$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39/21bd0a7d-6d89-438f-ba8a-8ce161e97d39.mft File: 21bd0a7d-6d89-438f-ba8a-8ce161e97d39.mft (raw, json) Hash identifier: Kupr0/13OiEhNDm6f2+0uvtknlXhqgKlN81B+Hn4y2M= Subject key identifier: 14:0C:46:3B:CD:9D:D6:F5:17:A0:C6:41:84:C2:6B:8C:B6:C0:B1:B1 Authority key identifier: 6F:85:F4:C7:AB:0A:EC:81:A2:D4:F7:4D:14:05:A0:F4:C1:57:79:8C Certificate issuer: /CN=21bd0a7d-6d89-438f-ba8a-8ce161e97d39 Certificate serial: 010D0C9F4328584967A7C3972905158F95CF8C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39/21bd0a7d-6d89-438f-ba8a-8ce161e97d39.mft Manifest number: 010D0C9F432858440CF6C89CD18533AD24A4766B Signing time: Thu 03 Apr 2025 16:00:03 +0000 Manifest this update: Thu 03 Apr 2025 16:00:03 +0000 Manifest next update: Sat 05 Apr 2025 16:00:00 +0000 Files and hashes: 1: 21bd0a7d-6d89-438f-ba8a-8ce161e97d39.crl (hash: 1wE35psD9IDzZrdAr2wGyaH2cUAk4eBWuZKbDUHpKHo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39/21bd0a7d-6d89-438f-ba8a-8ce161e97d39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39/21bd0a7d-6d89-438f-ba8a-8ce161e97d39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:a7:c3:97:29:05:15:8f:95:cf:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bd0a7d-6d89-438f-ba8a-8ce161e97d39 Validity Not Before: Apr 3 16:00:03 2025 GMT Not After : Apr 5 16:00:00 2025 GMT Subject: CN=9d069d1d-cdeb-4d8d-b105-36c14d0ed554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ca:6a:4b:41:32:d1:d7:fc:b6:42:63:27:e9: 48:5b:07:f1:05:d6:1a:5d:9c:a9:95:63:25:02:dc: 0b:70:3e:bd:63:eb:34:94:32:d7:1d:9a:8c:1e:d3: fc:a4:55:37:7f:3c:ac:d0:f7:66:f5:a4:64:18:c2: 22:c8:63:13:24:c5:7a:cf:ff:5c:9c:3f:50:98:9e: f7:ff:1e:5d:ef:08:f9:dd:c4:91:c8:e6:b6:1b:bc: e5:29:72:4c:40:73:20:db:01:ac:45:3a:f7:24:af: 7c:d1:89:b6:2c:13:ac:d0:c9:41:bb:34:91:e7:07: 5a:39:fc:27:af:0d:d9:ef:84:8c:ae:4c:15:f9:25: 3a:6f:e3:ef:b6:e8:60:85:9e:55:98:96:a3:fa:d5: 16:c8:9a:c8:2a:ca:3a:97:49:db:c0:49:27:20:62: 72:5b:ef:1f:50:5e:1a:d1:19:36:6b:cc:18:68:66: 99:e1:c5:e4:6a:5f:58:f5:c8:ba:e5:de:68:61:c5: 2d:c5:97:87:71:6b:73:57:f2:81:0a:1f:4a:0c:31: 0f:0c:04:1f:b5:dd:0e:a6:b5:e4:32:fe:ed:49:31: 5b:3b:07:f6:a0:06:43:8b:91:42:5a:55:7e:3b:2a: 8d:da:3e:a8:a1:71:76:f5:54:7e:d5:dc:7d:3b:d0: 89:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:0C:46:3B:CD:9D:D6:F5:17:A0:C6:41:84:C2:6B:8C:B6:C0:B1:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39/21bd0a7d-6d89-438f-ba8a-8ce161e97d39.