$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2.mft File: 9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2.mft (raw, json) Hash identifier: 9y4LWlb3GHQvg6Nmko9W5OPfrCrDcCqgaK3D1kEACh0= Subject key identifier: 17:10:2D:72:37:E4:C0:F1:56:40:B5:20:99:E2:CA:1F:15:C8:65:54 Authority key identifier: 4A:50:AF:35:A5:D1:64:97:78:A1:8A:FD:E4:D2:43:0D:8C:EF:32:49 Certificate issuer: /CN=9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2 Certificate serial: 010D0C9F43285849664268C792A68DB2A9911800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2.mft Manifest number: 010D0C9F432858451D258287B1CF819125FCEF12 Signing time: Thu 03 Apr 2025 04:00:03 +0000 Manifest this update: Thu 03 Apr 2025 04:00:03 +0000 Manifest next update: Sat 05 Apr 2025 04:00:00 +0000 Files and hashes: 1: 9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2.crl (hash: GK8G/GJbIhKinqt0zRJv84/i+QkmbYroDFHqtGhMVbQ=) 2: a32864a7-8943-31ea-94c0-9969594288ea.roa (hash: 5n4uUQ0GF9LUHa7ygsPT6Bejlgwc+UOjEpsitRxCmPo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:66:42:68:c7:92:a6:8d:b2:a9:91:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2 Validity Not Before: Apr 3 04:00:03 2025 GMT Not After : Apr 5 04:00:00 2025 GMT Subject: CN=d738de42-5d9e-4420-8755-3df29b3dfa51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ad:0a:60:37:71:95:7f:de:07:c1:1c:fa:55: ed:12:0c:93:0b:ef:0f:8c:2e:ac:dd:cf:5b:f3:c3: 5a:bd:77:95:ac:f8:a0:a6:68:fe:e6:b7:5e:1a:04: de:30:85:0c:c3:0b:85:12:48:32:94:36:29:26:41: be:1e:9d:c3:c9:55:ee:6c:99:79:d9:22:77:47:74: 98:00:d5:a0:1b:c1:ca:0c:e2:05:d3:a2:bb:fb:9e: 71:58:c8:24:83:c4:c7:d2:bd:dd:ef:e5:24:ff:cd: 2f:f9:ca:8d:2e:55:49:ed:24:f8:97:d9:cb:7e:d2: c9:44:7b:aa:1e:a5:8d:66:65:3c:21:1c:37:f2:29: f8:e4:f0:19:d8:a2:e5:b4:17:3c:d2:c9:37:f3:42: dd:cc:95:45:ab:c1:df:ca:c1:42:d1:cd:ec:9b:bb: 07:a6:90:20:3c:fb:e6:ce:84:79:46:55:6e:81:dc: 9a:39:b3:67:6b:45:2b:5c:76:0d:3c:93:de:ee:c8: 4a:ee:a1:69:06:c0:9b:2f:98:78:ab:0b:16:30:a9: 6a:8a:62:18:7d:98:57:32:98:fa:bb:7e:d6:ea:f9: 6a:d9:bd:ed:0d:4b:1f:fa:86:96:c1:6b:c2:e2:73: a9:b1:ec:93:e7:c8:6a:ea:b8:45:d1:3e:bf:37:26: 4b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:10:2D:72:37:E4:C0:F1:56:40:B5:20:99:E2:CA:1F:15:C8:65:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2.crl X509v3 Authority Key Identifier: keyid:4A:50:AF:35:A5:D1:64:97:78:A1:8A:FD:E4:D2:43:0D:8C:EF:32:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:ac:0c:6a:d9:32:c2:6b:de:df:ba:32:ba:27:04:98:9a:08: 