$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c3c82f0-740b-49fe-8af2-e3786af86e3a/1c3c82f0-740b-49fe-8af2-e3786af86e3a.mft File: 1c3c82f0-740b-49fe-8af2-e3786af86e3a.mft (raw, json) Hash identifier: 2aqq1bIScUofhAMbHvm+T82qyJIrJGAOA114ldd+LY0= Subject key identifier: 55:59:BA:88:A4:D9:78:50:F0:67:9E:F3:1F:E4:92:D3:8B:1C:1F:C2 Authority key identifier: AB:C5:CC:98:D3:E4:52:08:F7:D7:DF:4D:0C:F1:A0:6F:7D:19:8E:25 Certificate issuer: /CN=1c3c82f0-740b-49fe-8af2-e3786af86e3a Certificate serial: 010D0C9F432858497E1B0FADAB2DCA0F595E6DC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c3c82f0-740b-49fe-8af2-e3786af86e3a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c3c82f0-740b-49fe-8af2-e3786af86e3a/1c3c82f0-740b-49fe-8af2-e3786af86e3a.mft Manifest number: 010D0C9F432858494BDABEC65E6E60099DA05512 Signing time: Fri 11 Apr 2025 17:00:07 +0000 Manifest this update: Fri 11 Apr 2025 17:00:07 +0000 Manifest next update: Mon 14 Apr 2025 17:00:00 +0000 Files and hashes: 1: 1c3c82f0-740b-49fe-8af2-e3786af86e3a.crl (hash: oKiYUvv8aeqiEkTOm0BHd7tWteqzwfsgZRSkfM2iGQU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c3c82f0-740b-49fe-8af2-e3786af86e3a/1c3c82f0-740b-49fe-8af2-e3786af86e3a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c3c82f0-740b-49fe-8af2-e3786af86e3a/1c3c82f0-740b-49fe-8af2-e3786af86e3a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c3c82f0-740b-49fe-8af2-e3786af86e3a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7e:1b:0f:ad:ab:2d:ca:0f:59:5e:6d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c3c82f0-740b-49fe-8af2-e3786af86e3a Validity Not Before: Apr 11 17:00:07 2025 GMT Not After : Apr 14 17:00:00 2025 GMT Subject: CN=57a0cb42-48a0-47a3-93a5-af305e5a311b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:06:51:a1:ff:f9:ba:9a:11:ca:5c:de:52:f5: e1:2c:e6:41:98:a1:f8:11:82:af:c5:99:c9:22:99: ae:de:dc:c7:6d:34:f3:84:aa:1b:af:b3:bb:ac:af: 93:3f:a5:94:1b:53:42:2f:08:fa:02:28:77:e1:1d: 59:fb:d9:dd:29:c0:38:1b:3f:96:24:cf:58:73:27: 09:ce:0e:5f:11:3a:81:4a:95:54:16:b2:61:13:ef: 05:4d:da:67:95:3d:c1:5a:37:d2:d6:4f:c8:7c:44: 1e:a4:fb:a7:a4:bf:0e:55:dd:ce:a5:c0:e6:39:5d: d3:2a:93:15:cd:bf:8e:99:b9:a9:24:39:e5:aa:95: 9d:85:2b:e1:ee:10:1f:37:1b:1f:e5:d3:4c:b7:a4: b9:86:a9:0c:34:a0:43:97:8d:1a:d7:f2:f3:d8:13: 8d:3f:94:e5:c0:00:c9:d1:7d:b5:70:da:4d:61:62: 4e:51:42:a2:10:ba:b9:14:07:88:d9:8c:f3:70:73: 26:69:dc:5c:3e:70:72:b8:60:f3:0b:7c:56:19:02: 39:2b:b3:4e:c4:3a:5d:f9:b6:10:0b:59:5a:84:b7: 34:4e:4e:ff:35:d1:03:18:6d:95:b2:3f:8a:1d:3f: 2b:07:68:0f:03:c3:39:8e:5b:9a:f4:ff:6d:f5:a0: 7d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:59:BA:88:A4:D9:78:50:F0:67:9E:F3:1F:E4:92:D3:8B:1C:1F:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c3c82f0-740b-49fe-8af2-e3786af86e3a/1c3c82f0-740b-49fe-8af2-e3786af86e3a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c3c82f0-740b-49fe-8af2-e3786af86e3a/1c3c82f0-740b-49fe-8af2-e3786af86e3a.crl