$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/a120b5d4-da56-49b1-8ae1-7987a6afde99.mft File: a120b5d4-da56-49b1-8ae1-7987a6afde99.mft (raw, json) Hash identifier: o0SgMFnPDrBwqPMMsRcI4M6FhW3zkvMJuR1asDLTxDw= Subject key identifier: 8F:B6:5D:99:1F:24:4E:D9:3B:FD:5C:11:D3:99:56:62:34:F2:9F:E8 Authority key identifier: C0:D7:33:E0:5D:4C:05:6E:3A:7E:94:33:2D:C4:6B:E8:01:48:68:8A Certificate issuer: /CN=a120b5d4-da56-49b1-8ae1-7987a6afde99 Certificate serial: 010D0C9F43285849658FCAC67B7786F48ECF9B40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/a120b5d4-da56-49b1-8ae1-7987a6afde99.mft Manifest number: 010D0C9F43285843EC2B3B6AE919C88C87F39083 Signing time: Wed 02 Apr 2025 22:00:08 +0000 Manifest this update: Wed 02 Apr 2025 22:00:08 +0000 Manifest next update: Sat 05 Apr 2025 22:00:00 +0000 Files and hashes: 1: a120b5d4-da56-49b1-8ae1-7987a6afde99.crl (hash: b91lIcdIL3C8HIFtsJp+T15+Mk5CvrsrNqaIp5jtYsU=) 2: c7fb0120-8473-316e-81b4-70f9121c05f9.roa (hash: cFk+B5WH1ZTHN1uD0ZX0peOFmY2H6QsQhlqoPzS1eTc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/a120b5d4-da56-49b1-8ae1-7987a6afde99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/a120b5d4-da56-49b1-8ae1-7987a6afde99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:8f:ca:c6:7b:77:86:f4:8e:cf:9b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a120b5d4-da56-49b1-8ae1-7987a6afde99 Validity Not Before: Apr 2 22:00:08 2025 GMT Not After : Apr 5 22:00:00 2025 GMT Subject: CN=a34e4025-5f99-4ebb-94d4-deeb8a9bf60c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:5b:94:c9:d5:2f:89:1a:29:eb:36:a8:7f:21: 1d:bc:72:20:55:38:5d:c6:98:b8:4e:e0:01:84:0a: 24:d0:be:4e:e2:62:db:00:5e:d0:7c:27:dd:69:86: 9d:34:3d:c2:58:62:4a:d4:f7:77:e5:de:3e:dd:85: 8c:0e:ab:1d:bb:85:76:e6:77:b2:cb:cd:d3:35:45: f7:6b:1b:67:33:f1:58:f2:c8:35:6f:17:8e:cd:51: 1e:c7:37:7f:69:ae:bd:60:3e:09:08:ba:ff:d3:e5: f7:88:57:46:d6:61:a6:fd:75:e2:93:15:08:75:a9: 36:0c:d4:2c:5c:95:a0:06:ea:57:a8:cb:13:dd:75: 65:5b:a8:0c:80:73:d0:33:8f:ec:11:eb:82:3f:0b: cf:9f:89:d8:e3:dc:74:da:f6:e4:40:9f:71:4c:c4: af:92:71:b4:eb:6b:d3:57:42:c5:c0:6f:62:e6:de: 6d:f3:a4:49:c2:7b:ae:fa:58:67:a3:9b:f8:80:7e: ef:bf:52:6e:10:02:39:36:f0:36:e5:5c:c1:47:1d: 72:23:44:15:3e:1d:8d:ad:fe:e0:d2:06:12:3a:b0: 8f:61:6c:c4:3e:23:50:80:39:1f:44:b6:e0:a6:03: 3f:ff:6a:9b:57:9b:fa:6d:66:4e:03:ea:93:a2:da: 1a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B6:5D:99:1F:24:4E:D9:3B:FD:5C:11:D3:99:56:62:34:F2:9F:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/a120b5d4-da56-49b1-8ae1-7987a6afde99.