$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft File: 4aa1bbde-87c2-49af-9803-d7934d656ff3.mft (raw, json) Hash identifier: WzQcuOea+WT8OQa/aPdzNo2tiMmODS5W7qHrUnz//7k= Subject key identifier: E1:04:9E:D7:86:9A:05:1F:CD:A7:E4:FC:1D:54:9E:48:DC:58:C4:5A Authority key identifier: EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB Certificate issuer: /CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Certificate serial: 010D0C9F43285849D0ED585DFF3D7429CCF13C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft Manifest number: 010D0C9F4328584073A84AD0B7C4CF31CF0223EE Signing time: Sun 11 May 2025 09:00:07 +0000 Manifest this update: Sun 11 May 2025 09:00:07 +0000 Manifest next update: Wed 14 May 2025 09:00:00 +0000 Files and hashes: 1: 4aa1bbde-87c2-49af-9803-d7934d656ff3.crl (hash: gZ+O1ZMcJq/wrGGYYP64k+dQ0MfxA6SoowWHy0wdHGY=) 2: fc89a642-5803-37de-88d2-fbe8648bdde9.roa (hash: 8mI1mAFvRjR7sgTriloSwnt7WlUx2giXk2PQpU+WO7E=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d0:ed:58:5d:ff:3d:74:29:cc:f1:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Validity Not Before: May 11 09:00:07 2025 GMT Not After : May 14 09:00:00 2025 GMT Subject: CN=4d43187e-0641-4248-a13b-8a5c0347471c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c6:23:eb:73:59:0c:d7:51:3f:5d:8c:06:ea: 98:b3:f7:de:e9:ee:d0:26:cd:fc:b5:06:f0:7a:05: d0:72:17:42:bf:ea:2f:90:f2:d6:f5:29:a9:4a:10: 98:87:96:88:83:7d:52:bc:79:6d:8e:89:62:cd:05: 12:a6:13:d3:ca:76:96:85:de:52:9f:89:1a:ba:84: 10:db:59:30:70:7a:53:e7:fe:3d:1f:84:80:55:0a: a5:41:6f:68:ec:88:aa:50:a0:45:a5:34:0c:67:5a: ab:da:1e:97:de:52:9a:a3:ec:e3:5d:29:92:a4:b6: d8:b9:66:7d:9d:95:c9:ab:b5:44:50:99:04:be:74: 5e:ee:f9:b5:85:e6:05:70:46:4b:7f:96:e8:ec:31: 66:6d:a3:37:89:16:ab:fc:5e:40:fd:5f:8d:2f:9f: b7:2d:5e:8c:c7:a5:cd:5e:4b:fe:ff:37:7b:2c:ad: 89:ce:6b:75:f6:97:3a:cc:4c:33:2d:9e:94:0f:ce: 24:c3:7f:49:94:d9:c0:41:4e:b2:db:b0:cd:9c:82: f0:28:1d:59:98:33:e0:71:50:dc:88:54:12:d6:1f: 89:16:04:db:e2:20:29:63:90:eb:54:45:c3:d6:92: d2:81:63:99:9c:cb:ab:02:1a:40:1f:3f:db:df:02: d9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:04:9E:D7:86:9A:05:1F:CD:A7:E4:FC:1D:54:9E:48:DC:58:C4:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl X509v3 Authority Key Identifier: keyid:EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:ec:03:0b:4f:a0:d1:7a:bc:bd:90:74:a7:51:2a:78:e1:5f: 21:81:40:df:a2:e1:09:7a:91:fe:4e:fc:5e:c2:b6:ae:90:67: 