$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.mft File: a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.mft (raw, json) Hash identifier: vq9T50TSND/m6xM0KHmJcyKLY1TcvndPXZQqsZct3Gg= Subject key identifier: 58:F0:FD:11:81:43:95:97:AC:64:C4:A6:26:1E:70:79:2F:A7:43:DA Authority key identifier: 68:52:4C:59:0A:31:A3:42:1D:AB:7F:F6:7F:17:0D:9F:64:BE:41:4A Certificate issuer: /CN=a52f3b42-2c19-4141-8d8a-fa84b3d6a49e Certificate serial: 010D0C9F432858496571FF3E5B913DCAE7E5FF58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.mft Manifest number: 010D0C9F43285844428AC3B86B4E57E2FE15F152 Signing time: Wed 02 Apr 2025 21:00:07 +0000 Manifest this update: Wed 02 Apr 2025 21:00:07 +0000 Manifest next update: Fri 04 Apr 2025 21:00:00 +0000 Files and hashes: 1: 9a56588a-a022-38cf-a593-5622658a6eae.roa (hash: HskZYDeANlXauFoy+2sc+pKePe6S52ry2fXGj3xxERs=) 2: a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.crl (hash: m8c2s2dTgdzspTxEuqB5utUNTU574r83bRvWpV2K6hk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:71:ff:3e:5b:91:3d:ca:e7:e5:ff:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a52f3b42-2c19-4141-8d8a-fa84b3d6a49e Validity Not Before: Apr 2 21:00:07 2025 GMT Not After : Apr 4 21:00:00 2025 GMT Subject: CN=dc0ef446-c801-47ff-80f8-e4ac27ec4b31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:2c:61:c4:43:d1:12:b6:2b:ac:e6:36:84:21: 0f:b7:f3:cc:45:cf:f6:d8:41:d2:2c:ea:d9:1f:41: d4:6e:ac:b3:83:e1:6c:aa:29:38:b8:f1:ad:1a:2c: 6b:e4:77:d1:62:8f:33:71:26:6c:16:d8:9b:5f:dd: 82:c2:8a:fd:44:e0:d8:d5:22:94:c1:3a:35:01:79: ac:96:df:4b:60:e8:1a:60:e4:b9:e9:99:4d:8c:9d: 1f:d8:58:91:d8:8a:32:16:08:6e:96:47:b1:54:2f: f1:cd:08:87:92:33:c3:f2:a3:50:c0:50:72:e0:06: 76:4f:0f:90:7e:ea:75:0f:53:46:12:1f:5e:45:b1: 3c:7e:56:22:87:85:e4:d9:2f:ef:57:9c:36:ce:be: fb:5b:72:2f:2f:53:67:1b:de:ac:6b:28:f3:fc:0e: 83:92:68:48:47:fb:1b:1e:a7:4d:e7:93:3d:ac:ae: e4:d3:db:46:72:82:ea:74:f5:c5:4d:0f:6a:0b:1d: dd:74:d8:11:84:8f:27:e2:b7:20:9f:a0:f6:6e:82: 50:98:68:7b:f4:20:7f:7c:33:9f:72:f8:08:7d:35: fb:21:7d:fa:1b:fb:f5:04:10:4a:e4:87:47:eb:97: 3d:04:c3:cc:48:f7:b4:df:ca:37:5e:be:d8:fc:63: b8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F0:FD:11:81:43:95:97:AC:64:C4:A6:26:1E:70:79:2F:A7:43:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.crl X509v3 Authority Key Identifier: keyid:68:52:4C:59:0A:31:A3:42:1D:AB:7F:F6:7F:17:0D:9F:64:BE:41:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:f5:51:55:1f:59:24:ee:65:04:21:9b:35:2d:6d:ab:8c:e8: 