$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d7de7549-2ecf-40a7-a647-522e9d5a31d5/d7de7549-2ecf-40a7-a647-522e9d5a31d5.mft File: d7de7549-2ecf-40a7-a647-522e9d5a31d5.mft (raw, json) Hash identifier: JpoozoQd7iHPc+hVOAXEvLi2kF70ajRYstR0K+3aXzs= Subject key identifier: D6:85:82:2A:B4:DE:87:73:19:10:CE:AD:7F:3A:25:42:CE:DB:0C:DD Authority key identifier: 47:6D:66:85:16:E8:A2:72:31:7E:34:8C:F8:D6:C0:4A:C8:C1:81:62 Certificate issuer: /CN=d7de7549-2ecf-40a7-a647-522e9d5a31d5 Certificate serial: 010D0C9F43285849ADCC3FEB2B0ECB7108E94E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d7de7549-2ecf-40a7-a647-522e9d5a31d5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d7de7549-2ecf-40a7-a647-522e9d5a31d5/d7de7549-2ecf-40a7-a647-522e9d5a31d5.mft Manifest number: 010D0C9F4328584073A8245D3BF2FEEA7E633B22 Signing time: Mon 28 Apr 2025 19:00:07 +0000 Manifest this update: Mon 28 Apr 2025 19:00:07 +0000 Manifest next update: Thu 01 May 2025 19:00:00 +0000 Files and hashes: 1: 189be362-95c5-327a-8198-88f52fcd56db.roa (hash: EcoPe6yi+aQWaotue/3BnEiW6UhrAXE8H3Kbm6jl8Gc=) 2: d7de7549-2ecf-40a7-a647-522e9d5a31d5.crl (hash: kfKfMNuRQ2tXAkZshekgeR84owsr6z9onfoENEaeE5k=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d7de7549-2ecf-40a7-a647-522e9d5a31d5/d7de7549-2ecf-40a7-a647-522e9d5a31d5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d7de7549-2ecf-40a7-a647-522e9d5a31d5/d7de7549-2ecf-40a7-a647-522e9d5a31d5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d7de7549-2ecf-40a7-a647-522e9d5a31d5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:cc:3f:eb:2b:0e:cb:71:08:e9:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7de7549-2ecf-40a7-a647-522e9d5a31d5 Validity Not Before: Apr 28 19:00:07 2025 GMT Not After : May 1 19:00:00 2025 GMT Subject: CN=4e37b7e1-daa1-49da-9083-f31a8acc2aad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:85:c1:e6:89:5b:fa:55:28:d6:e1:d2:dc:9c: 4e:72:71:7f:a2:30:03:66:cb:13:da:c3:1c:c4:d0: 0e:42:3b:20:fa:e6:84:50:d6:bf:b6:36:57:bc:62: 57:c4:0a:aa:fc:ba:5a:06:87:40:ce:37:c7:92:8a: f9:68:cd:64:96:58:49:29:c0:9a:39:d0:dc:2c:63: d0:c3:67:a1:10:02:62:27:73:87:f7:18:e2:19:d5: 5d:59:35:cd:eb:3a:d2:86:f9:eb:78:ea:fd:38:a3: 57:a4:54:98:6a:ab:00:6c:bb:41:49:8e:54:5f:fd: bc:ad:53:9d:71:79:9b:33:bf:06:9b:9d:e1:ca:b6: 88:3f:e8:58:3b:ef:ca:5c:f5:27:1e:c6:c2:79:d1: 06:94:c0:3f:0e:0c:2c:55:43:2e:ea:b8:13:a2:04: 98:43:50:67:95:ca:60:7f:8c:ac:bf:f8:37:b1:14: f4:46:20:2e:d3:7d:00:29:7e:9b:f5:8c:9d:07:a0: 5d:ee:01:53:f6:33:12:1d:c9:8f:3f:70:eb:58:5d: bd:e5:a7:d5:59:95:c3:ee:e0:36:d8:01:35:64:01: 41:ae:4f:42:2c:84:fc:0e:22:65:95:83:e6:c6:07: ea:1a:70:7c:d1:55:63:be:f1:99:e9:d8:8b:ea:14: c7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:85:82:2A:B4:DE:87:73:19:10:CE:AD:7F:3A:25:42:CE:DB:0C:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d7de7549-2ecf-40a7-a647-522e9d5a31d5/d7de7549-2ecf-40a7-a647-522e9d5a31d5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d7de7549-2ecf-40a7-a647-522e9d5a31d5/d7de7549-2ecf-40a7-a647-522e9d5a31d5.crl