68:60:1d:4a:0f:07:ad:7b:27:da:82:5f:45:41:06:b8:1b:6c: aa:3c:89:a9:0f:0a:53:ec:a0:42:d4:8f:f0:71:b0:4a:a5:f9: e0:7d:fb:dc:b4:72:36:a0:38:20:0b:9b:ca:54:16:1f:6a:08: 72:21:61:61:44:44:80:96:c6:60:e6:ea:01:55:ea:99:10:51: 84:e6:e5:dc:13:f5:36:f9:23:7b:a9:e5:80:81:59:95:09:40: 51:b8:91:f9:f5:c8:44:28:bd:4f:7b:d3:0a:b2:91:98:b7:bc: ff:44:91:26:0f:d2:20:2e:4d:c6:aa:80:6d:2b:c6:5a:5e:9b: 4c:ce:52:c2:be:b8:16:f5:c5:ed:f2:ad:e1:d9:1f:bf:5c:59: 8d:5e:27:6f:3a:f0:9f:d3:05:b8:f7:43:a1:fa:4f:30:64:20: 58:e6:fc:c6:88:92:34:25:86:ee:58:0a:21:a2:b8:d7:07:c3: 9a:50:65:14:c9:cc:9a:02:2d:86:c6:b5:b3:f7:ac:1c:e3:b0: 77:ef:ac:f8:24:1d:65:e7:5d:c5:8f:1f:8c:55:d6:be:1e:39: a3:26:16:6d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnQ7Vhd/z10KczxPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFhMWJiZGUtODdjMi00OWFmLTk4MDMtZDc5MzRkNjU2 ZmYzMB4XDTI1MDUxMTA5MDAwN1oXDTI1MDUxNDA5MDAwMFowLzEtMCsGA1UEAxMk NGQ0MzE4N2UtMDY0MS00MjQ4LWExM2ItOGE1YzAzNDc0NzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcYj63NZDNdRP12MBuqYs/fe6e7QJs38tQbw egXQchdCv+ovkPLW9SmpShCYh5aIg31SvHltjolizQUSphPTynaWhd5Sn4kauoQQ 21kwcHpT5/49H4SAVQqlQW9o7IiqUKBFpTQMZ1qr2h6X3lKao+zjXSmSpLbYuWZ9 nZXJq7VEUJkEvnRe7vm1heYFcEZLf5bo7DFmbaM3iRar/F5A/V+NL5+3LV6Mx6XN Xkv+/zd7LK2Jzmt19pc6zEwzLZ6UD84kw39JlNnAQU6y27DNnILwKB1ZmDPgcVDc iFQS1h+JFgTb4iApY5DrVEXD1pLSgWOZnMurAhpAHz/b3wLZDwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOEEnteGmgUfzafk/B1UnkjcWMRaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YWEx YmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkzNGQ2NTZmZjMvNGFhMWJiZGUtODdjMi00 OWFmLTk4MDMtZDc5MzRkNjU2ZmYzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGFhMWJiZGUtODdjMi00OWFmLTk4 MDMtZDc5MzRkNjU2ZmYzLzRhYTFiYmRlLTg3YzItNDlhZi05ODAzLWQ3OTM0ZDY1 NmZmMy5jcmwwHwYDVR0jBBgwFoAU7IwDMQPcaohbK3cbnS78eZrakOswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YWExYmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkz NGQ2NTZmZjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAT7AMLT6DRery9kHSnUSp4 4V8hgUDfouEJepH+TvxewraukGdoYB1KDweteyfagl9FQQa4G2yqPImpDwpT7KBC 1I/wcbBKpfngffvctHI2oDggC5vKVBYfaghyIWFhRESAlsZg5uoBVeqZEFGE5uXc E/U2+SN7qeWAgVmVCUBRuJH59chEKL1Pe9MKspGYt7z/RJEmD9IgLk3GqoBtK8Za XptMzlLCvrgW9cXt8q3h2R+/XFmNXidvOvCf0wW490Oh+k8wZCBY5vzGiJI0JYbu WAohorjXB8OaUGUUycyaAi2GxrWz96wc47B376z4JB1l513Fjx+MVda+HjmjJhZt -----END CERTIFICATE-----Generated at Mon May 12 00:35:34 2025 by rpki-client