90:ea:15:06:76:90:f7:50:91:5a:a3:47:ba:7a:78:0e:b0:5d: 30:a9:a2:e7:04:d6:66:81:a0:0d:a8:ca:fa:4d:ed:da:d6:a0: 53:ec:0c:d4:58:09:ad:55:b7:a7:7e:e3:3e:44:a9:52:ad:03: f5:74:41:1d:62:f0:b5:29:f3:aa:10:8b:3d:fc:a3:dc:d3:9d: 0c:39:34:8f:7a:8a:b5:35:c1:84:da:ff:e2:2b:2a:94:cf:92: c1:b5:60:53:8b:80:47:1b:47:4f:5a:28:bb:99:6d:24:3a:c1: 2e:11:9f:9d:6a:31:75:6a:ea:73:5e:35:cc:2c:c3:08:8b:35: fa:52:b6:06:8f:06:27:9f:9b:4b:11:32:40:61:b3:45:34:f4: 34:05:00:8e:ec:19:2f:f8:74:e2:9d:49:03:c6:be:c1:46:e7: 40:ee:16:50:08:be:88:6d:bd:6f:31:fd:3c:f1:65:54:be:06: f1:75:48:ef:05:63:b3:29:f8:c5:36:a8:0a:79:a1:99:09:26: 48:f2:82:67:f3:20:10:c6:5f:33:d3:8d:fa:b1:d9:52:9b:f5: ef:ca:09:46:a2:38:1f:07:c8:b6:6f:65:20:14:2b:61:27:ae: e2:8a:ac:a8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEllcf8+W5E9yufl/1gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUyZjNiNDItMmMxOS00MTQxLThkOGEtZmE4NGIzZDZh NDllMB4XDTI1MDQwMjIxMDAwN1oXDTI1MDQwNDIxMDAwMFowLzEtMCsGA1UEAxMk ZGMwZWY0NDYtYzgwMS00N2ZmLTgwZjgtZTRhYzI3ZWM0YjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8SxhxEPRErYrrOY2hCEPt/PMRc/22EHSLOrZ H0HUbqyzg+Fsqik4uPGtGixr5HfRYo8zcSZsFtibX92Cwor9RODY1SKUwTo1AXms lt9LYOgaYOS56ZlNjJ0f2FiR2IoyFghulkexVC/xzQiHkjPD8qNQwFBy4AZ2Tw+Q fup1D1NGEh9eRbE8flYih4Xk2S/vV5w2zr77W3IvL1NnG96sayjz/A6DkmhIR/sb HqdN55M9rK7k09tGcoLqdPXFTQ9qCx3ddNgRhI8n4rcgn6D2boJQmGh79CB/fDOf cvgIfTX7IX36G/v1BBBK5IdH65c9BMPMSPe038o3Xr7Y/GO4gwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFjw/RGBQ5WXrGTEpiYecHkvp0PaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hNTJm M2I0Mi0yYzE5LTQxNDEtOGQ4YS1mYTg0YjNkNmE0OWUvYTUyZjNiNDItMmMxOS00 MTQxLThkOGEtZmE4NGIzZDZhNDllLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTUyZjNiNDItMmMxOS00MTQxLThk OGEtZmE4NGIzZDZhNDllL2E1MmYzYjQyLTJjMTktNDE0MS04ZDhhLWZhODRiM2Q2 YTQ5ZS5jcmwwHwYDVR0jBBgwFoAUaFJMWQoxo0Idq3/2fxcNn2S+QUowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hNTJmM2I0Mi0yYzE5LTQxNDEtOGQ4YS1mYTg0 YjNkNmE0OWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAR9VFVH1kk7mUEIZs1LW2r jOiQ6hUGdpD3UJFao0e6engOsF0wqaLnBNZmgaANqMr6Te3a1qBT7AzUWAmtVben fuM+RKlSrQP1dEEdYvC1KfOqEIs9/KPc050MOTSPeoq1NcGE2v/iKyqUz5LBtWBT i4BHG0dPWii7mW0kOsEuEZ+dajF1aupzXjXMLMMIizX6UrYGjwYnn5tLETJAYbNF NPQ0BQCO7Bkv+HTinUkDxr7BRudA7hZQCL6Ibb1vMf088WVUvgbxdUjvBWOzKfjF NqgKeaGZCSZI8oJn8yAQxl8z0436sdlSm/XvyglGojgfB8i2b2UgFCthJ67iiqyo -----END CERTIFICATE-----Generated at Thu Apr 3 22:16:54 2025 by rpki-client