40:7d:af:c8:ad:71:ad:a0:50:45:13:fa:54:96:cc:d1:eb:d4: ec:74:c6:c5:b2:aa:d8:fc:e5:c9:90:c4:a1:20:28:fc:15:aa: a3:2b:f2:69:c5:b5:72:57:c8:0e:49:c4:ca:5b:38:f8:9d:f7: cc:b5:a9:1c:a7:54:32:6c:92:38:ec:eb:04:79:49:29:70:46: 78:a1:af:34:63:20:6e:ff:90:63:e9:26:2a:07:8a:c3:b6:8a: 80:8f:d4:38:9d:f3:00:4d:ab:94:8c:38:de:c8:50:8b:c1:23: 50:63:f2:19:00:1c:f6:7d:1c:f1:ba:5f:3c:45:9e:4d:26:72: c4:5e:b6:af:99:a4:60:b6:4c:fb:a6:03:aa:3c:e4:5e:10:95: 0a:85:11:e1:ee:e0:85:7b:5f:e5:00:e7:e7:91:e9:4b:dc:3b: 89:e0:49:99:52:e0:30:dd:57:94:ce:22:e8:49:14:43:1d:54: 76:be:46:e8:52:cd:99:b5:d7:e7:9f:f6:aa:4a:91:be:24:b7: ad:65:bb:8b:7c:66:98:63:3c:42:64:be:dc:e8:c0:3b:a8:6c: 3c:e9:1a:9c:6b:a9:21:66:5c:c0:2a:cd:c3:80:5c:95:9e:62: a6:66:c0:77 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWElmQmjHkqaNsqmRGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWI3ZjU3YTUtOGFkMS00OWMxLThlNTMtZjZiMTIyZWQ2 MmUyMB4XDTI1MDQwMzA0MDAwM1oXDTI1MDQwNTA0MDAwMFowLzEtMCsGA1UEAxMk ZDczOGRlNDItNWQ5ZS00NDIwLTg3NTUtM2RmMjliM2RmYTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoq0KYDdxlX/eB8Ec+lXtEgyTC+8PjC6s3c9b 88NavXeVrPigpmj+5rdeGgTeMIUMwwuFEkgylDYpJkG+Hp3DyVXubJl52SJ3R3SY ANWgG8HKDOIF06K7+55xWMgkg8TH0r3d7+Uk/80v+cqNLlVJ7ST4l9nLftLJRHuq HqWNZmU8IRw38in45PAZ2KLltBc80sk380LdzJVFq8HfysFC0c3sm7sHppAgPPvm zoR5RlVugdyaObNna0UrXHYNPJPe7shK7qFpBsCbL5h4qwsWMKlqimIYfZhXMpj6 u37W6vlq2b3tDUsf+oaWwWvC4nOpseyT58hq6rhF0T6/NyZLZwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBcQLXI35MDxVkC1IJniyh8VyGVUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85Yjdm NTdhNS04YWQxLTQ5YzEtOGU1My1mNmIxMjJlZDYyZTIvOWI3ZjU3YTUtOGFkMS00 OWMxLThlNTMtZjZiMTIyZWQ2MmUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWI3ZjU3YTUtOGFkMS00OWMxLThl NTMtZjZiMTIyZWQ2MmUyLzliN2Y1N2E1LThhZDEtNDljMS04ZTUzLWY2YjEyMmVk NjJlMi5jcmwwHwYDVR0jBBgwFoAUSlCvNaXRZJd4oYr95NJDDYzvMkkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85YjdmNTdhNS04YWQxLTQ5YzEtOGU1My1mNmIx MjJlZDYyZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAqrAxq2TLCa97fujK6JwSY mghAfa/IrXGtoFBFE/pUlszR69TsdMbFsqrY/OXJkMShICj8FaqjK/JpxbVyV8gO ScTKWzj4nffMtakcp1QybJI47OsEeUkpcEZ4oa80YyBu/5Bj6SYqB4rDtoqAj9Q4 nfMATauUjDjeyFCLwSNQY/IZABz2fRzxul88RZ5NJnLEXravmaRgtkz7pgOqPORe EJUKhRHh7uCFe1/lAOfnkelL3DuJ4EmZUuAw3VeUziLoSRRDHVR2vkboUs2Ztdfn n/aqSpG+JLetZbuLfGaYYzxCZL7c6MA7qGw86Rqca6khZlzAKs3DgFyVnmKmZsB3 -----END CERTIFICATE-----Generated at Thu Apr 3 22:16:55 2025 by rpki-client