$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc4b73f9-c69f-44fa-93bd-d153e29d02ea/bc4b73f9-c69f-44fa-93bd-d153e29d02ea.mft File: bc4b73f9-c69f-44fa-93bd-d153e29d02ea.mft (raw, json) Hash identifier: In9cQ1SYaGogRWcroKCgWcPHDvfoLBmWu8WbZ8Z4/NI= Subject key identifier: 17:73:0C:79:91:D6:76:B9:94:3D:04:AE:2A:BA:71:1E:B7:B4:A3:92 Authority key identifier: B4:7C:B3:9B:23:EC:37:AD:82:F4:DD:0A:41:31:9A:CA:F6:89:5B:F1 Certificate issuer: /CN=bc4b73f9-c69f-44fa-93bd-d153e29d02ea Certificate serial: 010D0C9F43285849AEBA6BEBC0B666C37C456710 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc4b73f9-c69f-44fa-93bd-d153e29d02ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc4b73f9-c69f-44fa-93bd-d153e29d02ea/bc4b73f9-c69f-44fa-93bd-d153e29d02ea.mft Manifest number: 010D0C9F43285843B216D267554D9F725E032F72 Signing time: Tue 29 Apr 2025 03:00:03 +0000 Manifest this update: Tue 29 Apr 2025 03:00:03 +0000 Manifest next update: Thu 01 May 2025 03:00:00 +0000 Files and hashes: 1: 26115400-1731-3ee0-91d7-565246ab2b6e.roa (hash: mjJspwE4ElFd3URKOxCXSIUH7dqPbxvOfn2Wvr+Uhyc=) 2: bc4b73f9-c69f-44fa-93bd-d153e29d02ea.crl (hash: lwOXhHbcZj8lL6e7t4uMrkL5gZE6Nb5uD4PWibPlMo4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc4b73f9-c69f-44fa-93bd-d153e29d02ea/bc4b73f9-c69f-44fa-93bd-d153e29d02ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc4b73f9-c69f-44fa-93bd-d153e29d02ea/bc4b73f9-c69f-44fa-93bd-d153e29d02ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc4b73f9-c69f-44fa-93bd-d153e29d02ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ae:ba:6b:eb:c0:b6:66:c3:7c:45:67:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc4b73f9-c69f-44fa-93bd-d153e29d02ea Validity Not Before: Apr 29 03:00:03 2025 GMT Not After : May 1 03:00:00 2025 GMT Subject: CN=635a5b3a-29c6-43db-b7ac-4951841c4d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8b:71:f5:60:98:69:bc:6d:d1:0f:67:2c:b9: 56:53:51:29:eb:6a:53:2b:46:b3:b7:20:f1:70:fe: 8a:b7:cc:88:03:90:08:a0:67:c3:ad:2b:b1:86:39: 77:53:cd:3f:45:a7:42:24:a0:33:7d:bf:d4:10:28: 21:af:42:5d:14:b3:6a:fa:ac:a8:2b:9b:6b:ea:88: 0b:10:d5:96:60:29:2d:5b:4f:19:29:d9:1a:16:e2: 05:7e:43:0f:c6:60:4a:96:e1:7e:0c:3f:11:b4:2b: 87:e2:ef:91:9c:29:be:2f:a8:5d:71:a1:2f:e9:83: a0:af:b5:4e:50:06:3e:45:45:ba:06:80:e3:ab:a6: 80:a3:f2:fd:db:1c:a6:2a:61:04:5d:6e:32:d5:e5: 7e:9c:b9:b7:21:56:85:2a:3b:67:ca:d2:3d:bf:c3: 84:2c:e4:a0:51:22:20:eb:1d:9d:76:1f:33:3e:1c: fb:30:17:ec:91:c7:13:4c:26:0e:e6:00:6b:88:22: 36:14:97:73:af:9e:f2:34:ce:b7:19:27:5c:97:a1: 5a:ed:00:22:4e:18:46:0b:23:14:98:98:61:48:b0: 54:89:7e:f6:89:88:11:bf:c1:b4:b1:f2:1f:be:4b: 72:b8:4a:4a:e7:f7:4c:e7:7d:90:23:38:af:db:ed: a1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:73:0C:79:91:D6:76:B9:94:3D:04:AE:2A:BA:71:1E:B7:B4:A3:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc4b73f9-c69f-44fa-93bd-d153e29d02ea/bc4b73f9-c69f-44fa-93bd-d153e29d02ea.