$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3/300a18ca-a9e5-430d-b5c4-d15e88ea79a3.mft File: 300a18ca-a9e5-430d-b5c4-d15e88ea79a3.mft (raw, json) Hash identifier: NkGDvK3Y7vGEdCwRhH3QCBm9gvcuFTLcHMXd2x0Epk4= Subject key identifier: CB:33:CC:56:F4:6A:8D:22:64:81:9C:36:35:46:3C:FE:86:87:EF:16 Authority key identifier: 72:9F:74:7B:47:04:82:DA:57:8A:25:AE:F0:CF:9C:EF:98:1F:06:BA Certificate issuer: /CN=300a18ca-a9e5-430d-b5c4-d15e88ea79a3 Certificate serial: 010D0C9F432858497C97EC97B6B913512534F2C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3/300a18ca-a9e5-430d-b5c4-d15e88ea79a3.mft Manifest number: 010D0C9F43285848658356E07664CBF852FA4166 Signing time: Fri 11 Apr 2025 04:00:07 +0000 Manifest this update: Fri 11 Apr 2025 04:00:07 +0000 Manifest next update: Mon 14 Apr 2025 04:00:00 +0000 Files and hashes: 1: 300a18ca-a9e5-430d-b5c4-d15e88ea79a3.crl (hash: Q/9Wy17fJzIJRZ07BIUP5/7OqWNSEVCvXp4BAjJRoIg=) 2: 863f00d3-0369-3e82-aee6-58fe03be78e9.roa (hash: Bfr+yk8MOHg9pGMdEdiiWUoGJaDLhDMRvC27teuxTYw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3/300a18ca-a9e5-430d-b5c4-d15e88ea79a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3/300a18ca-a9e5-430d-b5c4-d15e88ea79a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7c:97:ec:97:b6:b9:13:51:25:34:f2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=300a18ca-a9e5-430d-b5c4-d15e88ea79a3 Validity Not Before: Apr 11 04:00:07 2025 GMT Not After : Apr 14 04:00:00 2025 GMT Subject: CN=024170f3-93da-4c8b-9961-34b48762f216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f6:3f:2f:e9:1a:10:3e:f5:70:2e:9e:4f:ec: 1b:bd:b3:3d:10:a5:c2:be:89:88:27:79:c6:f9:49: 55:3a:56:e9:c8:77:7b:89:28:23:63:05:80:f1:d3: f0:82:11:b4:d7:97:49:66:94:88:9b:cf:25:7e:7b: 43:d3:b5:dc:69:28:15:28:e6:25:f0:c1:04:7f:69: 9e:0f:fc:8d:63:52:51:c8:d4:46:b9:8d:82:22:1a: ba:b6:13:cb:45:2f:e1:2c:c2:11:07:ee:f1:74:68: 57:71:5f:a4:76:b0:57:47:5f:97:77:ef:7e:a3:a2: 8d:c5:92:c5:f8:9d:42:b8:05:7c:e4:1f:ba:de:69: 51:92:b9:ff:73:49:3e:35:32:59:14:f6:35:67:d9: e9:33:24:2b:f5:d3:32:31:8b:29:87:bf:fb:7e:79: bd:a4:7b:7e:9a:e4:92:86:f8:2a:62:f8:11:4c:7f: b4:cd:ca:be:00:3b:e6:ae:d6:b8:d5:92:b3:18:00: 6a:5b:65:96:74:d5:34:3d:75:f8:7f:10:e7:0c:3d: 69:6c:93:6a:0d:3c:5e:1f:10:97:25:78:4e:d0:64: ea:55:13:46:c1:00:30:c0:8f:03:f3:14:80:c2:2c: 59:8b:17:25:48:0b:34:45:e7:29:11:70:e2:79:f3: ec:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:33:CC:56:F4:6A:8D:22:64:81:9C:36:35:46:3C:FE:86:87:EF:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3/300a18ca-a9e5-430d-b5c4-d15e88ea79a3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3/300a18ca-a9e5-430d-b5c4-d15e88ea79a3.crl