$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.mft File: 2d88838e-541a-4661-8501-3c7d2eb5849d.mft (raw, json) Hash identifier: rq7k29yB6jMOKir+Qg6ouYtQIkEXgQrbDyssv9zVoTE= Subject key identifier: EE:D3:5B:7B:07:37:F2:28:10:D5:23:F0:E4:70:D3:AA:AD:5D:9A:20 Authority key identifier: 4E:9D:73:3B:F6:0F:5A:F6:9E:37:46:28:53:09:C4:7A:42:49:58:2E Certificate issuer: /CN=2d88838e-541a-4661-8501-3c7d2eb5849d Certificate serial: 010D0C9F432858497DDF8094D1EB83D95C7CA3E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.mft Manifest number: 010D0C9F43285848B22C5EC19A391EA7020C1DCA Signing time: Fri 11 Apr 2025 15:00:07 +0000 Manifest this update: Fri 11 Apr 2025 15:00:07 +0000 Manifest next update: Sun 13 Apr 2025 15:00:00 +0000 Files and hashes: 1: 2d88838e-541a-4661-8501-3c7d2eb5849d.crl (hash: gn11bsEnWTZ2pxZhWjSXHQUV3oNgYaioW5TDv5Kv84Q=) 2: 35dd38da-ef2c-3aa2-965d-09739043ca44.roa (hash: oU9vEdfrwHDy4OmS0ZQCbyd/vvgjANHhjFjLeM2hIsg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:df:80:94:d1:eb:83:d9:5c:7c:a3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d88838e-541a-4661-8501-3c7d2eb5849d Validity Not Before: Apr 11 15:00:07 2025 GMT Not After : Apr 13 15:00:00 2025 GMT Subject: CN=39f91856-0973-4f51-a13e-37e3b0f09651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:6b:09:9a:f7:81:4f:a2:98:51:03:db:db:d1: 0a:b7:d7:82:f9:f1:6f:a8:36:10:e6:5f:70:2d:ce: 9e:2e:1b:7f:56:fc:77:88:51:02:38:91:d5:fa:ea: f7:0c:73:ba:2a:16:3b:3a:5a:a5:bf:05:7e:b8:1d: ec:74:de:a8:a1:a3:e4:06:92:44:a7:5c:bb:28:f9: a9:83:98:f5:f2:ee:cd:e3:41:c1:06:ee:97:c1:4b: a5:86:a5:0a:e6:f3:66:76:6d:2c:29:83:b4:f3:83: 4e:84:ae:ed:a6:a8:ee:ff:11:e1:97:d9:3f:dc:6d: b2:36:cc:84:ea:cb:fa:87:d1:97:51:39:aa:35:a1: 0f:ca:aa:e3:3b:0a:74:a1:04:af:fb:f7:0c:e6:3d: 87:1f:c1:85:6d:b4:bc:ec:b8:c6:ad:90:47:d9:28: 36:6d:0d:9c:15:82:76:a8:49:27:a6:50:57:1b:70: 38:57:4c:2b:3f:93:c2:70:c4:dd:3e:39:c4:be:11: 62:b7:4c:ef:d0:c8:41:df:4e:df:d6:de:07:03:f7: 9e:49:c0:e3:c6:8f:b8:61:63:99:28:68:6f:2e:4a: 4a:43:9e:eb:77:b7:d3:ab:e1:72:95:99:bf:08:d8: 65:ad:2d:dc:d3:1a:30:c9:70:9f:19:1e:5b:f9:c7: 41:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:D3:5B:7B:07:37:F2:28:10:D5:23:F0:E4:70:D3:AA:AD:5D:9A:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.crl X509v3 Authority Key Identifier: keyid:4E:9D:73:3B:F6:0F:5A:F6:9E:37:46:28:53:09:C4:7A:42:49:58:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:b1:81:4a:78:f4:41:20:f9:68:a9:2a:b4:cd:15:54:64:91: 