$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.mft File: 25422be5-720b-40bc-8a4d-02579ec1bead.mft (raw, json) Hash identifier: OJ/pJ/Bx097bcRRWZLdYcRx+rPhOSdYgDLj0jmXtBf8= Subject key identifier: DA:24:63:3F:E8:C3:5E:95:24:F8:B9:00:77:E2:D8:87:C1:CE:33:FF Authority key identifier: CE:D2:97:2D:47:2B:D4:F9:C0:90:20:70:DB:AC:BA:3B:D5:62:63:6A Certificate issuer: /CN=25422be5-720b-40bc-8a4d-02579ec1bead Certificate serial: 010D0C9F432858497D2CC6EC6F719D68704392C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.mft Manifest number: 010D0C9F4328584073A84B9C832FD0665142A9AF Signing time: Fri 11 Apr 2025 09:00:03 +0000 Manifest this update: Fri 11 Apr 2025 09:00:03 +0000 Manifest next update: Mon 14 Apr 2025 09:00:00 +0000 Files and hashes: 1: 25422be5-720b-40bc-8a4d-02579ec1bead.crl (hash: HlW0kyJbKKQ3dn6Z+JUOwV0pXBMB/8IozDOAWfd0mCM=) 2: 8a5c0e90-ec6b-3ac8-85d7-908f880e7035.roa (hash: bZWCRFJyhI5vBpB20g47KwDxsykDOvC96m49s4D7hFQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:2c:c6:ec:6f:71:9d:68:70:43:92:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25422be5-720b-40bc-8a4d-02579ec1bead Validity Not Before: Apr 11 09:00:03 2025 GMT Not After : Apr 14 09:00:00 2025 GMT Subject: CN=1b03a088-d843-4448-9cff-dd3a7db968f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d5:9f:fe:07:69:66:a6:6b:c0:eb:54:c9:e0: 7f:8b:5c:27:83:e0:b4:cb:f8:55:18:aa:02:4e:8c: 67:6d:55:f6:0b:35:c5:70:da:e3:0d:82:89:91:39: d0:81:07:3b:fc:4e:5e:16:56:99:64:81:23:73:f0: 16:86:ce:af:95:5b:c8:b9:29:dd:bb:6d:7b:32:00: 65:ca:e2:37:78:82:9c:f5:fc:4a:d5:72:8d:1f:15: 2d:7a:51:e2:b7:da:48:c9:12:4d:25:d8:af:41:f0: 8f:bf:0f:ef:24:30:38:68:77:a0:fb:b0:7e:a9:46: 71:31:99:d0:52:75:d9:4a:35:ac:d5:79:c9:66:20: 07:1c:68:14:43:8b:0a:eb:1c:47:58:45:8e:40:39: a0:2b:0e:97:81:65:97:23:b0:a5:4f:36:b5:8c:0d: c0:7c:c3:66:a6:4c:c4:ea:32:51:3e:f6:c8:44:7e: da:fe:22:ef:ac:9a:a7:5d:f0:1c:0d:fd:60:84:4e: ee:f0:0a:e1:0c:35:85:3f:20:a9:d0:3a:9b:62:87: 05:1d:70:3e:c3:7d:9c:6b:f5:cb:f4:c5:21:15:66: 03:1f:c3:9c:d5:56:45:c5:5d:c7:1a:24:b6:27:db: ed:cd:d6:f6:38:f2:b4:a0:ee:f3:56:fe:56:b4:42: 4e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:24:63:3F:E8:C3:5E:95:24:F8:B9:00:77:E2:D8:87:C1:CE:33:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.crl X509v3 Authority Key Identifier: keyid:CE:D2:97:2D:47:2B:D4:F9:C0:90:20:70:DB:AC:BA:3B:D5:62:63:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:b6:2e:50:01:5d:22:42:46:b2:4a:d4:fa:b0:ab:c9:49:e6: 