$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.mft File: df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.mft (raw, json) Hash identifier: pu2OvKOH7eXSscHPKMbqEc1Q/jE6n8JRUMX/OOgyzHo= Subject key identifier: 0E:B8:0C:FF:70:DC:3D:19:B6:84:18:A0:F5:B9:63:57:2B:54:49:80 Authority key identifier: 6A:2F:21:21:3F:15:F9:77:C2:6B:EF:1A:58:1F:41:1C:58:6B:7E:A3 Certificate issuer: /CN=df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e Certificate serial: 010D0C9F432858497E9222D78BBCA0FDCD0CF440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.mft Manifest number: 010D0C9F4328584073A828BB106FC730EFBA8DD0 Signing time: Fri 11 Apr 2025 21:00:03 +0000 Manifest this update: Fri 11 Apr 2025 21:00:03 +0000 Manifest next update: Sun 13 Apr 2025 21:00:00 +0000 Files and hashes: 1: 309d58ec-9dfe-3f07-b602-f7d2c3980950.roa (hash: COgJneaOVWhlOlmVMTMY8/IAsH7dc1axv4tXpgZfa+I=) 2: df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.crl (hash: 7BXVd9yxmN4ZluthJ1269axQbrbdacikrXJiBqfBvUw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7e:92:22:d7:8b:bc:a0:fd:cd:0c:f4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e Validity Not Before: Apr 11 21:00:03 2025 GMT Not After : Apr 13 21:00:00 2025 GMT Subject: CN=2797e545-93d0-466e-b1f7-a451eaacb90c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f1:f2:a4:48:f6:45:9d:fb:36:cc:95:6c:0a: 8a:9f:e1:86:a4:a3:55:fc:ad:9a:e0:b9:74:dd:e2: b4:4c:df:33:fa:79:5e:04:c7:09:cf:aa:b6:b7:45: 8d:0c:6f:4c:c3:35:da:c0:b3:d4:66:82:8f:bf:27: 83:78:9c:54:76:c1:36:ac:ab:e2:04:b4:a2:cf:79: 34:4b:93:9e:e4:34:c3:d9:8d:58:cc:41:b8:b4:c2: fa:e0:71:35:99:9d:76:ab:82:da:3f:06:41:72:81: a4:49:77:47:19:7a:b2:57:8a:50:be:53:ed:68:45: 39:b4:e4:91:00:9c:e7:3f:af:52:b4:6b:29:4a:3a: 6a:8b:6a:5e:65:73:cf:d4:85:b6:36:6b:4d:08:08: 2b:2e:e4:ff:ca:2c:f4:8d:2b:37:fb:59:63:04:78: ee:7a:2e:31:45:d0:ad:a8:e9:7c:fd:b1:2a:b2:41: 3a:04:51:d1:ba:b2:7e:e7:8f:1f:37:12:71:8c:80: d4:25:f2:47:fa:e3:3f:6f:11:1d:40:16:e3:0b:b7: a2:2b:19:7c:08:21:ca:1b:c2:70:a4:18:12:75:53: 3c:48:ca:ce:5f:b7:d3:90:08:c3:24:48:6f:8d:c6: 1d:38:b7:ae:f7:54:85:28:58:df:32:9b:02:cb:1d: 17:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B8:0C:FF:70:DC:3D:19:B6:84:18:A0:F5:B9:63:57:2B:54:49:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.crl X509v3 Authority Key Identifier: keyid:6A:2F:21:21:3F:15:F9:77:C2:6B:EF:1A:58:1F:41:1C:58:6B:7E:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:e8:72:76:dc:22:7d:e5:6a:88:92:74:5e:79:a9:ea:a4:d8: