$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.mft File: 8a9663d9-43e8-4ddb-be80-8316cf022a7a.mft (raw, json) Hash identifier: spw+yC8W3IxQGDplGl7pyRmgp4ETUDbuJzHMJo2cX9c= Subject key identifier: BD:20:5B:BF:B7:61:55:43:BC:CE:6C:95:4C:D9:9A:B7:5D:66:0F:3B Authority key identifier: 1E:DA:F3:05:FE:C0:E4:DB:96:3C:B8:01:F5:37:3A:C1:C5:3E:EE:80 Certificate issuer: /CN=8a9663d9-43e8-4ddb-be80-8316cf022a7a Certificate serial: 010D0C9F43285849ACA268D6FED87D795EDB7080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.mft Manifest number: 010D0C9F4328584073A84A89B5229808470A3261 Signing time: Mon 28 Apr 2025 09:00:03 +0000 Manifest this update: Mon 28 Apr 2025 09:00:03 +0000 Manifest next update: Wed 30 Apr 2025 09:00:00 +0000 Files and hashes: 1: 8a9663d9-43e8-4ddb-be80-8316cf022a7a.crl (hash: J4nvkMJCcbgFb3sPGzn76ky4/glotliOgl+M7cVSAn8=) 2: bb32bb6b-e68d-3f07-abe8-33529005d4da.roa (hash: K/W82ACAAR1k3hnx1U7/eNlBPf1OuMh1TqX4WJc0WbM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ac:a2:68:d6:fe:d8:7d:79:5e:db:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a9663d9-43e8-4ddb-be80-8316cf022a7a Validity Not Before: Apr 28 09:00:03 2025 GMT Not After : Apr 30 09:00:00 2025 GMT Subject: CN=ef3fe9fa-242f-4569-86f9-af3fd97ec9fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ec:6a:e9:92:ad:4e:f7:2b:13:06:64:23:83: 1e:a1:7c:f2:d5:24:ba:d9:0c:59:5b:18:47:f6:00: 91:4b:d7:d3:23:6f:f0:42:22:c7:95:b6:49:60:0a: fb:74:8e:c5:ee:d2:7e:5b:0e:cd:a2:ad:e9:83:86: 83:a5:20:69:2d:0c:fa:c4:af:8f:55:a7:5f:e6:58: de:17:7e:f9:d0:24:a0:1b:70:4f:e8:c2:f3:cd:a0: 99:81:6b:c4:52:35:1a:7b:c4:92:67:ef:e7:27:cd: 69:f4:b9:b7:5d:32:df:33:57:67:7b:bf:0b:ab:fe: 00:80:88:45:0b:36:5f:70:05:59:fe:88:71:3b:3e: 7c:13:23:7c:a5:d9:62:4f:47:6c:33:e6:13:c8:9a: c2:a1:7c:3a:fb:70:bd:09:34:93:66:9f:8e:02:2a: d9:96:bf:77:47:1f:10:d4:f9:26:c0:0d:3a:d6:89: 35:8a:36:90:88:60:b2:b3:15:0b:82:7a:d0:03:5b: 00:7c:46:cf:29:ea:75:69:65:83:e0:a7:45:16:5f: be:19:45:de:83:99:d5:47:09:ee:a8:4d:78:d5:89: 47:07:65:79:b0:ea:e3:27:40:bf:9d:e7:0e:a8:5c: e3:6a:83:50:55:34:47:a5:51:16:63:89:36:b4:42: f5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:20:5B:BF:B7:61:55:43:BC:CE:6C:95:4C:D9:9A:B7:5D:66:0F:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.crl X509v3 Authority Key Identifier: keyid:1E:DA:F3:05:FE:C0:E4:DB:96:3C:B8:01:F5:37:3A:C1:C5:3E:EE:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:f9:2b:04:f0:39:db:0e:50:3c:20:2b:36:fe:68:2e:98:1d: 