$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.mft File: b8a29c46-e0f1-4edc-988a-9420affbc339.mft (raw, json) Hash identifier: rGzTpbm5PNydi8Tu5mwKmk3ssPnQ9MZLqW46VARbhpc= Subject key identifier: 5C:0A:98:EE:84:D1:2C:13:37:B2:9D:44:11:7F:71:F2:26:CC:1C:25 Authority key identifier: AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14 Certificate issuer: /CN=b8a29c46-e0f1-4edc-988a-9420affbc339 Certificate serial: 010D0C9F432858497DFD4AB8CE5F33BC6384E080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.mft Manifest number: 010D0C9F4328584073A81AA0A84E185481DE9E63 Signing time: Fri 11 Apr 2025 16:00:07 +0000 Manifest this update: Fri 11 Apr 2025 16:00:07 +0000 Manifest next update: Sun 13 Apr 2025 16:00:00 +0000 Files and hashes: 1: 10192187-defa-3548-b6c6-237adcf28f84.roa (hash: jkedb7uUZ3ShbAypfRLruAUbq24UitXctUdZwlgqyEM=) 2: a805dcee-de5f-32cd-8460-f5c507fc9aac.roa (hash: o4yVEdEN7gau2fq/jiRXpB9MGN7BtByl3FSQtH3+7fA=) 3: b8a29c46-e0f1-4edc-988a-9420affbc339.crl (hash: GSTV8Z6/eoytLNEZ/27mz6xdHU66mv/5i3W8NOVvaPw=) 4: c86fcb92-e2ac-30f3-b3f9-6ebfe86ddd86.roa (hash: 4h6p+7G+1XGUKjxi6wtOHWhKnU+nD6X5JrMdwP2St7o=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:fd:4a:b8:ce:5f:33:bc:63:84:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8a29c46-e0f1-4edc-988a-9420affbc339 Validity Not Before: Apr 11 16:00:07 2025 GMT Not After : Apr 13 16:00:00 2025 GMT Subject: CN=9242b987-29c4-4ae0-b3f5-3214354a3992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3d:09:d7:75:1d:f4:9a:46:c3:c1:33:b8:61: e8:68:ce:d7:a2:0c:d7:f6:23:bb:92:a1:49:f7:14: 19:76:d6:39:13:87:72:18:85:28:5f:0d:11:4e:4c: 50:7a:3a:e3:94:34:b0:1a:56:3f:2a:c5:9e:f2:10: 93:49:5b:10:e4:a3:9e:ee:e4:90:23:d3:15:76:56: 7a:54:18:0b:e5:32:5d:b6:5e:ad:37:d2:3d:67:d4: e3:b4:a2:fa:e2:04:31:87:5e:cc:07:4a:71:30:9f: 10:23:d9:cf:20:a6:82:ae:68:0a:c1:35:d3:2d:e7: a2:c2:f7:54:91:11:e9:f1:5e:81:db:f0:7c:50:3a: b1:51:ae:ad:29:08:22:ba:3e:20:2e:3b:2c:75:0d: 9f:21:88:99:0c:02:68:d6:f9:52:a1:f7:93:f7:6c: e2:ca:8e:30:0b:47:1f:b6:39:c2:34:c3:62:5a:1b: be:f5:d9:e2:10:18:e6:2b:30:3c:e6:f2:cf:8a:91: 31:99:f2:d5:a8:31:d5:60:06:49:86:38:50:fe:9c: af:8c:a6:8f:4c:4c:86:9f:60:0e:be:30:f4:e1:db: e3:54:e8:df:90:5b:bb:1a:65:97:a4:4d:8e:1c:0f: c3:dd:01:a3:99:e7:d1:7a:19:2d:c0:ea:a8:8b:76: 45:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:0A:98:EE:84:D1:2C:13:37:B2:9D:44:11:7F:71:F2:26:CC:1C:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl X509v3 Authority Key Identifier: