$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft File: a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft (raw, json) Hash identifier: yiANg/njxjiVRIr5sS7fI0RLgF6GGGl8c8J6NJm7iHw= Subject key identifier: 4D:3D:AA:86:44:D9:BA:68:6C:E6:5D:D8:A4:10:D8:4C:98:9C:75:09 Authority key identifier: 14:71:AC:1E:2B:E8:94:25:09:41:FC:D6:59:07:4C:A3:B5:CF:BB:39 Certificate issuer: /CN=a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae Certificate serial: 010D0C9F43285849D093F81853CBFFB6E3D7AE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft Manifest number: 010D0C9F4328584073A8433349A69053F9B88C5A Signing time: Sun 11 May 2025 06:00:03 +0000 Manifest this update: Sun 11 May 2025 06:00:03 +0000 Manifest next update: Wed 14 May 2025 06:00:00 +0000 Files and hashes: 1: a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.crl (hash: G7Wgl1l2/sPsIeoFwQ2FQGkLZOT02pW1Iq2Thv2x9gs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d0:93:f8:18:53:cb:ff:b6:e3:d7:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae Validity Not Before: May 11 06:00:03 2025 GMT Not After : May 14 06:00:00 2025 GMT Subject: CN=6de49060-4fec-4c20-a65a-2f0073a55fcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:22:88:f8:2b:ef:ec:fd:40:43:d8:a6:f0:d6: cd:9a:39:55:18:b0:96:6b:3a:1f:6e:0e:91:e6:fe: af:80:d7:1f:fb:3a:49:b1:05:bd:eb:49:c2:60:10: 94:e2:49:01:84:47:3a:f2:5c:d2:f4:a8:c5:b9:c0: 2e:9b:c1:ab:dc:ea:5f:9e:bc:1d:31:72:b2:b7:7c: 60:db:0a:04:29:96:e0:a5:fc:86:51:a9:59:ec:73: 2d:86:ec:4a:4a:13:dd:39:0d:c0:49:28:bb:68:fb: 2f:10:f7:7c:f8:be:07:c0:04:6e:82:bc:dd:17:c4: 4a:e4:f2:bb:bf:77:a1:ff:4d:b7:ce:29:82:8c:67: 07:6e:56:7a:d6:fb:8c:e0:d2:92:41:2c:b7:5d:67: 96:1d:6d:82:54:ee:1d:d6:3f:59:ad:f9:15:20:26: bd:79:b9:d3:6c:43:f3:e9:4f:4a:12:1e:07:a1:d8: cc:e7:79:37:c4:3b:9f:de:0c:39:8e:b3:4c:fd:fc: 42:32:c4:6c:f1:e8:51:8b:4a:ba:17:8c:6c:4c:79: b9:85:27:c9:ce:94:71:2b:af:a3:5b:2b:79:45:c4: 7e:70:00:40:9d:9e:8c:37:5e:54:bf:e7:36:cb:14: 91:30:d9:2c:eb:5b:5e:2c:83:b6:0a:f2:16:e2:a6: 08:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:3D:AA:86:44:D9:BA:68:6C:E6:5D:D8:A4:10:D8:4C:98:9C:75:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.crl X509v3 Authority Key Identifier: keyid:14:71:AC:1E:2B:E8:94:25:09:41:FC:D6:59:07:4C:A3:B5:CF:BB:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:01:78:12:e3:99:66:7e:5f:ca:27:70:40:5d:e8:a4:54:6e: