$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.mft File: df28494f-1d3f-4a45-8a74-bde41c2502a2.mft (raw, json) Hash identifier: 6GcGk0/n5pYOaxxVox0sj4fjTKE8md5THA6WbwDaTFI= Subject key identifier: D9:7F:DA:8C:6C:45:A2:DF:60:EF:F3:4A:0C:8F:71:C9:B3:DA:DA:4B Authority key identifier: A8:A0:65:8D:B0:AF:37:3A:DF:76:BB:50:BD:A0:CC:24:B1:15:4B:9A Certificate issuer: /CN=df28494f-1d3f-4a45-8a74-bde41c2502a2 Certificate serial: 010D0C9F432858497C20D13564B168FAE936F100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.mft Manifest number: 010D0C9F4328584073A83206E308BDBACFE90460 Signing time: Fri 11 Apr 2025 00:00:08 +0000 Manifest this update: Fri 11 Apr 2025 00:00:08 +0000 Manifest next update: Mon 14 Apr 2025 00:00:00 +0000 Files and hashes: 1: 155f4b9b-4ca3-3b31-bf72-238f854d820f.roa (hash: gKj2jPg04JbRd5LXeBajHGd/Nl8V3BxSC85uGfktHrs=) 2: 3bd23a67-6b4a-3d68-8253-fd485c9f6f0c.roa (hash: EMoAvsYR64v3fW+m31iMQacQl0RibCLbesGSXpKCBgE=) 3: df28494f-1d3f-4a45-8a74-bde41c2502a2.crl (hash: q2zQ3j5QDv046xSPpPRSL2rLUsFEUmZ2cW60RATOY28=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7c:20:d1:35:64:b1:68:fa:e9:36:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df28494f-1d3f-4a45-8a74-bde41c2502a2 Validity Not Before: Apr 11 00:00:08 2025 GMT Not After : Apr 14 00:00:00 2025 GMT Subject: CN=044a5739-a79f-4bfe-bab3-140cf2173a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:fc:fd:d6:8f:f7:e9:6b:eb:c5:2b:56:ed:67: ad:c5:6b:6b:0e:7a:8c:99:f8:33:74:1b:d3:44:d6: 84:e7:98:83:5e:b7:38:60:72:2c:3c:69:01:f5:32: 7a:31:06:97:16:26:56:6a:26:aa:35:d6:6e:90:33: de:59:50:c2:d1:97:05:09:fa:91:58:e9:bf:da:30: 48:ff:63:18:18:82:35:13:17:9b:2c:18:84:04:4a: 81:d6:53:91:92:7a:a5:53:37:e8:a2:ce:19:ae:75: a1:ca:1a:40:62:e9:07:8a:e6:c6:15:71:b0:75:11: 15:d3:61:db:fa:e0:c1:bf:6d:97:45:37:17:cc:3a: 25:96:1d:ec:a0:55:6a:7b:dd:27:c9:03:cd:15:da: 9c:21:9f:59:f9:5f:92:a0:ce:dd:49:89:49:2e:6e: 17:8c:f8:f1:d9:c7:c2:30:dd:03:11:89:ab:1c:5d: 90:d0:46:5d:a0:be:f6:4d:98:73:9a:dd:a1:41:58: 11:07:09:e3:1d:2e:fb:0c:41:3d:37:d7:6e:e2:cd: 3d:d8:00:24:0a:09:f9:fd:34:17:8e:a6:cb:41:fa: 82:38:7e:20:8b:02:e6:75:d3:98:b8:d4:c3:ee:f8: 1d:0d:df:e5:af:ad:f1:e8:4e:47:f8:9c:01:78:67: d4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:7F:DA:8C:6C:45:A2:DF:60:EF:F3:4A:0C:8F:71:C9:B3:DA:DA:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.crl X509v3 Authority Key Identifier: keyid:A8:A0:65:8D:B0:AF:37:3A:DF:76:BB:50:BD:A0:CC:24:B1:15:4B:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:d8:c6:79:35:ba:5b:04:21:ab:57:86:6b:80:7a:24:fd:4a: 