$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ae3f9ccc-8d17-4cf1-954c-8f682120fb41/ae3f9ccc-8d17-4cf1-954c-8f682120fb41.mft File: ae3f9ccc-8d17-4cf1-954c-8f682120fb41.mft (raw, json) Hash identifier: t4SpHK60pEvMD45HXTSg6jKV9h8xNSPs1T8z0bwN174= Subject key identifier: 9A:00:CA:8A:5F:AA:60:B0:00:D4:93:D9:DB:F4:15:1B:56:E1:2D:76 Authority key identifier: 93:75:D5:EC:0B:BD:A5:23:C9:99:3C:FD:9E:13:C7:43:FD:02:5A:2B Certificate issuer: /CN=ae3f9ccc-8d17-4cf1-954c-8f682120fb41 Certificate serial: 010D0C9F43285849681EEC0AD0D745CB85392C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ae3f9ccc-8d17-4cf1-954c-8f682120fb41.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ae3f9ccc-8d17-4cf1-954c-8f682120fb41/ae3f9ccc-8d17-4cf1-954c-8f682120fb41.mft Manifest number: 010D0C9F432858444ADEE8C4A95AD0045648E4E3 Signing time: Thu 03 Apr 2025 20:00:07 +0000 Manifest this update: Thu 03 Apr 2025 20:00:07 +0000 Manifest next update: Sat 05 Apr 2025 20:00:00 +0000 Files and hashes: 1: 0f0417d9-41f9-3a42-8f49-5ce16bed8b3a.roa (hash: cfh2MbTLtDWM4kvPH+oPC2qpThZ0dJ6UhcdFs1xcGIo=) 2: ae3f9ccc-8d17-4cf1-954c-8f682120fb41.crl (hash: FW96HnSkkhj7e5lIiF4sBROIcq34WC3JVD8PBhyRymE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ae3f9ccc-8d17-4cf1-954c-8f682120fb41/ae3f9ccc-8d17-4cf1-954c-8f682120fb41.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ae3f9ccc-8d17-4cf1-954c-8f682120fb41/ae3f9ccc-8d17-4cf1-954c-8f682120fb41.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ae3f9ccc-8d17-4cf1-954c-8f682120fb41.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:68:1e:ec:0a:d0:d7:45:cb:85:39:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae3f9ccc-8d17-4cf1-954c-8f682120fb41 Validity Not Before: Apr 3 20:00:07 2025 GMT Not After : Apr 5 20:00:00 2025 GMT Subject: CN=832bcab4-1a50-4f78-b57f-b32da3245596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:5a:fa:00:d9:4c:18:88:fa:26:9f:25:05:23: 2d:2a:11:20:fb:bd:49:e2:9a:dd:59:2e:59:52:45: b8:79:3e:39:bd:12:71:0a:4e:68:df:21:7f:59:36: 80:db:d3:10:36:27:a0:29:8c:93:95:66:3d:6a:ab: 0a:e8:7a:9c:1d:60:3d:25:df:b7:50:e6:7c:de:a5: cb:64:26:2b:b8:67:68:b4:71:f6:4b:4a:6f:1d:cf: 3d:b9:b5:e6:10:65:64:46:69:6b:d0:40:69:7e:18: 0c:97:75:00:2d:d7:c3:e4:70:12:c1:53:e6:f4:90: d5:d9:9c:a5:19:37:9d:6c:71:59:f8:ac:74:42:06: db:0e:c9:94:a6:3d:cc:b0:d9:0a:b3:99:da:29:75: 53:05:c1:04:f3:b6:c5:c1:fc:e0:dc:db:2a:c5:62: 33:00:82:65:5e:8c:a8:73:0d:97:5e:18:2b:c2:7b: 96:86:62:41:f9:b0:07:78:79:41:d6:a5:4c:98:ca: ea:59:61:69:18:01:af:24:e2:38:02:d1:f2:22:ab: c2:76:08:4e:2d:75:2b:53:a4:de:a3:c2:84:63:8b: 96:73:e4:ab:15:70:0a:44:30:de:33:83:f9:ef:1e: bb:9f:ae:0e:ee:f0:8f:71:87:86:cd:95:e5:e5:ad: bb:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:00:CA:8A:5F:AA:60:B0:00:D4:93:D9:DB:F4:15:1B:56:E1:2D:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ae3f9ccc-8d17-4cf1-954c-8f682120fb41/ae3f9ccc-8d17-4cf1-954c-8f682120fb41.