$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.mft File: 403dc5cf-0fab-4e03-becf-fa25dffa64b7.mft (raw, json) Hash identifier: zXJU0lHQ0RRetIU4JTBXBSCeZJYcmVKRJ64CpBMowqU= Subject key identifier: 3C:F5:CA:6B:05:2D:A4:EA:43:14:9D:14:D3:89:2F:59:01:55:1B:0F Authority key identifier: 99:CA:0F:8C:17:F2:DB:F1:E3:5C:B1:92:8F:92:1F:E7:45:CA:4E:99 Certificate issuer: /CN=403dc5cf-0fab-4e03-becf-fa25dffa64b7 Certificate serial: 010D0C9F4328584967A7C56140DFBCADE0102680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.mft Manifest number: 010D0C9F43285843578F3527FC8EFC79C417E139 Signing time: Thu 03 Apr 2025 16:00:03 +0000 Manifest this update: Thu 03 Apr 2025 16:00:03 +0000 Manifest next update: Sun 06 Apr 2025 16:00:00 +0000 Files and hashes: 1: 403dc5cf-0fab-4e03-becf-fa25dffa64b7.crl (hash: gBBsNds2EZouzgEtIWP1QqAFHesUjV/M5qYvnGYKSrY=) 2: e5fbb8de-4f18-3d20-aed5-41146169b9b8.roa (hash: /uYY2rg9PwH1weW7lb2yTCtNUZhMwKUU2cd8cvsVyq4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:a7:c5:61:40:df:bc:ad:e0:10:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=403dc5cf-0fab-4e03-becf-fa25dffa64b7 Validity Not Before: Apr 3 16:00:03 2025 GMT Not After : Apr 6 16:00:00 2025 GMT Subject: CN=b121e30e-8d5b-4073-9789-9f9bb49b0c11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:45:76:5d:8f:71:4c:cf:36:6b:8c:1c:c2:fe: 86:1b:18:4d:8d:c9:e5:5d:5a:af:b6:eb:94:ac:e4: 4e:4f:bb:fd:3c:2c:5c:c2:89:b4:74:b1:4c:2b:3d: 2a:ad:b9:0c:95:ee:0f:fb:a2:dd:c6:8e:20:93:b8: 85:fc:3b:f6:6d:90:78:50:23:7a:95:f3:7a:c6:a9: e5:79:18:92:d6:be:71:e7:47:59:00:f9:36:72:15: e6:48:b3:9a:26:f0:ad:ce:34:66:94:a3:1a:fb:e4: d4:e7:33:3d:6e:fe:60:d2:95:9d:a8:81:49:71:f5: ad:e8:1b:28:26:a7:df:68:69:2d:a9:f5:36:73:1b: 88:65:92:35:75:e5:af:37:5c:8a:fe:54:a8:26:ed: df:d9:53:3b:22:01:f7:d4:64:55:a0:d7:79:b5:ba: 04:6c:5a:d8:7a:5e:56:60:0a:c9:9f:ed:8b:85:99: 17:83:f8:cd:cf:45:c7:ca:45:e1:45:25:11:08:ca: 98:22:9d:6f:b1:bd:be:d0:7f:b9:06:e9:49:30:d0: db:29:3d:56:f5:53:49:31:8e:9f:92:49:3b:37:25: c9:a6:8c:32:05:41:ec:4c:79:99:23:ee:cf:a0:78: ee:84:ee:70:5c:09:dc:59:59:0c:e4:62:bb:22:b0: f9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:F5:CA:6B:05:2D:A4:EA:43:14:9D:14:D3:89:2F:59:01:55:1B:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.crl X509v3 Authority Key Identifier: keyid:99:CA:0F:8C:17:F2:DB:F1:E3:5C:B1:92:8F:92:1F:E7:45:CA:4E:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:af:bf:19:3b:c5:46:27:f4:6b:89:a9:ec:d6:41:88:8c:6a: