$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/68b39235-773a-4108-9528-465304a966b3.mft File: 68b39235-773a-4108-9528-465304a966b3.mft (raw, json) Hash identifier: w2xE442Ok/gfs3SMiNNuKGnKeZCLwvNODgGRKEy4HSQ= Subject key identifier: 79:F2:7D:10:03:C4:BD:C5:DF:29:DA:C3:2A:DD:0D:D2:DC:C3:CB:4A Authority key identifier: BE:B7:8E:0F:E3:65:3F:5A:C9:05:7A:62:4C:DC:7B:71:AE:FE:45:01 Certificate issuer: /CN=68b39235-773a-4108-9528-465304a966b3 Certificate serial: 010D0C9F432858497E38D8F2CC770C89B14E31A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/68b39235-773a-4108-9528-465304a966b3.mft Manifest number: 010D0C9F43285840CA72D656213292B3B8FE2BBD Signing time: Fri 11 Apr 2025 18:00:08 +0000 Manifest this update: Fri 11 Apr 2025 18:00:08 +0000 Manifest next update: Mon 14 Apr 2025 18:00:00 +0000 Files and hashes: 1: 68b39235-773a-4108-9528-465304a966b3.crl (hash: RFg+1HpocZxySwOZuloU76LiK+kq+JEr5qQWSLdnel0=) 2: 7b7a9900-18bb-32ef-b8b2-1d6831729c39.roa (hash: ZWuaSU1ACLZFou13P8FWCISy5jS2Np7HIpyisaLA4Ww=) 3: c062b811-5af4-3d93-883f-cd801dbdc422.roa (hash: QlVl0kCMJeig5Fdax19tLNC+phhT9HYvh5N0raYZeD4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/68b39235-773a-4108-9528-465304a966b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/68b39235-773a-4108-9528-465304a966b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7e:38:d8:f2:cc:77:0c:89:b1:4e:31:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b39235-773a-4108-9528-465304a966b3 Validity Not Before: Apr 11 18:00:08 2025 GMT Not After : Apr 14 18:00:00 2025 GMT Subject: CN=605d540e-6f64-40d1-b914-6ea895b6e26e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3f:2f:7d:fe:f9:de:3c:e6:7e:18:67:36:bd: 4f:c1:a7:36:d0:bc:5e:09:f7:71:31:7d:2d:42:78: 2c:fc:92:fe:53:81:b9:88:e4:7e:61:ed:33:b4:ed: ea:1b:44:69:76:29:32:73:d0:94:ad:de:e1:ef:93: 6c:dc:90:e2:36:79:c6:c0:45:2e:28:f8:cc:e9:53: 3d:e1:cb:cc:68:d0:f9:dd:87:f7:d6:25:89:76:ad: 6e:6f:e2:d7:55:5f:4f:80:07:90:3d:73:cf:41:62: 62:f0:97:c5:34:47:3f:3e:7d:30:e1:f6:40:8c:4f: fb:2d:4e:93:34:55:55:ba:02:b7:b9:b3:7e:88:59: e6:db:f5:b3:a7:df:7b:54:3a:a2:aa:80:15:1d:0a: 8d:c1:34:7f:57:43:e4:e6:31:94:f3:8a:19:a1:b6: c5:32:66:47:2f:a1:e7:f8:b3:e2:97:71:f8:f6:18: 57:eb:32:8e:53:61:19:f3:7d:81:fd:e0:e3:f1:4c: 8d:34:77:0e:fe:a8:b6:ac:99:1b:2a:f1:3b:3c:b3: 8e:a2:a0:64:ca:98:9e:05:50:f8:bb:48:a1:dc:42: 62:fa:13:f6:56:e7:8f:c5:13:6b:e2:01:2b:fc:b7: 1a:96:90:9f:d6:9b:98:ed:39:cc:1f:23:db:63:a5: 7c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:F2:7D:10:03:C4:BD:C5:DF:29:DA:C3:2A:DD:0D:D2:DC:C3:CB:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/68b39235-773a-4108-9528-465304a966b3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/68b39235-773a-4108-9528-465304a966b3.crl