$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.mft File: 3ccb9ed0-7870-4a4a-bf28-cb86bca49137.mft (raw, json) Hash identifier: 7PHIytqtV+yKWLs2Z6l7TMpuu3xpm8NTR5JoELRUsPM= Subject key identifier: 2B:22:08:31:9A:2E:BB:DB:F7:AA:14:99:45:35:BF:87:92:1B:F8:F8 Authority key identifier: 92:A8:7E:36:E1:2A:E3:B9:02:AD:CD:7B:CD:EA:42:EF:B1:8D:20:22 Certificate issuer: /CN=3ccb9ed0-7870-4a4a-bf28-cb86bca49137 Certificate serial: 010D0C9F43285849D128DC6A20C27D54F12C6CC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.mft Manifest number: 010D0C9F4328584073A85062F6BEE4FE4576766D Signing time: Sun 11 May 2025 11:00:03 +0000 Manifest this update: Sun 11 May 2025 11:00:03 +0000 Manifest next update: Wed 14 May 2025 11:00:00 +0000 Files and hashes: 1: 3ccb9ed0-7870-4a4a-bf28-cb86bca49137.crl (hash: e8z9AB1NIyaX6EOmk32A7Z2Sp9WNIG9XusoGV8nf60U=) 2: f5ad0dde-a733-3deb-81db-42293449a543.roa (hash: 0G1if/JcmlV5qa07cFlFNsNKw7fvoQ+JogBEnpCVZ7U=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:28:dc:6a:20:c2:7d:54:f1:2c:6c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ccb9ed0-7870-4a4a-bf28-cb86bca49137 Validity Not Before: May 11 11:00:03 2025 GMT Not After : May 14 11:00:00 2025 GMT Subject: CN=9c7b6a01-286c-4b9a-9621-21aeb1395981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:15:26:55:2d:a9:27:d0:7f:12:b7:98:aa:9e: 4a:2c:c7:f9:2b:c3:cb:97:aa:f8:44:ad:e3:d5:50: b2:a4:59:ce:12:ef:e7:c5:3b:60:f1:cf:59:4e:42: d9:4c:b3:56:24:f4:b2:36:19:89:7b:a3:91:a7:26: bf:46:69:a8:c0:ad:9a:49:39:82:59:3e:59:ff:eb: 4d:7d:96:b7:dd:48:0f:85:da:95:b5:8f:ca:97:cb: 1c:9d:40:d2:1d:20:ff:dd:67:e0:68:53:4a:72:6e: d0:e9:6e:c3:df:73:63:2a:c5:6f:ca:b3:ee:b0:df: 35:64:d2:ce:d7:ce:40:ee:3c:0f:bf:6b:48:80:8a: 32:8f:33:48:8e:1b:3c:b3:d1:cb:75:a2:58:a5:ba: 86:91:6f:79:37:3d:3a:81:e3:a3:43:f2:38:13:49: 6a:21:c2:22:04:4d:2f:56:27:37:a6:80:2c:14:02: c5:9c:5b:1e:8f:d4:c8:c0:a1:80:3b:19:d4:1d:8a: c4:72:54:69:fc:01:1e:9f:26:85:3c:33:47:66:21: 42:87:24:cb:fa:e0:21:51:3c:6a:99:f3:f6:f0:b8: 0e:2a:42:ab:b6:ad:bb:37:ee:35:14:9c:4a:eb:d9: 7d:a1:b3:e5:92:bf:c6:1c:a8:15:01:8f:d1:90:16: cd:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:22:08:31:9A:2E:BB:DB:F7:AA:14:99:45:35:BF:87:92:1B:F8:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.crl X509v3 Authority Key Identifier: keyid:92:A8:7E:36:E1:2A:E3:B9:02:AD:CD:7B:CD:EA:42:EF:B1:8D:20:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:7f:8b:b4:4b:75:9b:0d:2c:d2:ad:2b:6a:42:81:95:0b:17: 