$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/938e1602-8093-4bcd-b527-f5d1756295fc.mft File: 938e1602-8093-4bcd-b527-f5d1756295fc.mft (raw, json) Hash identifier: NRoEoqMvMbKwqXWYUB9QH5GrJgTA+GujPUyv4lXlA5Y= Subject key identifier: 4B:C3:C0:A3:5A:CD:EB:8D:B0:45:D4:15:E5:6C:61:B5:97:DA:C4:56 Authority key identifier: FC:CC:00:B4:C6:BD:80:7C:69:57:66:2D:19:A9:EB:C2:37:89:78:F6 Certificate issuer: /CN=938e1602-8093-4bcd-b527-f5d1756295fc Certificate serial: 010D0C9F432858497DDF7CDB42303A97BBB320C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/938e1602-8093-4bcd-b527-f5d1756295fc.mft Manifest number: 010D0C9F432858481E2C2E83A803BC884E055181 Signing time: Fri 11 Apr 2025 15:00:07 +0000 Manifest this update: Fri 11 Apr 2025 15:00:07 +0000 Manifest next update: Mon 14 Apr 2025 15:00:00 +0000 Files and hashes: 1: 938e1602-8093-4bcd-b527-f5d1756295fc.crl (hash: ePNkKn8/B+AZqTrED9ovcXbvLoadT05MVJ2brAAH8r4=) 2: c431513d-aaef-3485-b46c-d4c9e32372d8.roa (hash: ns9AKaqCwWCKWOQDDQljaeQgzqJvBgcaZ+mzLWQAPwU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/938e1602-8093-4bcd-b527-f5d1756295fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/938e1602-8093-4bcd-b527-f5d1756295fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:df:7c:db:42:30:3a:97:bb:b3:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=938e1602-8093-4bcd-b527-f5d1756295fc Validity Not Before: Apr 11 15:00:07 2025 GMT Not After : Apr 14 15:00:00 2025 GMT Subject: CN=42f697fc-def4-4c9d-afc5-948bbdc93e32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:12:7c:0a:2a:be:4a:6b:ba:43:6b:81:58:10: 60:ae:54:cf:d5:1e:7d:46:b8:dd:1e:5f:85:0a:f3: bd:fe:82:58:11:41:f1:52:12:6a:f8:07:68:de:21: b0:bd:9c:3b:b5:da:89:f7:e4:8d:a9:10:3a:0e:08: cf:c8:22:e4:61:0d:57:8a:40:77:50:b6:64:dd:72: 2f:28:98:0a:b1:40:3b:aa:c4:f5:b6:18:ed:ef:9e: 67:63:38:91:bb:6f:ae:11:3c:08:92:1f:77:91:26: 55:e2:cf:9b:ec:50:a0:46:14:c9:ed:58:62:89:ff: 22:68:6c:07:b4:49:52:45:fa:74:9a:be:6e:09:2e: d0:8c:d4:58:08:aa:4b:0f:a2:27:0a:0c:24:3c:62: b2:28:0b:9a:c1:5a:1f:ad:e9:31:65:23:75:61:19: f5:ea:e7:ed:de:3f:6d:7a:fc:ef:69:fd:ff:eb:ce: ba:1b:7f:82:cf:cf:d0:3e:3d:88:54:6b:34:e6:d3: f5:92:d8:a1:d1:2d:0b:0b:83:43:e1:4b:b8:04:f2: e2:be:a4:6b:56:18:fb:0b:75:64:02:bf:3d:47:ae: 69:d0:b6:0b:3f:57:51:03:30:d4:bf:7f:d0:87:1e: 09:3e:b0:15:4c:88:88:9c:0a:60:9c:99:88:ba:df: ae:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C3:C0:A3:5A:CD:EB:8D:B0:45:D4:15:E5:6C:61:B5:97:DA:C4:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/938e1602-8093-4bcd-b527-f5d1756295fc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc/938e1602-8093-4bcd-b527-f5d1756295fc.crl X509v3 Authority Key Identifier: keyid:FC:CC:00:B4:C6:BD:80:7C:69:57:66:2D:19:A9:EB:C2:37:89:78:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/938e1602-8093-4bcd-b527-f5d1756295fc.