X509v3 Authority Key Identifier: keyid:AB:C5:CC:98:D3:E4:52:08:F7:D7:DF:4D:0C:F1:A0:6F:7D:19:8E:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c3c82f0-740b-49fe-8af2-e3786af86e3a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:4a:ad:b2:33:d0:20:ef:7c:3e:6f:0d:00:7a:9d:21:01:f4: 7e:bb:40:9a:58:13:a7:cf:09:39:cb:25:bd:2b:56:84:08:a1: c2:6c:8a:83:0d:64:d2:cb:c8:9d:5e:e5:49:2d:e2:62:bf:9c: c2:a0:81:85:5c:74:64:87:0b:24:08:fd:d2:e5:ed:34:f3:23: d0:d4:34:d9:87:00:b8:e2:ac:77:2b:e6:6e:38:0a:d1:1a:0a: 45:50:ae:07:06:04:02:7e:5d:55:59:b4:76:fb:34:f5:13:b1: a2:7f:91:f6:d9:83:9c:9b:08:e9:87:03:f5:14:b6:21:e3:f1: 92:62:b9:58:d9:11:e3:f6:8b:15:88:46:de:17:ef:a7:fb:0d: df:86:a8:ad:40:77:e9:4f:b6:0f:84:51:ce:7a:e2:e2:37:6f: 24:dc:25:57:fe:e9:4d:94:82:4c:8d:90:43:95:d8:88:8a:32: 2a:51:a0:36:d2:40:c5:a1:55:de:cf:43:99:27:f7:ce:ff:c3: d7:34:4f:95:57:7f:84:82:75:6a:1b:c6:31:88:6e:27:63:18: 54:24:09:d2:03:d9:67:9f:ab:74:e6:46:1b:35:a0:cf:25:a0: a9:82:b1:26:b8:11:60:87:d0:cd:9f:8b:c4:e1:cb:f7:29:b6: 22:a5:ae:21 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl+Gw+tqy3KD1lebcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWMzYzgyZjAtNzQwYi00OWZlLThhZjItZTM3ODZhZjg2 ZTNhMB4XDTI1MDQxMTE3MDAwN1oXDTI1MDQxNDE3MDAwMFowLzEtMCsGA1UEAxMk NTdhMGNiNDItNDhhMC00N2EzLTkzYTUtYWYzMDVlNWEzMTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwZRof/5upoRylzeUvXhLOZBmKH4EYKvxZnJ Ipmu3tzHbTTzhKobr7O7rK+TP6WUG1NCLwj6Aih34R1Z+9ndKcA4Gz+WJM9YcycJ zg5fETqBSpVUFrJhE+8FTdpnlT3BWjfS1k/IfEQepPunpL8OVd3OpcDmOV3TKpMV zb+OmbmpJDnlqpWdhSvh7hAfNxsf5dNMt6S5hqkMNKBDl40a1/Lz2BONP5TlwADJ 0X21cNpNYWJOUUKiELq5FAeI2YzzcHMmadxcPnByuGDzC3xWGQI5K7NOxDpd+bYQ C1lahLc0Tk7/NdEDGG2Vsj+KHT8rB2gPA8M5jlua9P9t9aB9OwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFVZuoik2XhQ8Gee8x/kktOLHB/CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xYzNj ODJmMC03NDBiLTQ5ZmUtOGFmMi1lMzc4NmFmODZlM2EvMWMzYzgyZjAtNzQwYi00 OWZlLThhZjItZTM3ODZhZjg2ZTNhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWMzYzgyZjAtNzQwYi00OWZlLThh ZjItZTM3ODZhZjg2ZTNhLzFjM2M4MmYwLTc0MGItNDlmZS04YWYyLWUzNzg2YWY4 NmUzYS5jcmwwHwYDVR0jBBgwFoAUq8XMmNPkUgj3199NDPGgb30ZjiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xYzNjODJmMC03NDBiLTQ5ZmUtOGFmMi1lMzc4 NmFmODZlM2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCGSq2yM9Ag73w+bw0Aep0h AfR+u0CaWBOnzwk5yyW9K1aECKHCbIqDDWTSy8idXuVJLeJiv5zCoIGFXHRkhwsk CP3S5e008yPQ1DTZhwC44qx3K+ZuOArRGgpFUK4HBgQCfl1VWbR2+zT1E7Gif5H2 2YOcmwjphwP1FLYh4/GSYrlY2RHj9osViEbeF++n+w3fhqitQHfpT7YPhFHOeuLi N28k3CVX/ulNlIJMjZBDldiIijIqUaA20kDFoVXez0OZJ/fO/8PXNE+VV3+EgnVq G8YxiG4nYxhUJAnSA9lnn6t05kYbNaDPJaCpgrEmuBFgh9DNn4vE4cv3KbYipa4h -----END CERTIFICATE-----Generated at Sat Apr 12 00:16:41 2025 by rpki-client