$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft File: 3d21f741-fd91-4158-8853-7388dab3b3e3.mft (raw, json) Hash identifier: NQS/5XfmJq+ySLYa4cAXVAfKYEs41OXdvEQlhACEEyY= Subject key identifier: 03:47:E1:7C:04:A3:D3:3D:F2:4B:64:01:7B:FB:0F:A6:DC:52:65:3A Authority key identifier: A7:AF:BF:E1:62:39:AF:97:9B:56:A5:07:BE:38:09:30:7F:F3:BE:14 Certificate issuer: /CN=3d21f741-fd91-4158-8853-7388dab3b3e3 Certificate serial: 010D0C9F4328584969BFCE0C1C322FE549FD6380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft Manifest number: 010D0C9F4328584073A84C34E2402761CF9DBA4A Signing time: Fri 04 Apr 2025 10:00:07 +0000 Manifest this update: Fri 04 Apr 2025 10:00:07 +0000 Manifest next update: Sun 06 Apr 2025 10:00:00 +0000 Files and hashes: 1: 3d21f741-fd91-4158-8853-7388dab3b3e3.crl (hash: 1mqksB5FzMP6eK6Q2a3OOR8yU7sv2CWHw5IaFfvU+F4=) 2: 90ad5afb-11a5-3a7e-af84-85ae08f294f7.roa (hash: Pf/eEavoavSj8cf+DZrqxYoYy76xG/WME9BN69jX+7o=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:69:bf:ce:0c:1c:32:2f:e5:49:fd:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d21f741-fd91-4158-8853-7388dab3b3e3 Validity Not Before: Apr 4 10:00:07 2025 GMT Not After : Apr 6 10:00:00 2025 GMT Subject: CN=257e4fbe-5f11-4a91-a7cb-bff10c35c0cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7a:df:76:da:c7:83:b6:8b:8e:a3:9b:1d:f7: 9f:ee:75:67:a9:64:da:ba:5c:98:b3:59:63:19:01: 4b:82:a0:28:26:90:e6:7d:c0:9f:2f:2c:29:2d:e2: 8c:dc:30:07:60:b1:3f:4a:27:77:b4:16:1c:16:61: 27:f5:9c:95:0f:22:f4:e4:a2:36:e6:3c:36:91:11: 17:f2:e7:ce:9c:cd:11:e7:90:b4:1a:81:7e:65:e4: 68:5c:f6:14:d0:7b:55:f9:c2:5a:b3:55:c1:d4:f4: d5:2c:22:5d:b9:5c:d2:e4:df:a6:77:98:c4:3e:50: bc:b3:f5:60:8c:20:a7:81:02:32:95:70:8a:7a:5e: b8:8e:17:67:3b:5e:82:a6:fe:73:cc:72:cd:75:40: 19:68:4a:da:8b:74:43:b0:c9:14:50:83:5e:16:44: d8:3d:46:c4:1b:cb:c3:61:1e:17:f8:ad:f4:0a:74: 9c:4f:1d:71:cf:55:60:4e:d5:c2:b9:78:ac:98:64: cb:c3:06:af:a0:c3:5d:27:e6:4a:7e:14:2e:de:94: 56:c7:62:a1:31:a0:93:39:e6:39:b9:36:f5:2b:1d: 27:35:a4:a2:58:cb:71:bd:aa:89:88:d3:a6:68:4f: 40:26:4c:24:a5:62:01:cf:1a:96:6e:9f:38:18:c4: 83:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:47:E1:7C:04:A3:D3:3D:F2:4B:64:01:7B:FB:0F:A6:DC:52:65:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.crl X509v3 Authority Key Identifier: keyid:A7:AF:BF:E1:62:39:AF:97:9B:56:A5:07:BE:38:09:30:7F:F3:BE:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:76:c7:cb:b3:7b:75:a9:0c:b2:4a:c8:63:64:3c:ad:6c:09: 