$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft File: 0898210d-7002-43b6-b05b-c27550a29b39.mft (raw, json) Hash identifier: 4uwMhyIUHApuUhIG5nAsTdsQQ5oClzKQcuUY72nncFw= Subject key identifier: 01:8F:EF:CB:67:2C:63:81:50:60:5C:7E:3F:2D:FD:B7:99:3C:5D:9D Authority key identifier: B1:9D:9D:8B:49:A1:10:E2:CC:EE:37:1F:5C:EE:04:0D:74:BA:9F:06 Certificate issuer: /CN=0898210d-7002-43b6-b05b-c27550a29b39 Certificate serial: 010D0C9F43285849CE22AB00FE0AB0EDE69B2900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft Manifest number: 010D0C9F4328584073A84B09117F27FF3FA39D99 Signing time: Sat 10 May 2025 09:00:07 +0000 Manifest this update: Sat 10 May 2025 09:00:07 +0000 Manifest next update: Mon 12 May 2025 09:00:00 +0000 Files and hashes: 1: 0898210d-7002-43b6-b05b-c27550a29b39.crl (hash: kKrahEEzf3LnLKY48g5IUC2x4cyLUjyQJfnYFPec8+E=) 2: 7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer (hash: b1xgCGQmWhSRLn++3VsiY9/rnhgXJj72eMGyZkVRr6k=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:22:ab:00:fe:0a:b0:ed:e6:9b:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0898210d-7002-43b6-b05b-c27550a29b39 Validity Not Before: May 10 09:00:07 2025 GMT Not After : May 12 09:00:00 2025 GMT Subject: CN=8cffb9e8-f2ff-4cc6-9b15-693538e0ff47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e2:6b:e4:43:a3:97:90:7a:b3:78:c1:c8:7f: a3:97:1f:2a:a0:05:9b:16:e2:7d:ed:14:52:3e:90: 56:31:7d:e3:89:89:e3:a2:8d:d6:ff:40:05:a9:a4: 4b:fd:63:37:6a:a0:0e:b2:f8:1f:95:70:29:dc:95: 80:bb:6d:de:0d:12:d6:3b:e9:5a:9f:22:14:01:89: b2:47:a1:0d:2c:dc:8a:6c:ef:f2:e3:e5:d3:f6:da: e0:7d:e9:ee:b2:bb:96:1b:4e:85:a4:bc:fa:0d:9a: 0e:d0:69:57:c4:9b:9e:22:77:84:bf:95:01:ab:24: 48:6e:21:ac:57:a6:97:ae:a7:56:70:26:b4:5f:1f: 33:fc:cd:6f:bd:17:79:41:dc:eb:53:dc:2c:e5:da: 82:41:84:d1:90:1b:40:f5:40:ae:22:87:89:43:c0: c3:c9:c5:5e:b7:09:f9:6c:47:d1:7b:0f:1a:aa:50: 49:ee:29:a8:ed:38:12:62:17:3e:23:a1:9b:eb:e6: 07:58:b4:a4:9c:9a:12:88:c7:30:be:6e:31:bc:a2: 14:5a:2f:f0:ac:d7:3c:87:aa:f5:72:23:57:0f:c7: 59:02:cd:d8:0c:2e:c5:50:9a:13:1d:08:ba:0d:b8: 11:2a:d7:bf:93:c1:7e:a1:b7:1d:37:0a:4b:a2:64: 10:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:8F:EF:CB:67:2C:63:81:50:60:5C:7E:3F:2D:FD:B7:99:3C:5D:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl X509v3 Authority Key Identifier: keyid:B1:9D:9D:8B:49:A1:10:E2:CC:EE:37:1F:5C:EE:04:0D:74:BA:9F:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:5e:d5:92:82:56:28:c2:fe:b1:5a:90:67:f6:b8:31:9a:a4: f5:9c:85:90:39:a3:a0:df:00:31:5e:7c:03:f9:81:0d:37:32: 51:46:7f:a8:db:4d:3b:2c:29:6b:96:08:27:06:8a:2a:99:e4: ce:6f:a4:a7:5a:43:25:ef:2a:c1:26:66:dc:54:fb:91:16:38: 0e:f9:d3:11:3a:f7:c5:a2:38:5e:03:ae:ef:4b:9b:cb:04:9f: 33:62:02:ff:9a:c7:cc:87:0a:98:ad:79:ec:9c:e2:b2:1e:36: 20:e1:e5:de:05:a3:ab:43:70:41:ec:ae:e6:ba:0b:59:5c:49: c9:4d:a0:98:3f:13:9c:63:96:50:c2:24:11:ad:e0:0f:19:1f: 39:07:2f:60:9e:20:49:e5:21:49:56:55:82:d7:8d:90:2f:87: d0:7b:61:1f:43:c1:9f:70:67:28:1a:4c:67:68:8f:06:dd:4b: 5f:7b:46:a9:d2:a9:15:97:59:bf:44:86:78:94:48:34:60:a9: ef:1f:d3:57:8f:5d:9a:9a:75:38:78:f4:e8:4c:a5:a9:82:7b: ba:b7:5c:04:bc:1a:bb:31:cb:75:63:b4:83:dd:f2:64:89:28: 8a:9c:a1:64:7e:98:79:8a:c7:35:79:3c:5d:a6:bf:11:43:5a: c4:1e:4c:04 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnOIqsA/gqw7eabKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDg5ODIxMGQtNzAwMi00M2I2LWIwNWItYzI3NTUwYTI5 YjM5MB4XDTI1MDUxMDA5MDAwN1oXDTI1MDUxMjA5MDAwMFowLzEtMCsGA1UEAxMk OGNmZmI5ZTgtZjJmZi00Y2M2LTliMTUtNjkzNTM4ZTBmZjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOJr5EOjl5B6s3jByH+jlx8qoAWbFuJ97RRS PpBWMX3jiYnjoo3W/0AFqaRL/WM3aqAOsvgflXAp3JWAu23eDRLWO+lanyIUAYmy R6ENLNyKbO/y4+XT9trgfenusruWG06FpLz6DZoO0GlXxJueIneEv5UBqyRIbiGs V6aXrqdWcCa0Xx8z/M1vvRd5QdzrU9ws5dqCQYTRkBtA9UCuIoeJQ8DDycVetwn5 bEfRew8aqlBJ7imo7TgSYhc+I6Gb6+YHWLSknJoSiMcwvm4xvKIUWi/wrNc8h6r1 ciNXD8dZAs3YDC7FUJoTHQi6DbgRKte/k8F+obcdNwpLomQQFwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAGP78tnLGOBUGBcfj8t/beZPF2dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4 MjEwZC03MDAyLTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvMDg5ODIxMGQtNzAwMi00 M2I2LWIwNWItYzI3NTUwYTI5YjM5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDg5ODIxMGQtNzAwMi00M2I2LWIw NWItYzI3NTUwYTI5YjM5LzA4OTgyMTBkLTcwMDItNDNiNi1iMDViLWMyNzU1MGEy OWIzOS5jcmwwHwYDVR0jBBgwFoAUsZ2di0mhEOLM7jcfXO4EDXS6nwYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAyLTQzYjYtYjA1Yi1jMjc1 NTBhMjliMzkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQArXtWSglYowv6xWpBn9rgx mqT1nIWQOaOg3wAxXnwD+YENNzJRRn+o2007LClrlggnBooqmeTOb6SnWkMl7yrB JmbcVPuRFjgO+dMROvfFojheA67vS5vLBJ8zYgL/msfMhwqYrXnsnOKyHjYg4eXe BaOrQ3BB7K7mugtZXEnJTaCYPxOcY5ZQwiQRreAPGR85By9gniBJ5SFJVlWC142Q L4fQe2EfQ8GfcGcoGkxnaI8G3Utfe0ap0qkVl1m/RIZ4lEg0YKnvH9NXj12amnU4 ePToTKWpgnu6t1wEvBq7Mct1Y7SD3fJkiSiKnKFkfph5isc1eTxdpr8RQ1rEHkwE -----END CERTIFICATE-----Generated at Sat May 10 20:32:23 2025 by rpki-client