$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.mft File: 3c68c219-8e71-4151-8d5c-d504fd12b5fb.mft (raw, json) Hash identifier: IY/ajx/K/MrIiU0qsBTjunvZadgfiskWnqCFYYNtvCY= Subject key identifier: CC:50:7C:FE:6C:A2:0D:91:78:9A:40:5B:0D:10:A0:4F:11:D7:29:9C Authority key identifier: 74:66:34:1C:14:36:2D:94:95:DC:F7:6D:89:3E:8D:22:9E:D7:49:20 Certificate issuer: /CN=3c68c219-8e71-4151-8d5c-d504fd12b5fb Certificate serial: 010D0C9F43285849D128DA9E71B49B791D309B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.mft Manifest number: 010D0C9F43285848CAD46AE0F159F81573C6F822 Signing time: Sun 11 May 2025 11:00:03 +0000 Manifest this update: Sun 11 May 2025 11:00:03 +0000 Manifest next update: Wed 14 May 2025 11:00:00 +0000 Files and hashes: 1: 3c68c219-8e71-4151-8d5c-d504fd12b5fb.crl (hash: 2ZxC9ZVenXslgc4mWcUQbXh6NpqoTd2g+qYFh4jsZbY=) 2: cb94f41c-c887-363c-bf41-8dd04e28d9c3.roa (hash: sNMZYZlvofQzSlViQHFCoc/QPdIb/2uf/p5Jjjh/iBU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:28:da:9e:71:b4:9b:79:1d:30:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c68c219-8e71-4151-8d5c-d504fd12b5fb Validity Not Before: May 11 11:00:03 2025 GMT Not After : May 14 11:00:00 2025 GMT Subject: CN=80699239-0e81-454e-8a9b-9f6e0c72145e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:28:69:ce:a1:2b:d8:d2:26:bb:9d:9d:e9:0f: f0:0f:b1:c1:a9:bd:98:64:a4:02:02:15:d7:fb:23: 43:b8:68:e7:08:a4:7e:ae:e4:0d:b4:b4:a2:db:4c: 8d:1c:89:17:d3:e3:88:27:77:e4:4a:14:9a:3d:b6: 35:b5:e5:81:4e:9c:52:c7:28:70:f4:80:f0:68:fe: 35:e5:d9:d6:76:76:d3:92:b8:b9:0d:56:e3:63:1a: 15:43:c0:7d:8d:b6:5c:36:5e:e5:f2:b2:25:f2:54: 93:d2:97:ac:0d:d9:71:a5:be:0b:ba:6d:e1:a8:62: b3:00:0f:4c:42:01:ae:a9:5d:d2:4c:5a:e9:30:b5: 89:20:89:0b:72:37:e7:cd:74:1b:6d:13:9a:4f:4f: 5f:63:17:11:f6:f9:3e:22:85:32:ab:1f:cb:a5:ea: 35:50:01:16:f5:28:1f:6c:37:2b:91:f9:cc:9c:20: 4a:c3:86:7b:5e:1e:c8:1d:cf:9f:72:3d:c9:aa:c8: 83:0d:da:c1:0d:b6:ec:64:74:9b:c9:72:e8:49:75: 32:c1:0f:b4:88:dc:a5:7b:7d:6f:ee:c2:f1:67:11: 49:ea:cd:4b:3b:1e:64:35:43:93:2d:06:49:7b:4a: 33:69:7e:2f:df:40:9e:2a:26:8f:4a:4a:72:59:b8: 2a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:50:7C:FE:6C:A2:0D:91:78:9A:40:5B:0D:10:A0:4F:11:D7:29:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.crl X509v3 Authority Key Identifier: keyid:74:66:34:1C:14:36:2D:94:95:DC:F7:6D:89:3E:8D:22:9E:D7:49:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:ae:ae:60:98:6f:d2:9d:a9:60:7d:56:4e:5a:49:fe:53:8d: 