X509v3 Authority Key Identifier: keyid:BE:B7:8E:0F:E3:65:3F:5A:C9:05:7A:62:4C:DC:7B:71:AE:FE:45:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:42:45:9d:81:92:b7:da:a0:b5:08:c9:67:aa:5b:f4:b6:14: bc:35:80:4a:21:38:97:74:96:ed:83:fb:b3:67:c7:25:cc:62: 43:52:59:56:e9:ef:ba:21:54:f0:86:e6:78:1b:af:b5:fe:cc: 7b:0c:74:e8:35:5b:49:62:af:71:5c:a1:c2:eb:ab:10:78:a0: a0:9d:8b:b9:79:a3:1f:aa:20:af:d3:2a:b2:4d:01:3c:be:9c: f2:0e:49:c3:08:84:2b:fe:03:6f:d7:52:61:9c:b6:14:bc:41: f5:0d:27:f1:85:7e:41:4a:68:a2:4f:95:b0:47:92:07:3b:2c: 54:d4:c0:59:45:9d:4f:b2:66:30:4d:75:35:66:42:44:83:0f: cd:00:6a:ed:24:da:06:cd:fb:c0:3d:ee:f0:b7:67:ea:41:7f: 52:43:77:49:19:85:d3:1c:61:f8:88:80:52:62:15:93:90:42: 1e:35:64:c2:b8:95:e0:c5:e6:7d:86:18:2a:ce:ec:19:9d:8c: 26:d9:e0:9f:82:ec:56:23:d5:13:2b:0d:f2:b4:51:d0:b1:c4: be:95:64:3d:3d:19:9b:31:87:d5:df:e2:bb:be:9a:c5:3e:c5: 5d:a7:ae:6a:8a:69:69:6a:ea:2d:9e:b3:da:cb:d9:f3:53:e3: d5:89:c3:81 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl+ONjyzHcMibFOMaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMzkyMzUtNzczYS00MTA4LTk1MjgtNDY1MzA0YTk2 NmIzMB4XDTI1MDQxMTE4MDAwOFoXDTI1MDQxNDE4MDAwMFowLzEtMCsGA1UEAxMk NjA1ZDU0MGUtNmY2NC00MGQxLWI5MTQtNmVhODk1YjZlMjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuT8vff753jzmfhhnNr1Pwac20LxeCfdxMX0t Qngs/JL+U4G5iOR+Ye0ztO3qG0Rpdikyc9CUrd7h75Ns3JDiNnnGwEUuKPjM6VM9 4cvMaND53Yf31iWJdq1ub+LXVV9PgAeQPXPPQWJi8JfFNEc/Pn0w4fZAjE/7LU6T NFVVugK3ubN+iFnm2/Wzp997VDqiqoAVHQqNwTR/V0Pk5jGU84oZobbFMmZHL6Hn +LPil3H49hhX6zKOU2EZ832B/eDj8UyNNHcO/qi2rJkbKvE7PLOOoqBkypieBVD4 u0ih3EJi+hP2VuePxRNr4gEr/LcalpCf1puY7TnMHyPbY6V8mQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHnyfRADxL3F3ynawyrdDdLcw8tKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82OGIz OTIzNS03NzNhLTQxMDgtOTUyOC00NjUzMDRhOTY2YjMvNjhiMzkyMzUtNzczYS00 MTA4LTk1MjgtNDY1MzA0YTk2NmIzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjhiMzkyMzUtNzczYS00MTA4LTk1 MjgtNDY1MzA0YTk2NmIzLzY4YjM5MjM1LTc3M2EtNDEwOC05NTI4LTQ2NTMwNGE5 NjZiMy5jcmwwHwYDVR0jBBgwFoAUvreOD+NlP1rJBXpiTNx7ca7+RQEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82OGIzOTIzNS03NzNhLTQxMDgtOTUyOC00NjUz MDRhOTY2YjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC4QkWdgZK32qC1CMlnqlv0 thS8NYBKITiXdJbtg/uzZ8clzGJDUllW6e+6IVTwhuZ4G6+1/sx7DHToNVtJYq9x XKHC66sQeKCgnYu5eaMfqiCv0yqyTQE8vpzyDknDCIQr/gNv11JhnLYUvEH1DSfx hX5BSmiiT5WwR5IHOyxU1MBZRZ1PsmYwTXU1ZkJEgw/NAGrtJNoGzfvAPe7wt2fq QX9SQ3dJGYXTHGH4iIBSYhWTkEIeNWTCuJXgxeZ9hhgqzuwZnYwm2eCfguxWI9UT Kw3ytFHQscS+lWQ9PRmbMYfV3+K7vprFPsVdp65qimlpauotnrPay9nzU+PVicOB -----END CERTIFICATE-----Generated at Fri Apr 11 23:32:04 2025 by rpki-client