$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.mft File: 2149afff-d907-4d42-a1e9-e162fad34f0d.mft (raw, json) Hash identifier: CWPrG3JMGm0Hdy98qkceVPLpLvVXWsR/4p96w1bDp6Y= Subject key identifier: 42:EE:84:10:C3:9B:6F:50:96:F8:19:2A:95:D3:E7:97:D7:8F:59:E7 Authority key identifier: 2F:51:9D:35:2E:74:34:BE:31:27:9C:22:B1:C5:33:D7:B8:1F:6E:47 Certificate issuer: /CN=2149afff-d907-4d42-a1e9-e162fad34f0d Certificate serial: 010D0C9F43285849C0FDAA8244DDB7471556DDF0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.mft Manifest number: 010D0C9F432858449B57AC092D104FF3C5F04318 Signing time: Mon 05 May 2025 16:00:03 +0000 Manifest this update: Mon 05 May 2025 16:00:03 +0000 Manifest next update: Thu 08 May 2025 16:00:00 +0000 Files and hashes: 1: 2149afff-d907-4d42-a1e9-e162fad34f0d.crl (hash: Q1sndJ+8HQXEKyurU9JBGtoAfDsTrbUYToWaqEcW8cI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:fd:aa:82:44:dd:b7:47:15:56:dd:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2149afff-d907-4d42-a1e9-e162fad34f0d Validity Not Before: May 5 16:00:03 2025 GMT Not After : May 8 16:00:00 2025 GMT Subject: CN=7fad8ca4-2ac5-451f-b80c-e484d4543ba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:95:fa:e8:9c:78:ac:7f:91:52:eb:db:92:6a: 71:16:db:51:5d:13:14:f6:4e:31:01:0f:cf:b8:2e: 2d:4f:df:45:dc:8d:24:fe:f3:5c:8f:8f:97:6a:da: 74:3e:77:ea:40:db:9e:86:3a:75:1c:4d:da:7c:42: 1d:86:c9:c3:97:d9:7b:7b:c6:03:ef:91:ab:5f:68: 05:26:ae:5d:e3:e6:30:84:4a:9b:25:17:50:b1:90: 3d:b0:9a:3a:a0:62:c8:f3:e3:ef:87:66:86:a7:4a: f4:f3:d3:2f:df:b4:bb:b3:d6:af:a7:bc:d8:9a:51: c1:4c:53:3b:a1:68:23:8b:a8:66:51:72:31:9d:89: 94:2e:c8:e7:ba:63:3f:bd:79:6e:a6:59:1d:8a:17: 4c:3e:93:97:ff:74:cc:4a:4b:52:da:8c:9d:1a:ee: 10:aa:d9:48:03:bc:4d:b4:4e:50:3b:ac:2d:89:bf: 55:cb:81:91:78:12:a0:f2:95:ed:67:6e:ca:49:b9: 44:4f:33:fb:74:d9:80:ad:03:f3:6a:7c:ad:02:95: a2:f6:86:0c:86:39:cc:a9:3d:1d:c2:7f:87:91:75: 93:d3:39:6f:9b:42:14:ee:4b:01:93:2f:11:3e:6a: 83:8b:a1:d7:c3:61:da:a8:ae:6c:0f:a7:51:67:c1: 08:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:EE:84:10:C3:9B:6F:50:96:F8:19:2A:95:D3:E7:97:D7:8F:59:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.crl X509v3 Authority Key Identifier: keyid:2F:51:9D:35:2E:74:34:BE:31:27:9C:22:B1:C5:33:D7:B8:1F:6E:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:f0:1a:47:f4:cf:cd:bc:9e:07:b1:0f:d5:bd:0d:76:8d:ca: 3e:ca:38:fc:f2:0b:95:6f:da:00:04:f4:a5:83:a2:6b:27:37: 