88:dc:d1:71:27:4b:3a:16:a6:86:9f:1f:a2:5e:ec:6e:14:42: 29:ff:f9:41:13:f6:dc:8a:ec:e9:c6:bf:9c:94:97:b9:40:e5: 56:64:08:a4:67:15:66:31:e0:4d:fc:f0:79:cf:5a:26:3e:7a: 83:d8:4a:0f:d5:c5:6b:78:99:ec:d0:40:72:f4:fa:96:bc:3a: a4:92:40:d2:15:bf:58:ac:72:40:b7:08:f9:60:44:d9:37:58: ac:f5:eb:1d:46:be:8c:e6:04:5a:8c:ea:bd:db:9c:ce:15:41: 4b:e6:e8:36:6c:8a:6d:3d:d2:65:5b:50:67:38:9e:7e:7c:af: 72:8a:32:3b:f6:ec:d0:b2:56:f6:b5:23:47:4e:ba:ea:18:85: a7:24:3e:f0:35:df:a8:4c:c7:3e:48:4f:8d:4e:3e:d8:c8:99: 8e:c4:eb:03:f7:38:71:ed:a1:0b:3f:7a:95:87:64:bd:29:a6: 80:b1:72:6b:cc:be:1d:86:23:fa:02:18:bd:86:21:2d:4c:8a: 40:0e:f5:35:3a:ee:b8:8a:d9:36:cb:b3:db:08:60:1a:20:9c: 4e:00:45:91:62:ca:3f:4f:6b:6b:6c:3d:8e:fb:36:c1:db:e3: 10:9a:d0:02 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl9LMbsb3GdaHBDksAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjU0MjJiZTUtNzIwYi00MGJjLThhNGQtMDI1NzllYzFi ZWFkMB4XDTI1MDQxMTA5MDAwM1oXDTI1MDQxNDA5MDAwMFowLzEtMCsGA1UEAxMk MWIwM2EwODgtZDg0My00NDQ4LTljZmYtZGQzYTdkYjk2OGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9Wf/gdpZqZrwOtUyeB/i1wng+C0y/hVGKoC ToxnbVX2CzXFcNrjDYKJkTnQgQc7/E5eFlaZZIEjc/AWhs6vlVvIuSndu217MgBl yuI3eIKc9fxK1XKNHxUtelHit9pIyRJNJdivQfCPvw/vJDA4aHeg+7B+qUZxMZnQ UnXZSjWs1XnJZiAHHGgUQ4sK6xxHWEWOQDmgKw6XgWWXI7ClTza1jA3AfMNmpkzE 6jJRPvbIRH7a/iLvrJqnXfAcDf1ghE7u8ArhDDWFPyCp0DqbYocFHXA+w32ca/XL 9MUhFWYDH8Oc1VZFxV3HGiS2J9vtzdb2OPK0oO7zVv5WtEJO/QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNokYz/ow16VJPi5AHfi2IfBzjP/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yNTQy MmJlNS03MjBiLTQwYmMtOGE0ZC0wMjU3OWVjMWJlYWQvMjU0MjJiZTUtNzIwYi00 MGJjLThhNGQtMDI1NzllYzFiZWFkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjU0MjJiZTUtNzIwYi00MGJjLThh NGQtMDI1NzllYzFiZWFkLzI1NDIyYmU1LTcyMGItNDBiYy04YTRkLTAyNTc5ZWMx YmVhZC5jcmwwHwYDVR0jBBgwFoAUztKXLUcr1PnAkCBw26y6O9ViY2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yNTQyMmJlNS03MjBiLTQwYmMtOGE0ZC0wMjU3 OWVjMWJlYWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC+ti5QAV0iQkayStT6sKvJ SeaI3NFxJ0s6FqaGnx+iXuxuFEIp//lBE/bciuzpxr+clJe5QOVWZAikZxVmMeBN /PB5z1omPnqD2EoP1cVreJns0EBy9PqWvDqkkkDSFb9YrHJAtwj5YETZN1is9esd Rr6M5gRajOq925zOFUFL5ug2bIptPdJlW1BnOJ5+fK9yijI79uzQslb2tSNHTrrq GIWnJD7wNd+oTMc+SE+NTj7YyJmOxOsD9zhx7aELP3qVh2S9KaaAsXJrzL4dhiP6 Ahi9hiEtTIpADvU1Ou64itk2y7PbCGAaIJxOAEWRYso/T2trbD2O+zbB2+MQmtAC -----END CERTIFICATE-----Generated at Sat Apr 12 00:30:58 2025 by rpki-client