a1:a4:36:89:61:30:8d:6f:3f:71:d6:9a:b4:6e:3c:8c:ba:5b: 15:06:75:bb:a2:be:e1:f4:9e:d4:88:94:ad:f4:42:48:5d:4c: 0c:07:bb:a6:01:97:a5:9f:af:d1:56:51:19:9b:04:0e:29:62: ba:f9:97:7c:1e:f5:46:78:bf:e9:c1:9f:59:5a:f3:62:c9:67: ba:40:dd:32:4c:9c:d1:1c:d1:a3:70:d1:60:9b:98:f8:c4:a9: df:d2:b5:dc:13:d8:db:b4:fa:7a:5c:e8:ad:df:bb:d1:e4:40: 68:88:27:84:f4:af:99:61:22:35:d5:9c:10:bc:0c:38:9a:79: 0f:ff:81:65:b6:48:e3:e4:42:8f:ca:77:73:74:d6:94:d7:8c: cd:3b:f7:ec:57:d2:e7:3b:51:4c:e3:ac:41:05:19:cc:44:90: a4:b5:42:55:58:91:80:42:34:d8:9a:51:f1:50:fd:8b:37:b7: eb:ea:d1:79:e7:84:20:ee:27:6a:58:fc:75:79:35:ac:5f:cd: 62:57:7e:9e:7d:1e:5c:9f:0c:80:8f:99:8f:13:45:b8:54:2c: 6c:60:bb:85:3c:1c:3c:0f:86:7e:24:73:cf:27:90:4d:7a:9d: 35:35:1c:1d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl+kiLXi7yg/c0M9EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY5Njk2ZjYtN2NhNS00ZWI3LWJkMjEtZWFlZTNiMWUz ZjhlMB4XDTI1MDQxMTIxMDAwM1oXDTI1MDQxMzIxMDAwMFowLzEtMCsGA1UEAxMk Mjc5N2U1NDUtOTNkMC00NjZlLWIxZjctYTQ1MWVhYWNiOTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfHypEj2RZ37NsyVbAqKn+GGpKNV/K2a4Ll0 3eK0TN8z+nleBMcJz6q2t0WNDG9MwzXawLPUZoKPvyeDeJxUdsE2rKviBLSiz3k0 S5Oe5DTD2Y1YzEG4tML64HE1mZ12q4LaPwZBcoGkSXdHGXqyV4pQvlPtaEU5tOSR AJznP69StGspSjpqi2peZXPP1IW2NmtNCAgrLuT/yiz0jSs3+1ljBHjuei4xRdCt qOl8/bEqskE6BFHRurJ+548fNxJxjIDUJfJH+uM/bxEdQBbjC7eiKxl8CCHKG8Jw pBgSdVM8SMrOX7fTkAjDJEhvjcYdOLeu91SFKFjfMpsCyx0X9QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFA64DP9w3D0ZtoQYoPW5Y1crVEmAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kZjk2 OTZmNi03Y2E1LTRlYjctYmQyMS1lYWVlM2IxZTNmOGUvZGY5Njk2ZjYtN2NhNS00 ZWI3LWJkMjEtZWFlZTNiMWUzZjhlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZGY5Njk2ZjYtN2NhNS00ZWI3LWJk MjEtZWFlZTNiMWUzZjhlL2RmOTY5NmY2LTdjYTUtNGViNy1iZDIxLWVhZWUzYjFl M2Y4ZS5jcmwwHwYDVR0jBBgwFoAUai8hIT8V+XfCa+8aWB9BHFhrfqMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kZjk2OTZmNi03Y2E1LTRlYjctYmQyMS1lYWVl M2IxZTNmOGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAn6HJ23CJ95WqIknReeanq pNihpDaJYTCNbz9x1pq0bjyMulsVBnW7or7h9J7UiJSt9EJIXUwMB7umAZeln6/R VlEZmwQOKWK6+Zd8HvVGeL/pwZ9ZWvNiyWe6QN0yTJzRHNGjcNFgm5j4xKnf0rXc E9jbtPp6XOit37vR5EBoiCeE9K+ZYSI11ZwQvAw4mnkP/4Fltkjj5EKPyndzdNaU 14zNO/fsV9LnO1FM46xBBRnMRJCktUJVWJGAQjTYmlHxUP2LN7fr6tF554Qg7idq WPx1eTWsX81iV36efR5cnwyAj5mPE0W4VCxsYLuFPBw8D4Z+JHPPJ5BNep01NRwd -----END CERTIFICATE-----Generated at Fri Apr 11 23:39:38 2025 by rpki-client