$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/be8c0be8-820f-49cc-b759-a1cd0b68028b.mft File: be8c0be8-820f-49cc-b759-a1cd0b68028b.mft (raw, json) Hash identifier: hXJsdbfWFZ+86i2jPsI32Hya74Jt3WFiSSpOaizNXmk= Subject key identifier: 80:14:0C:C5:21:5F:76:5C:05:67:05:08:CE:57:48:54:D7:42:EB:68 Authority key identifier: 21:FA:95:74:7B:0C:2F:90:B0:C4:D7:05:92:0F:D1:5A:63:F6:71:05 Certificate issuer: /CN=be8c0be8-820f-49cc-b759-a1cd0b68028b Certificate serial: 010D0C9F4328584967E359BFE9C280309CBD8340 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/be8c0be8-820f-49cc-b759-a1cd0b68028b.mft Manifest number: 010D0C9F43285843F9AB868D8ED2EC70F8C5E4FE Signing time: Thu 03 Apr 2025 18:00:07 +0000 Manifest this update: Thu 03 Apr 2025 18:00:07 +0000 Manifest next update: Sun 06 Apr 2025 18:00:00 +0000 Files and hashes: 1: be8c0be8-820f-49cc-b759-a1cd0b68028b.crl (hash: O8oUe03CwWJ43gJ0W+k9TbYlv4T4PR1wfQsj1nFDNk8=) 2: ca1f1613-d9f3-3dc4-895d-c1ee800070ad.roa (hash: h5DZneWK3F9acUp9MvpDD1Cx072PTSE+524tghUY0Js=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/be8c0be8-820f-49cc-b759-a1cd0b68028b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/be8c0be8-820f-49cc-b759-a1cd0b68028b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:e3:59:bf:e9:c2:80:30:9c:bd:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be8c0be8-820f-49cc-b759-a1cd0b68028b Validity Not Before: Apr 3 18:00:07 2025 GMT Not After : Apr 6 18:00:00 2025 GMT Subject: CN=3051dd24-afd2-4219-9869-e0d9c727bcc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:df:ea:25:1d:00:42:1e:94:53:07:83:69:54: 28:1b:ca:69:11:d7:9e:ec:ed:1b:71:1b:47:2e:65: ca:e4:c3:07:3a:65:38:14:8d:d8:02:c3:b4:1c:b6: 1e:62:4b:6e:8a:ee:18:d7:56:16:9d:71:0c:3c:19: 71:64:e1:ec:23:9a:07:87:cf:9c:00:e5:e2:ea:ff: eb:9a:81:b6:97:3d:0e:ce:e0:97:e2:21:b3:80:5a: 82:a2:25:a6:f1:0d:9d:c8:16:a1:7d:78:e7:18:c6: 71:b6:1c:c0:6c:76:e8:25:74:1b:69:24:65:5c:80: ba:46:d9:0a:9e:dd:ed:38:03:76:5f:a8:2a:47:c3: 0a:7b:2a:79:f8:c1:fd:54:1a:d5:b0:9f:c4:70:d7: 03:fa:80:3b:e6:ad:d5:07:7b:a8:5d:f9:63:67:c5: 3d:e1:b2:37:10:ad:4d:6a:56:a3:19:3b:0c:ca:2f: 58:81:7d:c6:b3:6e:ca:77:91:7d:f5:21:06:ef:e5: 57:cd:66:2f:80:dc:5e:3f:6f:4f:e5:cc:9b:91:74: a2:f2:aa:63:ee:f6:6e:ac:bb:87:9a:f1:36:23:e5: fb:2e:5d:0c:6e:08:3d:7b:5b:16:64:db:45:c4:0c: 8e:2a:1e:ae:88:6f:df:5b:12:9b:b8:ad:a7:01:f6: ba:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:14:0C:C5:21:5F:76:5C:05:67:05:08:CE:57:48:54:D7:42:EB:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/be8c0be8-820f-49cc-b759-a1cd0b68028b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/be8c0be8-820f-49cc-b759-a1cd0b68028b.crl