$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.mft File: 3bfea78e-552c-46d0-a7b4-60f999223238.mft (raw, json) Hash identifier: MjCOJoj495l+ImgSpmgWuZ3ouxDncs8wn/Uny4ydHt8= Subject key identifier: F5:5A:36:BA:8D:B0:43:F5:7E:EE:B0:91:9F:65:E0:95:27:C0:0B:3C Authority key identifier: D7:A9:E9:5F:B8:85:26:BB:3C:57:88:CD:07:2A:BF:B7:6B:2E:8A:96 Certificate issuer: /CN=3bfea78e-552c-46d0-a7b4-60f999223238 Certificate serial: 010D0C9F432858497E1B0EC6312CB55462906280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.mft Manifest number: 010D0C9F43285845DC7F251890046E2B090F5545 Signing time: Fri 11 Apr 2025 17:00:07 +0000 Manifest this update: Fri 11 Apr 2025 17:00:07 +0000 Manifest next update: Sun 13 Apr 2025 17:00:00 +0000 Files and hashes: 1: 3bfea78e-552c-46d0-a7b4-60f999223238.crl (hash: MDxGkgLlPB8w+DJE5ZB53y49I59zkRtBQRqwzJpbbPE=) 2: b07aee0a-5e02-3527-90d1-9ec6e19a26e3.roa (hash: /gJWqB+S10GldL9fpBE/sHoDJH1O/Mh16d8MMVIhEos=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7e:1b:0e:c6:31:2c:b5:54:62:90:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bfea78e-552c-46d0-a7b4-60f999223238 Validity Not Before: Apr 11 17:00:07 2025 GMT Not After : Apr 13 17:00:00 2025 GMT Subject: CN=fe1f1e72-4784-4bc0-b78e-31fce5ae46fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d5:d8:a6:48:29:8e:db:73:f9:06:87:77:20: 33:f6:40:cf:cd:a1:7d:f9:83:41:6b:df:e5:b1:98: 0c:55:30:5c:7a:59:3f:7b:0b:ab:b3:a7:97:74:6b: 38:4c:24:bb:aa:39:48:70:a7:25:80:43:08:71:09: 18:06:22:b1:db:cf:5f:92:98:8f:b5:0c:fa:5f:5a: 37:ee:1b:84:33:e3:86:d0:09:3e:ea:62:dd:49:cd: 18:68:04:a1:53:6d:8e:bd:b5:0b:f0:e4:01:0b:5b: 18:b7:cb:04:fc:27:71:d3:3c:75:6f:b3:33:e6:c1: 96:e6:09:1f:a2:29:78:ca:07:65:6b:dd:95:36:f2: 8f:25:4d:de:d4:a8:9e:e4:c3:5b:f3:7f:80:07:20: e6:79:fb:bc:9e:ec:21:63:82:9d:fa:80:14:3d:ba: ff:32:7a:08:60:30:6f:26:cf:b9:3d:09:0b:34:16: ee:c2:6d:30:42:c3:22:61:07:71:ac:8d:e5:62:61: b2:f1:37:be:cf:e5:21:be:66:67:ee:40:b7:ef:37: 69:c3:6b:da:bb:8c:3c:7a:a6:90:d2:4d:ad:0f:18: ed:af:95:02:8c:f9:18:79:11:79:2d:71:ca:1a:5e: c3:1b:68:4d:fe:62:bb:60:f8:31:d6:c2:35:13:52: 29:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:5A:36:BA:8D:B0:43:F5:7E:EE:B0:91:9F:65:E0:95:27:C0:0B:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.crl X509v3 Authority Key Identifier: keyid:D7:A9:E9:5F:B8:85:26:BB:3C:57:88:CD:07:2A:BF:B7:6B:2E:8A:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:74:a0:ea:ce:9d:a1:f0:d2:1b:60:5c:2a:fb:d8:d4:45:8a: b6:8a:1c:26:28:68:9f:95:88:1b:2a:57:54:44:1f:4b:9e:83: bf:69:7c:50:a5:73:21:2e:ea:83:28:e5:bd:ae:10:e3:5f:d6: bb:14:ab:e6:a3:7b:e8:9c:77:22:96:36:ed:73:93:0c:c2:8e: b3:0e:79:3c:59:dc:4f:de:2f:a6:ce:c8:c6:5b:81:8e:71:6b: 48:42:9c:14:a0:35:ac:0f:90:9a:ac:9e:bb:b8:44:31:9f:1d: 4d:fe:45:77:b8:6d:a7:cf:fb:45:16:76:ca:34:f3:c5:38:ab: d5:73:6c:cc:4a:f3:81:85:e5:84:8f:ee:06:9d:9a:06:3b:d4: 87:d3:d7:9a:07:94:f3:5a:5e:2a:24:fe:38:d6:39:47:a9:41: 74:01:53:d6:87:08:20:79:bc:c1:d8:47:18:98:6b:d2:ce:c6: 95:18:2d:c7:f1:98:f5:0d:9a:81:d7:ba:2f:62:82:45:5d:8b: fe:39:28:9c:77:b4:91:4e:3a:d5:e6:32:f1:6f:c7:c4:d3:ce: 8b:e4:88:77:21:d0:4f:ba:d1:ba:96:a8:54:6e:33:6d:7c:42: d3:47:56:93:6b:74:e5:27:6c:57:69:a9:f1:de:f8:45:a9:9b: 05:f9:75:81 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl+Gw7GMSy1VGKQYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JmZWE3OGUtNTUyYy00NmQwLWE3YjQtNjBmOTk5MjIz MjM4MB4XDTI1MDQxMTE3MDAwN1oXDTI1MDQxMzE3MDAwMFowLzEtMCsGA1UEAxMk ZmUxZjFlNzItNDc4NC00YmMwLWI3OGUtMzFmY2U1YWU0NmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9XYpkgpjttz+QaHdyAz9kDPzaF9+YNBa9/l sZgMVTBcelk/ewurs6eXdGs4TCS7qjlIcKclgEMIcQkYBiKx289fkpiPtQz6X1o3 7huEM+OG0Ak+6mLdSc0YaAShU22OvbUL8OQBC1sYt8sE/Cdx0zx1b7Mz5sGW5gkf oil4ygdla92VNvKPJU3e1Kie5MNb83+AByDmefu8nuwhY4Kd+oAUPbr/MnoIYDBv Js+5PQkLNBbuwm0wQsMiYQdxrI3lYmGy8Te+z+UhvmZn7kC37zdpw2vau4w8eqaQ 0k2tDxjtr5UCjPkYeRF5LXHKGl7DG2hN/mK7YPgx1sI1E1IpZwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPVaNrqNsEP1fu6wkZ9l4JUnwAs8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zYmZl YTc4ZS01NTJjLTQ2ZDAtYTdiNC02MGY5OTkyMjMyMzgvM2JmZWE3OGUtNTUyYy00 NmQwLWE3YjQtNjBmOTk5MjIzMjM4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2JmZWE3OGUtNTUyYy00NmQwLWE3 YjQtNjBmOTk5MjIzMjM4LzNiZmVhNzhlLTU1MmMtNDZkMC1hN2I0LTYwZjk5OTIy MzIzOC5jcmwwHwYDVR0jBBgwFoAU16npX7iFJrs8V4jNByq/t2suipYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zYmZlYTc4ZS01NTJjLTQ2ZDAtYTdiNC02MGY5 OTkyMjMyMzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCUdKDqzp2h8NIbYFwq+9jU RYq2ihwmKGiflYgbKldURB9LnoO/aXxQpXMhLuqDKOW9rhDjX9a7FKvmo3vonHci ljbtc5MMwo6zDnk8WdxP3i+mzsjGW4GOcWtIQpwUoDWsD5CarJ67uEQxnx1N/kV3 uG2nz/tFFnbKNPPFOKvVc2zMSvOBheWEj+4GnZoGO9SH09eaB5TzWl4qJP441jlH qUF0AVPWhwggebzB2EcYmGvSzsaVGC3H8Zj1DZqB17ovYoJFXYv+OSicd7SRTjrV 5jLxb8fE086L5Ih3IdBPutG6lqhUbjNtfELTR1aTa3TlJ2xXaanx3vhFqZsF+XWB -----END CERTIFICATE-----Generated at Fri Apr 11 21:42:16 2025 by rpki-client