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc4b73f9-c69f-44fa-93bd-d153e29d02ea/bc4b73f9-c69f-44fa-93bd-d153e29d02ea.crl X509v3 Authority Key Identifier: keyid:B4:7C:B3:9B:23:EC:37:AD:82:F4:DD:0A:41:31:9A:CA:F6:89:5B:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc4b73f9-c69f-44fa-93bd-d153e29d02ea.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:e4:a3:a5:5e:2c:83:b8:fa:2d:16:0a:b3:37:5c:a8:d3:fe: 36:6e:e8:5b:cb:4c:ba:9e:b2:84:3d:ee:51:48:7a:c2:47:14: 3e:bf:cd:a1:a8:d8:74:4d:7d:79:18:d1:b2:0d:29:ac:82:67: ad:3c:c2:bf:43:21:4c:d8:76:f0:ba:e0:5a:0c:09:65:a6:8d: 53:3f:c0:e9:cd:86:28:dd:3f:1d:95:fa:5d:49:62:7b:1e:4e: 7f:38:bf:e5:5d:bb:20:fd:e6:55:ce:55:ea:26:5f:9c:85:80: a4:8f:d2:fb:f1:a0:25:59:f6:98:c2:fd:20:00:fa:38:30:72: c8:b4:34:42:7c:7a:c7:1b:b0:88:60:6e:51:ea:70:97:d3:3d: 66:2f:b3:72:9f:6e:a7:36:6b:6e:7b:fb:61:24:81:79:6d:6a: 8a:3b:f5:48:ad:18:2a:21:f0:e6:aa:a6:58:d4:25:2e:1d:27: d3:4b:db:f3:64:d8:95:c9:93:64:f1:95:a1:7e:b0:72:96:5a: ed:46:f2:a5:8e:bc:bd:a7:0b:e9:ca:ee:8d:7a:9c:af:16:9a: 01:09:b1:0e:d0:71:dd:40:83:29:a2:ef:80:39:c6:1b:72:65: 99:ee:d3:65:27:df:b9:89:0f:07:53:80:9d:17:21:a4:5d:50: 84:81:a3:20 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmuumvrwLZmw3xFZxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmM0YjczZjktYzY5Zi00NGZhLTkzYmQtZDE1M2UyOWQw MmVhMB4XDTI1MDQyOTAzMDAwM1oXDTI1MDUwMTAzMDAwMFowLzEtMCsGA1UEAxMk NjM1YTViM2EtMjljNi00M2RiLWI3YWMtNDk1MTg0MWM0ZDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqotx9WCYabxt0Q9nLLlWU1Ep62pTK0aztyDx cP6Kt8yIA5AIoGfDrSuxhjl3U80/RadCJKAzfb/UECghr0JdFLNq+qyoK5tr6ogL ENWWYCktW08ZKdkaFuIFfkMPxmBKluF+DD8RtCuH4u+RnCm+L6hdcaEv6YOgr7VO UAY+RUW6BoDjq6aAo/L92xymKmEEXW4y1eV+nLm3IVaFKjtnytI9v8OELOSgUSIg 6x2ddh8zPhz7MBfskccTTCYO5gBriCI2FJdzr57yNM63GSdcl6Fa7QAiThhGCyMU mJhhSLBUiX72iYgRv8G0sfIfvktyuEpK5/dM532QIziv2+2h8QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBdzDHmR1na5lD0Eriq6cR63tKOSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iYzRi NzNmOS1jNjlmLTQ0ZmEtOTNiZC1kMTUzZTI5ZDAyZWEvYmM0YjczZjktYzY5Zi00 NGZhLTkzYmQtZDE1M2UyOWQwMmVhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmM0YjczZjktYzY5Zi00NGZhLTkz YmQtZDE1M2UyOWQwMmVhL2JjNGI3M2Y5LWM2OWYtNDRmYS05M2JkLWQxNTNlMjlk MDJlYS5jcmwwHwYDVR0jBBgwFoAUtHyzmyPsN62C9N0KQTGayvaJW/EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iYzRiNzNmOS1jNjlmLTQ0ZmEtOTNiZC1kMTUz ZTI5ZDAyZWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBx5KOlXiyDuPotFgqzN1yo 0/42buhby0y6nrKEPe5RSHrCRxQ+v82hqNh0TX15GNGyDSmsgmetPMK/QyFM2Hbw uuBaDAllpo1TP8DpzYYo3T8dlfpdSWJ7Hk5/OL/lXbsg/eZVzlXqJl+chYCkj9L7 8aAlWfaYwv0gAPo4MHLItDRCfHrHG7CIYG5R6nCX0z1mL7Nyn26nNmtue/thJIF5 bWqKO/VIrRgqIfDmqqZY1CUuHSfTS9vzZNiVyZNk8ZWhfrByllrtRvKljry9pwvp yu6NepyvFpoBCbEO0HHdQIMpou+AOcYbcmWZ7tNlJ9+5iQ8HU4CdFyGkXVCEgaMg -----END CERTIFICATE-----Generated at Wed Apr 30 00:09:33 2025 by rpki-client