0b:f6:9f:e4:48:b7:7b:81:b4:8b:61:07:36:6c:2b:e5:8e:02: 3f:85:ad:2a:20:7f:41:72:d4:c7:ec:83:69:43:fc:19:4e:da: 8f:7b:32:58:45:28:a3:5e:46:6d:76:0d:b6:10:04:9b:0d:13: a0:a7:a8:9f:25:f9:fa:0b:c5:bf:bc:ee:de:df:81:bb:fd:34: b9:a4:45:9a:cc:71:90:13:a3:ba:4d:ad:d7:1a:17:bc:c3:5d: 76:02:d1:37:93:a6:09:37:3c:34:22:85:fa:e3:8d:9c:5e:8f: fe:e6:7d:59:cd:f5:94:cf:e4:cd:42:ba:41:f3:b1:c0:3d:ee: 44:7b:17:59:3b:a6:04:37:d2:d0:48:3b:1f:2d:a4:52:0c:d8: 63:3e:71:57:54:e6:c4:a3:2c:38:ea:69:91:6f:16:51:09:e0: e5:ba:bd:c6:06:60:1c:8e:2b:0e:5d:87:62:4d:df:0b:c3:16: 4e:18:5d:aa:38:8f:e9:51:90:ca:0f:08:2e:48:4d:77:f2:cf: 33:9c:c4:65:95:ea:db:a2:70:3f:e2:62:c1:c2:83:a5:e0:de: 54:54:f7:0c:92:27:37:37:31:a6:1f:db:19:4b:c3:7f:18:86: e7:01:f6:63 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl934CU0euD2Vx8o+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ4ODgzOGUtNTQxYS00NjYxLTg1MDEtM2M3ZDJlYjU4 NDlkMB4XDTI1MDQxMTE1MDAwN1oXDTI1MDQxMzE1MDAwMFowLzEtMCsGA1UEAxMk MzlmOTE4NTYtMDk3My00ZjUxLWExM2UtMzdlM2IwZjA5NjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmsJmveBT6KYUQPb29EKt9eC+fFvqDYQ5l9w Lc6eLht/Vvx3iFECOJHV+ur3DHO6KhY7OlqlvwV+uB3sdN6ooaPkBpJEp1y7KPmp g5j18u7N40HBBu6XwUulhqUK5vNmdm0sKYO084NOhK7tpqju/xHhl9k/3G2yNsyE 6sv6h9GXUTmqNaEPyqrjOwp0oQSv+/cM5j2HH8GFbbS87LjGrZBH2Sg2bQ2cFYJ2 qEknplBXG3A4V0wrP5PCcMTdPjnEvhFit0zv0MhB307f1t4HA/eeScDjxo+4YWOZ KGhvLkpKQ57rd7fTq+FylZm/CNhlrS3c0xowyXCfGR5b+cdB9QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFO7TW3sHN/IoENUj8ORw06qtXZogMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZDg4 ODM4ZS01NDFhLTQ2NjEtODUwMS0zYzdkMmViNTg0OWQvMmQ4ODgzOGUtNTQxYS00 NjYxLTg1MDEtM2M3ZDJlYjU4NDlkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmQ4ODgzOGUtNTQxYS00NjYxLTg1 MDEtM2M3ZDJlYjU4NDlkLzJkODg4MzhlLTU0MWEtNDY2MS04NTAxLTNjN2QyZWI1 ODQ5ZC5jcmwwHwYDVR0jBBgwFoAUTp1zO/YPWvaeN0YoUwnEekJJWC4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZDg4ODM4ZS01NDFhLTQ2NjEtODUwMS0zYzdk MmViNTg0OWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA2sYFKePRBIPloqSq0zRVU ZJEL9p/kSLd7gbSLYQc2bCvljgI/ha0qIH9BctTH7INpQ/wZTtqPezJYRSijXkZt dg22EASbDROgp6ifJfn6C8W/vO7e34G7/TS5pEWazHGQE6O6Ta3XGhe8w112AtE3 k6YJNzw0IoX6442cXo/+5n1ZzfWUz+TNQrpB87HAPe5EexdZO6YEN9LQSDsfLaRS DNhjPnFXVObEoyw46mmRbxZRCeDlur3GBmAcjisOXYdiTd8LwxZOGF2qOI/pUZDK DwguSE138s8znMRllerbonA/4mLBwoOl4N5UVPcMkic3NzGmH9sZS8N/GIbnAfZj -----END CERTIFICATE-----Generated at Sat Apr 12 00:01:40 2025 by rpki-client