b4:7a:a9:9c:1f:a6:6b:4d:7b:7a:4f:9e:16:23:f6:87:f6:45: cf:1e:7a:9e:c9:cf:1d:93:c2:43:20:f6:7d:a7:ac:47:55:43: b9:ba:08:b7:f8:3f:8d:3a:91:a1:8e:90:13:1f:86:91:0d:a5: 9f:ca:9c:f1:34:92:73:2f:e1:9d:a1:d5:44:ce:ee:c1:7d:64: d2:08:f3:23:f7:9a:37:84:3a:07:7d:4f:cc:3c:1d:d0:48:2f: 19:47:be:72:7b:db:36:88:51:2d:3d:5e:47:0f:7f:3c:77:bd: cf:94:d5:84:3d:bc:df:19:67:7b:00:f8:fc:30:0d:75:23:2e: 85:b1:db:d7:d5:c7:36:f7:1a:72:1e:5c:b0:a7:89:f5:c9:7d: 71:65:4a:02:6f:b8:df:76:9a:c8:f4:b3:79:f4:72:a1:92:88: bc:e9:0a:be:34:a3:cb:25:8d:1d:c6:d4:f0:4f:f7:bc:6c:ed: cb:3b:71:e2:a8:97:6a:1d:d7:27:52:27:e2:d1:fa:fd:b6:8f: d3:be:40:38:d1:f2:d9:cd:e8:ab:3f:29:5e:6b:c8:0f:3c:86: af:ae:8b:b0:5c:ff:87:48:a5:d1:9b:2a:1f:f1:a1:1d:33:12: 2d:38:29:b0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWElnp8VhQN+8reAQJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAzZGM1Y2YtMGZhYi00ZTAzLWJlY2YtZmEyNWRmZmE2 NGI3MB4XDTI1MDQwMzE2MDAwM1oXDTI1MDQwNjE2MDAwMFowLzEtMCsGA1UEAxMk YjEyMWUzMGUtOGQ1Yi00MDczLTk3ODktOWY5YmI0OWIwYzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUV2XY9xTM82a4wcwv6GGxhNjcnlXVqvtuuU rOROT7v9PCxcwom0dLFMKz0qrbkMle4P+6Ldxo4gk7iF/Dv2bZB4UCN6lfN6xqnl eRiS1r5x50dZAPk2chXmSLOaJvCtzjRmlKMa++TU5zM9bv5g0pWdqIFJcfWt6Bso JqffaGktqfU2cxuIZZI1deWvN1yK/lSoJu3f2VM7IgH31GRVoNd5tboEbFrYel5W YArJn+2LhZkXg/jNz0XHykXhRSURCMqYIp1vsb2+0H+5BulJMNDbKT1W9VNJMY6f kkk7NyXJpowyBUHsTHmZI+7PoHjuhO5wXAncWVkM5GK7IrD5ZwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDz1ymsFLaTqQxSdFNOJL1kBVRsPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80MDNk YzVjZi0wZmFiLTRlMDMtYmVjZi1mYTI1ZGZmYTY0YjcvNDAzZGM1Y2YtMGZhYi00 ZTAzLWJlY2YtZmEyNWRmZmE2NGI3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDAzZGM1Y2YtMGZhYi00ZTAzLWJl Y2YtZmEyNWRmZmE2NGI3LzQwM2RjNWNmLTBmYWItNGUwMy1iZWNmLWZhMjVkZmZh NjRiNy5jcmwwHwYDVR0jBBgwFoAUmcoPjBfy2/HjXLGSj5If50XKTpkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80MDNkYzVjZi0wZmFiLTRlMDMtYmVjZi1mYTI1 ZGZmYTY0YjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAxr78ZO8VGJ/Rrians1kGI jGq0eqmcH6ZrTXt6T54WI/aH9kXPHnqeyc8dk8JDIPZ9p6xHVUO5ugi3+D+NOpGh jpATH4aRDaWfypzxNJJzL+GdodVEzu7BfWTSCPMj95o3hDoHfU/MPB3QSC8ZR75y e9s2iFEtPV5HD388d73PlNWEPbzfGWd7APj8MA11Iy6FsdvX1cc29xpyHlywp4n1 yX1xZUoCb7jfdprI9LN59HKhkoi86Qq+NKPLJY0dxtTwT/e8bO3LO3HiqJdqHdcn Uifi0fr9to/TvkA40fLZzeirPylea8gPPIavrouwXP+HSKXRmyof8aEdMxItOCmw -----END CERTIFICATE-----Generated at Thu Apr 3 22:12:47 2025 by rpki-client