$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/df94af30-a8e8-42b4-9e43-649437c0cac7.mft File: df94af30-a8e8-42b4-9e43-649437c0cac7.mft (raw, json) Hash identifier: hf+1lmN1Lsn/8LRNkS61quNnqFC6uqEsTFXo7HdTA9c= Subject key identifier: A1:CD:18:CC:1D:F8:08:5D:5F:A0:7D:77:0C:E0:AD:56:4A:47:E5:F5 Authority key identifier: 4A:55:61:BC:24:00:53:15:DC:9F:48:CF:55:4F:D6:D8:8A:E2:FC:BB Certificate issuer: /CN=df94af30-a8e8-42b4-9e43-649437c0cac7 Certificate serial: 010D0C9F432858497C97EE61C9FC6A13D6F5E000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/df94af30-a8e8-42b4-9e43-649437c0cac7.mft Manifest number: 010D0C9F4328584073A83C1778D827AB9C5DFA50 Signing time: Fri 11 Apr 2025 04:00:07 +0000 Manifest this update: Fri 11 Apr 2025 04:00:07 +0000 Manifest next update: Mon 14 Apr 2025 04:00:00 +0000 Files and hashes: 1: 838643d5-7ffe-38bf-b51f-5afdcd2a55fe.roa (hash: ukYav+euB6UkWmztHjx2y9ZBSjCKdUaB9W6CrHN191E=) 2: df94af30-a8e8-42b4-9e43-649437c0cac7.crl (hash: JLlUd0Gq1p4FMl3Ef0hpcfJmHzP59Sq6EjEO5LR/6/0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/df94af30-a8e8-42b4-9e43-649437c0cac7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/df94af30-a8e8-42b4-9e43-649437c0cac7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7c:97:ee:61:c9:fc:6a:13:d6:f5:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df94af30-a8e8-42b4-9e43-649437c0cac7 Validity Not Before: Apr 11 04:00:07 2025 GMT Not After : Apr 14 04:00:00 2025 GMT Subject: CN=77d44f12-3f63-4d1f-97b2-a3dce6c84470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:f4:cf:7c:8f:3b:b7:c8:35:05:f0:95:d9:84: db:51:31:44:43:4a:e6:bd:3a:b7:a6:c9:3c:67:dd: 3d:35:e7:c0:ad:81:fb:a1:be:57:4f:82:9e:77:42: 0b:fa:64:9c:98:fd:19:58:c7:46:c1:a6:ea:09:1c: 62:37:23:9b:ef:99:73:93:f9:51:f6:6e:6b:a7:87: f5:33:ec:8c:23:a1:c3:91:44:f2:e7:a5:15:ee:9f: ed:65:fd:e8:66:71:22:38:1b:9e:07:06:48:79:9c: 93:d6:b9:f5:02:f4:41:e4:f3:62:e3:01:c0:32:5d: 2f:55:0a:56:6b:dd:de:5f:53:3e:0e:d3:ae:31:e7: 0a:f6:6c:4a:9b:b1:69:c3:ca:c8:8d:fd:5c:b4:3f: ba:f9:c8:f7:f7:13:ae:27:75:43:36:54:da:6d:74: 5d:fa:fb:68:c8:be:2e:dd:4a:c7:3a:d7:ca:f2:83: 44:e6:8a:05:ce:78:57:d6:04:a6:02:20:95:20:b3: 59:57:0e:22:e7:56:b3:54:55:14:5a:46:9a:78:af: 22:08:ed:38:02:05:24:d6:bb:9e:60:5d:e2:78:ca: 0f:79:24:47:d5:a8:54:e1:5b:3e:86:7e:ba:96:48: 82:cc:86:f8:0b:09:63:02:b1:3d:41:84:72:5f:d1: f9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:CD:18:CC:1D:F8:08:5D:5F:A0:7D:77:0C:E0:AD:56:4A:47:E5:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/df94af30-a8e8-42b4-9e43-649437c0cac7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/df94af30-a8e8-42b4-9e43-649437c0cac7.crl