$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.mft File: dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.mft (raw, json) Hash identifier: BlmbTLYpkE9XXB7FqkTMsMq9dV/lXdkSjRHl+MmtgVk= Subject key identifier: 71:F6:7A:A4:D0:68:C9:FA:28:9C:3E:A7:9D:43:D6:D7:7D:8A:AF:1D Authority key identifier: C0:0C:F4:BD:06:6F:5D:05:D9:66:A6:DC:28:B9:AC:BC:BD:AB:92:91 Certificate issuer: /CN=dcd1edec-c385-49a8-822f-d4dcbe5e0e4d Certificate serial: 010D0C9F43285849D1646A488C3C3D44AD3C1AC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.mft Manifest number: 010D0C9F4328584073A854DB5F74B2A9424A75DA Signing time: Sun 11 May 2025 13:00:03 +0000 Manifest this update: Sun 11 May 2025 13:00:03 +0000 Manifest next update: Wed 14 May 2025 13:00:00 +0000 Files and hashes: 1: dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.crl (hash: yHPibSiCdLGpDYJ0CVsW7mMAN18HS6ZM2Q+cUzNQBa8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:64:6a:48:8c:3c:3d:44:ad:3c:1a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcd1edec-c385-49a8-822f-d4dcbe5e0e4d Validity Not Before: May 11 13:00:03 2025 GMT Not After : May 14 13:00:00 2025 GMT Subject: CN=9c358a2a-5291-457a-a1f4-aef44c1f79b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:24:84:63:ae:77:7c:c5:7a:14:c1:ef:8e:fd: b8:6a:43:c0:48:76:9c:9a:c0:7b:80:88:51:38:f7: f7:46:ba:46:07:1e:db:d5:66:d5:cb:b3:1e:a8:59: 8a:8d:84:57:6b:ec:80:a7:9a:07:1b:57:98:ac:29: 93:14:f7:ec:72:98:43:53:d8:f1:2d:5c:df:05:ae: 05:0c:0d:45:64:a0:1e:92:88:11:e6:07:14:08:12: 43:1a:d3:eb:91:c4:3e:3c:4f:56:58:f0:67:35:aa: 84:37:ae:2d:63:89:a2:96:fc:c8:95:14:f0:4d:99: 7d:2d:8e:69:d0:31:b8:76:9a:4f:bb:88:24:5f:ce: 26:30:a4:2e:34:3f:0b:dd:e9:63:23:be:bd:c4:51: 31:a1:98:40:a2:3d:4c:95:df:5c:fb:bd:70:ff:cd: f8:40:5e:6c:ec:47:de:b5:4f:05:dc:ab:6e:f7:ac: 33:a2:9b:b6:fd:f0:41:62:97:1b:06:c7:27:bf:2c: 5c:ad:2a:27:5d:b6:d1:9b:5a:e7:5c:4d:ac:eb:c0: 96:1c:7d:64:50:62:bc:ef:06:8b:d1:9c:b6:c6:f5: 6d:c4:23:b4:54:71:61:69:0f:c2:1a:2f:1e:8a:c6: da:eb:6b:4d:f4:c7:a2:af:24:f9:bf:4c:7d:3b:25: ab:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F6:7A:A4:D0:68:C9:FA:28:9C:3E:A7:9D:43:D6:D7:7D:8A:AF:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.crl X509v3 Authority Key Identifier: keyid:C0:0C:F4:BD:06:6F:5D:05:D9:66:A6:DC:28:B9:AC:BC:BD:AB:92:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:6d:c7:bb:df:6e:21:b7:fe:6e:f9:4d:de:3f:10:bc:ed:75: b3:3c:dc:6a:74:8a:93:13:10:77:13:4e:ca:e0:04:91:4d:fe: 1f:d5:f5:a5:aa:8e:85:14:b7:15:43:48:5f:8c:c5:2e:f7:3a: b3:8b:d6:8c:06:44:c1:b4:12:3d:71:bb:ef:3d:72:4e:1d:f6: fe:89:ac:94:29:0b:33:6b:71:7d:d7:f3:31:48:7d:cf:e9:3a: 4c:30:0c:d4:4a:10:06:3d:2c:07:f5:3a:cc:bb:61:13:36:e9: ae:81:22:84:71:08:a5:91:44:2a:4f:50:3c:cb:af:63:2c:1b: d5:ac:8e:e2:d0:89:d2:ef:77:f7:44:1f:69:fa:00:e2:12:ef: 1e:fb:66:e6:3d:3c:05:be:47:04:a5:c2:f5:43:ae:73:50:e1: 60:a7:22:5d:1d:91:2c:49:fe:55:d0:35:30:c0:3a:df:57:92: b9:9c:80:24:74:1f:3f:5e:6c:4d:51:f9:da:00:10:c1:6c:fe: 7b:6c:23:05:b9:f9:af:be:28:40:e2:e1:bd:23:03:b6:c4:c1: 72:07:68:7f:c7:98:1c:d0:3a:32:6f:39:4c:d1:84:ef:93:9c: cd:c3:f3:12:5d:42:bd:5d:fb:2f:b6:44:2d:54:bf:d9:75:4a: 29:6d:29:c3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnRZGpIjDw9RK08GsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNkMWVkZWMtYzM4NS00OWE4LTgyMmYtZDRkY2JlNWUw ZTRkMB4XDTI1MDUxMTEzMDAwM1oXDTI1MDUxNDEzMDAwMFowLzEtMCsGA1UEAxMk OWMzNThhMmEtNTI5MS00NTdhLWExZjQtYWVmNDRjMWY3OWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CSEY653fMV6FMHvjv24akPASHacmsB7gIhR OPf3RrpGBx7b1WbVy7MeqFmKjYRXa+yAp5oHG1eYrCmTFPfscphDU9jxLVzfBa4F DA1FZKAekogR5gcUCBJDGtPrkcQ+PE9WWPBnNaqEN64tY4milvzIlRTwTZl9LY5p 0DG4dppPu4gkX84mMKQuND8L3eljI769xFExoZhAoj1Mld9c+71w/834QF5s7Efe tU8F3Ktu96wzopu2/fBBYpcbBscnvyxcrSonXbbRm1rnXE2s68CWHH1kUGK87waL 0Zy2xvVtxCO0VHFhaQ/CGi8eisba62tN9MeiryT5v0x9OyWr2wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHH2eqTQaMn6KJw+p51D1td9iq8dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Qx ZWRlYy1jMzg1LTQ5YTgtODIyZi1kNGRjYmU1ZTBlNGQvZGNkMWVkZWMtYzM4NS00 OWE4LTgyMmYtZDRkY2JlNWUwZTRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNkMWVkZWMtYzM4NS00OWE4LTgy MmYtZDRkY2JlNWUwZTRkL2RjZDFlZGVjLWMzODUtNDlhOC04MjJmLWQ0ZGNiZTVl MGU0ZC5jcmwwHwYDVR0jBBgwFoAUwAz0vQZvXQXZZqbcKLmsvL2rkpEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2QxZWRlYy1jMzg1LTQ5YTgtODIyZi1kNGRj YmU1ZTBlNGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAibce7324ht/5u+U3ePxC8 7XWzPNxqdIqTExB3E07K4ASRTf4f1fWlqo6FFLcVQ0hfjMUu9zqzi9aMBkTBtBI9 cbvvPXJOHfb+iayUKQsza3F91/MxSH3P6TpMMAzUShAGPSwH9TrMu2ETNumugSKE cQilkUQqT1A8y69jLBvVrI7i0InS73f3RB9p+gDiEu8e+2bmPTwFvkcEpcL1Q65z UOFgpyJdHZEsSf5V0DUwwDrfV5K5nIAkdB8/XmxNUfnaABDBbP57bCMFufmvvihA 4uG9IwO2xMFyB2h/x5gc0DoybzlM0YTvk5zNw/MSXUK9XfsvtkQtVL/ZdUopbSnD -----END CERTIFICATE-----Generated at Sun May 11 21:12:36 2025 by rpki-client