$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.mft File: 704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.mft (raw, json) Hash identifier: hYL/8DXfqm24g25yCKRGQEdpjrBDNDC7kNPx5ScAVE8= Subject key identifier: 70:1A:78:A7:7C:C4:06:98:6E:27:98:2C:F1:E1:E5:01:AE:57:3F:29 Authority key identifier: 45:56:08:A9:4F:3E:2E:30:2D:6A:A5:5C:A2:E8:E5:50:FD:5B:04:19 Certificate issuer: /CN=704595c3-6d92-4fc1-b7a8-d8e81a04aa7a Certificate serial: 010D0C9F43285849810381C1C0993E3B63D05040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.mft Manifest number: 010D0C9F432858494ED016D77EA200A665D4BBD3 Signing time: Sat 12 Apr 2025 18:00:07 +0000 Manifest this update: Sat 12 Apr 2025 18:00:07 +0000 Manifest next update: Tue 15 Apr 2025 18:00:00 +0000 Files and hashes: 1: 4775f2f1-0661-3006-a1eb-a486c369f840.roa (hash: 5FkYg2PwyNWr1vKLLddKrz1O/FTQ8xoyGPf86rZMz2g=) 2: 704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.crl (hash: hZV7sGcxLrTi3Ha9Fp6taqp9eqPHoEpvZuVFKLPIGok=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:81:03:81:c1:c0:99:3e:3b:63:d0:50:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=704595c3-6d92-4fc1-b7a8-d8e81a04aa7a Validity Not Before: Apr 12 18:00:07 2025 GMT Not After : Apr 15 18:00:00 2025 GMT Subject: CN=0a6750bd-fdec-4401-8cab-1574b60e1c7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ad:98:cb:c2:dc:d7:75:02:44:7a:20:2d:3a: 3a:44:3d:64:00:99:cd:9b:4c:61:0d:75:f2:12:3c: d9:97:2f:12:2a:ee:35:d8:1e:e4:32:6b:6d:80:fd: b5:2a:3d:cc:45:9c:5e:9f:4e:1a:4c:67:5f:f2:3c: 87:24:3d:d6:5d:b3:61:2b:5b:40:ac:5a:c2:b9:31: a4:57:d9:b6:ae:5d:e9:e0:74:34:ff:1d:6e:52:9b: a8:b4:9f:86:a6:eb:92:95:08:65:10:4a:ec:05:01: 1d:a4:bf:9a:8d:2a:bd:b1:fa:29:fa:19:c0:9d:a3: 04:16:36:a0:be:2b:17:de:78:86:13:1f:03:00:18: b4:70:97:3c:b6:4a:43:06:47:5e:6a:8d:cb:73:ce: 22:68:0b:25:58:b7:66:53:7e:aa:85:d5:3d:a7:05: 91:9d:14:02:16:46:2b:2f:92:85:4f:b1:a2:94:41: 4b:27:02:34:a6:e3:d2:e7:36:f1:02:41:6e:03:fc: a0:54:27:ea:42:92:3d:ab:1d:3a:91:b3:84:33:a5: 2e:5c:82:ba:83:e4:65:55:49:d2:71:eb:7f:cc:d2: a1:80:bf:9d:b0:38:01:3c:d1:1e:57:ce:92:9d:17: 5f:a0:55:87:9d:a0:ff:e4:2d:9d:c0:1e:c2:c3:c6: ad:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:1A:78:A7:7C:C4:06:98:6E:27:98:2C:F1:E1:E5:01:AE:57:3F:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.crl X509v3 Authority Key Identifier: keyid:45:56:08:A9:4F:3E:2E:30:2D:6A:A5:5C:A2:E8:E5:50:FD:5B:04:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:b7:74:8d:81:f9:7d:00:47:75:ea:e4:14:8e:f0:e0:e4:45: 