$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958/9696ca72-0d62-4fc3-b383-c596c4f11958.mft File: 9696ca72-0d62-4fc3-b383-c596c4f11958.mft (raw, json) Hash identifier: zdzL64XPdYKcm+aJqpkAX4y4zOIHFGw5Lkcwc/LX3u4= Subject key identifier: 4E:63:D9:92:B1:46:B0:C4:0D:93:BB:23:9E:C8:E8:5B:80:F8:44:96 Authority key identifier: 2E:55:FC:91:1D:44:AE:0E:73:86:AC:69:79:14:3C:D7:CD:4A:C4:03 Certificate issuer: /CN=9696ca72-0d62-4fc3-b383-c596c4f11958 Certificate serial: 010D0C9F432858496AADFE20C8F8FE26DEDA5400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958/9696ca72-0d62-4fc3-b383-c596c4f11958.mft Manifest number: 010D0C9F4328584073A820EAB30C055235681449 Signing time: Fri 04 Apr 2025 18:00:03 +0000 Manifest this update: Fri 04 Apr 2025 18:00:03 +0000 Manifest next update: Mon 07 Apr 2025 18:00:00 +0000 Files and hashes: 1: 9696ca72-0d62-4fc3-b383-c596c4f11958.crl (hash: oMxy2YaKq1BIkojbBzPY6b+fIQT/1E2kPj+2lfam/Kw=) 2: e8618f4f-7894-3379-ba43-706d25d57bf7.roa (hash: uglKFS0rijvvx5dH2kBsQy7XQO5gD3VlBv0vVn5+K78=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958/9696ca72-0d62-4fc3-b383-c596c4f11958.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958/9696ca72-0d62-4fc3-b383-c596c4f11958.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:ad:fe:20:c8:f8:fe:26:de:da:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9696ca72-0d62-4fc3-b383-c596c4f11958 Validity Not Before: Apr 4 18:00:03 2025 GMT Not After : Apr 7 18:00:00 2025 GMT Subject: CN=44a0e8c1-e7f4-4baa-8ee4-873d57759f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a7:fc:bd:47:51:0c:85:bf:31:bf:04:fc:37: 0a:b3:22:53:61:b2:c8:a9:04:55:69:c2:5d:1b:e6: 9e:53:91:59:90:13:33:e7:4a:eb:91:ae:cc:8e:da: 5a:25:48:92:80:87:0f:94:30:95:f4:37:f0:a3:8a: 38:16:1a:73:2a:b4:3e:86:8c:64:b5:6e:b6:31:79: 22:9e:1c:a5:f3:d9:72:aa:61:97:01:3c:cd:58:7d: 22:77:b4:44:17:39:20:0c:6b:26:6e:82:70:90:87: 9d:36:c6:40:9a:a9:05:2d:b1:67:f5:d1:46:a2:63: fc:ec:4a:7a:cb:3f:34:b7:e8:83:07:9d:b8:f5:c7: b6:ce:38:44:56:33:3f:4d:76:b0:83:15:67:eb:f4: ef:b2:36:f0:dc:42:58:a6:eb:71:8c:74:97:57:6c: 30:f1:46:a0:52:d9:1f:f6:59:f5:d4:6a:15:ae:68: bf:8f:73:c4:56:f4:6f:ce:70:1e:62:e0:86:ed:1b: 13:d7:9b:ea:4a:2e:a6:4c:73:05:e6:4d:aa:ae:d3: 8d:91:35:33:e8:34:49:f0:9b:20:90:50:63:4a:1d: 61:de:c0:00:50:47:02:d3:8c:58:73:58:84:9d:dc: 36:39:fb:d7:0a:5a:f2:32:e8:97:b2:fc:a2:24:57: 1d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:63:D9:92:B1:46:B0:C4:0D:93:BB:23:9E:C8:E8:5B:80:F8:44:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958/9696ca72-0d62-4fc3-b383-c596c4f11958.