9c:00:24:f1:ad:db:68:f1:08:37:92:b9:e9:33:4e:60:68:95: a3:7b:f7:19:55:be:c1:4c:cd:33:26:b0:4f:c7:eb:7e:ec:23: 0f:da:e8:e7:61:7d:26:a7:a4:a2:c6:1f:42:e0:f6:93:0b:2c: a1:da:30:a1:cc:9e:aa:17:d3:84:11:b5:bf:87:9b:98:84:34: d7:12:6e:60:e2:bc:9c:f1:63:6a:f5:51:29:87:27:11:5b:56: 47:fb:48:10:f4:54:c9:02:2b:3a:55:04:fc:71:e1:ba:d2:42: 4e:e9:33:c2:cd:b6:d6:15:0c:9d:9f:a9:97:6e:ad:51:52:7a: 22:5a:c2:c5:fc:9e:0b:ca:4d:90:c4:e9:ce:7d:ca:2d:2d:59: d7:46:6b:db:6c:8b:1f:1f:27:89:e3:fd:dc:d7:de:f9:33:5c: 72:b2:f9:78:d4:c6:b2:ba:87:32:1e:85:4c:bf:c4:7e:5d:7f: 59:39:f5:72:03:9c:a8:4a:60:4c:8a:8d:89:cc:c0:12:c1:3c: b2:a8:aa:14:8e:ad:31:d2:ac:21:fb:4d:11:1f:83:8d:14:62: b7:12:cb:c4:2c:79:1e:38:bc:0c:64:62:04:cb:4f:9d:5f:71: dc:09:32:de -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnRKNqecbSbeR0wm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M2OGMyMTktOGU3MS00MTUxLThkNWMtZDUwNGZkMTJi NWZiMB4XDTI1MDUxMTExMDAwM1oXDTI1MDUxNDExMDAwMFowLzEtMCsGA1UEAxMk ODA2OTkyMzktMGU4MS00NTRlLThhOWItOWY2ZTBjNzIxNDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlihpzqEr2NImu52d6Q/wD7HBqb2YZKQCAhXX +yNDuGjnCKR+ruQNtLSi20yNHIkX0+OIJ3fkShSaPbY1teWBTpxSxyhw9IDwaP41 5dnWdnbTkri5DVbjYxoVQ8B9jbZcNl7l8rIl8lST0pesDdlxpb4Lum3hqGKzAA9M QgGuqV3STFrpMLWJIIkLcjfnzXQbbROaT09fYxcR9vk+IoUyqx/Lpeo1UAEW9Sgf bDcrkfnMnCBKw4Z7Xh7IHc+fcj3JqsiDDdrBDbbsZHSbyXLoSXUywQ+0iNyle31v 7sLxZxFJ6s1LOx5kNUOTLQZJe0ozaX4v30CeKiaPSkpyWbgqdwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMxQfP5sog2ReJpAWw0QoE8R1ymcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYzY4 YzIxOS04ZTcxLTQxNTEtOGQ1Yy1kNTA0ZmQxMmI1ZmIvM2M2OGMyMTktOGU3MS00 MTUxLThkNWMtZDUwNGZkMTJiNWZiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2M2OGMyMTktOGU3MS00MTUxLThk NWMtZDUwNGZkMTJiNWZiLzNjNjhjMjE5LThlNzEtNDE1MS04ZDVjLWQ1MDRmZDEy YjVmYi5jcmwwHwYDVR0jBBgwFoAUdGY0HBQ2LZSV3PdtiT6NIp7XSSAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYzY4YzIxOS04ZTcxLTQxNTEtOGQ1Yy1kNTA0 ZmQxMmI1ZmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA+rq5gmG/SnalgfVZOWkn+ U42cACTxrdto8Qg3krnpM05gaJWje/cZVb7BTM0zJrBPx+t+7CMP2ujnYX0mp6Si xh9C4PaTCyyh2jChzJ6qF9OEEbW/h5uYhDTXEm5g4ryc8WNq9VEphycRW1ZH+0gQ 9FTJAis6VQT8ceG60kJO6TPCzbbWFQydn6mXbq1RUnoiWsLF/J4Lyk2QxOnOfcot LVnXRmvbbIsfHyeJ4/3c1975M1xysvl41MayuocyHoVMv8R+XX9ZOfVyA5yoSmBM io2JzMASwTyyqKoUjq0x0qwh+00RH4ONFGK3EsvELHkeOLwMZGIEy0+dX3HcCTLe -----END CERTIFICATE-----Generated at Sun May 11 20:59:17 2025 by rpki-client