64:15:eb:fc:08:11:a7:d4:08:6c:3a:a3:21:c6:cf:e2:e5:07: 6b:05:f6:3f:f2:87:ad:ea:bd:8f:8d:01:44:13:35:36:d6:5f: 02:92:1c:a7:b6:8f:29:8f:0a:1c:d5:ea:68:53:3c:83:e1:17: dd:70:e7:aa:0d:4a:5c:e2:9b:df:31:2a:1f:f9:56:02:e7:c0: 05:39:f5:a0:a5:e5:89:93:dc:08:e9:dc:a5:1f:65:85:23:5a: c5:bc:c8:90:f4:39:17:7c:db:11:ea:ee:b3:62:60:ee:ff:b2: e0:74:47:b1:d9:7c:0e:53:e3:55:5c:b9:75:79:0d:dc:46:c3: 34:8b:e6:4c:db:5d:44:27:e6:4b:85:94:87:e7:d9:c4:00:a3: cd:45:2b:50:2e:95:da:47:19:15:67:ff:13:ac:a5:5b:1a:b4: 99:1a:44:f6:63:89:5d:d7:ea:98:89:d9:5e:35:5b:d5:7f:f0: ba:e2:6d:97:6c:2c:40:5d:e1:4c:69:72:7d:b6:c5:85:03:ea: 56:9a:59:92:77:bd:8c:ca:39:ea:2c:6c:a2:a4:1b:d1:f6:c7: 69:a5:99:4e:99:f0:8b:6b:c1:44:88:1c:92:0a:95:44:99:62: b1:0a:b4:a4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmBA4HBwJk+O2PQUEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA0NTk1YzMtNmQ5Mi00ZmMxLWI3YTgtZDhlODFhMDRh YTdhMB4XDTI1MDQxMjE4MDAwN1oXDTI1MDQxNTE4MDAwMFowLzEtMCsGA1UEAxMk MGE2NzUwYmQtZmRlYy00NDAxLThjYWItMTU3NGI2MGUxYzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoq2Yy8Lc13UCRHogLTo6RD1kAJnNm0xhDXXy EjzZly8SKu412B7kMmttgP21Kj3MRZxen04aTGdf8jyHJD3WXbNhK1tArFrCuTGk V9m2rl3p4HQ0/x1uUpuotJ+GpuuSlQhlEErsBQEdpL+ajSq9sfop+hnAnaMEFjag visX3niGEx8DABi0cJc8tkpDBkdeao3Lc84iaAslWLdmU36qhdU9pwWRnRQCFkYr L5KFT7GilEFLJwI0puPS5zbxAkFuA/ygVCfqQpI9qx06kbOEM6UuXIK6g+RlVUnS cet/zNKhgL+dsDgBPNEeV86SnRdfoFWHnaD/5C2dwB7Cw8atlQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHAaeKd8xAaYbieYLPHh5QGuVz8pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy83MDQ1 OTVjMy02ZDkyLTRmYzEtYjdhOC1kOGU4MWEwNGFhN2EvNzA0NTk1YzMtNmQ5Mi00 ZmMxLWI3YTgtZDhlODFhMDRhYTdhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNzA0NTk1YzMtNmQ5Mi00ZmMxLWI3 YTgtZDhlODFhMDRhYTdhLzcwNDU5NWMzLTZkOTItNGZjMS1iN2E4LWQ4ZTgxYTA0 YWE3YS5jcmwwHwYDVR0jBBgwFoAURVYIqU8+LjAtaqVcoujlUP1bBBkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy83MDQ1OTVjMy02ZDkyLTRmYzEtYjdhOC1kOGU4 MWEwNGFhN2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBUt3SNgfl9AEd16uQUjvDg 5EVkFev8CBGn1AhsOqMhxs/i5QdrBfY/8oet6r2PjQFEEzU21l8Ckhynto8pjwoc 1epoUzyD4RfdcOeqDUpc4pvfMSof+VYC58AFOfWgpeWJk9wI6dylH2WFI1rFvMiQ 9DkXfNsR6u6zYmDu/7LgdEex2XwOU+NVXLl1eQ3cRsM0i+ZM211EJ+ZLhZSH59nE AKPNRStQLpXaRxkVZ/8TrKVbGrSZGkT2Y4ld1+qYidleNVvVf/C64m2XbCxAXeFM aXJ9tsWFA+pWmlmSd72MyjnqLGyipBvR9sdppZlOmfCLa8FEiBySCpVEmWKxCrSk -----END CERTIFICATE-----Generated at Sun Apr 13 00:53:27 2025 by rpki-client