$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/421cece2-8c18-41dd-a133-74ed29168835/421cece2-8c18-41dd-a133-74ed29168835.mft File: 421cece2-8c18-41dd-a133-74ed29168835.mft (raw, json) Hash identifier: +tsnVSF8g2bekk50ZcE9m5Ujf2RAPdbxckZbxdQXj2g= Subject key identifier: 59:1D:CD:01:FC:2E:96:32:F5:9D:5E:81:94:C6:50:EE:17:53:F9:0A Authority key identifier: 07:89:67:D2:68:00:78:72:14:E0:75:D6:C2:41:12:72:10:3E:0D:0F Certificate issuer: /CN=421cece2-8c18-41dd-a133-74ed29168835 Certificate serial: 010D0C9F43285849DA59689FDFD3EE09B919AD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/421cece2-8c18-41dd-a133-74ed29168835.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/421cece2-8c18-41dd-a133-74ed29168835/421cece2-8c18-41dd-a133-74ed29168835.mft Manifest number: 010D0C9F4328584073A82259B3C6039E30B96672 Signing time: Wed 14 May 2025 18:00:07 +0000 Manifest this update: Wed 14 May 2025 18:00:07 +0000 Manifest next update: Sat 17 May 2025 18:00:00 +0000 Files and hashes: 1: 421cece2-8c18-41dd-a133-74ed29168835.crl (hash: 9rHtM9e2ZiQgzlHTWTYsNHVKd6kvoFpCuMgJT9u3G+Q=) 2: bdc1790a-cecc-3ae3-863f-105e516b77ef.roa (hash: lii1F/UvCx+j7wDgqKozbL6ZpD/EUQai49i1+9ngh54=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/421cece2-8c18-41dd-a133-74ed29168835/421cece2-8c18-41dd-a133-74ed29168835.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/421cece2-8c18-41dd-a133-74ed29168835/421cece2-8c18-41dd-a133-74ed29168835.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/421cece2-8c18-41dd-a133-74ed29168835.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:da:59:68:9f:df:d3:ee:09:b9:19:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=421cece2-8c18-41dd-a133-74ed29168835 Validity Not Before: May 14 18:00:07 2025 GMT Not After : May 17 18:00:00 2025 GMT Subject: CN=4bb0027d-e1b0-42db-8e14-33e8beeadbd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:60:9a:2e:b2:10:0b:49:1e:aa:b1:32:89:f2: 9d:7f:5f:b1:72:c8:66:12:a8:77:d3:df:ef:a4:c0: 29:d2:26:76:5f:d5:4c:b4:36:0c:25:11:2b:e9:1f: 2e:55:a9:97:0d:82:b3:2d:1d:ac:1a:fe:13:23:30: 17:86:9c:83:a0:50:b4:eb:c9:b0:f3:06:36:24:6e: c6:1b:c5:1c:78:9c:d9:de:fa:96:61:a4:54:d0:bd: 5b:d4:cc:62:e1:10:94:43:d0:92:9f:d5:fe:d0:a6: d6:ae:2b:98:fd:5a:5d:6b:55:e0:33:d8:db:bc:c3: 2d:f7:ad:3f:c5:63:4c:e8:0b:4d:bf:78:be:67:c8: 03:94:a6:d5:e3:fb:25:a7:10:86:ad:19:42:04:9f: 14:a4:83:22:bf:da:39:9c:fc:01:d5:46:13:12:69: c2:34:f0:a6:bd:e1:32:84:60:cf:9b:7e:23:ee:1f: 70:d0:67:0f:39:43:78:e5:0a:9f:1d:3e:4d:5e:a7: 5f:3a:e6:d2:d0:bb:e3:91:e4:bb:8d:11:81:82:13: af:08:54:e8:fc:dd:67:7f:02:d3:06:d9:c3:ba:d5: 21:b7:09:50:2d:a7:2e:ba:d3:0c:09:8c:f9:f0:bf: 48:5e:bb:0f:4a:36:53:38:f1:11:d2:82:29:c6:49: 32:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:1D:CD:01:FC:2E:96:32:F5:9D:5E:81:94:C6:50:EE:17:53:F9:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/421cece2-8c18-41dd-a133-74ed29168835/421cece2-8c18-41dd-a133-74ed29168835.