$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175/141d1fb1-9841-4771-b75f-7e85f1329175.mft File: 141d1fb1-9841-4771-b75f-7e85f1329175.mft (raw, json) Hash identifier: qUuoCdhuPDgTTsNqgGF+Jvt8yu0TdMKPN2ekbeo/K90= Subject key identifier: 20:D2:4B:B2:D6:5F:13:BD:71:58:36:49:CA:E9:36:0C:2A:02:9F:B7 Authority key identifier: 32:F7:5B:FA:D4:1D:B4:2F:67:4A:39:86:40:97:21:08:A4:FB:86:08 Certificate issuer: /CN=141d1fb1-9841-4771-b75f-7e85f1329175 Certificate serial: 010D0C9F432858496730A45CF2E91D3B95199200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175/141d1fb1-9841-4771-b75f-7e85f1329175.mft Manifest number: 010D0C9F43285843AD9665ABBCE90A0AF2C079FC Signing time: Thu 03 Apr 2025 12:00:03 +0000 Manifest this update: Thu 03 Apr 2025 12:00:03 +0000 Manifest next update: Sat 05 Apr 2025 12:00:00 +0000 Files and hashes: 1: 141d1fb1-9841-4771-b75f-7e85f1329175.crl (hash: qfRhPgIwRn4erEyycGHyDF7UzrqZCUc3o6mgqYSoscI=) 2: ac6d9daf-5bf7-3f4c-9125-9dc6b663c5d2.roa (hash: u/epdzw/Woyr8/xdlAa2iCbmxJdSUnaKsVvAZzy/+z8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175/141d1fb1-9841-4771-b75f-7e85f1329175.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175/141d1fb1-9841-4771-b75f-7e85f1329175.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:30:a4:5c:f2:e9:1d:3b:95:19:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=141d1fb1-9841-4771-b75f-7e85f1329175 Validity Not Before: Apr 3 12:00:03 2025 GMT Not After : Apr 5 12:00:00 2025 GMT Subject: CN=250c92de-7d23-46a8-ba8a-2fdc65246bb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:de:18:60:9d:72:87:b9:e8:05:01:8c:4e:bb: 34:c4:8c:e4:5e:0d:29:b8:2f:13:db:28:1c:14:15: cb:f8:f9:ee:13:4a:1f:04:70:9c:88:40:fd:ac:1a: 2e:6a:84:75:03:64:e8:2e:a6:50:cf:11:c7:d4:1b: ea:3f:89:40:db:9c:ec:74:3f:82:6f:05:80:3f:41: 77:a2:a1:81:66:11:d6:aa:88:ba:ea:f6:ff:c9:51: f3:de:86:ae:51:ef:03:b9:8e:88:34:29:0f:ed:23: ec:13:9a:d6:28:b8:59:28:6a:5a:e8:d5:29:3f:0f: c2:8f:f1:7e:0f:62:6a:84:64:ef:26:d2:6e:0d:fe: 56:cd:d7:62:84:5b:62:0a:98:5e:26:b2:5f:67:c7: 3a:13:de:51:2b:d6:43:0c:9e:b5:bb:6b:38:b9:cf: 03:e5:d8:dd:26:87:dd:ae:cb:f3:73:cd:04:76:08: 0c:1d:c5:ef:45:2d:3a:c6:af:15:b8:2e:05:e9:90: 78:7e:8c:a0:a4:31:e5:64:0f:70:aa:a0:3d:94:f3: 4b:6a:88:ca:d0:14:ac:a0:3d:9f:1d:fc:9c:77:ac: 4f:f0:7d:95:54:8d:f7:f8:ef:b9:d6:53:db:f6:a0: c7:e3:89:e5:99:84:4d:cb:d3:4c:37:3a:e3:0c:c5: ca:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D2:4B:B2:D6:5F:13:BD:71:58:36:49:CA:E9:36:0C:2A:02:9F:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175/141d1fb1-9841-4771-b75f-7e85f1329175.