16:5c:6f:35:85:a0:bf:db:f2:0b:06:d4:09:f0:40:96:11:a5: c6:17:a1:99:62:45:fd:16:77:7b:b7:42:a0:f3:b1:29:00:0a: e8:09:bd:5f:d0:de:eb:e5:d0:ca:21:03:21:27:80:65:31:36: 75:7a:cc:30:0e:e1:34:a9:4e:5d:ad:46:26:3e:01:0c:4b:3d: a9:22:d2:18:bf:b9:e0:4a:8f:29:cc:af:0f:c0:47:21:ed:fa: 49:bd:69:f3:a3:21:b6:9d:a8:35:cd:1a:22:83:94:da:be:5c: 46:03:f3:65:2e:0f:0d:ae:5b:e2:ec:09:fd:01:84:ec:32:d0: f7:2c:b3:ba:4b:c2:67:7b:0e:c1:a3:94:ca:54:6c:40:36:bc: 47:81:4d:08:f7:c5:9c:28:2d:ae:67:7c:ee:ee:58:6b:36:a8: cd:54:37:d6:f4:81:ab:3e:f7:35:d3:d5:57:94:53:be:1c:df: 0c:7e:e8:c7:5b:06:ef:81:1c:6d:fc:53:e5:fd:a7:76:3a:e4: 1e:dc:4c:85:c8:44:23:db:d6:c0:8a:e1:5a:58:6b:16:2d:46: 2b:51:cb:36 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnA/aqCRN23RxVW3fAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE0OWFmZmYtZDkwNy00ZDQyLWExZTktZTE2MmZhZDM0 ZjBkMB4XDTI1MDUwNTE2MDAwM1oXDTI1MDUwODE2MDAwMFowLzEtMCsGA1UEAxMk N2ZhZDhjYTQtMmFjNS00NTFmLWI4MGMtZTQ4NGQ0NTQzYmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJX66Jx4rH+RUuvbkmpxFttRXRMU9k4xAQ/P uC4tT99F3I0k/vNcj4+Xatp0PnfqQNuehjp1HE3afEIdhsnDl9l7e8YD75GrX2gF Jq5d4+YwhEqbJRdQsZA9sJo6oGLI8+Pvh2aGp0r089Mv37S7s9avp7zYmlHBTFM7 oWgji6hmUXIxnYmULsjnumM/vXluplkdihdMPpOX/3TMSktS2oydGu4QqtlIA7xN tE5QO6wtib9Vy4GReBKg8pXtZ27KSblETzP7dNmArQPzanytApWi9oYMhjnMqT0d wn+HkXWT0zlvm0IU7ksBky8RPmqDi6HXw2HaqK5sD6dRZ8EI+wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFELuhBDDm29QlvgZKpXT55fXj1nnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yMTQ5 YWZmZi1kOTA3LTRkNDItYTFlOS1lMTYyZmFkMzRmMGQvMjE0OWFmZmYtZDkwNy00 ZDQyLWExZTktZTE2MmZhZDM0ZjBkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjE0OWFmZmYtZDkwNy00ZDQyLWEx ZTktZTE2MmZhZDM0ZjBkLzIxNDlhZmZmLWQ5MDctNGQ0Mi1hMWU5LWUxNjJmYWQz NGYwZC5jcmwwHwYDVR0jBBgwFoAUL1GdNS50NL4xJ5wiscUz17gfbkcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yMTQ5YWZmZi1kOTA3LTRkNDItYTFlOS1lMTYy ZmFkMzRmMGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC08BpH9M/NvJ4HsQ/VvQ12 jco+yjj88guVb9oABPSlg6JrJzcWXG81haC/2/ILBtQJ8ECWEaXGF6GZYkX9Fnd7 t0Kg87EpAAroCb1f0N7r5dDKIQMhJ4BlMTZ1eswwDuE0qU5drUYmPgEMSz2pItIY v7ngSo8pzK8PwEch7fpJvWnzoyG2nag1zRoig5TavlxGA/NlLg8Nrlvi7An9AYTs MtD3LLO6S8Jnew7Bo5TKVGxANrxHgU0I98WcKC2uZ3zu7lhrNqjNVDfW9IGrPvc1 09VXlFO+HN8MfujHWwbvgRxt/FPl/ad2OuQe3EyFyEQj29bAiuFaWGsWLUYrUcs2 -----END CERTIFICATE-----Generated at Tue May 6 12:12:18 2025 by rpki-client