$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/52902e09-5b36-4abe-835d-b0750f2ec293/52902e09-5b36-4abe-835d-b0750f2ec293.mft File: 52902e09-5b36-4abe-835d-b0750f2ec293.mft (raw, json) Hash identifier: a6OSCtZXBOBw5KLF57k2YOpg4BvIbFH3YHtE4PB0nvI= Subject key identifier: C1:6C:96:03:98:1F:B3:ED:BA:FC:13:59:24:62:5B:E9:4E:3C:A2:D7 Authority key identifier: 66:AC:2E:2B:C3:2A:75:B8:FD:BF:31:EF:59:64:15:7E:75:F3:B0:E8 Certificate issuer: /CN=52902e09-5b36-4abe-835d-b0750f2ec293 Certificate serial: 010D0C9F432858496B075FC0DF466F5C32EC7280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/52902e09-5b36-4abe-835d-b0750f2ec293.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/52902e09-5b36-4abe-835d-b0750f2ec293/52902e09-5b36-4abe-835d-b0750f2ec293.mft Manifest number: 010D0C9F432858495A572756409D99A444BBF5E9 Signing time: Fri 04 Apr 2025 21:00:07 +0000 Manifest this update: Fri 04 Apr 2025 21:00:07 +0000 Manifest next update: Mon 07 Apr 2025 21:00:00 +0000 Files and hashes: 1: 52902e09-5b36-4abe-835d-b0750f2ec293.crl (hash: C3lLJvxE1/WBnb9dnC2PgihzOSEHTELJV70HGIdQaUI=) 2: 90a1c1a5-751b-345a-a4ed-8b29e956f8d7.roa (hash: Ck2TKynvJRzAJk8Rl0TnG1Sfsu60QgEhiCZjqqXgl+Y=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/52902e09-5b36-4abe-835d-b0750f2ec293/52902e09-5b36-4abe-835d-b0750f2ec293.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/52902e09-5b36-4abe-835d-b0750f2ec293/52902e09-5b36-4abe-835d-b0750f2ec293.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/52902e09-5b36-4abe-835d-b0750f2ec293.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6b:07:5f:c0:df:46:6f:5c:32:ec:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52902e09-5b36-4abe-835d-b0750f2ec293 Validity Not Before: Apr 4 21:00:07 2025 GMT Not After : Apr 7 21:00:00 2025 GMT Subject: CN=237ecc17-6a97-4933-ac98-91a2ae5dce0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8c:7f:aa:a1:80:a1:2f:8e:a9:bd:4c:e5:04: 2b:d0:a4:f9:00:00:9d:6d:89:51:f4:b8:ab:19:06: b2:cb:cd:27:f3:fb:2b:3c:53:e7:d2:6e:d1:59:48: 74:da:ba:6c:95:37:68:ff:c4:28:d2:87:51:2a:f8: e7:d0:69:7e:d4:06:c6:3f:25:53:b4:66:94:58:25: 00:7e:a6:0f:67:88:95:3a:9d:db:60:72:6c:f4:dd: 5d:c7:44:5a:e1:dc:52:68:ca:de:8f:23:f6:72:d4: 59:7f:31:2b:83:86:f0:a4:9c:04:65:0d:e3:2d:b5: 94:cb:70:7f:0b:76:ab:9a:c6:3a:7c:7d:5f:11:fb: 4e:93:e2:cc:26:d0:9d:ef:72:9c:2b:f2:84:47:6f: 4c:30:d2:f2:77:7b:11:e1:f0:71:d1:70:15:d0:34: 7f:d6:b0:67:f4:5e:6a:6e:e2:db:a9:87:dc:d8:17: 85:b7:5d:c4:c2:00:2a:e4:05:15:34:92:4a:a1:07: c4:c7:30:ea:25:82:ea:cb:9e:21:eb:1c:e9:e2:9f: 94:07:49:8f:e5:41:1b:e8:2f:fc:f6:03:dc:28:d1: a2:05:5b:84:97:0e:d0:60:2a:1c:81:81:32:6f:45: f6:aa:40:ff:1d:32:9d:4e:3d:50:58:37:1f:ef:9e: 4a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:6C:96:03:98:1F:B3:ED:BA:FC:13:59:24:62:5B:E9:4E:3C:A2:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/52902e09-5b36-4abe-835d-b0750f2ec293/52902e09-5b36-4abe-835d-b0750f2ec293.