15:cc:05:24:36:e6:86:35:db:33:a3:15:56:66:c4:07:f9:94: 15:1d:72:dc:56:00:99:c4:18:6e:06:ba:87:e6:06:c4:dd:0a: 47:11:6a:a3:9a:2a:01:df:a8:ae:14:2b:eb:6e:7e:d9:9a:be: 4f:6c:cb:8a:c6:a5:47:01:08:9b:70:09:79:dc:b8:b0:9a:e1: 3b:93:a0:53:68:09:95:2a:0d:da:f7:f3:4e:8f:72:db:3b:88: ee:a1:7c:6b:6d:fa:35:69:14:ca:6d:a5:97:ed:fe:fd:da:a9: 7c:90:02:cd:ff:0d:d2:8f:54:51:a8:25:46:72:5e:0b:fc:d9: 92:05:ed:dc:c6:b1:6a:ae:49:3f:de:68:08:aa:b6:a9:7c:7b: c5:d0:6e:44:3b:44:d5:1b:30:0d:9c:48:d7:bd:34:af:54:a0: 32:0b:ee:36:36:af:55:1e:98:41:a9:27:de:91:a2:21:be:51: 80:f2:10:56:fb:04:f8:6e:4a:05:83:e7:70:fb:44:b4:56:36: 8b:d6:7c:9c:ed:3d:fd:d6:ed:96:d8:f4:50:8d:c3:19:6a:86: 8f:fd:b8:a1:e9:0b:81:de:bd:36:61:9d:34:c4:cd:d8:7f:4a: 51:6e:83:01 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnRKNxqIMJ9VPEsbMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2NjYjllZDAtNzg3MC00YTRhLWJmMjgtY2I4NmJjYTQ5 MTM3MB4XDTI1MDUxMTExMDAwM1oXDTI1MDUxNDExMDAwMFowLzEtMCsGA1UEAxMk OWM3YjZhMDEtMjg2Yy00YjlhLTk2MjEtMjFhZWIxMzk1OTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxUmVS2pJ9B/EreYqp5KLMf5K8PLl6r4RK3j 1VCypFnOEu/nxTtg8c9ZTkLZTLNWJPSyNhmJe6ORpya/RmmowK2aSTmCWT5Z/+tN fZa33UgPhdqVtY/Kl8scnUDSHSD/3WfgaFNKcm7Q6W7D33NjKsVvyrPusN81ZNLO 185A7jwPv2tIgIoyjzNIjhs8s9HLdaJYpbqGkW95Nz06geOjQ/I4E0lqIcIiBE0v Vic3poAsFALFnFsej9TIwKGAOxnUHYrEclRp/AEenyaFPDNHZiFChyTL+uAhUTxq mfP28LgOKkKrtq27N+41FJxK69l9obPlkr/GHKgVAY/RkBbN2QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCsiCDGaLrvb96oUmUU1v4eSG/j4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zY2Ni OWVkMC03ODcwLTRhNGEtYmYyOC1jYjg2YmNhNDkxMzcvM2NjYjllZDAtNzg3MC00 YTRhLWJmMjgtY2I4NmJjYTQ5MTM3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2NjYjllZDAtNzg3MC00YTRhLWJm MjgtY2I4NmJjYTQ5MTM3LzNjY2I5ZWQwLTc4NzAtNGE0YS1iZjI4LWNiODZiY2E0 OTEzNy5jcmwwHwYDVR0jBBgwFoAUkqh+NuEq47kCrc17zepC77GNICIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zY2NiOWVkMC03ODcwLTRhNGEtYmYyOC1jYjg2 YmNhNDkxMzcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBsf4u0S3WbDSzSrStqQoGV CxcVzAUkNuaGNdszoxVWZsQH+ZQVHXLcVgCZxBhuBrqH5gbE3QpHEWqjmioB36iu FCvrbn7Zmr5PbMuKxqVHAQibcAl53LiwmuE7k6BTaAmVKg3a9/NOj3LbO4juoXxr bfo1aRTKbaWX7f792ql8kALN/w3Sj1RRqCVGcl4L/NmSBe3cxrFqrkk/3mgIqrap fHvF0G5EO0TVGzANnEjXvTSvVKAyC+42Nq9VHphBqSfekaIhvlGA8hBW+wT4bkoF g+dw+0S0VjaL1nyc7T391u2W2PRQjcMZaoaP/bih6QuB3r02YZ00xM3Yf0pRboMB -----END CERTIFICATE-----Generated at Mon May 12 05:24:45 2025 by rpki-client