e8:e0:4f:30:9e:1b:bb:57:ad:a4:78:96:1a:d3:d4:1b:df:1d: 3e:5b:8a:3f:f4:f4:bb:7c:8c:e6:de:55:7b:01:98:92:ee:ad: 1a:1a:fd:0a:ac:1a:a6:67:8f:2f:17:bc:d7:fc:e0:c0:1e:60: 4b:ad:12:37:3d:62:cb:e7:1a:6e:18:ad:ee:d2:d8:ed:12:66: be:92:2b:fd:47:05:98:f8:7e:0c:f3:25:67:80:e7:56:73:2e: c4:49:4d:0f:ea:0b:fe:dd:ec:76:ca:74:c0:4a:73:17:ef:c3: 0d:d6:19:aa:07:2f:18:72:13:bb:07:7a:01:39:2b:27:92:df: b4:b0:eb:92:a4:bb:aa:e0:e2:30:c2:62:1f:61:38:e9:78:93: 3c:b1:29:cb:9a:bd:5b:d3:68:4b:4c:91:f2:f6:dd:47:ee:db: 65:7a:fc:b9:5f:95:89:5d:ba:47:0a:0b:1f:c0:fa:6a:67:78: b3:f6:ed:44:a3:3b:6b:50:64:fa:e3:49:7d:12:43:4d:6b:a3: f9:79:f1:68:5f:90:fc:11:3e:87:24:30:d3:6a:99:10:7f:07: c9:64:90:fb:2f:e0:59:21:63:4d:b6:ac:2f:0a:a2:58:d3:7a: 0c:7b:01:bf -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnQk/gYU8v/tuPXrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJhMWNmMzQtOWRlNi00M2IyLThjNmUtZWZiMjdhOWFj NWFlMB4XDTI1MDUxMTA2MDAwM1oXDTI1MDUxNDA2MDAwMFowLzEtMCsGA1UEAxMk NmRlNDkwNjAtNGZlYy00YzIwLWE2NWEtMmYwMDczYTU1ZmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiKI+Cvv7P1AQ9im8NbNmjlVGLCWazofbg6R 5v6vgNcf+zpJsQW960nCYBCU4kkBhEc68lzS9KjFucAum8Gr3OpfnrwdMXKyt3xg 2woEKZbgpfyGUalZ7HMthuxKShPdOQ3ASSi7aPsvEPd8+L4HwARugrzdF8RK5PK7 v3eh/023zimCjGcHblZ61vuM4NKSQSy3XWeWHW2CVO4d1j9ZrfkVICa9ebnTbEPz 6U9KEh4HodjM53k3xDuf3gw5jrNM/fxCMsRs8ehRi0q6F4xsTHm5hSfJzpRxK6+j Wyt5RcR+cABAnZ6MN15Uv+c2yxSRMNks61teLIO2CvIW4qYIGwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFE09qoZE2bpobOZd2KQQ2EyYnHUJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMmEx Y2YzNC05ZGU2LTQzYjItOGM2ZS1lZmIyN2E5YWM1YWUvYTJhMWNmMzQtOWRlNi00 M2IyLThjNmUtZWZiMjdhOWFjNWFlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTJhMWNmMzQtOWRlNi00M2IyLThj NmUtZWZiMjdhOWFjNWFlL2EyYTFjZjM0LTlkZTYtNDNiMi04YzZlLWVmYjI3YTlh YzVhZS5jcmwwHwYDVR0jBBgwFoAUFHGsHivolCUJQfzWWQdMo7XPuzkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hMmExY2YzNC05ZGU2LTQzYjItOGM2ZS1lZmIy N2E5YWM1YWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDOAXgS45lmfl/KJ3BAXeik VG7o4E8wnhu7V62keJYa09Qb3x0+W4o/9PS7fIzm3lV7AZiS7q0aGv0KrBqmZ48v F7zX/ODAHmBLrRI3PWLL5xpuGK3u0tjtEma+kiv9RwWY+H4M8yVngOdWcy7ESU0P 6gv+3ex2ynTASnMX78MN1hmqBy8YchO7B3oBOSsnkt+0sOuSpLuq4OIwwmIfYTjp eJM8sSnLmr1b02hLTJHy9t1H7ttlevy5X5WJXbpHCgsfwPpqZ3iz9u1EoztrUGT6 40l9EkNNa6P5efFoX5D8ET6HJDDTapkQfwfJZJD7L+BZIWNNtqwvCqJY03oMewG/ -----END CERTIFICATE-----Generated at Sun May 11 21:13:42 2025 by rpki-client