$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ed29200-29c7-4b41-a912-206537f29d91/4ed29200-29c7-4b41-a912-206537f29d91.mft File: 4ed29200-29c7-4b41-a912-206537f29d91.mft (raw, json) Hash identifier: ArrWHJOWIVtVencNHF+rJgJZFQhbtkgc2BYyuJmst0k= Subject key identifier: C4:52:D6:1A:20:3A:1F:E4:8D:81:4E:50:3C:CB:E4:00:36:0A:5C:A3 Authority key identifier: A9:D3:33:AA:2F:83:8C:EB:ED:27:4F:F2:F0:DC:ED:3C:32:97:14:70 Certificate issuer: /CN=4ed29200-29c7-4b41-a912-206537f29d91 Certificate serial: 010D0C9F43285849CE04E8372D5F68374C8EF7EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ed29200-29c7-4b41-a912-206537f29d91.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ed29200-29c7-4b41-a912-206537f29d91/4ed29200-29c7-4b41-a912-206537f29d91.mft Manifest number: 010D0C9F4328584073A8485782DD70F8D3E0792D Signing time: Sat 10 May 2025 08:00:09 +0000 Manifest this update: Sat 10 May 2025 08:00:09 +0000 Manifest next update: Mon 12 May 2025 08:00:00 +0000 Files and hashes: 1: 4ed29200-29c7-4b41-a912-206537f29d91.crl (hash: uc8bwdsRyokd/4bBmHFeqJPbO8qPh56lfy0PdF1vJjc=) 2: c7822478-01d5-3575-bcad-291a8f8c34fd.roa (hash: ddGykgwnRTMwi7IvoOOvqOUL4wClbDTqVPfo/plYiyg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ed29200-29c7-4b41-a912-206537f29d91/4ed29200-29c7-4b41-a912-206537f29d91.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ed29200-29c7-4b41-a912-206537f29d91/4ed29200-29c7-4b41-a912-206537f29d91.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ed29200-29c7-4b41-a912-206537f29d91.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:04:e8:37:2d:5f:68:37:4c:8e:f7:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ed29200-29c7-4b41-a912-206537f29d91 Validity Not Before: May 10 08:00:09 2025 GMT Not After : May 12 08:00:00 2025 GMT Subject: CN=b3f47b4c-d9fe-4483-86ff-d4b0730500f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8d:12:93:f6:55:c6:d8:07:71:05:1a:97:3a: 59:0b:ff:68:14:d0:04:99:de:45:38:b0:97:73:a2: e4:9e:4c:c2:90:b9:02:9b:8c:a9:a5:94:98:4f:7f: 79:39:d6:04:4f:3a:e0:ec:0f:dd:bc:2a:ee:a8:f6: c4:7f:58:7f:ae:22:c4:6c:a7:cf:96:0d:16:02:6d: f7:95:fe:ca:f4:44:79:b6:68:aa:46:7c:3d:10:84: 66:6b:cd:64:5d:07:9d:ac:11:82:94:62:d5:40:01: 42:59:b7:8e:b8:a1:1b:fb:73:b1:a3:fc:c5:0f:8d: e0:6e:f6:e1:7e:25:86:66:9c:ac:72:2d:68:18:38: 34:44:76:69:e4:02:58:7a:cb:7c:84:5e:75:7c:28: 11:7f:20:58:c0:da:e1:39:10:f0:b3:35:f5:30:1f: 8a:a2:31:e0:db:27:98:1b:f5:f5:9f:b9:4c:59:1a: 37:79:88:31:f2:5f:7d:a9:c1:ae:ed:26:ec:e6:e3: ba:2e:42:26:07:92:0e:e0:9b:db:dc:65:b8:b4:f7: ca:23:9b:ae:d2:45:57:21:c9:57:92:82:b4:99:57: 6c:d6:b2:04:21:41:43:7a:be:b7:83:57:f3:11:66: b4:fd:9d:b1:42:c1:fa:57:39:e0:6f:df:e3:f3:58: e4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:52:D6:1A:20:3A:1F:E4:8D:81:4E:50:3C:CB:E4:00:36:0A:5C:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ed29200-29c7-4b41-a912-206537f29d91/4ed29200-29c7-4b41-a912-206537f29d91.