$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.mft File: cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.mft (raw, json) Hash identifier: XWaI5ZciBj29uJoiuNMnkQSKJPxUItP+EMMpYkbyAOM= Subject key identifier: 13:B9:12:14:AA:98:26:0E:66:CE:9F:BA:36:DB:CB:AE:D6:A4:E2:9F Authority key identifier: D6:26:E1:8A:8F:B4:0F:B5:DB:1C:70:1F:86:FB:4A:BA:D5:E2:19:0A Certificate issuer: /CN=cd2d7d85-61d0-4ba6-b4d2-afda9b820a78 Certificate serial: 010D0C9F43285849923AAED1D98EF6CF00E36300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.mft Manifest number: 010D0C9F4328584073A82DA05FED0AA5E611981A Signing time: Fri 18 Apr 2025 22:00:03 +0000 Manifest this update: Fri 18 Apr 2025 22:00:03 +0000 Manifest next update: Mon 21 Apr 2025 22:00:00 +0000 Files and hashes: 1: 40ca3da7-d905-3def-9f19-2e32b7805f82.roa (hash: toUkT6PbOS26RLwknKPNK5s/FEdsBUDeJSJYc/5lJwc=) 2: 4ba60e82-0cee-3eb7-a6f2-cadfbf92ea5b.roa (hash: w7B8YDPRkxjyU/tbsBSrn+GMupFQHOoVnKLxN5vBFvs=) 3: 6b7dcf99-4b56-331e-b7c1-cb3c8cd424f3.roa (hash: QoZ0JAjLhdIlMK9w77Rbb3cjZdUehyfN7PH64GF0n1Q=) 4: cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.crl (hash: LXZboFW4HwG52oj0+01/1DDBqBKjPa+qbB30SeQUsZE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:3a:ae:d1:d9:8e:f6:cf:00:e3:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd2d7d85-61d0-4ba6-b4d2-afda9b820a78 Validity Not Before: Apr 18 22:00:03 2025 GMT Not After : Apr 21 22:00:00 2025 GMT Subject: CN=4a886bcd-312b-4bf4-956c-dc06e4fee569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f3:ce:07:fe:b0:dc:63:1e:39:70:09:2e:af: ef:41:38:ab:1b:08:74:1e:97:f8:c4:dd:b9:cc:9d: 91:d7:a4:c5:8b:19:2a:e9:e4:b6:6d:fd:22:1b:11: c4:d5:e4:41:57:fe:d2:17:69:64:1c:d7:89:85:f3: 8f:e6:95:7f:20:72:0a:b3:fd:6e:15:14:bb:ae:9a: 9b:e1:d8:4e:42:6a:fb:cf:5c:43:a1:0a:25:3e:ad: 2c:e0:04:db:5e:0a:b5:39:31:33:dd:97:03:2d:a7: a4:47:56:23:98:00:08:2c:e8:18:93:56:bf:f8:53: 7f:53:0b:a9:d1:85:09:9f:62:b7:02:67:d8:13:38: 42:86:46:f1:0a:fd:8c:b3:bb:f3:e7:9e:f4:23:cb: ad:b9:fd:a7:9f:e8:67:67:6c:58:76:62:d0:4d:2a: ab:24:d1:59:66:58:70:b4:25:56:4f:cf:a9:61:15: db:6e:a7:ad:a6:58:7f:56:5e:e8:98:ec:2a:2d:ec: 1d:ae:0c:01:ae:40:90:5a:1a:2e:53:21:64:a0:af: 47:2c:2e:a2:03:f7:90:e1:11:37:6a:c0:42:d3:79: 14:e3:2c:16:f9:7b:4e:24:b6:63:35:8a:6a:5c:15: 00:bc:85:05:81:5e:89:d8:ed:3f:e7:16:a1:49:d8: 38:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B9:12:14:AA:98:26:0E:66:CE:9F:BA:36:DB:CB:AE:D6:A4:E2:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.crl X509v3 Authority Key Identifier: