$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/957264f8-0474-43d0-9a3b-5f53ce28790d.mft File: 957264f8-0474-43d0-9a3b-5f53ce28790d.mft (raw, json) Hash identifier: pA9aY2wxZ2w2qsDPBPs7oyyUWd7bqNiaKguwc/zDr5Q= Subject key identifier: 8C:2A:37:98:A6:68:1A:7A:99:8C:87:7D:9B:B0:C1:7A:78:83:9E:47 Authority key identifier: 8E:9D:11:16:67:5E:D2:48:46:F0:6A:D8:54:07:55:80:F0:16:CC:2F Certificate issuer: /CN=957264f8-0474-43d0-9a3b-5f53ce28790d Certificate serial: 010D0C9F43285848E6128A19E23DB42AB4D03300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/957264f8-0474-43d0-9a3b-5f53ce28790d.mft Manifest number: 010D0C9F4328584073A841F37CF48CBDEC8C33A8 Signing time: Sun 16 Feb 2025 06:00:07 +0000 Manifest this update: Sun 16 Feb 2025 06:00:07 +0000 Manifest next update: Wed 19 Feb 2025 06:00:00 +0000 Files and hashes: 1: 957264f8-0474-43d0-9a3b-5f53ce28790d.crl (hash: RA5xXJImPnEY7c2qaVp06yUMmVjXxdP4APN6HDf+924=) 2: 976bff61-e8bf-3711-88dc-a4ab9c98b531.roa (hash: WkpCmccg/QyxrW/FxOgHvJqqAvRv1Kj5aCKZvKfHH3A=) 3: c8140f71-e8a5-3f59-bfe0-4779dbaed2fd.roa (hash: oiAvlq9L7mge2pLjHeRkvpCtiYkZY4/cRYA+RNrmKlA=) 4: f0bc271e-f7ef-344d-b87e-36104fd49265.roa (hash: h002+VQlXi4ymCFfzH80aYjTvhdtzVk0YPPAc9OadLg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/957264f8-0474-43d0-9a3b-5f53ce28790d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/957264f8-0474-43d0-9a3b-5f53ce28790d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e6:12:8a:19:e2:3d:b4:2a:b4:d0:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=957264f8-0474-43d0-9a3b-5f53ce28790d Validity Not Before: Feb 16 06:00:07 2025 GMT Not After : Feb 19 06:00:00 2025 GMT Subject: CN=29311331-4d69-4ed3-a462-e4580cf867f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1e:af:90:d1:be:40:55:6d:99:33:6d:df:23: e1:50:55:f9:91:2e:81:d6:6a:9b:58:ce:37:5b:82: cb:0f:36:5f:f0:44:a2:b0:69:12:b4:dd:62:66:29: 47:0f:dd:0a:57:72:cf:c5:43:77:81:22:c1:e2:3e: c2:3f:32:ef:d7:69:7b:25:cf:57:58:ec:d0:e0:4f: 58:90:03:83:2f:f4:83:ce:d4:46:91:92:3e:76:a7: 93:ba:d9:39:bc:23:eb:ba:9f:2b:b2:9a:d5:e4:63: 94:6c:17:7c:c7:8b:08:d8:4f:d9:48:3e:ab:8f:48: ea:ff:76:e4:32:49:7d:81:62:ed:02:8c:dd:ed:c0: a7:ce:81:4c:3e:f4:65:da:32:fa:32:89:2d:66:da: 39:fa:c7:30:12:5f:a1:d5:89:2d:31:f2:89:d5:da: 32:a6:33:75:ef:7c:e4:ba:98:05:09:74:cd:58:34: 19:73:96:17:21:d2:cd:b4:6f:5f:b5:04:b2:65:d8: 51:57:63:5b:30:21:35:26:02:e7:5f:9a:e8:fa:78: 0b:96:95:66:ad:d7:df:77:d0:10:af:5b:b2:03:56: df:1f:bc:70:0b:f3:be:82:c9:bb:43:58:dc:ba:8c: 8a:a9:77:03:0b:18:b2:4c:fe:b7:68:8b:93:96:51: 15:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:2A:37:98:A6:68:1A:7A:99:8C:87:7D:9B:B0:C1:7A:78:83:9E:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/957264f8-0474-43d0-9a3b-5f53ce28790d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/957264f8-0474-43d0-9a3b-5f53ce28790d.crl