X509v3 Authority Key Identifier: keyid:4A:55:61:BC:24:00:53:15:DC:9F:48:CF:55:4F:D6:D8:8A:E2:FC:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:b7:b8:54:93:3f:f0:74:c0:ad:bc:91:66:af:46:2a:14:2c: fe:1f:ba:cd:55:d6:2a:a4:a4:9a:b1:91:b5:a8:af:fd:bf:a9: 70:a1:97:73:40:60:c7:44:87:f2:57:36:dc:ba:04:b8:58:31: bc:09:a0:dd:b6:ba:4d:6a:df:26:d3:dc:34:81:23:8e:d3:11: d8:fa:27:0c:fb:00:0c:9e:d5:95:25:34:a1:02:d2:c0:45:1e: a4:67:93:4a:79:a2:14:bc:d2:f7:86:35:0a:74:51:2a:8b:38: 5e:32:c2:32:2b:27:db:55:40:8b:1c:8d:75:97:a4:69:e5:aa: ca:41:ce:82:e3:ad:59:3c:b1:cb:2f:18:f2:8c:4d:05:65:7c: e7:cf:fa:b8:54:ea:9c:db:a7:8e:1c:62:a9:f5:a7:11:cc:75: ac:6a:2d:84:17:bc:a0:aa:7c:7e:72:57:3c:83:da:fb:4a:4b: a8:bf:45:04:0d:9c:1a:3a:65:74:9c:d4:2c:66:9e:6f:b6:54: 07:61:b4:94:88:00:4e:79:bf:2a:f3:4d:d1:ea:d3:b9:84:91: 1e:29:96:17:d7:63:b2:7e:42:a0:f0:ff:c9:ee:e1:83:5b:a9: e7:88:05:ad:61:23:c5:49:6f:8c:31:b9:c0:21:06:61:2f:ea: 52:28:23:a0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl8l+5hyfxqE9b14AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY5NGFmMzAtYThlOC00MmI0LTllNDMtNjQ5NDM3YzBj YWM3MB4XDTI1MDQxMTA0MDAwN1oXDTI1MDQxNDA0MDAwMFowLzEtMCsGA1UEAxMk NzdkNDRmMTItM2Y2My00ZDFmLTk3YjItYTNkY2U2Yzg0NDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/fTPfI87t8g1BfCV2YTbUTFEQ0rmvTq3psk8 Z909NefArYH7ob5XT4Ked0IL+mScmP0ZWMdGwabqCRxiNyOb75lzk/lR9m5rp4f1 M+yMI6HDkUTy56UV7p/tZf3oZnEiOBueBwZIeZyT1rn1AvRB5PNi4wHAMl0vVQpW a93eX1M+DtOuMecK9mxKm7Fpw8rIjf1ctD+6+cj39xOuJ3VDNlTabXRd+vtoyL4u 3UrHOtfK8oNE5ooFznhX1gSmAiCVILNZVw4i51azVFUUWkaaeK8iCO04AgUk1rue YF3ieMoPeSRH1ahU4Vs+hn66lkiCzIb4CwljArE9QYRyX9H5uQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKHNGMwd+AhdX6B9dwzgrVZKR+X1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kZjk0 YWYzMC1hOGU4LTQyYjQtOWU0My02NDk0MzdjMGNhYzcvZGY5NGFmMzAtYThlOC00 MmI0LTllNDMtNjQ5NDM3YzBjYWM3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGY5NGFmMzAtYThlOC00MmI0LTll NDMtNjQ5NDM3YzBjYWM3L2RmOTRhZjMwLWE4ZTgtNDJiNC05ZTQzLTY0OTQzN2Mw Y2FjNy5jcmwwHwYDVR0jBBgwFoAUSlVhvCQAUxXcn0jPVU/W2Iri/LswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kZjk0YWYzMC1hOGU4LTQyYjQtOWU0My02NDk0 MzdjMGNhYzcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAqt7hUkz/wdMCtvJFmr0Yq FCz+H7rNVdYqpKSasZG1qK/9v6lwoZdzQGDHRIfyVzbcugS4WDG8CaDdtrpNat8m 09w0gSOO0xHY+icM+wAMntWVJTShAtLARR6kZ5NKeaIUvNL3hjUKdFEqizheMsIy KyfbVUCLHI11l6Rp5arKQc6C461ZPLHLLxjyjE0FZXznz/q4VOqc26eOHGKp9acR zHWsai2EF7ygqnx+clc8g9r7Skuov0UEDZwaOmV0nNQsZp5vtlQHYbSUiABOeb8q 803R6tO5hJEeKZYX12OyfkKg8P/J7uGDW6nniAWtYSPFSW+MMbnAIQZhL+pSKCOg -----END CERTIFICATE-----Generated at Fri Apr 11 21:34:12 2025 by rpki-client