keyid:D6:26:E1:8A:8F:B4:0F:B5:DB:1C:70:1F:86:FB:4A:BA:D5:E2:19:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:4f:de:49:e5:46:5d:ad:40:f2:c8:37:cd:0b:b1:c6:82:75: d3:a8:5c:1a:57:05:fc:38:97:43:58:a9:75:eb:cb:c3:d2:8b: 67:5f:e8:cf:61:b5:7d:52:3f:e4:4e:ca:bc:51:07:d5:e0:93: f5:36:48:80:df:1e:7e:1f:5e:5b:22:28:b4:de:fc:f7:3a:ef: bc:11:33:ae:de:55:cf:bf:30:29:60:c5:bf:2b:b6:e7:95:80: 03:78:f7:60:36:c4:a3:12:15:cd:19:86:28:20:89:25:0c:a4: 3a:6d:ac:c3:70:c4:39:87:7d:fb:22:16:9d:c9:81:30:bb:c7: d7:99:d8:ab:a3:06:d6:d3:db:e9:54:bf:14:e7:f3:7b:86:94: 18:c8:b8:52:c1:ec:27:40:d6:b0:ba:68:9c:c2:64:fd:19:6e: 8b:ae:dd:a4:9c:ea:13:98:f6:7f:5d:6c:d9:3b:05:31:89:bd: cf:fd:6a:d4:f8:0c:f9:3c:d5:2d:e0:90:25:a8:bd:88:c9:87: 8d:71:1f:7e:78:fa:a7:34:9f:5e:11:c3:88:a3:2e:a2:8f:52: 9e:cd:a6:ff:51:8b:f3:b5:18:f7:55:d7:d7:f0:02:96:3b:8a: 47:11:7a:2a:19:e0:66:15:ae:77:d1:d4:7c:cb:74:2e:0d:1e: a8:5a:cd:99 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmSOq7R2Y72zwDjYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QyZDdkODUtNjFkMC00YmE2LWI0ZDItYWZkYTliODIw YTc4MB4XDTI1MDQxODIyMDAwM1oXDTI1MDQyMTIyMDAwMFowLzEtMCsGA1UEAxMk NGE4ODZiY2QtMzEyYi00YmY0LTk1NmMtZGMwNmU0ZmVlNTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPPOB/6w3GMeOXAJLq/vQTirGwh0Hpf4xN25 zJ2R16TFixkq6eS2bf0iGxHE1eRBV/7SF2lkHNeJhfOP5pV/IHIKs/1uFRS7rpqb 4dhOQmr7z1xDoQolPq0s4ATbXgq1OTEz3ZcDLaekR1YjmAAILOgYk1a/+FN/Uwup 0YUJn2K3AmfYEzhChkbxCv2Ms7vz5570I8utuf2nn+hnZ2xYdmLQTSqrJNFZZlhw tCVWT8+pYRXbbqetplh/Vl7omOwqLewdrgwBrkCQWhouUyFkoK9HLC6iA/eQ4RE3 asBC03kU4ywW+XtOJLZjNYpqXBUAvIUFgV6J2O0/5xahSdg4dwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBO5EhSqmCYOZs6fujbby67WpOKfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZDJk N2Q4NS02MWQwLTRiYTYtYjRkMi1hZmRhOWI4MjBhNzgvY2QyZDdkODUtNjFkMC00 YmE2LWI0ZDItYWZkYTliODIwYTc4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2QyZDdkODUtNjFkMC00YmE2LWI0 ZDItYWZkYTliODIwYTc4L2NkMmQ3ZDg1LTYxZDAtNGJhNi1iNGQyLWFmZGE5Yjgy MGE3OC5jcmwwHwYDVR0jBBgwFoAU1ibhio+0D7XbHHAfhvtKutXiGQowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jZDJkN2Q4NS02MWQwLTRiYTYtYjRkMi1hZmRh OWI4MjBhNzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCFT95J5UZdrUDyyDfNC7HG gnXTqFwaVwX8OJdDWKl168vD0otnX+jPYbV9Uj/kTsq8UQfV4JP1NkiA3x5+H15b Iii03vz3Ou+8ETOu3lXPvzApYMW/K7bnlYADePdgNsSjEhXNGYYoIIklDKQ6bazD cMQ5h337IhadyYEwu8fXmdirowbW09vpVL8U5/N7hpQYyLhSwewnQNawumicwmT9 GW6Lrt2knOoTmPZ/XWzZOwUxib3P/WrU+Az5PNUt4JAlqL2IyYeNcR9+ePqnNJ9e EcOIoy6ij1Kezab/UYvztRj3VdfX8AKWO4pHEXoqGeBmFa530dR8y3QuDR6oWs2Z -----END CERTIFICATE-----Generated at Sat Apr 19 17:17:04 2025 by rpki-client