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/52902e09-5b36-4abe-835d-b0750f2ec293/52902e09-5b36-4abe-835d-b0750f2ec293.crl X509v3 Authority Key Identifier: keyid:66:AC:2E:2B:C3:2A:75:B8:FD:BF:31:EF:59:64:15:7E:75:F3:B0:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/52902e09-5b36-4abe-835d-b0750f2ec293.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:0e:d4:38:9f:b9:57:7c:6e:a8:f9:08:d2:bf:b9:4d:e9:0c: e9:12:a3:74:e0:f8:c5:1f:76:5f:1c:5c:92:f6:50:5e:b4:ba: 51:bc:2d:97:90:9c:45:16:d9:08:af:c9:d8:fd:a4:ab:fe:3c: 79:26:0f:c4:e4:dc:f3:b9:2b:0d:2a:93:4b:59:17:3c:81:2d: 6c:15:6c:ba:b3:79:d3:2e:b6:f4:5f:ce:1d:f8:5d:9a:9d:a4: 58:2f:16:ca:a2:13:80:f1:f0:a4:90:46:36:4a:7d:35:76:8d: 9a:41:9a:f6:2a:e3:c9:0d:3e:67:69:e1:a2:db:8a:a5:4c:bd: 39:c7:20:60:be:fb:f0:42:2a:87:e2:04:a4:82:af:41:77:39: 61:32:55:e8:2c:7f:b6:36:1c:50:25:c7:d5:e6:09:76:43:c8: f1:4a:70:60:45:e6:29:23:d1:04:f5:7b:97:be:8b:17:8f:ee: a4:46:8a:60:bb:bc:98:f0:2a:0e:18:92:ee:09:37:c0:67:9c: 31:72:f7:c9:fc:35:68:1b:2a:ee:68:12:81:26:f0:86:a0:c5: 15:06:15:de:f4:1c:34:b4:d4:a8:ba:14:0d:5b:b2:20:92:49: ba:68:d4:68:40:81:de:bf:dc:04:71:e4:0b:ce:b9:34:52:87: ee:6b:40:57 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWElrB1/A30ZvXDLscoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTI5MDJlMDktNWIzNi00YWJlLTgzNWQtYjA3NTBmMmVj MjkzMB4XDTI1MDQwNDIxMDAwN1oXDTI1MDQwNzIxMDAwMFowLzEtMCsGA1UEAxMk MjM3ZWNjMTctNmE5Ny00OTMzLWFjOTgtOTFhMmFlNWRjZTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIx/qqGAoS+Oqb1M5QQr0KT5AACdbYlR9Lir GQayy80n8/srPFPn0m7RWUh02rpslTdo/8Qo0odRKvjn0Gl+1AbGPyVTtGaUWCUA fqYPZ4iVOp3bYHJs9N1dx0Ra4dxSaMrejyP2ctRZfzErg4bwpJwEZQ3jLbWUy3B/ C3armsY6fH1fEftOk+LMJtCd73KcK/KER29MMNLyd3sR4fBx0XAV0DR/1rBn9F5q buLbqYfc2BeFt13EwgAq5AUVNJJKoQfExzDqJYLqy54h6xzp4p+UB0mP5UEb6C/8 9gPcKNGiBVuElw7QYCocgYEyb0X2qkD/HTKdTj1QWDcf755KQQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMFslgOYH7PtuvwTWSRiW+lOPKLXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81Mjkw MmUwOS01YjM2LTRhYmUtODM1ZC1iMDc1MGYyZWMyOTMvNTI5MDJlMDktNWIzNi00 YWJlLTgzNWQtYjA3NTBmMmVjMjkzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNTI5MDJlMDktNWIzNi00YWJlLTgz NWQtYjA3NTBmMmVjMjkzLzUyOTAyZTA5LTViMzYtNGFiZS04MzVkLWIwNzUwZjJl YzI5My5jcmwwHwYDVR0jBBgwFoAUZqwuK8Mqdbj9vzHvWWQVfnXzsOgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy81MjkwMmUwOS01YjM2LTRhYmUtODM1ZC1iMDc1 MGYyZWMyOTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAqDtQ4n7lXfG6o+QjSv7lN 6QzpEqN04PjFH3ZfHFyS9lBetLpRvC2XkJxFFtkIr8nY/aSr/jx5Jg/E5NzzuSsN KpNLWRc8gS1sFWy6s3nTLrb0X84d+F2anaRYLxbKohOA8fCkkEY2Sn01do2aQZr2 KuPJDT5naeGi24qlTL05xyBgvvvwQiqH4gSkgq9BdzlhMlXoLH+2NhxQJcfV5gl2 Q8jxSnBgReYpI9EE9XuXvosXj+6kRopgu7yY8CoOGJLuCTfAZ5wxcvfJ/DVoGyru aBKBJvCGoMUVBhXe9Bw0tNSouhQNW7Igkkm6aNRoQIHev9wEceQLzrk0Uofua0BX -----END CERTIFICATE-----Generated at Sat Apr 5 03:53:15 2025 by rpki-client