5wc8kJ6NHY9SUp75WWXA7bMnOGTRmheF 2caGN1iezTYqXUBv3tpnKzzbwv3cZ4xgQoJHz0UvlSSWATQYhRRSxe35NA73SnRe jawFnYYIFQcCFJ1PNMQczr66R7MifK0XU/get8HYnNYZnFm9P+n9VnQ63/hROy3p YaX+5szGMt0EK9IUYx5TwciN6awVL8lmaPxQDUftitraNzlq90doS5y9gKGnG0AC p9j2tDo5L4+MWYXcB6fWPFg1265AjMVQPMhVUjjqxfoN7duPwlY7JrUJEanoDKmU TO0Rk6q+WMRfj+qwvG3a4US9x81XVAwt2obyw5su+Ax+xso96QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJFAD43LovMWd195V9pzeeNyhTjGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hNzYy NjZhYy05NGZmLTQyZmQtOGQ5OC0zMzkyY2NkZTc5ODkvYTc2MjY2YWMtOTRmZi00 MmZkLThkOTgtMzM5MmNjZGU3OTg5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYTc2MjY2YWMtOTRmZi00MmZkLThk OTgtMzM5MmNjZGU3OTg5L2E3NjI2NmFjLTk0ZmYtNDJmZC04ZDk4LTMzOTJjY2Rl Nzk4OS5jcmwwHwYDVR0jBBgwFoAUp5OSzg/DTINt/pJlsVdPjyALFmgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hNzYyNjZhYy05NGZmLTQyZmQtOGQ5OC0zMzky Y2NkZTc5ODkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCk/H7KUdKwKiGn4ywONeVp su1FjgZWqUJDPJJVfmbUDi+5Ckvq2xCKkFjUTA8jIW2Iq2FceBPYeel30Qs1GjgZ 6mPMgFp534IMIcDiAwHDR0eQRIFQEhRCprVakCfdsU9pBrXlEAzklmz9RwEn1dlj iVmeyaCD7txSzWFiAvCKTNmDkPGgxTfkD/WOgkfL6jTOE6TpkE/d87QA4bT4qnNR HviGz9fGJAwiXCFMqZ4hsiDvVD6ARKaYuatnpRi+L2w4uLcW22c8IylplnikfxyC lwTEkzKZ/Ad0nzizU8GaNSk8X88NpOQMhxdYxagxgQHLzF5XvHrRzMin8r6QaX2C -----END CERTIFICATE-----Generated at Mon Apr 7 00:07:14 2025 by rpki-client