$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03/0b689f43-cae9-48ce-aef4-680ca5613c03.mft File: 0b689f43-cae9-48ce-aef4-680ca5613c03.mft (raw, json) Hash identifier: hTyq4NLOX/uWiNMxaDzkARdn+nSapJ2Y4vblUjQv9uc= Subject key identifier: 82:60:BA:AC:FA:4E:1D:57:E0:B5:E2:F9:E6:87:D6:41:7B:DA:D1:6E Authority key identifier: CD:14:51:E6:3E:52:8A:EA:1D:CA:B1:0F:BD:60:74:61:76:59:B1:A4 Certificate issuer: /CN=0b689f43-cae9-48ce-aef4-680ca5613c03 Certificate serial: 010D0C9F4328584999AC8E5185605FC34C9C5DE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03/0b689f43-cae9-48ce-aef4-680ca5613c03.mft Manifest number: 010D0C9F43285841822CFCCF87820EC23EBD4116 Signing time: Mon 21 Apr 2025 14:00:08 +0000 Manifest this update: Mon 21 Apr 2025 14:00:08 +0000 Manifest next update: Thu 24 Apr 2025 14:00:00 +0000 Files and hashes: 1: 0b689f43-cae9-48ce-aef4-680ca5613c03.crl (hash: wApWyqBqqEvH17sFnwSwLNgJZvDz5muirs6Sco1LATI=) 2: e9570d6d-d9db-3ffb-bf6f-1ca7d4909859.roa (hash: IYGiaKsJY8o9Z6LMYn3/hzkSBQvJTVFD6QrAzK5NOnE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03/0b689f43-cae9-48ce-aef4-680ca5613c03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03/0b689f43-cae9-48ce-aef4-680ca5613c03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:99:ac:8e:51:85:60:5f:c3:4c:9c:5d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b689f43-cae9-48ce-aef4-680ca5613c03 Validity Not Before: Apr 21 14:00:08 2025 GMT Not After : Apr 24 14:00:00 2025 GMT Subject: CN=634eb080-5029-4f3b-b794-bea4993f89a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:48:dd:2b:de:9c:0e:ad:35:78:52:52:15:e4: 5d:1f:59:48:4f:d7:2a:bc:2f:23:0d:82:8f:95:c0: 35:c4:d0:47:c6:89:d7:a2:24:6f:c0:ca:3d:42:32: 18:0b:07:02:a6:48:c8:9a:00:e9:45:71:e0:a8:2c: a4:0d:1e:93:7f:b5:86:9d:8f:d8:93:45:15:d1:01: 78:a2:a6:1d:9d:a0:87:b2:78:6a:0b:c1:c9:1d:c0: b5:ed:f4:80:b0:c4:ea:fb:c9:77:e3:c7:8a:70:24: 47:89:3e:86:29:75:f3:e5:97:fe:51:e8:a8:b9:6d: 78:b6:4c:4a:16:31:f5:c0:e2:f6:6b:16:c1:b2:99: ba:be:b5:22:53:83:53:a9:01:2d:c4:98:24:43:23: 02:57:c3:53:0c:64:26:8d:fe:30:16:66:da:c4:47: f1:02:53:30:03:fc:02:8c:17:d9:b6:dc:4b:76:b0: c8:be:4d:29:51:ed:4e:78:4f:68:89:bc:d0:e1:cc: fb:97:41:cb:dd:d9:8d:cf:df:77:af:ed:ea:85:dc: 66:bc:a0:a8:f8:a3:84:6a:03:e5:59:a5:7a:b5:92: 6c:43:26:61:c8:e4:10:9f:b2:bb:fb:28:eb:8d:31: fb:c4:1c:36:5c:67:6b:d4:50:ba:9b:f1:c5:26:85: 08:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:60:BA:AC:FA:4E:1D:57:E0:B5:E2:F9:E6:87:D6:41:7B:DA:D1:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03/0b689f43-cae9-48ce-aef4-680ca5613c03.