X509v3 Authority Key Identifier: keyid:47:6D:66:85:16:E8:A2:72:31:7E:34:8C:F8:D6:C0:4A:C8:C1:81:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d7de7549-2ecf-40a7-a647-522e9d5a31d5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:48:0e:0d:fa:68:40:b3:fc:e9:85:b8:0f:67:11:55:9c:7d: 9d:c1:b3:65:f4:d1:39:4b:97:03:30:71:27:d5:f9:8c:a0:ba: 64:67:59:c3:fc:bd:26:8d:7e:60:5e:f5:d8:33:f1:bf:11:65: df:51:37:2d:07:c7:67:61:9b:a0:d0:85:12:7e:eb:e4:aa:db: 1c:04:a5:4b:dc:04:28:67:61:07:61:d2:37:f8:81:cb:8c:5e: 42:70:66:e9:ff:95:ea:2b:2f:a0:2f:69:18:2c:51:ff:02:b5: 32:f0:94:e7:ff:0b:51:91:d9:7c:51:0c:42:19:58:0b:58:13: 5e:60:ea:45:12:f9:15:c3:0e:7f:ee:fb:5a:fc:7a:06:86:43: f0:8d:ea:66:d4:7e:1c:49:55:3d:41:8b:17:5e:f4:9c:29:ee: 8c:84:79:8e:d0:b9:5a:24:14:6a:4a:17:71:ec:98:f8:4e:01: 7b:b3:79:18:1b:b5:00:b8:1d:10:88:8b:b1:9b:ba:7b:c0:00: 2b:8b:ec:2d:3c:25:c4:e1:26:a3:19:2a:26:f8:36:de:84:79: 3e:70:1d:0c:04:71:9e:7a:80:db:45:03:13:3c:9f:72:43:5d: 7b:e9:51:73:d8:89:03:8e:81:d6:7d:28:72:de:ac:0d:c5:90: c8:7b:6e:27 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmtzD/rKw7LcQjpToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkZTc1NDktMmVjZi00MGE3LWE2NDctNTIyZTlkNWEz MWQ1MB4XDTI1MDQyODE5MDAwN1oXDTI1MDUwMTE5MDAwMFowLzEtMCsGA1UEAxMk NGUzN2I3ZTEtZGFhMS00OWRhLTkwODMtZjMxYThhY2MyYWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoXB5olb+lUo1uHS3JxOcnF/ojADZssT2sMc xNAOQjsg+uaEUNa/tjZXvGJXxAqq/LpaBodAzjfHkor5aM1kllhJKcCaOdDcLGPQ w2ehEAJiJ3OH9xjiGdVdWTXN6zrShvnreOr9OKNXpFSYaqsAbLtBSY5UX/28rVOd cXmbM78Gm53hyraIP+hYO+/KXPUnHsbCedEGlMA/DgwsVUMu6rgTogSYQ1Bnlcpg f4ysv/g3sRT0RiAu030AKX6b9YydB6Bd7gFT9jMSHcmPP3DrWF295afVWZXD7uA2 2AE1ZAFBrk9CLIT8DiJllYPmxgfqGnB80VVjvvGZ6diL6hTHGQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNaFgiq03odzGRDOrX86JULO2wzdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kN2Rl NzU0OS0yZWNmLTQwYTctYTY0Ny01MjJlOWQ1YTMxZDUvZDdkZTc1NDktMmVjZi00 MGE3LWE2NDctNTIyZTlkNWEzMWQ1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDdkZTc1NDktMmVjZi00MGE3LWE2 NDctNTIyZTlkNWEzMWQ1L2Q3ZGU3NTQ5LTJlY2YtNDBhNy1hNjQ3LTUyMmU5ZDVh MzFkNS5jcmwwHwYDVR0jBBgwFoAUR21mhRboonIxfjSM+NbASsjBgWIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kN2RlNzU0OS0yZWNmLTQwYTctYTY0Ny01MjJl OWQ1YTMxZDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQASSA4N+mhAs/zphbgPZxFV nH2dwbNl9NE5S5cDMHEn1fmMoLpkZ1nD/L0mjX5gXvXYM/G/EWXfUTctB8dnYZug 0IUSfuvkqtscBKVL3AQoZ2EHYdI3+IHLjF5CcGbp/5XqKy+gL2kYLFH/ArUy8JTn /wtRkdl8UQxCGVgLWBNeYOpFEvkVww5/7vta/HoGhkPwjepm1H4cSVU9QYsXXvSc Ke6MhHmO0LlaJBRqShdx7Jj4TgF7s3kYG7UAuB0QiIuxm7p7wAAri+wtPCXE4Saj GSom+DbehHk+cB0MBHGeeoDbRQMTPJ9yQ1176VFz2IkDjoHWfShy3qwNxZDIe24n -----END CERTIFICATE-----Generated at Tue Apr 29 19:37:49 2025 by rpki-client