X509v3 Authority Key Identifier: keyid:72:9F:74:7B:47:04:82:DA:57:8A:25:AE:F0:CF:9C:EF:98:1F:06:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:59:9e:2d:a7:1b:ef:80:07:29:d1:d1:39:d6:a4:71:63:89: 40:99:06:37:62:c7:1d:08:31:30:59:95:24:86:9e:33:65:40: 18:e4:82:ea:76:48:7b:8c:64:f7:44:a7:44:22:52:15:d1:b2: 89:69:30:75:a9:26:28:39:30:a3:ae:88:cd:86:93:11:25:fc: 1c:a4:03:d8:0c:66:f9:25:82:85:d6:59:58:21:7a:f0:29:b9: b6:97:0f:3b:91:b6:7c:d8:b5:7c:b4:c9:07:88:73:4c:50:9a: 00:0f:8b:06:4e:bd:bb:bc:3b:09:49:07:9a:13:45:4e:e3:ea: 56:69:5c:b6:26:cd:ce:72:8a:73:61:d9:f9:26:54:7f:ba:2a: a2:40:d9:2c:ab:fb:a0:ae:ae:d0:06:d6:e0:86:31:a0:2c:02: 77:0f:67:3a:21:13:3f:55:c9:9a:f3:d1:ad:a8:cf:12:19:6c: 09:7b:1a:b4:81:bc:0f:0b:16:a3:5e:c4:ca:3c:e3:86:1e:7c: 7d:1a:df:07:82:6b:c6:53:6e:51:50:ce:aa:ad:3b:32:e2:f2: d6:95:97:a2:42:53:b5:e9:6b:7e:6a:cb:fc:ef:8e:7e:14:da: 6d:e0:d4:2e:5f:e4:c0:e4:6a:45:29:cf:ba:3f:09:9d:0a:ee: d3:d3:09:14 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl8l+yXtrkTUSU08sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzAwYTE4Y2EtYTllNS00MzBkLWI1YzQtZDE1ZTg4ZWE3 OWEzMB4XDTI1MDQxMTA0MDAwN1oXDTI1MDQxNDA0MDAwMFowLzEtMCsGA1UEAxMk MDI0MTcwZjMtOTNkYS00YzhiLTk5NjEtMzRiNDg3NjJmMjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvY/L+kaED71cC6eT+wbvbM9EKXCvomIJ3nG +UlVOlbpyHd7iSgjYwWA8dPwghG015dJZpSIm88lfntD07XcaSgVKOYl8MEEf2me D/yNY1JRyNRGuY2CIhq6thPLRS/hLMIRB+7xdGhXcV+kdrBXR1+Xd+9+o6KNxZLF +J1CuAV85B+63mlRkrn/c0k+NTJZFPY1Z9npMyQr9dMyMYsph7/7fnm9pHt+muSS hvgqYvgRTH+0zcq+ADvmrta41ZKzGABqW2WWdNU0PXX4fxDnDD1pbJNqDTxeHxCX JXhO0GTqVRNGwQAwwI8D8xSAwixZixclSAs0RecpEXDiefPsbwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMszzFb0ao0iZIGcNjVGPP6Gh+8WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zMDBh MThjYS1hOWU1LTQzMGQtYjVjNC1kMTVlODhlYTc5YTMvMzAwYTE4Y2EtYTllNS00 MzBkLWI1YzQtZDE1ZTg4ZWE3OWEzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzAwYTE4Y2EtYTllNS00MzBkLWI1 YzQtZDE1ZTg4ZWE3OWEzLzMwMGExOGNhLWE5ZTUtNDMwZC1iNWM0LWQxNWU4OGVh NzlhMy5jcmwwHwYDVR0jBBgwFoAUcp90e0cEgtpXiiWu8M+c75gfBrowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zMDBhMThjYS1hOWU1LTQzMGQtYjVjNC1kMTVl ODhlYTc5YTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAZWZ4tpxvvgAcp0dE51qRx Y4lAmQY3YscdCDEwWZUkhp4zZUAY5ILqdkh7jGT3RKdEIlIV0bKJaTB1qSYoOTCj rojNhpMRJfwcpAPYDGb5JYKF1llYIXrwKbm2lw87kbZ82LV8tMkHiHNMUJoAD4sG Tr27vDsJSQeaE0VO4+pWaVy2Js3OcopzYdn5JlR/uiqiQNksq/ugrq7QBtbghjGg LAJ3D2c6IRM/Vcma89GtqM8SGWwJexq0gbwPCxajXsTKPOOGHnx9Gt8HgmvGU25R UM6qrTsy4vLWlZeiQlO16Wt+asv8745+FNpt4NQuX+TA5GpFKc+6PwmdCu7T0wkU -----END CERTIFICATE-----Generated at Fri Apr 11 21:03:15 2025 by rpki-client