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03/0b689f43-cae9-48ce-aef4-680ca5613c03.crl X509v3 Authority Key Identifier: keyid:CD:14:51:E6:3E:52:8A:EA:1D:CA:B1:0F:BD:60:74:61:76:59:B1:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:d6:33:60:0e:c1:74:94:90:fe:6d:c2:ec:48:c8:20:2a:b4: 5a:73:cc:46:50:fb:57:46:00:25:6b:45:3f:c7:9a:12:b2:b1: cd:3e:08:8c:2b:db:7e:13:8a:98:b8:05:4d:11:95:85:64:67: 30:69:8f:bd:00:b8:bc:20:c6:a8:d7:92:a0:4c:7b:68:28:25: 1d:cd:77:1a:e7:ac:bf:65:e9:b9:a7:14:33:38:42:cd:7e:74: a0:e2:14:13:04:47:70:c3:f3:a7:2e:68:4a:82:33:44:48:00: 8c:4f:c0:59:92:75:b8:d0:88:9e:52:d2:9d:b3:ca:7b:f8:4b: 7a:71:11:01:e4:6e:6c:a1:5e:f7:e7:7e:0a:57:41:70:14:fc: 09:b0:ee:82:5d:31:38:fb:44:9d:19:a0:e2:9f:a3:75:45:f9: 14:aa:7f:f3:d0:0d:25:2e:07:1e:a8:39:5a:ce:d3:c1:41:31: cb:79:e1:fd:a6:5a:27:15:99:c8:75:2a:5d:87:bf:68:11:83: eb:e5:37:b1:07:43:8b:dc:64:ba:e1:7c:8d:7c:38:2c:3d:aa: 2b:73:0c:66:a8:88:0a:0b:16:2d:fe:2b:01:10:f3:95:80:ed: e7:db:1b:9f:8e:8f:65:62:32:e1:82:7c:b7:08:a4:cb:84:b7: be:d9:87:34 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmZrI5RhWBfw0ycXeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGI2ODlmNDMtY2FlOS00OGNlLWFlZjQtNjgwY2E1NjEz YzAzMB4XDTI1MDQyMTE0MDAwOFoXDTI1MDQyNDE0MDAwMFowLzEtMCsGA1UEAxMk NjM0ZWIwODAtNTAyOS00ZjNiLWI3OTQtYmVhNDk5M2Y4OWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UjdK96cDq01eFJSFeRdH1lIT9cqvC8jDYKP lcA1xNBHxonXoiRvwMo9QjIYCwcCpkjImgDpRXHgqCykDR6Tf7WGnY/Yk0UV0QF4 oqYdnaCHsnhqC8HJHcC17fSAsMTq+8l348eKcCRHiT6GKXXz5Zf+UeiouW14tkxK FjH1wOL2axbBspm6vrUiU4NTqQEtxJgkQyMCV8NTDGQmjf4wFmbaxEfxAlMwA/wC jBfZttxLdrDIvk0pUe1OeE9oibzQ4cz7l0HL3dmNz993r+3qhdxmvKCo+KOEagPl WaV6tZJsQyZhyOQQn7K7+yjrjTH7xBw2XGdr1FC6m/HFJoUIbQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIJguqz6Th1X4LXi+eaH1kF72tFuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYjY4 OWY0My1jYWU5LTQ4Y2UtYWVmNC02ODBjYTU2MTNjMDMvMGI2ODlmNDMtY2FlOS00 OGNlLWFlZjQtNjgwY2E1NjEzYzAzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGI2ODlmNDMtY2FlOS00OGNlLWFl ZjQtNjgwY2E1NjEzYzAzLzBiNjg5ZjQzLWNhZTktNDhjZS1hZWY0LTY4MGNhNTYx M2MwMy5jcmwwHwYDVR0jBBgwFoAUzRRR5j5SiuodyrEPvWB0YXZZsaQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYjY4OWY0My1jYWU5LTQ4Y2UtYWVmNC02ODBj YTU2MTNjMDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB01jNgDsF0lJD+bcLsSMgg KrRac8xGUPtXRgAla0U/x5oSsrHNPgiMK9t+E4qYuAVNEZWFZGcwaY+9ALi8IMao 15KgTHtoKCUdzXca56y/Zem5pxQzOELNfnSg4hQTBEdww/OnLmhKgjNESACMT8BZ knW40IieUtKds8p7+Et6cREB5G5soV73534KV0FwFPwJsO6CXTE4+0SdGaDin6N1 RfkUqn/z0A0lLgceqDlaztPBQTHLeeH9plonFZnIdSpdh79oEYPr5TexB0OL3GS6 4XyNfDgsPaorcwxmqIgKCxYt/isBEPOVgO3n2xufjo9lYjLhgny3CKTLhLe+2Yc0 -----END CERTIFICATE-----Generated at Mon Apr 21 17:09:26 2025 by rpki-client