$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5d74f046-ba55-4b61-bccd-7e10e81264d1/5d74f046-ba55-4b61-bccd-7e10e81264d1.mft File: 5d74f046-ba55-4b61-bccd-7e10e81264d1.mft (raw, json) Hash identifier: hICvWQJlEaopkw9Rg7JvemOUxwh/Lg7V3SdiH+0lrds= Subject key identifier: 07:C4:A8:2C:56:9F:11:02:BD:FA:95:F0:C3:CD:64:66:31:D4:E5:51 Authority key identifier: F5:AB:72:16:18:00:24:6C:81:77:5F:5F:68:E5:21:2A:70:97:9F:60 Certificate issuer: /CN=5d74f046-ba55-4b61-bccd-7e10e81264d1 Certificate serial: 010D0C9F43285849AD55150AE26F50945330C880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5d74f046-ba55-4b61-bccd-7e10e81264d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5d74f046-ba55-4b61-bccd-7e10e81264d1/5d74f046-ba55-4b61-bccd-7e10e81264d1.mft Manifest number: 010D0C9F43285840FF12A11CD56F233FF4DD2570 Signing time: Mon 28 Apr 2025 15:00:03 +0000 Manifest this update: Mon 28 Apr 2025 15:00:03 +0000 Manifest next update: Thu 01 May 2025 15:00:00 +0000 Files and hashes: 1: 5d74f046-ba55-4b61-bccd-7e10e81264d1.crl (hash: qfuWx6+2FAjTmOwvILfUY3lcDfHPn8hcys2nL+zVlJQ=) 2: a41580dd-b7f0-3cec-be2d-a4e9623d6497.roa (hash: 3ohPuTigSb7dhAi5NGbPTlII2W2insh8fZ68bW2kwQ8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5d74f046-ba55-4b61-bccd-7e10e81264d1/5d74f046-ba55-4b61-bccd-7e10e81264d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5d74f046-ba55-4b61-bccd-7e10e81264d1/5d74f046-ba55-4b61-bccd-7e10e81264d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5d74f046-ba55-4b61-bccd-7e10e81264d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:55:15:0a:e2:6f:50:94:53:30:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d74f046-ba55-4b61-bccd-7e10e81264d1 Validity Not Before: Apr 28 15:00:03 2025 GMT Not After : May 1 15:00:00 2025 GMT Subject: CN=997a60a3-5a4f-4dbb-a2a6-b003fea07adf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:12:1d:a7:a9:aa:81:eb:d4:4f:f9:25:11:33: f7:ef:e5:c4:b6:4e:ac:99:68:81:a4:d7:49:a4:c6: d2:16:3a:67:de:f0:dd:ea:21:ec:99:b5:64:fa:6b: c4:fb:3d:3a:f7:27:69:1a:33:a7:d0:e2:12:e8:a6: ff:82:53:85:80:f1:5e:88:87:54:c5:f7:20:48:e6: d6:b3:66:30:c4:3c:17:03:5f:6a:fd:93:4a:e1:78: ca:c5:ee:25:5c:ef:f3:42:f1:4f:6f:44:1b:c6:ff: 26:d8:67:dc:27:72:95:8e:2b:04:03:65:3e:57:5c: de:d2:c9:38:2f:ee:bb:ca:e0:4e:e9:7d:1f:37:9a: 9c:42:b3:70:12:01:a2:29:d7:10:b9:80:96:d3:2f: 8e:ab:b5:65:05:6e:1d:8c:17:c6:45:ab:e8:9a:20: 10:95:b8:b2:7f:64:29:bf:cb:d1:75:4c:a4:ad:45: 5c:df:b6:98:9d:98:01:32:40:13:3a:4c:8b:31:95: f6:4c:7f:8c:9c:0b:ec:ed:88:09:f6:63:fc:d5:ad: 44:87:d4:9e:35:9a:d0:1e:91:e6:f2:d0:72:8b:43: c1:b4:e6:94:36:e8:3d:f5:43:f7:8f:4e:49:d0:91: 88:f5:f2:b9:38:d5:ad:2b:e1:15:61:34:a2:3e:b4: b9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C4:A8:2C:56:9F:11:02:BD:FA:95:F0:C3:CD:64:66:31:D4:E5:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5d74f046-ba55-4b61-bccd-7e10e81264d1/5d74f046-ba55-4b61-bccd-7e10e81264d1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5d74f046-ba55-4b61-bccd-7e10e81264d1/5d74f046-ba55-4b61-bccd-7e10e81264d1.crl