$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06adc51b-95f4-44e9-bf6d-3f9a3950feee/06adc51b-95f4-44e9-bf6d-3f9a3950feee.mft File: 06adc51b-95f4-44e9-bf6d-3f9a3950feee.mft (raw, json) Hash identifier: 8yrbxxFo5liav5yGChcNRfO1r56JZ50l5V7+KWgv9bM= Subject key identifier: 3A:A7:AA:9E:24:2E:6F:F6:B9:10:87:EE:FE:0D:10:1B:0B:73:FD:24 Authority key identifier: D0:04:FE:E2:0B:C8:C6:C3:FE:2B:84:25:1C:FF:A8:B3:DA:58:60:D6 Certificate issuer: /CN=06adc51b-95f4-44e9-bf6d-3f9a3950feee Certificate serial: 010D0C9F43285849658FCB292AA07278E7B5B500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06adc51b-95f4-44e9-bf6d-3f9a3950feee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06adc51b-95f4-44e9-bf6d-3f9a3950feee/06adc51b-95f4-44e9-bf6d-3f9a3950feee.mft Manifest number: 010D0C9F43285843F48B49C3C83A3C117E6BE67E Signing time: Wed 02 Apr 2025 22:00:08 +0000 Manifest this update: Wed 02 Apr 2025 22:00:08 +0000 Manifest next update: Fri 04 Apr 2025 22:00:00 +0000 Files and hashes: 1: 06adc51b-95f4-44e9-bf6d-3f9a3950feee.crl (hash: 9rjirKonQbXNob3xVenKR76o6ODX9XF4p/qoWn5XHUQ=) 2: 34ef6e12-2d99-322e-b6b9-72a8c16d248a.roa (hash: mVyG6ffoNb0bneIdKGQQjHYtRdvkLhLGpuwzV1QOIJ8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06adc51b-95f4-44e9-bf6d-3f9a3950feee/06adc51b-95f4-44e9-bf6d-3f9a3950feee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06adc51b-95f4-44e9-bf6d-3f9a3950feee/06adc51b-95f4-44e9-bf6d-3f9a3950feee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06adc51b-95f4-44e9-bf6d-3f9a3950feee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:8f:cb:29:2a:a0:72:78:e7:b5:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06adc51b-95f4-44e9-bf6d-3f9a3950feee Validity Not Before: Apr 2 22:00:08 2025 GMT Not After : Apr 4 22:00:00 2025 GMT Subject: CN=4bda82c8-3fc6-4dc3-9693-303c5bde071b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8a:59:60:b7:b8:d6:38:b4:88:7a:6b:07:c1: 4e:31:19:89:b5:a4:c4:99:de:0f:9e:ca:7f:41:e5: 0f:2f:f4:2b:31:8d:24:df:ef:b6:03:5c:bb:25:8c: 4b:2d:f0:17:05:68:65:2e:bd:0b:5e:4b:9d:94:4a: 60:e3:0f:f6:33:11:af:d1:97:2e:89:1c:02:df:a5: 28:e1:e5:d9:30:74:91:9b:f8:18:37:e3:b2:6a:12: 38:3b:00:b0:d2:e2:79:5e:2c:c0:85:20:4d:58:31: 93:e3:d1:de:56:9b:f3:24:fe:05:fc:b9:99:95:b5: be:4a:77:47:04:6d:47:90:bb:e6:34:b6:37:48:1c: 09:c0:0c:83:16:2d:47:db:41:73:8c:9b:44:c6:9a: f6:83:f3:8b:b8:4d:05:3d:d2:8f:b9:13:21:2c:ae: 6a:ce:3c:9a:bb:09:45:e4:0d:11:10:87:3a:81:25: 6e:04:83:88:7c:74:fd:df:d4:21:84:0d:67:47:2e: 6a:bb:8c:09:67:3e:01:46:b3:09:48:2a:82:68:38: 17:f2:95:31:a9:ca:33:87:6e:00:8e:e1:ae:d2:72: b1:cb:e5:77:a4:9b:7a:7e:b0:0e:4b:7d:60:67:8d: 36:44:f7:67:80:0a:ab:89:bb:96:ea:d4:49:e8:25: 63:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A7:AA:9E:24:2E:6F:F6:B9:10:87:EE:FE:0D:10:1B:0B:73:FD:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06adc51b-95f4-44e9-bf6d-3f9a3950feee/06adc51b-95f4-44e9-bf6d-3f9a3950feee.