$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/623d1527-5b57-4129-8bda-7e41b87729f6/623d1527-5b57-4129-8bda-7e41b87729f6.mft File: 623d1527-5b57-4129-8bda-7e41b87729f6.mft (raw, json) Hash identifier: RsVMOJkSon5Y3DFNcG+Je2F2+EJXCwMB8jHD9tT7fP0= Subject key identifier: E9:63:F5:7B:2D:91:3E:B8:1D:C7:DB:58:63:7C:76:D0:C6:66:29:6D Authority key identifier: 9A:77:E7:35:30:95:25:FE:9E:77:EC:C3:90:7A:1C:A0:44:67:0C:3A Certificate issuer: /CN=623d1527-5b57-4129-8bda-7e41b87729f6 Certificate serial: 010D0C9F432858496D9678B9360A8EB532AC7600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/623d1527-5b57-4129-8bda-7e41b87729f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/623d1527-5b57-4129-8bda-7e41b87729f6/623d1527-5b57-4129-8bda-7e41b87729f6.mft Manifest number: 010D0C9F43285849626DB4D74B2331D59001C205 Signing time: Sat 05 Apr 2025 19:00:03 +0000 Manifest this update: Sat 05 Apr 2025 19:00:03 +0000 Manifest next update: Tue 08 Apr 2025 19:00:00 +0000 Files and hashes: 1: 453527a2-dbfe-312b-9bfe-6a6e4386269f.roa (hash: 4YaBGXs0F+KAbAagv7NT2j5lzJb45gwyhfPTqvisemA=) 2: 623d1527-5b57-4129-8bda-7e41b87729f6.crl (hash: BMO3fX2DawSELwdvWbK59ZHidDsILfTSz4KTrmimLWE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/623d1527-5b57-4129-8bda-7e41b87729f6/623d1527-5b57-4129-8bda-7e41b87729f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/623d1527-5b57-4129-8bda-7e41b87729f6/623d1527-5b57-4129-8bda-7e41b87729f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/623d1527-5b57-4129-8bda-7e41b87729f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6d:96:78:b9:36:0a:8e:b5:32:ac:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=623d1527-5b57-4129-8bda-7e41b87729f6 Validity Not Before: Apr 5 19:00:03 2025 GMT Not After : Apr 8 19:00:00 2025 GMT Subject: CN=5e902f48-d95a-42cd-9be6-ebd40c7b8511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a9:d9:bc:86:84:67:8d:f0:1e:41:e9:4d:4c: 39:b1:95:d6:bc:f9:3a:7f:bc:22:8b:a5:e2:89:ab: 72:87:ee:5d:f5:1f:65:1a:4d:85:f3:2a:f5:67:29: 42:89:e2:a5:c3:e2:3e:16:68:68:64:20:7a:78:0f: 9e:a9:80:57:0e:9c:c1:40:0f:a2:f7:a6:86:a3:1e: d0:72:38:01:38:7a:9f:5b:0d:59:50:39:31:b2:dd: 71:3b:c7:76:56:6a:59:3f:9c:2d:9e:cc:93:f8:c3: 21:21:61:38:60:19:7d:fd:57:92:f2:8c:a8:98:11: a7:8a:08:dd:71:50:19:64:1f:96:0b:b7:dd:da:0b: e4:e8:1b:32:65:fe:6f:93:0d:3f:b7:37:2a:f4:f1: 92:4e:b1:dd:cd:3b:4d:97:b9:9f:88:ed:d3:f6:74: 75:3c:b2:54:09:3c:47:8e:ff:0c:48:c5:c2:89:2c: e3:0c:21:59:55:65:ea:ab:fc:34:d5:bf:86:a0:e5: be:33:63:59:35:8b:f4:4f:10:0c:a3:0d:bd:91:bc: e9:3b:19:ab:26:7f:75:de:21:2e:44:a1:f6:e4:7a: d1:55:05:56:84:1a:69:d2:83:96:49:93:17:35:96: 77:c8:b1:6a:18:36:ce:5c:fb:ca:e6:31:d4:1a:a6: 2e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:63:F5:7B:2D:91:3E:B8:1D:C7:DB:58:63:7C:76:D0:C6:66:29:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/623d1527-5b57-4129-8bda-7e41b87729f6/623d1527-5b57-4129-8bda-7e41b87729f6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/623d1527-5b57-4129-8bda-7e41b87729f6/623d1527-5b57-4129-8bda-7e41b87729f6.crl