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:9b:12:21:88:f2:33:f5:74:00:73:17:5a:e7:79:e4:a1:3d: d6:08:70:40:c0:a6:cf:b4:67:5c:67:eb:45:fe:4f:db:3f:6b: 0a:1c:71:ba:bf:31:ca:b6:fa:46:50:ee:2e:71:98:22:f8:85: 36:a0:c5:94:dc:32:3f:d9:f6:5c:c8:45:70:94:35:e1:f5:93: 7e:6a:9e:a5:9e:6d:57:c7:b4:8a:12:13:3c:d3:17:35:8d:87: e0:04:d3:88:de:fb:12:14:4e:50:e9:43:66:5c:4c:ca:86:70: dd:15:16:e2:25:2b:68:25:ea:25:d0:8a:93:fa:d4:e5:b4:b2: 16:3e:c7:33:de:7b:40:e9:2c:31:ae:f5:b6:30:df:cd:26:b6: f0:bd:6b:4d:ac:b2:23:26:76:23:5b:05:85:6e:45:05:11:2e: c8:c8:11:42:89:6c:4d:f8:26:05:b6:67:ef:f1:10:4e:40:e8: ff:38:42:97:3d:77:80:5c:a4:8d:76:d7:6e:b0:a3:02:44:91: 6d:ce:55:cf:d4:e6:f1:e0:b4:5f:f5:71:27:aa:d6:a6:29:33: d4:fe:22:a9:b0:65:34:72:44:b1:84:fe:97:4b:b1:55:8d:47: a6:6a:e0:fa:c2:49:97:60:d1:2e:45:07:6f:ff:a1:4f:58:88: 7a:91:34:9f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl933zbQjA6l7uzIMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM4ZTE2MDItODA5My00YmNkLWI1MjctZjVkMTc1NjI5 NWZjMB4XDTI1MDQxMTE1MDAwN1oXDTI1MDQxNDE1MDAwMFowLzEtMCsGA1UEAxMk NDJmNjk3ZmMtZGVmNC00YzlkLWFmYzUtOTQ4YmJkYzkzZTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBJ8Ciq+Smu6Q2uBWBBgrlTP1R59RrjdHl+F CvO9/oJYEUHxUhJq+Ado3iGwvZw7tdqJ9+SNqRA6DgjPyCLkYQ1XikB3ULZk3XIv KJgKsUA7qsT1thjt755nYziRu2+uETwIkh93kSZV4s+b7FCgRhTJ7Vhiif8iaGwH tElSRfp0mr5uCS7QjNRYCKpLD6InCgwkPGKyKAuawVofrekxZSN1YRn16uft3j9t evzvaf3/6866G3+Cz8/QPj2IVGs05tP1ktih0S0LC4ND4Uu4BPLivqRrVhj7C3Vk Ar89R65p0LYLP1dRAzDUv3/Qhx4JPrAVTIiInApgnJmIut+uIQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEvDwKNazeuNsEXUFeVsYbWX2sRWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85Mzhl MTYwMi04MDkzLTRiY2QtYjUyNy1mNWQxNzU2Mjk1ZmMvOTM4ZTE2MDItODA5My00 YmNkLWI1MjctZjVkMTc1NjI5NWZjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTM4ZTE2MDItODA5My00YmNkLWI1 MjctZjVkMTc1NjI5NWZjLzkzOGUxNjAyLTgwOTMtNGJjZC1iNTI3LWY1ZDE3NTYy OTVmYy5jcmwwHwYDVR0jBBgwFoAU/MwAtMa9gHxpV2YtGanrwjeJePYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85MzhlMTYwMi04MDkzLTRiY2QtYjUyNy1mNWQx NzU2Mjk1ZmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAPmxIhiPIz9XQAcxda53nk oT3WCHBAwKbPtGdcZ+tF/k/bP2sKHHG6vzHKtvpGUO4ucZgi+IU2oMWU3DI/2fZc yEVwlDXh9ZN+ap6lnm1Xx7SKEhM80xc1jYfgBNOI3vsSFE5Q6UNmXEzKhnDdFRbi JStoJeol0IqT+tTltLIWPscz3ntA6SwxrvW2MN/NJrbwvWtNrLIjJnYjWwWFbkUF ES7IyBFCiWxN+CYFtmfv8RBOQOj/OEKXPXeAXKSNdtdusKMCRJFtzlXP1Obx4LRf 9XEnqtamKTPU/iKpsGU0ckSxhP6XS7FVjUemauD6wkmXYNEuRQdv/6FPWIh6kTSf -----END CERTIFICATE-----Generated at Sat Apr 12 14:54:13 2025 by rpki-client