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/a120b5d4-da56-49b1-8ae1-7987a6afde99.crl X509v3 Authority Key Identifier: keyid:C0:D7:33:E0:5D:4C:05:6E:3A:7E:94:33:2D:C4:6B:E8:01:48:68:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:b2:e5:ee:f0:15:4f:6e:04:ba:60:17:bd:d7:ab:af:b4:cb: e0:eb:f8:17:dc:0d:f3:ef:e6:1a:63:21:12:b5:59:41:16:b3: 6f:77:56:b6:16:c1:a8:24:2e:ad:2a:d7:6a:ab:ff:05:46:2a: 22:03:19:b9:ac:b0:9b:82:48:94:07:6e:81:80:0e:0c:c9:d7: 22:8c:c2:5c:d5:02:73:61:ff:b5:25:c9:f4:d3:99:20:0e:cc: 8b:8e:fd:6b:ae:4d:76:b2:49:67:ad:4a:ee:99:63:74:02:60: de:e5:8c:52:4c:de:02:3b:16:a9:c6:1e:35:56:89:57:17:6b: ee:4a:e8:3c:14:1d:93:0e:d2:49:d6:fe:7e:3f:ec:0d:ea:99: f9:aa:3a:17:bd:ed:d7:0f:f1:ea:d0:4e:7a:f2:b5:d0:7e:c5: b1:ab:92:f9:ef:71:fc:10:81:5e:bd:a5:af:78:75:34:82:73: 9b:cf:35:66:21:c4:39:f8:05:09:89:34:c7:a2:59:79:1a:0e: d3:e6:21:76:1c:fd:da:0f:d7:c1:d8:48:87:ca:0e:0a:09:75: dc:c7:be:af:2f:8e:0b:34:98:5b:9e:e2:ac:8c:4a:7b:4c:91: f0:60:b1:da:f6:f6:62:6c:3b:c2:2e:36:6b:59:c2:6d:92:ac: 9d:d8:f3:a2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEllj8rGe3eG9I7Pm0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTEyMGI1ZDQtZGE1Ni00OWIxLThhZTEtNzk4N2E2YWZk ZTk5MB4XDTI1MDQwMjIyMDAwOFoXDTI1MDQwNTIyMDAwMFowLzEtMCsGA1UEAxMk YTM0ZTQwMjUtNWY5OS00ZWJiLTk0ZDQtZGVlYjhhOWJmNjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVuUydUviRop6zaofyEdvHIgVThdxpi4TuAB hAok0L5O4mLbAF7QfCfdaYadND3CWGJK1Pd35d4+3YWMDqsdu4V25neyy83TNUX3 axtnM/FY8sg1bxeOzVEexzd/aa69YD4JCLr/0+X3iFdG1mGm/XXikxUIdak2DNQs XJWgBupXqMsT3XVlW6gMgHPQM4/sEeuCPwvPn4nY49x02vbkQJ9xTMSvknG062vT V0LFwG9i5t5t86RJwnuu+lhno5v4gH7vv1JuEAI5NvA25VzBRx1yI0QVPh2Nrf7g 0gYSOrCPYWzEPiNQgDkfRLbgpgM//2qbV5v6bWZOA+qTotoaYwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFI+2XZkfJE7ZO/1cEdOZVmI08p/oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMTIw YjVkNC1kYTU2LTQ5YjEtOGFlMS03OTg3YTZhZmRlOTkvYTEyMGI1ZDQtZGE1Ni00 OWIxLThhZTEtNzk4N2E2YWZkZTk5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTEyMGI1ZDQtZGE1Ni00OWIxLThh ZTEtNzk4N2E2YWZkZTk5L2ExMjBiNWQ0LWRhNTYtNDliMS04YWUxLTc5ODdhNmFm ZGU5OS5jcmwwHwYDVR0jBBgwFoAUwNcz4F1MBW46fpQzLcRr6AFIaIowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMTIwYjVkNC1kYTU2LTQ5YjEtOGFlMS03OTg3 YTZhZmRlOTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCHsuXu8BVPbgS6YBe916uv tMvg6/gX3A3z7+YaYyEStVlBFrNvd1a2FsGoJC6tKtdqq/8FRioiAxm5rLCbgkiU B26BgA4MydcijMJc1QJzYf+1Jcn005kgDsyLjv1rrk12sklnrUrumWN0AmDe5YxS TN4COxapxh41VolXF2vuSug8FB2TDtJJ1v5+P+wN6pn5qjoXve3XD/Hq0E568rXQ fsWxq5L573H8EIFevaWveHU0gnObzzVmIcQ5+AUJiTTHoll5Gg7T5iF2HP3aD9fB 2EiHyg4KCXXcx76vL44LNJhbnuKsjEp7TJHwYLHa9vZibDvCLjZrWcJtkqyd2POi -----END CERTIFICATE-----Generated at Thu Apr 3 22:29:43 2025 by rpki-client