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958/9696ca72-0d62-4fc3-b383-c596c4f11958.crl X509v3 Authority Key Identifier: keyid:2E:55:FC:91:1D:44:AE:0E:73:86:AC:69:79:14:3C:D7:CD:4A:C4:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:54:a0:c6:3b:77:e8:32:92:d6:46:16:c0:90:8f:6a:03:01: e7:2f:25:07:6b:1c:fb:02:71:3a:74:9c:46:80:8d:40:db:df: 1d:16:08:38:68:78:f6:33:29:3a:c7:d8:d1:f8:c6:0d:39:88: e0:1a:dd:fd:51:3d:56:3f:02:1e:a5:f9:87:e3:61:39:60:48: 43:c8:0d:f9:3e:46:64:19:61:65:9f:22:f1:e5:d4:ee:07:05: d2:a5:1d:28:49:3e:65:74:2d:c6:a3:15:ac:ce:fe:08:92:9b: 85:9d:26:0c:5c:8d:8f:12:bd:4d:ac:15:1f:64:6c:0a:1b:40: 5e:11:6c:a5:52:a5:9c:f6:68:96:c1:f9:10:64:e7:81:ff:d2: 97:ec:6d:b7:af:70:3e:a5:4c:58:24:23:43:03:58:66:62:50: 73:66:59:02:d8:5c:82:2b:31:9e:71:2a:ec:63:6e:52:07:67: e9:cf:1c:d1:17:a6:e7:3f:7e:4e:7a:c4:b1:7f:af:8b:61:60: d4:87:bc:e6:ce:36:13:85:67:1b:c0:8b:d4:23:68:f3:c6:5a: 01:6b:5b:95:e8:dd:ae:9b:5c:31:59:fa:cb:9d:2a:79:ec:db: 94:51:23:bf:cc:06:b6:11:57:f2:2c:10:38:65:27:2e:0a:4b: 7e:59:78:0c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWElqrf4gyPj+Jt7aVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY5NmNhNzItMGQ2Mi00ZmMzLWIzODMtYzU5NmM0ZjEx OTU4MB4XDTI1MDQwNDE4MDAwM1oXDTI1MDQwNzE4MDAwMFowLzEtMCsGA1UEAxMk NDRhMGU4YzEtZTdmNC00YmFhLThlZTQtODczZDU3NzU5ZjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKf8vUdRDIW/Mb8E/DcKsyJTYbLIqQRVacJd G+aeU5FZkBMz50rrka7MjtpaJUiSgIcPlDCV9Dfwo4o4FhpzKrQ+hoxktW62MXki nhyl89lyqmGXATzNWH0id7REFzkgDGsmboJwkIedNsZAmqkFLbFn9dFGomP87Ep6 yz80t+iDB5249ce2zjhEVjM/TXawgxVn6/Tvsjbw3EJYputxjHSXV2ww8UagUtkf 9ln11GoVrmi/j3PEVvRvznAeYuCG7RsT15vqSi6mTHMF5k2qrtONkTUz6DRJ8Jsg kFBjSh1h3sAAUEcC04xYc1iEndw2OfvXClryMuiXsvyiJFcdnwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFE5j2ZKxRrDEDZO7I57I6FuA+ESWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85Njk2 Y2E3Mi0wZDYyLTRmYzMtYjM4My1jNTk2YzRmMTE5NTgvOTY5NmNhNzItMGQ2Mi00 ZmMzLWIzODMtYzU5NmM0ZjExOTU4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTY5NmNhNzItMGQ2Mi00ZmMzLWIz ODMtYzU5NmM0ZjExOTU4Lzk2OTZjYTcyLTBkNjItNGZjMy1iMzgzLWM1OTZjNGYx MTk1OC5jcmwwHwYDVR0jBBgwFoAULlX8kR1Erg5zhqxpeRQ8181KxAMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85Njk2Y2E3Mi0wZDYyLTRmYzMtYjM4My1jNTk2 YzRmMTE5NTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBxVKDGO3foMpLWRhbAkI9q AwHnLyUHaxz7AnE6dJxGgI1A298dFgg4aHj2Myk6x9jR+MYNOYjgGt39UT1WPwIe pfmH42E5YEhDyA35PkZkGWFlnyLx5dTuBwXSpR0oST5ldC3GoxWszv4IkpuFnSYM XI2PEr1NrBUfZGwKG0BeEWylUqWc9miWwfkQZOeB/9KX7G23r3A+pUxYJCNDA1hm YlBzZlkC2FyCKzGecSrsY25SB2fpzxzRF6bnP35OesSxf6+LYWDUh7zmzjYThWcb wIvUI2jzxloBa1uV6N2um1wxWfrLnSp57NuUUSO/zAa2EVfyLBA4ZScuCkt+WXgM -----END CERTIFICATE-----Generated at Sat Apr 5 10:10:45 2025 by rpki-client