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ae3f9ccc-8d17-4cf1-954c-8f682120fb41/ae3f9ccc-8d17-4cf1-954c-8f682120fb41.crl X509v3 Authority Key Identifier: keyid:93:75:D5:EC:0B:BD:A5:23:C9:99:3C:FD:9E:13:C7:43:FD:02:5A:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ae3f9ccc-8d17-4cf1-954c-8f682120fb41.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:c6:9b:a3:ca:27:17:1f:2e:be:05:cf:cb:38:01:04:76:4a: 3b:8e:64:31:60:3e:40:c6:41:f4:2e:01:09:d1:f1:f7:17:88: eb:97:eb:c4:2f:fc:f0:f5:a2:76:f3:1d:68:12:c2:95:40:d6: 08:08:86:07:48:06:34:fa:1d:77:e8:3b:d5:c1:fa:6e:9e:c7: 6e:7b:e5:5c:3b:ce:46:df:7b:5e:7a:46:ee:be:b3:d4:6b:b9: 4d:66:cb:5a:e8:ac:0f:f1:c8:9c:f5:cf:b5:58:77:d0:a5:f2: a8:01:2e:8b:24:0d:79:d6:b7:d4:ac:d5:e1:8f:fe:4e:50:7b: 1f:c3:c8:43:4f:65:be:9a:a0:95:b3:33:e8:62:c8:78:01:3e: 4c:aa:85:87:3c:82:43:fd:1e:18:d9:02:82:0e:69:9a:1f:dd: 39:0b:38:bd:e8:4c:1f:7c:97:8e:d6:c1:70:d8:af:4f:70:d8: 34:fd:b6:99:5b:3c:a2:27:25:7d:03:11:13:dd:c1:ed:9a:08: 41:6e:56:91:39:52:35:e7:e6:52:9f:b4:55:e0:af:d2:6b:29: bb:21:ab:b7:a2:f4:c1:67:ab:e6:5b:5c:e1:dd:69:85:ee:0f: 50:ef:4b:87:b8:83:27:8a:93:50:df:7c:37:86:38:5a:83:c4: d7:24:3f:5e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEloHuwK0NdFy4U5LAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWUzZjljY2MtOGQxNy00Y2YxLTk1NGMtOGY2ODIxMjBm YjQxMB4XDTI1MDQwMzIwMDAwN1oXDTI1MDQwNTIwMDAwMFowLzEtMCsGA1UEAxMk ODMyYmNhYjQtMWE1MC00Zjc4LWI1N2YtYjMyZGEzMjQ1NTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglr6ANlMGIj6Jp8lBSMtKhEg+71J4prdWS5Z UkW4eT45vRJxCk5o3yF/WTaA29MQNiegKYyTlWY9aqsK6HqcHWA9Jd+3UOZ83qXL ZCYruGdotHH2S0pvHc89ubXmEGVkRmlr0EBpfhgMl3UALdfD5HASwVPm9JDV2Zyl GTedbHFZ+Kx0QgbbDsmUpj3MsNkKs5naKXVTBcEE87bFwfzg3NsqxWIzAIJlXoyo cw2XXhgrwnuWhmJB+bAHeHlB1qVMmMrqWWFpGAGvJOI4AtHyIqvCdghOLXUrU6Te o8KEY4uWc+SrFXAKRDDeM4P57x67n64O7vCPcYeGzZXl5a27YQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJoAyopfqmCwANST2dv0FRtW4S12MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hZTNm OWNjYy04ZDE3LTRjZjEtOTU0Yy04ZjY4MjEyMGZiNDEvYWUzZjljY2MtOGQxNy00 Y2YxLTk1NGMtOGY2ODIxMjBmYjQxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYWUzZjljY2MtOGQxNy00Y2YxLTk1 NGMtOGY2ODIxMjBmYjQxL2FlM2Y5Y2NjLThkMTctNGNmMS05NTRjLThmNjgyMTIw ZmI0MS5jcmwwHwYDVR0jBBgwFoAUk3XV7Au9pSPJmTz9nhPHQ/0CWiswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hZTNmOWNjYy04ZDE3LTRjZjEtOTU0Yy04ZjY4 MjEyMGZiNDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA+xpujyicXHy6+Bc/LOAEE dko7jmQxYD5AxkH0LgEJ0fH3F4jrl+vEL/zw9aJ28x1oEsKVQNYICIYHSAY0+h13 6DvVwfpunsdue+VcO85G33teekbuvrPUa7lNZsta6KwP8cic9c+1WHfQpfKoAS6L JA151rfUrNXhj/5OUHsfw8hDT2W+mqCVszPoYsh4AT5MqoWHPIJD/R4Y2QKCDmma H905Czi96EwffJeO1sFw2K9PcNg0/baZWzyiJyV9AxET3cHtmghBblaROVI15+ZS n7RV4K/Saym7Iau3ovTBZ6vmW1zh3WmF7g9Q70uHuIMnipNQ33w3hjhag8TXJD9e -----END CERTIFICATE-----Generated at Thu Apr 3 22:10:56 2025 by rpki-client