X509v3 Authority Key Identifier: keyid:9A:77:E7:35:30:95:25:FE:9E:77:EC:C3:90:7A:1C:A0:44:67:0C:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/623d1527-5b57-4129-8bda-7e41b87729f6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:4a:c4:06:4a:9a:f9:a8:10:58:b1:b1:92:93:a3:d5:72:b9: ac:08:82:4b:36:3c:0f:56:2a:ba:0a:92:b6:ef:3e:53:8e:14: 16:e0:e6:b9:e8:00:26:41:e8:f6:11:5f:79:07:a9:9b:d9:13: 9e:9d:23:3e:2b:14:32:56:d8:ca:1a:04:b8:3e:34:b0:dc:45: d7:6b:95:7b:dc:5e:e8:99:d8:e1:f9:02:78:22:0d:d5:ba:04: d6:11:97:3e:fc:e8:66:44:19:57:4e:35:d5:9b:ab:37:4c:da: ca:e5:0a:e6:91:c9:b0:91:2f:85:92:79:4a:63:e6:5c:5a:e2: 92:8c:fb:e2:94:dc:c2:ae:c5:e9:57:5a:a8:dd:83:85:e6:03: b4:b7:a4:b2:45:aa:0a:92:b0:76:53:96:92:99:bf:46:94:f6: 62:82:6b:b3:9c:41:37:ba:32:52:3b:86:e6:20:e4:8f:99:66: bb:b1:29:4f:31:75:a3:05:75:00:0a:42:43:f5:cd:ca:22:1d: de:0a:dc:48:3c:d4:19:44:c4:6d:11:af:82:f3:8d:3d:3a:6b: 3b:58:ab:75:e2:6e:ad:2e:4b:fa:4f:d3:45:e9:82:8e:20:93: b6:d0:85:52:bf:48:ea:47:cd:41:ed:f5:fa:49:9c:c1:9f:a7: d0:bb:51:5e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEltlni5NgqOtTKsdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjIzZDE1MjctNWI1Ny00MTI5LThiZGEtN2U0MWI4Nzcy OWY2MB4XDTI1MDQwNTE5MDAwM1oXDTI1MDQwODE5MDAwMFowLzEtMCsGA1UEAxMk NWU5MDJmNDgtZDk1YS00MmNkLTliZTYtZWJkNDBjN2I4NTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqnZvIaEZ43wHkHpTUw5sZXWvPk6f7wii6Xi iatyh+5d9R9lGk2F8yr1ZylCieKlw+I+FmhoZCB6eA+eqYBXDpzBQA+i96aGox7Q cjgBOHqfWw1ZUDkxst1xO8d2VmpZP5wtnsyT+MMhIWE4YBl9/VeS8oyomBGnigjd cVAZZB+WC7fd2gvk6BsyZf5vkw0/tzcq9PGSTrHdzTtNl7mfiO3T9nR1PLJUCTxH jv8MSMXCiSzjDCFZVWXqq/w01b+GoOW+M2NZNYv0TxAMow29kbzpOxmrJn913iEu RKH25HrRVQVWhBpp0oOWSZMXNZZ3yLFqGDbOXPvK5jHUGqYuFQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOlj9XstkT64HcfbWGN8dtDGZiltMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82MjNk MTUyNy01YjU3LTQxMjktOGJkYS03ZTQxYjg3NzI5ZjYvNjIzZDE1MjctNWI1Ny00 MTI5LThiZGEtN2U0MWI4NzcyOWY2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNjIzZDE1MjctNWI1Ny00MTI5LThi ZGEtN2U0MWI4NzcyOWY2LzYyM2QxNTI3LTViNTctNDEyOS04YmRhLTdlNDFiODc3 MjlmNi5jcmwwHwYDVR0jBBgwFoAUmnfnNTCVJf6ed+zDkHocoERnDDowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82MjNkMTUyNy01YjU3LTQxMjktOGJkYS03ZTQx Yjg3NzI5ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA2SsQGSpr5qBBYsbGSk6PV crmsCIJLNjwPViq6CpK27z5TjhQW4Oa56AAmQej2EV95B6mb2ROenSM+KxQyVtjK GgS4PjSw3EXXa5V73F7omdjh+QJ4Ig3VugTWEZc+/OhmRBlXTjXVm6s3TNrK5Qrm kcmwkS+FknlKY+ZcWuKSjPvilNzCrsXpV1qo3YOF5gO0t6SyRaoKkrB2U5aSmb9G lPZigmuznEE3ujJSO4bmIOSPmWa7sSlPMXWjBXUACkJD9c3KIh3eCtxIPNQZRMRt Ea+C8409Oms7WKt14m6tLkv6T9NF6YKOIJO20IVSv0jqR81B7fX6SZzBn6fQu1Fe -----END CERTIFICATE-----Generated at Sun Apr 6 00:23:39 2025 by rpki-client