X509v3 Authority Key Identifier: keyid:21:FA:95:74:7B:0C:2F:90:B0:C4:D7:05:92:0F:D1:5A:63:F6:71:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:76:95:af:1e:1c:06:7d:2c:51:47:23:05:0a:d1:75:a1:69: 64:d9:5b:82:2b:e4:2b:b9:21:11:20:95:fa:0e:c7:22:b5:14: fc:b7:07:25:fa:0f:8c:5e:9b:65:8a:1c:f4:07:71:b5:d8:cb: c2:0d:3f:05:f4:3a:10:a8:22:c2:52:1d:0f:f6:f3:87:1a:66: 57:3b:bf:c8:36:64:cf:19:db:07:f5:5e:e9:83:de:93:b6:79: 5a:97:63:0e:0c:72:a5:33:e0:53:e8:f8:c6:0e:1d:bb:fa:ff: a1:44:c6:e6:ac:0b:bc:13:1f:1e:66:4a:64:79:11:fd:bb:3d: 81:8c:ed:ba:ec:8d:bf:59:96:e8:49:0a:19:53:a7:aa:a1:7e: 81:d6:39:fb:ed:e2:ee:cc:dd:c9:46:b0:45:e0:6f:f6:26:65: 5b:1d:43:cd:94:05:34:0b:24:2e:85:c3:60:00:dd:41:74:f1: 03:4a:fd:77:64:bd:c3:b5:87:d6:2c:46:b7:d6:18:66:2c:66: d1:9c:76:bc:e8:2b:2e:39:93:8d:9d:58:62:88:e3:7d:a3:0b: 32:79:bf:30:2d:50:41:c5:de:b8:0a:b5:47:05:d7:b1:27:f5: 82:14:e0:31:de:1f:4c:8e:23:11:74:d2:e8:0c:81:56:23:c9: 2b:06:63:22 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEln41m/6cKAMJy9g0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmU4YzBiZTgtODIwZi00OWNjLWI3NTktYTFjZDBiNjgw MjhiMB4XDTI1MDQwMzE4MDAwN1oXDTI1MDQwNjE4MDAwMFowLzEtMCsGA1UEAxMk MzA1MWRkMjQtYWZkMi00MjE5LTk4NjktZTBkOWM3MjdiY2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09/qJR0AQh6UUweDaVQoG8ppEdee7O0bcRtH LmXK5MMHOmU4FI3YAsO0HLYeYktuiu4Y11YWnXEMPBlxZOHsI5oHh8+cAOXi6v/r moG2lz0OzuCX4iGzgFqCoiWm8Q2dyBahfXjnGMZxthzAbHboJXQbaSRlXIC6RtkK nt3tOAN2X6gqR8MKeyp5+MH9VBrVsJ/EcNcD+oA75q3VB3uoXfljZ8U94bI3EK1N alajGTsMyi9YgX3Gs27Kd5F99SEG7+VXzWYvgNxeP29P5cybkXSi8qpj7vZurLuH mvE2I+X7Ll0Mbgg9e1sWZNtFxAyOKh6uiG/fWxKbuK2nAfa6xwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIAUDMUhX3ZcBWcFCM5XSFTXQutoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iZThj MGJlOC04MjBmLTQ5Y2MtYjc1OS1hMWNkMGI2ODAyOGIvYmU4YzBiZTgtODIwZi00 OWNjLWI3NTktYTFjZDBiNjgwMjhiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmU4YzBiZTgtODIwZi00OWNjLWI3 NTktYTFjZDBiNjgwMjhiL2JlOGMwYmU4LTgyMGYtNDljYy1iNzU5LWExY2QwYjY4 MDI4Yi5jcmwwHwYDVR0jBBgwFoAUIfqVdHsML5CwxNcFkg/RWmP2cQUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iZThjMGJlOC04MjBmLTQ5Y2MtYjc1OS1hMWNk MGI2ODAyOGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAzdpWvHhwGfSxRRyMFCtF1 oWlk2VuCK+QruSERIJX6DscitRT8twcl+g+MXptlihz0B3G12MvCDT8F9DoQqCLC Uh0P9vOHGmZXO7/INmTPGdsH9V7pg96Ttnlal2MODHKlM+BT6PjGDh27+v+hRMbm rAu8Ex8eZkpkeRH9uz2BjO267I2/WZboSQoZU6eqoX6B1jn77eLuzN3JRrBF4G/2 JmVbHUPNlAU0CyQuhcNgAN1BdPEDSv13ZL3DtYfWLEa31hhmLGbRnHa86CsuOZON nVhiiON9owsyeb8wLVBBxd64CrVHBdexJ/WCFOAx3h9MjiMRdNLoDIFWI8krBmMi -----END CERTIFICATE-----Generated at Thu Apr 3 22:23:40 2025 by rpki-client