$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.mft File: 2a85a41a-8114-4e04-abdb-a3a032b37a04.mft (raw, json) Hash identifier: LU1g4xPG2mORUku9T5JD4K/CYw4szSjBXIr24k/ddSk= Subject key identifier: 42:1F:AF:03:CA:AE:1B:7B:A7:DF:33:DB:0A:5B:DE:9E:C2:F2:B0:82 Authority key identifier: EF:AA:19:DE:FC:FF:A0:6B:BE:27:30:8C:6D:35:6A:E4:83:A9:30:BE Certificate issuer: /CN=2a85a41a-8114-4e04-abdb-a3a032b37a04 Certificate serial: 010D0C9F432858497DC1AC9D8B019C8AC8FF5B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.mft Manifest number: 010D0C9F4328584812E7A32F35C9A24960EDDD25 Signing time: Fri 11 Apr 2025 14:00:03 +0000 Manifest this update: Fri 11 Apr 2025 14:00:03 +0000 Manifest next update: Mon 14 Apr 2025 14:00:00 +0000 Files and hashes: 1: 2a85a41a-8114-4e04-abdb-a3a032b37a04.crl (hash: 0hRcY6QczVI2rGhmGrlkdv2o3PSEXhdkR4nDNf5n2Mc=) 2: d0012998-e5d3-32a9-ad3a-dcd7f461552b.roa (hash: YaCoiXH7CX7309x49mnJIXualq3/Pe7WSFLhQFKTsow=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:c1:ac:9d:8b:01:9c:8a:c8:ff:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a85a41a-8114-4e04-abdb-a3a032b37a04 Validity Not Before: Apr 11 14:00:03 2025 GMT Not After : Apr 14 14:00:00 2025 GMT Subject: CN=93ecc685-4976-46b2-8837-a0558f807250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b2:ea:ae:8b:64:5c:e7:47:fc:9d:5e:2d:e5: a7:65:a2:d9:f1:26:e6:ab:b0:6c:54:be:28:67:8a: 1f:40:42:03:3a:04:94:1c:b3:35:b5:16:f2:2f:eb: c5:3d:c1:d0:76:2a:78:17:e4:7f:88:1c:f4:12:39: 18:a3:fd:2b:7c:06:87:ad:c9:a1:1b:27:3c:93:fc: 0c:6a:2c:87:ce:08:cf:94:36:9a:95:8d:aa:40:9f: 48:7b:94:cd:04:ce:5c:82:90:93:53:7a:56:ec:6b: 1e:62:19:f6:b3:5a:de:65:63:d5:42:f3:b5:26:8b: dd:65:f7:2e:1b:bc:32:0a:25:0e:5a:04:14:d1:c1: a7:dc:39:42:eb:17:4b:b9:bb:1a:f2:8f:81:61:61: 00:28:ab:0c:a3:60:5e:ce:4f:2e:6a:bf:31:b6:59: 7c:b2:b0:e9:00:5a:b2:30:e4:51:b1:16:b9:ae:1d: e7:59:bf:20:0d:a6:e0:16:d3:fa:42:b1:25:02:b7: 4e:e2:ec:5f:bf:d2:58:34:ca:09:2b:5c:fc:89:6a: 2a:47:09:cb:c7:86:35:46:b4:1c:27:d8:e6:7f:be: 33:13:da:fa:59:89:0b:63:26:34:66:67:96:23:93: 21:e0:c9:5c:33:63:24:84:ce:cb:15:b7:01:31:52: f4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1F:AF:03:CA:AE:1B:7B:A7:DF:33:DB:0A:5B:DE:9E:C2:F2:B0:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.crl X509v3 Authority Key Identifier: keyid:EF:AA:19:DE:FC:FF:A0:6B:BE:27:30:8C:6D:35:6A:E4:83:A9:30:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:98:fc:0b:23:f3:42:d4:b7:4a:e8:14:cb:ac:89:38:c1:59: