$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b/3fcccdf8-e770-4c4c-abd1-c8b63238594b.mft File: 3fcccdf8-e770-4c4c-abd1-c8b63238594b.mft (raw, json) Hash identifier: ufjX//xJzWs16nDfL0dV6gYtieiJCn9+LMSP7/48Oss= Subject key identifier: C9:4A:60:C6:E2:AE:D4:EF:5E:3A:42:BB:AA:83:6B:77:03:71:7C:9C Authority key identifier: 78:94:5F:4E:F8:F5:A3:42:58:B9:55:C3:C3:39:0E:17:70:D1:13:75 Certificate issuer: /CN=3fcccdf8-e770-4c4c-abd1-c8b63238594b Certificate serial: 010D0C9F432858497DC1AD39A4DB42952CE09460 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b/3fcccdf8-e770-4c4c-abd1-c8b63238594b.mft Manifest number: 010D0C9F4328584073A858BEA5A35ED25C3440CF Signing time: Fri 11 Apr 2025 14:00:03 +0000 Manifest this update: Fri 11 Apr 2025 14:00:03 +0000 Manifest next update: Mon 14 Apr 2025 14:00:00 +0000 Files and hashes: 1: 3fcccdf8-e770-4c4c-abd1-c8b63238594b.crl (hash: Trq0oK0dGXIiTrDR1bah4BZUy7x1vE+BFYTdnlt07fs=) 2: 617c09a2-b74a-348a-bb1b-065e2212399f.roa (hash: TfQ0GMtJk8Gj8kIT+zZuwxk2mSDNqTcTvsAaDvt7Isw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b/3fcccdf8-e770-4c4c-abd1-c8b63238594b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b/3fcccdf8-e770-4c4c-abd1-c8b63238594b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:c1:ad:39:a4:db:42:95:2c:e0:94:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fcccdf8-e770-4c4c-abd1-c8b63238594b Validity Not Before: Apr 11 14:00:03 2025 GMT Not After : Apr 14 14:00:00 2025 GMT Subject: CN=cf42fef2-c52c-468b-b439-31010ad2e7e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2a:68:bf:ae:2b:50:94:b9:6c:83:f5:3d:fb: a9:fd:2c:23:07:00:a6:a8:fa:ea:57:a9:6d:72:91: e8:1f:46:14:b6:f3:d8:71:84:e3:dd:dc:f7:6f:93: e7:fc:43:92:7a:9f:ea:0f:1d:8f:54:14:e9:ec:71: f6:53:33:20:5d:14:87:d1:89:b8:a7:f2:e9:b5:3f: b3:02:e5:19:52:e4:5c:f4:8c:7e:bb:80:7d:32:b7: 22:09:02:53:ae:13:11:b5:90:af:34:15:41:77:1d: 29:dd:31:e8:99:70:5e:e3:28:7f:bc:64:1c:2c:8b: 74:bd:d2:06:6b:d5:d4:ca:24:7d:62:79:62:93:2f: 0b:9a:a6:79:fb:6a:22:41:40:01:a7:db:57:dc:d2: 40:8b:20:3c:5b:ee:5a:c6:4a:98:59:5a:34:dc:60: 58:ab:e7:d1:be:af:9b:db:95:c7:3a:37:a4:30:e6: 7b:98:69:01:e4:6d:3f:7e:27:0b:1f:5f:af:58:ea: fb:9e:ea:53:8c:52:05:21:48:b0:d5:44:33:1c:38: 78:41:6d:9f:d5:31:cd:29:e2:c4:32:99:ba:31:3d: cd:57:c2:b5:92:e5:88:13:98:7c:95:4c:4c:49:e6: 18:5a:a1:25:4e:5b:4d:66:c5:3c:3f:e9:fd:45:0f: 04:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:4A:60:C6:E2:AE:D4:EF:5E:3A:42:BB:AA:83:6B:77:03:71:7C:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b/3fcccdf8-e770-4c4c-abd1-c8b63238594b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b/3fcccdf8-e770-4c4c-abd1-c8b63238594b.crl