X509v3 Authority Key Identifier: keyid:F5:AB:72:16:18:00:24:6C:81:77:5F:5F:68:E5:21:2A:70:97:9F:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5d74f046-ba55-4b61-bccd-7e10e81264d1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:3a:7f:f6:6d:5e:b2:39:29:5a:da:66:0e:53:dc:3c:00:3c: 82:4e:4b:79:eb:a1:32:00:73:f3:78:7a:b1:eb:9a:4c:5c:cd: 11:76:14:3b:06:2e:7b:8c:8d:fd:e4:5a:c7:3e:ba:23:c0:78: c4:f1:cf:65:e3:fb:d1:dd:a1:6e:1e:9a:a0:72:a2:3f:47:b0: 6e:fe:7e:aa:af:f4:b9:99:c6:9c:c9:32:85:04:4e:e5:13:7f: af:37:96:3b:b3:52:9e:ed:43:0f:b9:4f:a6:c3:24:9d:a1:f4: 1f:af:6f:dd:b8:38:a8:1d:b4:9d:d5:67:9c:b2:33:4d:29:35: 6a:09:ae:a6:63:2f:7c:62:b1:79:83:f8:3a:7e:97:f9:85:f2: 25:57:51:b7:db:fc:9d:91:26:4b:e3:45:1a:f4:95:55:32:54: 93:1a:5b:6b:3f:23:1d:bd:ea:bb:07:ae:14:9b:74:24:4f:c2: 8d:f1:e5:68:d7:98:28:4e:f5:7c:88:05:03:fc:1a:98:e0:7c: 3f:83:ac:48:4f:93:78:18:06:19:72:cf:a7:df:5c:e3:50:13: 2c:0c:f1:97:e7:7f:74:24:7b:f4:a2:cf:ae:64:21:d3:48:f8: 78:ab:76:77:c0:98:c0:84:a8:66:bf:c8:6d:87:fa:02:35:6a: 5e:7c:ba:05 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmtVRUK4m9QlFMwyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ3NGYwNDYtYmE1NS00YjYxLWJjY2QtN2UxMGU4MTI2 NGQxMB4XDTI1MDQyODE1MDAwM1oXDTI1MDUwMTE1MDAwMFowLzEtMCsGA1UEAxMk OTk3YTYwYTMtNWE0Zi00ZGJiLWEyYTYtYjAwM2ZlYTA3YWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRIdp6mqgevUT/klETP37+XEtk6smWiBpNdJ pMbSFjpn3vDd6iHsmbVk+mvE+z069ydpGjOn0OIS6Kb/glOFgPFeiIdUxfcgSObW s2YwxDwXA19q/ZNK4XjKxe4lXO/zQvFPb0Qbxv8m2GfcJ3KVjisEA2U+V1ze0sk4 L+67yuBO6X0fN5qcQrNwEgGiKdcQuYCW0y+Oq7VlBW4djBfGRavomiAQlbiyf2Qp v8vRdUykrUVc37aYnZgBMkATOkyLMZX2TH+MnAvs7YgJ9mP81a1Eh9SeNZrQHpHm 8tByi0PBtOaUNug99UP3j05J0JGI9fK5ONWtK+EVYTSiPrS5twIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAfEqCxWnxECvfqV8MPNZGYx1OVRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81ZDc0 ZjA0Ni1iYTU1LTRiNjEtYmNjZC03ZTEwZTgxMjY0ZDEvNWQ3NGYwNDYtYmE1NS00 YjYxLWJjY2QtN2UxMGU4MTI2NGQxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWQ3NGYwNDYtYmE1NS00YjYxLWJj Y2QtN2UxMGU4MTI2NGQxLzVkNzRmMDQ2LWJhNTUtNGI2MS1iY2NkLTdlMTBlODEy NjRkMS5jcmwwHwYDVR0jBBgwFoAU9atyFhgAJGyBd19faOUhKnCXn2AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81ZDc0ZjA0Ni1iYTU1LTRiNjEtYmNjZC03ZTEw ZTgxMjY0ZDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAXOn/2bV6yOSla2mYOU9w8 ADyCTkt566EyAHPzeHqx65pMXM0RdhQ7Bi57jI395FrHProjwHjE8c9l4/vR3aFu HpqgcqI/R7Bu/n6qr/S5mcacyTKFBE7lE3+vN5Y7s1Ke7UMPuU+mwySdofQfr2/d uDioHbSd1WecsjNNKTVqCa6mYy98YrF5g/g6fpf5hfIlV1G32/ydkSZL40Ua9JVV MlSTGltrPyMdveq7B64Um3QkT8KN8eVo15goTvV8iAUD/BqY4Hw/g6xIT5N4GAYZ cs+n31zjUBMsDPGX5390JHv0os+uZCHTSPh4q3Z3wJjAhKhmv8hth/oCNWpefLoF -----END CERTIFICATE-----Generated at Tue Apr 29 09:39:26 2025 by rpki-client