keyid:AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:a5:bf:60:be:42:cf:c1:05:0c:7d:6a:f1:69:70:26:6e:5a: ca:0e:43:f1:da:e5:c0:88:f3:66:ff:f1:89:61:76:ab:fa:38: a4:86:14:69:0e:0f:88:c0:61:48:c1:34:7a:7c:17:a8:99:cb: 15:c4:e9:4b:1f:19:89:78:b2:b9:bd:aa:51:b4:4f:2b:e2:96: 10:a0:20:04:08:ea:77:e2:7b:0b:63:ff:c9:df:33:4f:79:c4: 56:94:1b:a5:c1:e9:ab:4c:1f:27:23:68:a6:0b:b4:81:d8:c5: 27:f8:6c:c6:fd:6e:c5:30:42:1e:93:bf:de:87:f9:2b:cf:0b: 7e:24:ab:d8:2f:ed:4e:d9:e7:6e:1b:f4:29:d5:37:78:71:5d: ef:ce:10:3d:70:05:eb:07:2e:a5:96:2e:60:52:63:94:92:be: 29:3b:00:d2:4b:dc:95:5c:53:eb:43:3b:37:9e:51:26:e0:31: 9d:51:74:85:a7:92:1e:fa:48:ae:5d:4b:5b:3c:f4:74:6b:92: 26:93:e2:7c:81:99:b9:8e:c3:aa:ac:7e:ca:32:19:1a:13:1b: ec:ea:27:e7:0b:26:6c:ba:41:b2:4e:f2:78:f8:14:07:d3:9d: a1:e0:b1:5a:01:4d:0a:d5:6f:60:ce:c6:34:b8:8a:2b:45:82: a2:c4:be:b0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl9/Uq4zl8zvGOE4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhhMjljNDYtZTBmMS00ZWRjLTk4OGEtOTQyMGFmZmJj MzM5MB4XDTI1MDQxMTE2MDAwN1oXDTI1MDQxMzE2MDAwMFowLzEtMCsGA1UEAxMk OTI0MmI5ODctMjljNC00YWUwLWIzZjUtMzIxNDM1NGEzOTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjj0J13Ud9JpGw8EzuGHoaM7XogzX9iO7kqFJ 9xQZdtY5E4dyGIUoXw0RTkxQejrjlDSwGlY/KsWe8hCTSVsQ5KOe7uSQI9MVdlZ6 VBgL5TJdtl6tN9I9Z9TjtKL64gQxh17MB0pxMJ8QI9nPIKaCrmgKwTXTLeeiwvdU kRHp8V6B2/B8UDqxUa6tKQgiuj4gLjssdQ2fIYiZDAJo1vlSofeT92ziyo4wC0cf tjnCNMNiWhu+9dniEBjmKzA85vLPipExmfLVqDHVYAZJhjhQ/pyvjKaPTEyGn2AO vjD04dvjVOjfkFu7GmWXpE2OHA/D3QGjmefRehktwOqoi3ZFrwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFwKmO6E0SwTN7KdRBF/cfImzBwlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iOGEy OWM0Ni1lMGYxLTRlZGMtOTg4YS05NDIwYWZmYmMzMzkvYjhhMjljNDYtZTBmMS00 ZWRjLTk4OGEtOTQyMGFmZmJjMzM5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjhhMjljNDYtZTBmMS00ZWRjLTk4 OGEtOTQyMGFmZmJjMzM5L2I4YTI5YzQ2LWUwZjEtNGVkYy05ODhhLTk0MjBhZmZi YzMzOS5jcmwwHwYDVR0jBBgwFoAUrluRChr3agr5yGG6uSyArkHgeRQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iOGEyOWM0Ni1lMGYxLTRlZGMtOTg4YS05NDIw YWZmYmMzMzkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCNpb9gvkLPwQUMfWrxaXAm blrKDkPx2uXAiPNm//GJYXar+jikhhRpDg+IwGFIwTR6fBeomcsVxOlLHxmJeLK5 vapRtE8r4pYQoCAECOp34nsLY//J3zNPecRWlBulwemrTB8nI2imC7SB2MUn+GzG /W7FMEIek7/eh/krzwt+JKvYL+1O2eduG/Qp1Td4cV3vzhA9cAXrBy6lli5gUmOU kr4pOwDSS9yVXFPrQzs3nlEm4DGdUXSFp5Ie+kiuXUtbPPR0a5Imk+J8gZm5jsOq rH7KMhkaExvs6ifnCyZsukGyTvJ4+BQH052h4LFaAU0K1W9gzsY0uIorRYKixL6w -----END CERTIFICATE-----Generated at Fri Apr 11 23:56:47 2025 by rpki-client