69:1c:79:a8:31:ee:66:21:af:ff:00:99:d8:29:bb:1c:f8:a9: f5:79:82:59:d2:36:f3:43:3c:6b:96:ae:7c:4b:58:79:02:d6: 00:5d:f0:66:99:b4:fb:33:a3:69:b3:0d:f9:28:e2:a4:87:7a: df:c5:23:78:83:b0:36:58:c5:01:99:2b:3f:35:af:0e:a0:62: 4b:a7:ae:f7:c5:cc:49:ee:89:34:75:a3:76:89:ea:4e:f2:16: da:20:6a:50:a5:33:39:9c:9f:97:09:81:87:9c:dd:8a:1b:e7: 37:aa:48:24:5e:63:86:eb:68:bf:a4:58:2b:6a:cc:00:79:f2: 1c:96:d3:63:46:72:a5:a9:b4:03:38:86:fe:3f:0c:82:ec:f8: 7d:60:dc:b0:ef:35:99:23:c8:a9:33:8c:bd:f3:99:83:92:25: 62:65:3a:16:12:c0:b7:2d:51:3d:95:5a:99:f0:4c:e6:1f:b1: ae:59:fe:41:21:ef:43:f7:ed:2a:b1:57:c8:80:fc:d4:37:be: 9d:6e:73:44:31:c3:1a:2d:cc:a4:89:ea:f8:82:6a:c7:34:3e: cd:5e:38:01:c6:c2:10:5f:35:8b:90:b9:8e:86:75:30:d0:27: fe:46:20:c5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl8INE1ZLFo+uk28QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYyODQ5NGYtMWQzZi00YTQ1LThhNzQtYmRlNDFjMjUw MmEyMB4XDTI1MDQxMTAwMDAwOFoXDTI1MDQxNDAwMDAwMFowLzEtMCsGA1UEAxMk MDQ0YTU3MzktYTc5Zi00YmZlLWJhYjMtMTQwY2YyMTczYTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfz91o/36WvrxStW7WetxWtrDnqMmfgzdBvT RNaE55iDXrc4YHIsPGkB9TJ6MQaXFiZWaiaqNdZukDPeWVDC0ZcFCfqRWOm/2jBI /2MYGII1ExebLBiEBEqB1lORknqlUzfoos4ZrnWhyhpAYukHiubGFXGwdREV02Hb +uDBv22XRTcXzDollh3soFVqe90nyQPNFdqcIZ9Z+V+SoM7dSYlJLm4XjPjx2cfC MN0DEYmrHF2Q0EZdoL72TZhzmt2hQVgRBwnjHS77DEE9N9du4s092AAkCgn5/TQX jqbLQfqCOH4giwLmddOYuNTD7vgdDd/lr63x6E5H+JwBeGfUNwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNl/2oxsRaLfYO/zSgyPccmz2tpLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kZjI4 NDk0Zi0xZDNmLTRhNDUtOGE3NC1iZGU0MWMyNTAyYTIvZGYyODQ5NGYtMWQzZi00 YTQ1LThhNzQtYmRlNDFjMjUwMmEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGYyODQ5NGYtMWQzZi00YTQ1LThh NzQtYmRlNDFjMjUwMmEyL2RmMjg0OTRmLTFkM2YtNGE0NS04YTc0LWJkZTQxYzI1 MDJhMi5jcmwwHwYDVR0jBBgwFoAUqKBljbCvNzrfdrtQvaDMJLEVS5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kZjI4NDk0Zi0xZDNmLTRhNDUtOGE3NC1iZGU0 MWMyNTAyYTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA62MZ5NbpbBCGrV4ZrgHok /UppHHmoMe5mIa//AJnYKbsc+Kn1eYJZ0jbzQzxrlq58S1h5AtYAXfBmmbT7M6Np sw35KOKkh3rfxSN4g7A2WMUBmSs/Na8OoGJLp673xcxJ7ok0daN2iepO8hbaIGpQ pTM5nJ+XCYGHnN2KG+c3qkgkXmOG62i/pFgraswAefIcltNjRnKlqbQDOIb+PwyC 7Ph9YNyw7zWZI8ipM4y985mDkiViZToWEsC3LVE9lVqZ8EzmH7GuWf5BIe9D9+0q sVfIgPzUN76dbnNEMcMaLcykier4gmrHND7NXjgBxsIQXzWLkLmOhnUw0Cf+RiDF -----END CERTIFICATE-----Generated at Fri Apr 11 21:03:19 2025 by rpki-client