X509v3 Authority Key Identifier: keyid:78:94:5F:4E:F8:F5:A3:42:58:B9:55:C3:C3:39:0E:17:70:D1:13:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:55:c0:2b:f3:0b:21:5a:52:0c:e6:cb:cf:ae:0c:8b:94:1c: 69:f2:34:d3:d3:b8:2e:13:37:8d:d7:1c:d3:1a:a5:8c:7e:e7: c5:5b:c5:3b:05:88:04:0f:f0:b6:0e:ff:b4:3c:71:2e:7e:92: a3:da:9e:7e:b6:ce:9a:3c:56:53:8e:2e:25:85:02:32:67:0b: 90:49:4f:b2:94:98:45:a7:17:70:cd:2e:7f:c9:5f:c4:d1:a3: a0:4f:fd:47:49:52:99:d9:98:e0:f9:58:30:e5:a4:37:ad:8e: 0f:3c:79:9f:d2:62:fb:53:14:b8:2b:51:84:64:15:cd:70:f2: 2f:af:79:1e:6b:9e:fb:da:65:91:05:3e:43:27:c0:be:03:31: b7:66:36:89:7a:34:ed:c4:9c:65:ff:0e:88:0d:66:36:4e:f1: c1:25:c4:42:33:44:e1:1d:42:a4:d3:cc:fc:7d:22:3d:31:61: a7:9d:7f:de:dd:25:6a:69:fd:27:36:14:81:9a:38:8a:7d:6f: ea:ca:f6:93:d0:75:9c:f7:7a:bd:24:9a:a8:14:55:90:72:03: cf:0a:48:8c:21:19:97:14:02:28:6a:fd:37:6b:05:44:dc:6b: 43:9d:71:71:86:91:74:29:81:04:84:a2:0d:4e:d5:40:88:b2: 45:9a:4b:db -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl9wa05pNtClSzglGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ZjY2NkZjgtZTc3MC00YzRjLWFiZDEtYzhiNjMyMzg1 OTRiMB4XDTI1MDQxMTE0MDAwM1oXDTI1MDQxNDE0MDAwMFowLzEtMCsGA1UEAxMk Y2Y0MmZlZjItYzUyYy00NjhiLWI0MzktMzEwMTBhZDJlN2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSpov64rUJS5bIP1Pfup/SwjBwCmqPrqV6lt cpHoH0YUtvPYcYTj3dz3b5Pn/EOSep/qDx2PVBTp7HH2UzMgXRSH0Ym4p/LptT+z AuUZUuRc9Ix+u4B9MrciCQJTrhMRtZCvNBVBdx0p3THomXBe4yh/vGQcLIt0vdIG a9XUyiR9Ynliky8LmqZ5+2oiQUABp9tX3NJAiyA8W+5axkqYWVo03GBYq+fRvq+b 25XHOjekMOZ7mGkB5G0/ficLH1+vWOr7nupTjFIFIUiw1UQzHDh4QW2f1THNKeLE Mpm6MT3NV8K1kuWIE5h8lUxMSeYYWqElTltNZsU8P+n9RQ8EsQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMlKYMbirtTvXjpCu6qDa3cDcXycMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZmNj Y2RmOC1lNzcwLTRjNGMtYWJkMS1jOGI2MzIzODU5NGIvM2ZjY2NkZjgtZTc3MC00 YzRjLWFiZDEtYzhiNjMyMzg1OTRiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2ZjY2NkZjgtZTc3MC00YzRjLWFi ZDEtYzhiNjMyMzg1OTRiLzNmY2NjZGY4LWU3NzAtNGM0Yy1hYmQxLWM4YjYzMjM4 NTk0Yi5jcmwwHwYDVR0jBBgwFoAUeJRfTvj1o0JYuVXDwzkOF3DRE3UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZmNjY2RmOC1lNzcwLTRjNGMtYWJkMS1jOGI2 MzIzODU5NGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAJVcAr8wshWlIM5svPrgyL lBxp8jTT07guEzeN1xzTGqWMfufFW8U7BYgED/C2Dv+0PHEufpKj2p5+ts6aPFZT ji4lhQIyZwuQSU+ylJhFpxdwzS5/yV/E0aOgT/1HSVKZ2Zjg+Vgw5aQ3rY4PPHmf 0mL7UxS4K1GEZBXNcPIvr3kea5772mWRBT5DJ8C+AzG3ZjaJejTtxJxl/w6IDWY2 TvHBJcRCM0ThHUKk08z8fSI9MWGnnX/e3SVqaf0nNhSBmjiKfW/qyvaT0HWc93q9 JJqoFFWQcgPPCkiMIRmXFAIoav03awVE3GtDnXFxhpF0KYEEhKINTtVAiLJFmkvb -----END CERTIFICATE-----Generated at Fri Apr 11 23:44:25 2025 by rpki-client