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06adc51b-95f4-44e9-bf6d-3f9a3950feee/06adc51b-95f4-44e9-bf6d-3f9a3950feee.crl X509v3 Authority Key Identifier: keyid:D0:04:FE:E2:0B:C8:C6:C3:FE:2B:84:25:1C:FF:A8:B3:DA:58:60:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06adc51b-95f4-44e9-bf6d-3f9a3950feee.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:a8:e8:e5:6a:22:1e:88:76:5c:85:45:8b:85:67:00:4f:a5: 68:ee:cb:54:f5:e8:07:62:b9:e0:f1:fc:b2:24:ef:79:b1:c5: bb:bd:87:c4:a5:29:be:8e:04:8e:59:d8:2c:9e:97:8d:1a:ea: 60:ab:e8:9b:be:35:d8:d3:cc:26:5a:9f:0f:87:50:39:85:4f: f3:49:2a:be:d7:f3:6f:e8:01:d9:67:7c:43:2e:86:30:12:70: 4b:c2:c5:99:f1:7d:0b:8a:6d:52:c7:92:49:ed:56:0c:e9:ef: 6f:1c:2c:66:9c:cb:58:8b:27:4c:2d:95:df:ac:d1:d6:08:c3: 0d:89:65:ed:23:6e:5c:c5:25:03:33:09:70:b0:e5:9a:a8:5c: dc:26:fb:b9:c7:7e:11:3b:7b:7e:9d:89:4a:fa:72:13:44:79: 6b:d7:98:7e:f4:ee:ae:71:9a:f0:08:d8:96:35:1c:91:72:ee: 5d:87:80:bd:d1:99:e1:6a:fc:44:5d:60:f9:f5:83:67:b5:95: 51:5d:b9:75:a1:9a:36:0d:0b:07:a6:23:dd:22:36:d6:e1:5a: e6:ee:c8:52:72:8b:ac:be:74:50:14:08:4f:b3:26:aa:26:fe: c4:d3:17:cd:f5:bc:37:ac:f8:ab:c5:af:20:e1:8a:aa:a8:81: f1:6b:30:bc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEllj8spKqByeOe1tQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDZhZGM1MWItOTVmNC00NGU5LWJmNmQtM2Y5YTM5NTBm ZWVlMB4XDTI1MDQwMjIyMDAwOFoXDTI1MDQwNDIyMDAwMFowLzEtMCsGA1UEAxMk NGJkYTgyYzgtM2ZjNi00ZGMzLTk2OTMtMzAzYzViZGUwNzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhopZYLe41ji0iHprB8FOMRmJtaTEmd4Pnsp/ QeUPL/QrMY0k3++2A1y7JYxLLfAXBWhlLr0LXkudlEpg4w/2MxGv0ZcuiRwC36Uo 4eXZMHSRm/gYN+OyahI4OwCw0uJ5XizAhSBNWDGT49HeVpvzJP4F/LmZlbW+SndH BG1HkLvmNLY3SBwJwAyDFi1H20FzjJtExpr2g/OLuE0FPdKPuRMhLK5qzjyauwlF 5A0REIc6gSVuBIOIfHT939QhhA1nRy5qu4wJZz4BRrMJSCqCaDgX8pUxqcozh24A juGu0nKxy+V3pJt6frAOS31gZ402RPdngAqribuW6tRJ6CVjowIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDqnqp4kLm/2uRCH7v4NEBsLc/0kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNmFk YzUxYi05NWY0LTQ0ZTktYmY2ZC0zZjlhMzk1MGZlZWUvMDZhZGM1MWItOTVmNC00 NGU5LWJmNmQtM2Y5YTM5NTBmZWVlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDZhZGM1MWItOTVmNC00NGU5LWJm NmQtM2Y5YTM5NTBmZWVlLzA2YWRjNTFiLTk1ZjQtNDRlOS1iZjZkLTNmOWEzOTUw ZmVlZS5jcmwwHwYDVR0jBBgwFoAU0AT+4gvIxsP+K4QlHP+os9pYYNYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNmFkYzUxYi05NWY0LTQ0ZTktYmY2ZC0zZjlh Mzk1MGZlZWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBtqOjlaiIeiHZchUWLhWcA T6Vo7stU9egHYrng8fyyJO95scW7vYfEpSm+jgSOWdgsnpeNGupgq+ibvjXY08wm Wp8Ph1A5hU/zSSq+1/Nv6AHZZ3xDLoYwEnBLwsWZ8X0Lim1Sx5JJ7VYM6e9vHCxm nMtYiydMLZXfrNHWCMMNiWXtI25cxSUDMwlwsOWaqFzcJvu5x34RO3t+nYlK+nIT RHlr15h+9O6ucZrwCNiWNRyRcu5dh4C90ZnhavxEXWD59YNntZVRXbl1oZo2DQsH piPdIjbW4Vrm7shScousvnRQFAhPsyaqJv7E0xfN9bw3rPirxa8g4YqqqIHxazC8 -----END CERTIFICATE-----Generated at Thu Apr 3 22:10:04 2025 by rpki-client