66:ea:cf:2c:1b:b7:0c:01:6f:cc:ca:21:34:e4:51:2e:7b:e6: 77:95:3f:18:b7:0c:cc:97:9a:f8:99:55:cc:f5:8b:e5:ea:8e: 22:bc:a9:d4:04:f5:7e:21:12:c8:d6:41:f7:a0:9e:31:58:5c: 08:e7:b4:c8:97:77:61:26:a8:03:e5:c5:1c:46:30:e3:63:cd: 34:51:85:85:44:49:4d:a8:55:77:20:dd:b4:72:55:ef:56:cb: 43:72:f7:fe:cc:63:b3:01:73:4a:e8:23:70:f8:15:4f:f8:a4: 63:4e:51:81:9c:a3:46:c1:e1:28:b4:b3:d1:e9:4c:12:35:e0: 18:73:dc:f2:c0:ff:d5:bd:a0:aa:7a:2b:a7:a4:93:d4:2b:fc: 1f:e3:7f:99:29:5a:09:93:da:fe:1d:b4:06:35:6c:d6:eb:92: 32:a3:a3:dc:e9:8a:77:14:ac:b3:df:9b:a3:e5:60:0a:9e:d8: 27:9d:a7:e5:d0:1e:0f:dd:0d:f5:c7:17:6f:76:e7:06:3d:17: dd:41:c4:5a:e9:66:75:81:1b:ac:ad:42:9f:ee:0f:36:74:66: 1f:91:eb:ce:a1:b8:59:8d:7f:37:74:e6:bb:31:08:b6:d1:50: 7c:93:2e:61 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmsomjW/th9eV7bcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE5NjYzZDktNDNlOC00ZGRiLWJlODAtODMxNmNmMDIy YTdhMB4XDTI1MDQyODA5MDAwM1oXDTI1MDQzMDA5MDAwMFowLzEtMCsGA1UEAxMk ZWYzZmU5ZmEtMjQyZi00NTY5LTg2ZjktYWYzZmQ5N2VjOWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuxq6ZKtTvcrEwZkI4MeoXzy1SS62QxZWxhH 9gCRS9fTI2/wQiLHlbZJYAr7dI7F7tJ+Ww7Noq3pg4aDpSBpLQz6xK+PVadf5lje F3750CSgG3BP6MLzzaCZgWvEUjUae8SSZ+/nJ81p9Lm3XTLfM1dne78Lq/4AgIhF CzZfcAVZ/ohxOz58EyN8pdliT0dsM+YTyJrCoXw6+3C9CTSTZp+OAirZlr93Rx8Q 1PkmwA061ok1ijaQiGCysxULgnrQA1sAfEbPKep1aWWD4KdFFl++GUXeg5nVRwnu qE141YlHB2V5sOrjJ0C/necOqFzjaoNQVTRHpVEWY4k2tEL1qQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL0gW7+3YVVDvM5slUzZmrddZg87MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84YTk2 NjNkOS00M2U4LTRkZGItYmU4MC04MzE2Y2YwMjJhN2EvOGE5NjYzZDktNDNlOC00 ZGRiLWJlODAtODMxNmNmMDIyYTdhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGE5NjYzZDktNDNlOC00ZGRiLWJl ODAtODMxNmNmMDIyYTdhLzhhOTY2M2Q5LTQzZTgtNGRkYi1iZTgwLTgzMTZjZjAy MmE3YS5jcmwwHwYDVR0jBBgwFoAUHtrzBf7A5NuWPLgB9Tc6wcU+7oAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84YTk2NjNkOS00M2U4LTRkZGItYmU4MC04MzE2 Y2YwMjJhN2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAh+SsE8DnbDlA8ICs2/mgu mB1m6s8sG7cMAW/MyiE05FEue+Z3lT8YtwzMl5r4mVXM9Yvl6o4ivKnUBPV+IRLI 1kH3oJ4xWFwI57TIl3dhJqgD5cUcRjDjY800UYWFRElNqFV3IN20clXvVstDcvf+ zGOzAXNK6CNw+BVP+KRjTlGBnKNGweEotLPR6UwSNeAYc9zywP/VvaCqeiunpJPU K/wf43+ZKVoJk9r+HbQGNWzW65Iyo6Pc6Yp3FKyz35uj5WAKntgnnafl0B4P3Q31 xxdvducGPRfdQcRa6WZ1gRusrUKf7g82dGYfkevOobhZjX83dOa7MQi20VB8ky5h -----END CERTIFICATE-----Generated at Tue Apr 29 09:48:01 2025 by rpki-client