$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.mft File: 21a0e036-e4bb-4abf-8ede-8ad9a213f91a.mft (raw, json) Hash identifier: /u7rKxjfApThT7pVyZ3R8zDhUJbsaVxuHGWVWEoeQxY= Subject key identifier: DF:DD:2F:2A:2D:32:F1:26:DB:C4:53:59:DC:C8:5E:E9:84:7E:A2:C6 Authority key identifier: 2F:DA:DD:17:BF:CA:37:D5:D7:4F:CD:E5:B1:E7:2E:BB:C2:86:87:13 Certificate issuer: /CN=21a0e036-e4bb-4abf-8ede-8ad9a213f91a Certificate serial: 010D0C9F43285849CF2EA39EB02CA032D52109C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.mft Manifest number: 010D0C9F432858438A0A161212CB83FF1869C53D Signing time: Sat 10 May 2025 18:00:03 +0000 Manifest this update: Sat 10 May 2025 18:00:03 +0000 Manifest next update: Mon 12 May 2025 18:00:00 +0000 Files and hashes: 1: 21a0e036-e4bb-4abf-8ede-8ad9a213f91a.crl (hash: bancxygOBYGLNDChHCF+31x+T2yOQShEGO+8njkpKZ4=) 2: fe655c59-f54b-337c-afb0-edb608a6ba8d.roa (hash: wPo/EDBh6EpH2laUiIW+ygw4D25LhwzStO/+YBQyTz8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cf:2e:a3:9e:b0:2c:a0:32:d5:21:09:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a0e036-e4bb-4abf-8ede-8ad9a213f91a Validity Not Before: May 10 18:00:03 2025 GMT Not After : May 12 18:00:00 2025 GMT Subject: CN=16e08d12-f13e-4b08-bdd8-ef45a20cbe60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4f:88:e2:e7:9c:95:ec:8c:9d:ff:9a:58:bf: c9:33:6d:52:d2:d2:25:3d:24:cb:44:8d:e2:b3:4c: 68:ce:c6:fe:50:f8:f1:da:54:3e:c8:76:5b:ee:f9: ef:60:a6:21:14:e4:c9:7e:b5:30:0a:0a:d3:08:ef: 2b:7a:bf:f2:70:28:8c:39:3a:8e:30:92:45:4a:76: 8d:90:21:cb:e6:d2:60:97:2c:69:4a:e9:a3:23:e8: f2:6d:a1:9d:29:a5:3c:2c:31:54:d7:61:5f:e0:15: 3a:da:61:fe:13:e4:ef:4f:79:1a:cc:b0:dd:c8:1f: 56:0e:de:58:e7:25:8c:97:3a:d4:a8:85:93:1b:59: 73:ea:81:ca:c3:fa:12:22:04:44:dc:29:5b:40:06: e9:0d:f2:a9:5e:77:0c:19:9d:04:03:09:00:61:54: 68:79:d9:9b:eb:26:38:de:91:71:18:1b:b0:8f:4d: 0a:ce:9c:52:e0:0f:c5:ee:9e:40:1a:bb:bb:e7:f1: 65:9c:23:cd:3f:fc:e3:1f:2d:33:2f:31:6c:6a:5f: a6:30:2b:f6:0f:67:d5:47:fe:05:f6:f0:36:81:17: b4:b8:a7:09:7d:5e:6c:07:36:33:cc:16:d2:50:d9: 13:4f:11:d6:a0:02:bb:78:91:a1:37:3e:12:cf:5d: 52:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:DD:2F:2A:2D:32:F1:26:DB:C4:53:59:DC:C8:5E:E9:84:7E:A2:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.crl X509v3 Authority Key Identifier: keyid:2F:DA:DD:17:BF:CA:37:D5:D7:4F:CD:E5:B1:E7:2E:BB:C2:86:87:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:09:6b:ad:be:48:e8:ed:3e:c3:6f:0d:82:08:ac:61:90:b0: d0:4d:37:ae:c0:94:06:fa:f6:6b:fe:3d:2a:69:32:14:ee:75: 6a:6e:55:9c:fb:e3:3e:8f:58:23:2e:86:65:e1:8d:d0:7a:3e: 61:02:f0:37:88:35:59:dd:16:ac:b0:b9:25:3c:18:c9:0b:5a: 66:a1:dd:fe:cc:51:b5:cc:1f:3f:ff:ea:68:fe:c1:f1:62:1f: 11:36:a0:46:ea:41:27:2a:65:6e:81:46:b8:a2:19:6c:dd:3b: 6c:2a:68:3f:43:d3:8f:90:f2:d5:fd:40:5f:05:e1:34:9a:87: 19:05:be:0d:cb:2d:f0:18:4c:1f:cb:92:4e:d1:32:c8:01:e5: 58:d0:dd:fe:79:91:8d:2c:3c:08:2c:bf:13:32:76:a2:03:20: d4:83:d4:da:2f:77:c9:f0:c9:df:af:a6:25:00:50:44:0e:3f: 99:1d:cb:e3:73:f2:e5:7c:2a:46:68:2e:4f:1e:e5:cd:39:3f: 68:16:63:5c:28:32:4c:c2:88:9e:1b:6a:f2:37:89:e7:33:83: 64:08:55:98:ba:9f:01:be:dc:2b:52:9e:7d:9c:a0:0f:ad:72: a8:3b:13:19:75:69:cb:e0:30:4a:d6:8e:8d:f2:0f:94:90:24: 34:40:5e:50 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnPLqOesCygMtUhCcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhMGUwMzYtZTRiYi00YWJmLThlZGUtOGFkOWEyMTNm OTFhMB4XDTI1MDUxMDE4MDAwM1oXDTI1MDUxMjE4MDAwMFowLzEtMCsGA1UEAxMk MTZlMDhkMTItZjEzZS00YjA4LWJkZDgtZWY0NWEyMGNiZTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArU+I4uecleyMnf+aWL/JM21S0tIlPSTLRI3i s0xozsb+UPjx2lQ+yHZb7vnvYKYhFOTJfrUwCgrTCO8rer/ycCiMOTqOMJJFSnaN kCHL5tJglyxpSumjI+jybaGdKaU8LDFU12Ff4BU62mH+E+TvT3kazLDdyB9WDt5Y 5yWMlzrUqIWTG1lz6oHKw/oSIgRE3ClbQAbpDfKpXncMGZ0EAwkAYVRoedmb6yY4 3pFxGBuwj00KzpxS4A/F7p5AGru75/FlnCPNP/zjHy0zLzFsal+mMCv2D2fVR/4F 9vA2gRe0uKcJfV5sBzYzzBbSUNkTTxHWoAK7eJGhNz4Sz11ShQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFN/dLyotMvEm28RTWdzIXumEfqLGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWEw ZTAzNi1lNGJiLTRhYmYtOGVkZS04YWQ5YTIxM2Y5MWEvMjFhMGUwMzYtZTRiYi00 YWJmLThlZGUtOGFkOWEyMTNmOTFhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjFhMGUwMzYtZTRiYi00YWJmLThl ZGUtOGFkOWEyMTNmOTFhLzIxYTBlMDM2LWU0YmItNGFiZi04ZWRlLThhZDlhMjEz ZjkxYS5jcmwwHwYDVR0jBBgwFoAUL9rdF7/KN9XXT83lsecuu8KGhxMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWEwZTAzNi1lNGJiLTRhYmYtOGVkZS04YWQ5 YTIxM2Y5MWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBzCWutvkjo7T7Dbw2CCKxh kLDQTTeuwJQG+vZr/j0qaTIU7nVqblWc++M+j1gjLoZl4Y3Qej5hAvA3iDVZ3Ras sLklPBjJC1pmod3+zFG1zB8//+po/sHxYh8RNqBG6kEnKmVugUa4ohls3TtsKmg/ Q9OPkPLV/UBfBeE0mocZBb4Nyy3wGEwfy5JO0TLIAeVY0N3+eZGNLDwILL8TMnai AyDUg9TaL3fJ8Mnfr6YlAFBEDj+ZHcvjc/LlfCpGaC5PHuXNOT9oFmNcKDJMwoie G2ryN4nnM4NkCFWYup8BvtwrUp59nKAPrXKoOxMZdWnL4DBK1o6N8g+UkCQ0QF5Q -----END CERTIFICATE-----Generated at Sun May 11 07:10:50 2025 by rpki-client