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/421cece2-8c18-41dd-a133-74ed29168835/421cece2-8c18-41dd-a133-74ed29168835.crl X509v3 Authority Key Identifier: keyid:07:89:67:D2:68:00:78:72:14:E0:75:D6:C2:41:12:72:10:3E:0D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/421cece2-8c18-41dd-a133-74ed29168835.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:76:03:9c:87:87:16:4f:9b:03:0f:45:e3:75:06:db:03:38: a4:e4:94:1c:9c:5d:f2:e6:27:0e:31:de:1c:3f:af:08:5a:85: bd:17:51:56:61:be:0e:c2:41:d8:43:eb:96:f1:42:e0:04:50: 0f:50:db:d5:02:38:b8:8c:e5:3f:47:0b:01:bc:c4:5d:38:67: 1a:c3:f1:87:75:10:3d:67:6a:bd:ca:cc:c1:45:c3:df:e9:94: 47:27:4a:c4:e0:60:24:bf:e1:97:cc:c4:2d:ff:89:10:19:3d: 5c:b4:a0:85:87:e2:44:86:70:3f:02:96:e7:17:9d:af:a4:36: 96:26:e9:a5:14:0d:59:bd:fc:7d:81:36:3c:fb:a9:b5:e6:c0: 0d:6d:0e:14:38:ed:41:1b:40:02:65:82:1e:4d:e5:e3:da:2b: 83:55:01:a6:b7:db:1e:bc:b2:b4:ff:18:28:25:86:49:ce:e3: 70:85:f1:d0:ef:c7:3b:d4:1c:4e:cc:a8:26:63:53:c5:22:4b: 17:52:86:97:4d:f5:37:d9:22:18:91:5a:5f:4a:37:ce:a8:0b: 66:1f:78:5b:d2:0d:52:50:af:c8:bb:bc:54:a9:31:12:09:03: d2:c1:94:fb:75:61:aa:ab:90:10:1c:86:4e:f7:cc:7f:e4:50: ee:1c:56:41 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnaWWif39PuCbkZrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDIxY2VjZTItOGMxOC00MWRkLWExMzMtNzRlZDI5MTY4 ODM1MB4XDTI1MDUxNDE4MDAwN1oXDTI1MDUxNzE4MDAwMFowLzEtMCsGA1UEAxMk NGJiMDAyN2QtZTFiMC00MmRiLThlMTQtMzNlOGJlZWFkYmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7mCaLrIQC0keqrEyifKdf1+xcshmEqh309/v pMAp0iZ2X9VMtDYMJREr6R8uVamXDYKzLR2sGv4TIzAXhpyDoFC068mw8wY2JG7G G8UceJzZ3vqWYaRU0L1b1Mxi4RCUQ9CSn9X+0KbWriuY/Vpda1XgM9jbvMMt960/ xWNM6AtNv3i+Z8gDlKbV4/slpxCGrRlCBJ8UpIMiv9o5nPwB1UYTEmnCNPCmveEy hGDPm34j7h9w0GcPOUN45QqfHT5NXqdfOubS0LvjkeS7jRGBghOvCFTo/N1nfwLT BtnDutUhtwlQLacuutMMCYz58L9IXrsPSjZTOPER0oIpxkkyBwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFkdzQH8LpYy9Z1egZTGUO4XU/kKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MjFj ZWNlMi04YzE4LTQxZGQtYTEzMy03NGVkMjkxNjg4MzUvNDIxY2VjZTItOGMxOC00 MWRkLWExMzMtNzRlZDI5MTY4ODM1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDIxY2VjZTItOGMxOC00MWRkLWEx MzMtNzRlZDI5MTY4ODM1LzQyMWNlY2UyLThjMTgtNDFkZC1hMTMzLTc0ZWQyOTE2 ODgzNS5jcmwwHwYDVR0jBBgwFoAUB4ln0mgAeHIU4HXWwkESchA+DQ8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MjFjZWNlMi04YzE4LTQxZGQtYTEzMy03NGVk MjkxNjg4MzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQApdgOch4cWT5sDD0XjdQbb Azik5JQcnF3y5icOMd4cP68IWoW9F1FWYb4OwkHYQ+uW8ULgBFAPUNvVAji4jOU/ RwsBvMRdOGcaw/GHdRA9Z2q9yszBRcPf6ZRHJ0rE4GAkv+GXzMQt/4kQGT1ctKCF h+JEhnA/ApbnF52vpDaWJumlFA1Zvfx9gTY8+6m15sANbQ4UOO1BG0ACZYIeTeXj 2iuDVQGmt9sevLK0/xgoJYZJzuNwhfHQ78c71BxOzKgmY1PFIksXUoaXTfU32SIY kVpfSjfOqAtmH3hb0g1SUK/Iu7xUqTESCQPSwZT7dWGqq5AQHIZO98x/5FDuHFZB -----END CERTIFICATE-----Generated at Thu May 15 11:30:03 2025 by rpki-client