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39/21bd0a7d-6d89-438f-ba8a-8ce161e97d39.crl X509v3 Authority Key Identifier: keyid:6F:85:F4:C7:AB:0A:EC:81:A2:D4:F7:4D:14:05:A0:F4:C1:57:79:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:a1:fd:56:3d:c7:e3:ba:ca:36:bf:66:ef:06:5b:0c:b2:0f: 4c:74:f7:94:cf:c7:92:48:f4:11:c3:40:f4:38:b7:2b:58:77: b7:c2:fb:d3:d1:e9:4a:40:1c:ae:9f:a6:c8:92:34:b8:88:30: 1f:f2:9c:fa:0e:13:b1:b7:db:00:42:c2:fc:e8:67:5f:82:24: 2b:a7:8e:01:7b:d5:7d:d9:77:20:54:43:5c:3f:8b:af:33:ef: eb:69:37:7d:29:47:98:f8:0f:57:04:49:f3:92:3c:39:38:52: bd:26:69:e8:46:f2:87:79:c2:8f:d4:c4:08:94:6b:f7:90:a8: fc:f6:73:2e:db:27:24:39:94:71:eb:71:3e:82:84:d0:bb:ec: 79:15:27:c2:e6:4a:3c:c3:34:5b:36:12:d0:5f:12:c6:b3:c0: e0:74:96:b3:a1:5e:ad:f0:45:e4:d0:b6:33:27:06:fb:a1:e6: 28:a0:c3:cd:a1:42:97:b4:ac:db:d7:f4:03:a3:6c:a5:d7:ba: 7e:a4:f5:29:3c:b2:68:71:fe:93:d3:a2:2f:f0:18:33:f6:29: 20:52:b4:0e:35:86:ad:ec:c2:27:6a:f7:e6:01:b6:f0:57:3c: 32:40:17:5f:d8:4e:3c:25:14:27:bf:76:04:ea:87:4c:b0:5a: fd:20:aa:3b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWElnp8OXKQUVj5XPjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFiZDBhN2QtNmQ4OS00MzhmLWJhOGEtOGNlMTYxZTk3 ZDM5MB4XDTI1MDQwMzE2MDAwM1oXDTI1MDQwNTE2MDAwMFowLzEtMCsGA1UEAxMk OWQwNjlkMWQtY2RlYi00ZDhkLWIxMDUtMzZjMTRkMGVkNTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicpqS0Ey0df8tkJjJ+lIWwfxBdYaXZyplWMl AtwLcD69Y+s0lDLXHZqMHtP8pFU3fzys0Pdm9aRkGMIiyGMTJMV6z/9cnD9QmJ73 /x5d7wj53cSRyOa2G7zlKXJMQHMg2wGsRTr3JK980Ym2LBOs0MlBuzSR5wdaOfwn rw3Z74SMrkwV+SU6b+PvtuhghZ5VmJaj+tUWyJrIKso6l0nbwEknIGJyW+8fUF4a 0Rk2a8wYaGaZ4cXkal9Y9ci65d5oYcUtxZeHcWtzV/KBCh9KDDEPDAQftd0OprXk Mv7tSTFbOwf2oAZDi5FCWlV+OyqN2j6ooXF29VR+1dx9O9CJPwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBQMRjvNndb1F6DGQYTCa4y2wLGxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWJk MGE3ZC02ZDg5LTQzOGYtYmE4YS04Y2UxNjFlOTdkMzkvMjFiZDBhN2QtNmQ4OS00 MzhmLWJhOGEtOGNlMTYxZTk3ZDM5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjFiZDBhN2QtNmQ4OS00MzhmLWJh OGEtOGNlMTYxZTk3ZDM5LzIxYmQwYTdkLTZkODktNDM4Zi1iYThhLThjZTE2MWU5 N2QzOS5jcmwwHwYDVR0jBBgwFoAUb4X0x6sK7IGi1PdNFAWg9MFXeYwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWJkMGE3ZC02ZDg5LTQzOGYtYmE4YS04Y2Ux NjFlOTdkMzkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBuof1WPcfjuso2v2bvBlsM sg9MdPeUz8eSSPQRw0D0OLcrWHe3wvvT0elKQByun6bIkjS4iDAf8pz6DhOxt9sA QsL86GdfgiQrp44Be9V92XcgVENcP4uvM+/raTd9KUeY+A9XBEnzkjw5OFK9Jmno RvKHecKP1MQIlGv3kKj89nMu2yckOZRx63E+goTQu+x5FSfC5ko8wzRbNhLQXxLG s8DgdJazoV6t8EXk0LYzJwb7oeYooMPNoUKXtKzb1/QDo2yl17p+pPUpPLJocf6T 06Iv8Bgz9ikgUrQONYat7MInavfmAbbwVzwyQBdf2E48JRQnv3YE6odMsFr9IKo7 -----END CERTIFICATE-----Generated at Thu Apr 3 22:29:40 2025 by rpki-client