X509v3 Authority Key Identifier: keyid:8E:9D:11:16:67:5E:D2:48:46:F0:6A:D8:54:07:55:80:F0:16:CC:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:11:0e:bb:e2:e4:93:b7:10:86:4d:94:9c:dc:ee:c2:fb:b9: 1c:aa:09:a0:80:ab:21:46:ea:51:97:6a:f2:c7:06:59:97:00: 67:5f:cb:3d:fb:ab:46:5e:1a:17:ee:82:6e:9e:4f:c0:43:ef: 4e:aa:61:a2:e9:8c:ee:dd:4a:d4:cc:5b:0c:44:69:47:36:38: cb:7d:20:29:a9:95:b6:cf:9a:56:7d:f1:8d:87:b7:ff:b2:ed: cc:c1:35:c1:80:14:48:1d:61:bb:fe:9b:9b:86:ee:f8:4e:9f: 2f:e4:cf:54:9c:b8:2c:6e:17:3f:0c:b0:4c:01:cd:2b:62:76: fc:66:92:3f:ff:c3:bc:6b:0e:f7:ef:e7:05:2a:80:d8:a7:4e: 84:6a:46:9e:1b:4b:b8:ee:49:3c:ff:85:0a:65:6c:3b:32:df: 89:bf:eb:20:b5:1c:d2:8e:ef:08:ea:cc:1b:47:6c:85:63:ea: b4:57:11:90:db:9a:a9:ae:18:9c:96:66:b6:31:d8:ee:21:1d: 02:6a:da:9a:18:a3:74:e1:71:29:25:e1:20:92:91:82:ee:c1: bb:c8:76:38:07:a1:9c:98:e2:e3:88:97:34:c1:65:06:9e:e4: f5:38:5f:f5:d1:ab:ef:c0:f3:8a:99:cb:0e:97:d6:0d:35:2a: b0:b7:f7:31 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEjmEooZ4j20KrTQMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTU3MjY0ZjgtMDQ3NC00M2QwLTlhM2ItNWY1M2NlMjg3 OTBkMB4XDTI1MDIxNjA2MDAwN1oXDTI1MDIxOTA2MDAwMFowLzEtMCsGA1UEAxMk MjkzMTEzMzEtNGQ2OS00ZWQzLWE0NjItZTQ1ODBjZjg2N2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB6vkNG+QFVtmTNt3yPhUFX5kS6B1mqbWM43 W4LLDzZf8ESisGkStN1iZilHD90KV3LPxUN3gSLB4j7CPzLv12l7Jc9XWOzQ4E9Y kAODL/SDztRGkZI+dqeTutk5vCPrup8rsprV5GOUbBd8x4sI2E/ZSD6rj0jq/3bk Mkl9gWLtAozd7cCnzoFMPvRl2jL6MoktZto5+scwEl+h1YktMfKJ1doypjN173zk upgFCXTNWDQZc5YXIdLNtG9ftQSyZdhRV2NbMCE1JgLnX5ro+ngLlpVmrdffd9AQ r1uyA1bfH7xwC/O+gsm7Q1jcuoyKqXcDCxiyTP63aIuTllEVDQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIwqN5imaBp6mYyHfZuwwXp4g55HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85NTcy NjRmOC0wNDc0LTQzZDAtOWEzYi01ZjUzY2UyODc5MGQvOTU3MjY0ZjgtMDQ3NC00 M2QwLTlhM2ItNWY1M2NlMjg3OTBkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTU3MjY0ZjgtMDQ3NC00M2QwLTlh M2ItNWY1M2NlMjg3OTBkLzk1NzI2NGY4LTA0NzQtNDNkMC05YTNiLTVmNTNjZTI4 NzkwZC5jcmwwHwYDVR0jBBgwFoAUjp0RFmde0khG8GrYVAdVgPAWzC8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85NTcyNjRmOC0wNDc0LTQzZDAtOWEzYi01ZjUz Y2UyODc5MGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC4EQ674uSTtxCGTZSc3O7C +7kcqgmggKshRupRl2ryxwZZlwBnX8s9+6tGXhoX7oJunk/AQ+9OqmGi6Yzu3UrU zFsMRGlHNjjLfSApqZW2z5pWffGNh7f/su3MwTXBgBRIHWG7/pubhu74Tp8v5M9U nLgsbhc/DLBMAc0rYnb8ZpI//8O8aw737+cFKoDYp06EakaeG0u47kk8/4UKZWw7 Mt+Jv+sgtRzSju8I6swbR2yFY+q0VxGQ25qprhiclma2MdjuIR0CatqaGKN04XEp JeEgkpGC7sG7yHY4B6GcmOLjiJc0wWUGnuT1OF/10avvwPOKmcsOl9YNNSqwt/cx -----END CERTIFICATE-----Generated at Sun Feb 16 15:24:21 2025 by rpki-client