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ed29200-29c7-4b41-a912-206537f29d91/4ed29200-29c7-4b41-a912-206537f29d91.crl X509v3 Authority Key Identifier: keyid:A9:D3:33:AA:2F:83:8C:EB:ED:27:4F:F2:F0:DC:ED:3C:32:97:14:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ed29200-29c7-4b41-a912-206537f29d91.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:8c:67:46:0c:89:8d:ab:93:60:8c:cd:c4:bc:ed:5d:9a:28: ae:fd:c5:19:80:20:dc:97:40:d8:72:64:8c:8e:4f:d2:60:98: af:5f:49:ae:3b:e8:b5:c9:3f:3b:f0:e7:1d:7b:83:eb:d0:fd: 72:43:2a:3e:2d:8a:51:68:59:81:4f:58:ee:76:5d:0b:30:79: 91:ba:4a:f2:29:16:cc:35:0d:fc:bd:04:a2:8c:0d:f7:0f:40: 67:ab:2e:61:95:4d:76:ff:aa:f1:2e:dc:79:c4:1a:c4:d2:72: 96:ac:88:6b:f1:e0:07:79:c8:b9:a7:78:85:31:1a:be:23:e4: ea:01:02:2c:a7:7f:65:a7:53:ba:1f:3c:a1:e5:9b:28:f5:33: 6b:c1:3f:de:05:2d:47:ce:0d:68:51:13:77:0c:c3:70:a6:1e: 2b:ba:36:44:aa:7b:fa:d9:4b:d8:dc:c3:c6:d3:e5:41:e7:83: 95:a7:49:d1:2a:51:8b:82:87:00:59:23:bd:9b:fb:e3:e9:9e: fd:bf:89:45:32:54:80:c0:27:6b:17:79:14:de:22:aa:20:19: c9:f6:44:b9:ce:02:51:53:7b:47:18:9d:87:5f:ed:04:c5:9c: 10:39:51:53:56:b0:1a:aa:05:b8:26:76:ad:15:98:ab:ed:e3: 23:06:a7:2a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnOBOg3LV9oN0yO9+wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVkMjkyMDAtMjljNy00YjQxLWE5MTItMjA2NTM3ZjI5 ZDkxMB4XDTI1MDUxMDA4MDAwOVoXDTI1MDUxMjA4MDAwMFowLzEtMCsGA1UEAxMk YjNmNDdiNGMtZDlmZS00NDgzLTg2ZmYtZDRiMDczMDUwMGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmo0Sk/ZVxtgHcQUalzpZC/9oFNAEmd5FOLCX c6LknkzCkLkCm4yppZSYT395OdYETzrg7A/dvCruqPbEf1h/riLEbKfPlg0WAm33 lf7K9ER5tmiqRnw9EIRma81kXQedrBGClGLVQAFCWbeOuKEb+3Oxo/zFD43gbvbh fiWGZpysci1oGDg0RHZp5AJYest8hF51fCgRfyBYwNrhORDwszX1MB+KojHg2yeY G/X1n7lMWRo3eYgx8l99qcGu7Sbs5uO6LkImB5IO4Jvb3GW4tPfKI5uu0kVXIclX koK0mVds1rIEIUFDer63g1fzEWa0/Z2xQsH6Vzngb9/j81jkPQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMRS1hogOh/kjYFOUDzL5AA2ClyjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWQy OTIwMC0yOWM3LTRiNDEtYTkxMi0yMDY1MzdmMjlkOTEvNGVkMjkyMDAtMjljNy00 YjQxLWE5MTItMjA2NTM3ZjI5ZDkxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGVkMjkyMDAtMjljNy00YjQxLWE5 MTItMjA2NTM3ZjI5ZDkxLzRlZDI5MjAwLTI5YzctNGI0MS1hOTEyLTIwNjUzN2Yy OWQ5MS5jcmwwHwYDVR0jBBgwFoAUqdMzqi+DjOvtJ0/y8NztPDKXFHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWQyOTIwMC0yOWM3LTRiNDEtYTkxMi0yMDY1 MzdmMjlkOTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCyjGdGDImNq5NgjM3EvO1d miiu/cUZgCDcl0DYcmSMjk/SYJivX0muO+i1yT878Ocde4Pr0P1yQyo+LYpRaFmB T1judl0LMHmRukryKRbMNQ38vQSijA33D0Bnqy5hlU12/6rxLtx5xBrE0nKWrIhr 8eAHeci5p3iFMRq+I+TqAQIsp39lp1O6Hzyh5Zso9TNrwT/eBS1Hzg1oURN3DMNw ph4rujZEqnv62UvY3MPG0+VB54OVp0nRKlGLgocAWSO9m/vj6Z79v4lFMlSAwCdr F3kU3iKqIBnJ9kS5zgJRU3tHGJ2HX+0ExZwQOVFTVrAaqgW4JnatFZir7eMjBqcq -----END CERTIFICATE-----Generated at Sun May 11 04:13:29 2025 by rpki-client