$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft File: 21e56d69-549c-4d92-8866-0c8dd1d9e171.mft (raw, json) Hash identifier: DW4J0zdK4OxnmcIlujMlGiTyD50seV+U78l98iQZR2o= Subject key identifier: 45:1B:7B:26:41:F4:F3:B5:30:0B:93:C0:CF:20:55:03:27:E1:B7:39 Authority key identifier: BC:0F:BB:2E:3C:05:34:0F:24:DC:09:37:89:BE:DC:29:4B:21:64:08 Certificate issuer: /CN=21e56d69-549c-4d92-8866-0c8dd1d9e171 Certificate serial: 010D0C9F43285849CC0AAD2AF9276F31280EB0C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft Manifest number: 010D0C9F43285840DD9F52EE154566D9081DF64F Signing time: Fri 09 May 2025 15:00:09 +0000 Manifest this update: Fri 09 May 2025 15:00:09 +0000 Manifest next update: Sun 11 May 2025 15:00:00 +0000 Files and hashes: 1: 21e56d69-549c-4d92-8866-0c8dd1d9e171.crl (hash: 2DcMgMJNcSrqCEbz5cmdmxFMU1c98Co1FWvpv1bUL9s=) 2: 97b8c640-fb2c-369e-90d7-90ade1142479.roa (hash: 2y4FSWe1g7nhOOMfjlG9YJyHIJ8MINYZdp7ivJ2OnpI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cc:0a:ad:2a:f9:27:6f:31:28:0e:b0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21e56d69-549c-4d92-8866-0c8dd1d9e171 Validity Not Before: May 9 15:00:09 2025 GMT Not After : May 11 15:00:00 2025 GMT Subject: CN=a6bea790-04dd-428e-822b-bb43041b6d10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b8:78:d3:66:63:34:93:03:f5:25:70:30:95: 6f:9d:60:ed:2c:ac:b3:48:55:aa:76:84:c9:88:48: 8d:41:6a:9e:2a:09:82:36:08:57:2d:e3:5d:7c:f7: 75:75:16:d9:cd:9a:e1:af:76:7c:f9:2f:9c:5b:85: 88:3f:3d:b1:38:ff:15:a5:ed:a4:ce:13:3f:d0:26: 31:82:35:e2:5e:73:b6:07:1c:34:33:c2:6a:85:2f: 30:4c:05:82:6a:5e:dd:3e:89:f1:46:5a:a1:44:b7: 83:25:c1:ea:5e:33:5b:cc:72:86:ba:05:19:22:f5: af:0b:16:1a:66:79:57:19:2b:15:9d:5e:65:35:34: 6a:04:69:25:0f:0b:20:be:d6:84:14:5c:bd:6f:02: c6:dd:40:e9:16:01:45:e4:69:7e:90:cf:ad:79:2f: 06:fb:3a:0e:7d:92:28:b1:a1:5d:62:76:96:ad:33: 9d:9d:31:7b:d4:5b:88:a7:bb:f6:f3:40:ed:a4:62: 42:04:c1:61:00:f1:8a:ae:ee:68:91:ff:0d:a1:4d: 5c:2b:0a:f4:90:00:36:44:a3:1b:98:90:60:c4:da: 0d:e6:89:5f:51:58:54:9b:47:09:55:20:3b:d4:da: d9:f6:ca:25:ad:fd:7f:20:fc:b1:33:2b:cf:92:eb: ed:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:1B:7B:26:41:F4:F3:B5:30:0B:93:C0:CF:20:55:03:27:E1:B7:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.crl X509v3 Authority Key Identifier: keyid:BC:0F:BB:2E:3C:05:34:0F:24:DC:09:37:89:BE:DC:29:4B:21:64:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:ea:1b:9b:7e:78:d0:41:ca:a6:97:3e:7f:e8:57:b6:d8:d1: c4:57:0f:ac:28:05:4b:cf:ef:94:4b:d3:25:a1:6b:67:1b:93: 10:39:16:c7:4b:3f:7c:a0:44:1b:67:24:b3:14:92:58:37:c7: 05:95:00:71:55:45:55:c1:4e:d4:74:82:2e:b2:f6:54:48:15: 1f:65:37:85:54:c7:f2:42:36:99:bf:b1:76:d4:bf:4b:84:05: 89:78:f3:68:ad:2c:1c:28:8e:b7:61:57:aa:b9:78:4d:ec:46: 4b:54:f9:f4:df:63:d3:aa:00:cd:82:fe:6c:10:2f:a7:86:33: ef:65:d3:c4:75:e8:b5:cd:0c:c2:83:9f:4b:70:14:06:27:82: 48:3e:a8:da:a9:78:64:43:b4:60:9b:05:bc:e7:03:3b:c2:ff: 24:1c:5e:a5:5a:b3:d5:7a:af:17:90:93:af:45:3e:9a:d8:49: f9:26:64:f3:a3:d7:fa:0d:84:31:06:5c:51:c7:aa:a1:53:1c: 99:a7:45:15:02:9d:04:42:f9:ac:ae:52:7d:b1:49:65:0b:3f: 0b:49:bc:de:58:8f:25:69:ff:ed:0c:ae:af:8e:58:1c:4e:0b: b9:a3:fd:02:05:46:5f:9f:c1:60:51:64:f6:1b:1a:fd:bb:df: 19:1c:1d:11 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnMCq0q+SdvMSgOsMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFlNTZkNjktNTQ5Yy00ZDkyLTg4NjYtMGM4ZGQxZDll MTcxMB4XDTI1MDUwOTE1MDAwOVoXDTI1MDUxMTE1MDAwMFowLzEtMCsGA1UEAxMk YTZiZWE3OTAtMDRkZC00MjhlLTgyMmItYmI0MzA0MWI2ZDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbh402ZjNJMD9SVwMJVvnWDtLKyzSFWqdoTJ iEiNQWqeKgmCNghXLeNdfPd1dRbZzZrhr3Z8+S+cW4WIPz2xOP8Vpe2kzhM/0CYx gjXiXnO2Bxw0M8JqhS8wTAWCal7dPonxRlqhRLeDJcHqXjNbzHKGugUZIvWvCxYa ZnlXGSsVnV5lNTRqBGklDwsgvtaEFFy9bwLG3UDpFgFF5Gl+kM+teS8G+zoOfZIo saFdYnaWrTOdnTF71FuIp7v280DtpGJCBMFhAPGKru5okf8NoU1cKwr0kAA2RKMb mJBgxNoN5olfUVhUm0cJVSA71NrZ9solrf1/IPyxMyvPkuvtZwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEUbeyZB9PO1MAuTwM8gVQMn4bc5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMWU1 NmQ2OS01NDljLTRkOTItODg2Ni0wYzhkZDFkOWUxNzEvMjFlNTZkNjktNTQ5Yy00 ZDkyLTg4NjYtMGM4ZGQxZDllMTcxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjFlNTZkNjktNTQ5Yy00ZDkyLTg4 NjYtMGM4ZGQxZDllMTcxLzIxZTU2ZDY5LTU0OWMtNGQ5Mi04ODY2LTBjOGRkMWQ5 ZTE3MS5jcmwwHwYDVR0jBBgwFoAUvA+7LjwFNA8k3Ak3ib7cKUshZAgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMWU1NmQ2OS01NDljLTRkOTItODg2Ni0wYzhk ZDFkOWUxNzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBp6hubfnjQQcqmlz5/6Fe2 2NHEVw+sKAVLz++US9MloWtnG5MQORbHSz98oEQbZySzFJJYN8cFlQBxVUVVwU7U dIIusvZUSBUfZTeFVMfyQjaZv7F21L9LhAWJePNorSwcKI63YVequXhN7EZLVPn0 32PTqgDNgv5sEC+nhjPvZdPEdei1zQzCg59LcBQGJ4JIPqjaqXhkQ7RgmwW85wM7 wv8kHF6lWrPVeq8XkJOvRT6a2En5JmTzo9f6DYQxBlxRx6qhUxyZp0UVAp0EQvms rlJ9sUllCz8LSbzeWI8laf/tDK6vjlgcTgu5o/0CBUZfn8FgUWT2Gxr9u98ZHB0R -----END CERTIFICATE-----Generated at Fri May 9 22:05:10 2025 by rpki-client