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175/141d1fb1-9841-4771-b75f-7e85f1329175.crl X509v3 Authority Key Identifier: keyid:32:F7:5B:FA:D4:1D:B4:2F:67:4A:39:86:40:97:21:08:A4:FB:86:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:e4:1c:05:f2:37:e5:3e:38:20:48:a4:d3:6e:ad:44:82:3a: 5d:8d:b3:d3:8f:eb:b1:7e:82:bc:5a:ae:8e:1f:c0:dd:8f:95: 53:a6:1a:21:77:f5:d7:a8:d1:e8:05:7c:4f:8f:5f:b0:1d:16: e9:7f:73:ce:93:27:74:a4:a7:f4:cf:3f:2b:28:e8:ca:eb:44: d8:40:04:1e:3a:8c:47:c1:47:57:9e:d4:a3:4f:fb:41:56:71: 26:e9:d3:e3:b5:f4:f6:7b:72:9c:5b:e7:13:7d:00:3f:ed:e8: f1:5b:8b:80:4b:b3:11:ea:98:c7:a7:d6:ee:45:56:14:d8:1b: 66:5c:d0:a6:dc:39:8b:5a:68:38:78:4c:cf:db:74:17:b3:cd: 77:13:56:5a:6b:d2:da:a7:53:f8:cc:7b:ae:70:33:e0:d4:55: 2e:c4:e4:a2:f9:6a:38:20:1f:74:c8:09:da:ac:49:ab:5b:71: fd:56:34:77:ce:47:2f:b3:50:85:d4:84:39:71:f2:88:43:45: 96:38:9f:c1:4a:8c:2e:73:ea:cd:b2:d6:17:d4:d5:cc:7f:88: 8b:c8:da:a9:b5:87:c1:33:88:b0:9d:5d:26:3e:0c:36:8f:6b: 8a:d0:f9:1c:09:7e:e9:f4:12:b7:75:79:03:33:76:e6:94:ba: 7b:17:12:a6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWElnMKRc8ukdO5UZkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQxZDFmYjEtOTg0MS00NzcxLWI3NWYtN2U4NWYxMzI5 MTc1MB4XDTI1MDQwMzEyMDAwM1oXDTI1MDQwNTEyMDAwMFowLzEtMCsGA1UEAxMk MjUwYzkyZGUtN2QyMy00NmE4LWJhOGEtMmZkYzY1MjQ2YmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkd4YYJ1yh7noBQGMTrs0xIzkXg0puC8T2ygc FBXL+PnuE0ofBHCciED9rBouaoR1A2ToLqZQzxHH1BvqP4lA25zsdD+CbwWAP0F3 oqGBZhHWqoi66vb/yVHz3oauUe8DuY6INCkP7SPsE5rWKLhZKGpa6NUpPw/Cj/F+ D2JqhGTvJtJuDf5WzddihFtiCpheJrJfZ8c6E95RK9ZDDJ61u2s4uc8D5djdJofd rsvzc80EdggMHcXvRS06xq8VuC4F6ZB4foygpDHlZA9wqqA9lPNLaojK0BSsoD2f Hfycd6xP8H2VVI33+O+51lPb9qDH44nlmYRNy9NMNzrjDMXK5wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCDSS7LWXxO9cVg2ScrpNgwqAp+3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xNDFk MWZiMS05ODQxLTQ3NzEtYjc1Zi03ZTg1ZjEzMjkxNzUvMTQxZDFmYjEtOTg0MS00 NzcxLWI3NWYtN2U4NWYxMzI5MTc1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTQxZDFmYjEtOTg0MS00NzcxLWI3 NWYtN2U4NWYxMzI5MTc1LzE0MWQxZmIxLTk4NDEtNDc3MS1iNzVmLTdlODVmMTMy OTE3NS5jcmwwHwYDVR0jBBgwFoAUMvdb+tQdtC9nSjmGQJchCKT7hggwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xNDFkMWZiMS05ODQxLTQ3NzEtYjc1Zi03ZTg1 ZjEzMjkxNzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCT5BwF8jflPjggSKTTbq1E gjpdjbPTj+uxfoK8Wq6OH8Ddj5VTphohd/XXqNHoBXxPj1+wHRbpf3POkyd0pKf0 zz8rKOjK60TYQAQeOoxHwUdXntSjT/tBVnEm6dPjtfT2e3KcW+cTfQA/7ejxW4uA S7MR6pjHp9buRVYU2BtmXNCm3DmLWmg4eEzP23QXs813E1Zaa9Lap1P4zHuucDPg 1FUuxOSi+Wo4IB90yAnarEmrW3H9VjR3zkcvs1CF1IQ5cfKIQ0WWOJ/BSowuc+rN stYX1NXMf4iLyNqptYfBM4iwnV0mPgw2j2uK0PkcCX7p9BK3dXkDM3bmlLp7FxKm -----END CERTIFICATE-----Generated at Thu Apr 3 22:28:51 2025 by rpki-client