1e:7a:55:4a:4b:7b:f4:64:f0:b9:4e:dd:b2:6b:e0:22:89:25: 49:c0:a3:1f:6d:70:fa:b9:0a:d4:15:11:70:6f:b1:df:5a:f3: c8:53:10:49:d2:48:a1:2c:74:a5:01:bd:0d:60:4e:97:17:34: 98:9a:c8:cf:a0:1e:51:2e:ff:18:03:d4:0e:c6:1f:68:0a:a8: 69:e4:fa:6a:66:10:70:16:00:1f:e5:af:3b:17:41:6b:72:b2: be:23:b2:91:b4:30:22:dc:cb:96:f8:87:25:a8:41:b3:63:d4: ae:38:67:2f:33:8b:67:14:53:2d:ce:36:c7:68:68:a4:07:46: ce:31:5e:dc:b2:53:99:c5:c4:5a:f3:17:3e:e8:7a:da:05:b8: 10:c4:3a:17:b0:39:20:56:55:4a:71:58:71:d6:ad:22:7d:01: 11:9e:a6:8a:39:2b:77:8f:49:29:31:de:19:c2:76:8b:95:09: 76:9f:43:f0:d3:a9:fa:78:76:cb:0e:0d:17:cd:b0:b6:fc:01: 51:e5:1a:3e:a7:3b:ed:24:6b:9c:ba:0c:cd:dc:70:42:52:0b: 9c:5f:b0:c6:45:bb:25:46:38:b9:32:51:be:a5:a7:f4:67:bd: 82:de:c8:0e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWElpv84MHDIv5Un9Y4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QyMWY3NDEtZmQ5MS00MTU4LTg4NTMtNzM4OGRhYjNi M2UzMB4XDTI1MDQwNDEwMDAwN1oXDTI1MDQwNjEwMDAwMFowLzEtMCsGA1UEAxMk MjU3ZTRmYmUtNWYxMS00YTkxLWE3Y2ItYmZmMTBjMzVjMGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33rfdtrHg7aLjqObHfef7nVnqWTaulyYs1lj GQFLgqAoJpDmfcCfLywpLeKM3DAHYLE/Sid3tBYcFmEn9ZyVDyL05KI25jw2kREX 8ufOnM0R55C0GoF+ZeRoXPYU0HtV+cJas1XB1PTVLCJduVzS5N+md5jEPlC8s/Vg jCCngQIylXCKel64jhdnO16Cpv5zzHLNdUAZaErai3RDsMkUUINeFkTYPUbEG8vD YR4X+K30CnScTx1xz1VgTtXCuXismGTLwwavoMNdJ+ZKfhQu3pRWx2KhMaCTOeY5 uTb1Kx0nNaSiWMtxvaqJiNOmaE9AJkwkpWIBzxqWbp84GMSDOQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFANH4XwEo9M98ktkAXv7D6bcUmU6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZDIx Zjc0MS1mZDkxLTQxNTgtODg1My03Mzg4ZGFiM2IzZTMvM2QyMWY3NDEtZmQ5MS00 MTU4LTg4NTMtNzM4OGRhYjNiM2UzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2QyMWY3NDEtZmQ5MS00MTU4LTg4 NTMtNzM4OGRhYjNiM2UzLzNkMjFmNzQxLWZkOTEtNDE1OC04ODUzLTczODhkYWIz YjNlMy5jcmwwHwYDVR0jBBgwFoAUp6+/4WI5r5ebVqUHvjgJMH/zvhQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZDIxZjc0MS1mZDkxLTQxNTgtODg1My03Mzg4 ZGFiM2IzZTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQABdsfLs3t1qQyySshjZDyt bAkeelVKS3v0ZPC5Tt2ya+AiiSVJwKMfbXD6uQrUFRFwb7HfWvPIUxBJ0kihLHSl Ab0NYE6XFzSYmsjPoB5RLv8YA9QOxh9oCqhp5PpqZhBwFgAf5a87F0FrcrK+I7KR tDAi3MuW+IclqEGzY9SuOGcvM4tnFFMtzjbHaGikB0bOMV7cslOZxcRa8xc+6Hra BbgQxDoXsDkgVlVKcVhx1q0ifQERnqaKOSt3j0kpMd4ZwnaLlQl2n0Pw06n6eHbL Dg0XzbC2/AFR5Ro+pzvtJGucugzN3HBCUgucX7DGRbslRji5MlG+paf0Z72C3sgO -----END CERTIFICATE-----Generated at Sat Apr 5 11:19:32 2025 by rpki-client