df:3b:9a:42:b6:2d:a7:2a:98:37:46:a5:dd:72:70:03:b0:18: 5c:90:15:af:c5:0a:4c:76:9c:6d:0f:57:e9:e9:93:96:5f:af: 78:3e:fc:d5:f8:7b:88:e6:1f:45:9e:03:6e:99:17:a2:81:0e: d7:94:29:7c:14:2e:fb:b8:5a:6b:6a:29:80:30:2d:ca:65:1f: 00:fb:19:aa:6f:47:df:b6:e0:d4:ac:5a:9e:2e:c8:a6:25:e6: 8e:73:a1:ba:a9:75:38:c0:7f:b1:25:8f:9e:6f:68:20:43:81: 6f:5f:6e:37:45:2e:3a:de:20:a5:46:0b:7d:ed:38:e0:51:61: a8:a5:c5:80:09:a6:77:f9:f2:0b:df:4f:49:9a:da:68:ea:8e: 5c:a1:c3:27:ba:06:b7:e4:35:cb:bc:c6:16:fa:6d:81:ec:66: 41:69:75:52:5e:5a:b5:51:42:10:75:f1:64:ee:63:9b:24:59: f6:5d:88:81:d6:35:f8:73:5b:4d:09:e0:81:fe:7d:ee:99:0f: 09:a8:23:51:73:f2:3f:97:30:38:98:e8:b5:05:01:b3:f6:0e: c4:cf:0b:59:6d:c7:36:89:14:37:f8:94:db:34:28:f3:3c:35: fb:e8:5c:5a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl9waydiwGcisj/W4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE4NWE0MWEtODExNC00ZTA0LWFiZGItYTNhMDMyYjM3 YTA0MB4XDTI1MDQxMTE0MDAwM1oXDTI1MDQxNDE0MDAwMFowLzEtMCsGA1UEAxMk OTNlY2M2ODUtNDk3Ni00NmIyLTg4MzctYTA1NThmODA3MjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLLqrotkXOdH/J1eLeWnZaLZ8Sbmq7BsVL4o Z4ofQEIDOgSUHLM1tRbyL+vFPcHQdip4F+R/iBz0EjkYo/0rfAaHrcmhGyc8k/wM aiyHzgjPlDaalY2qQJ9Ie5TNBM5cgpCTU3pW7GseYhn2s1reZWPVQvO1JovdZfcu G7wyCiUOWgQU0cGn3DlC6xdLubsa8o+BYWEAKKsMo2Bezk8uar8xtll8srDpAFqy MORRsRa5rh3nWb8gDabgFtP6QrElArdO4uxfv9JYNMoJK1z8iWoqRwnLx4Y1RrQc J9jmf74zE9r6WYkLYyY0ZmeWI5Mh4MlcM2MkhM7LFbcBMVL0/QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEIfrwPKrht7p98z2wpb3p7C8rCCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yYTg1 YTQxYS04MTE0LTRlMDQtYWJkYi1hM2EwMzJiMzdhMDQvMmE4NWE0MWEtODExNC00 ZTA0LWFiZGItYTNhMDMyYjM3YTA0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmE4NWE0MWEtODExNC00ZTA0LWFi ZGItYTNhMDMyYjM3YTA0LzJhODVhNDFhLTgxMTQtNGUwNC1hYmRiLWEzYTAzMmIz N2EwNC5jcmwwHwYDVR0jBBgwFoAU76oZ3vz/oGu+JzCMbTVq5IOpML4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yYTg1YTQxYS04MTE0LTRlMDQtYWJkYi1hM2Ew MzJiMzdhMDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAsmPwLI/NC1LdK6BTLrIk4 wVnfO5pCti2nKpg3RqXdcnADsBhckBWvxQpMdpxtD1fp6ZOWX694PvzV+HuI5h9F ngNumReigQ7XlCl8FC77uFpraimAMC3KZR8A+xmqb0fftuDUrFqeLsimJeaOc6G6 qXU4wH+xJY+eb2ggQ4FvX243RS463iClRgt97TjgUWGopcWACaZ3+fIL309Jmtpo 6o5cocMnuga35DXLvMYW+m2B7GZBaXVSXlq1UUIQdfFk7mObJFn2XYiB1jX4c1tN CeCB/n3umQ8JqCNRc/I/lzA4mOi1BQGz9g7EzwtZbcc2iRQ3+JTbNCjzPDX76Fxa -----END CERTIFICATE-----Generated at Sat Apr 12 10:08:31 2025 by rpki-client