$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft File: 3a86f711-5e97-4a68-9b21-940a312b854a.mft (raw, json) Hash identifier: RfsQLe/GdfdNvyVNtrSBfSn1baX+49LUczYN/AoKtL0= Subject key identifier: 48:A2:43:ED:F1:C2:92:56:9D:76:BA:40:A1:4E:24:17:82:B0:32:11 Authority key identifier: D3:F6:F7:C7:D5:CB:2F:40:EA:DE:48:27:9A:35:C5:AA:11:11:F8:55 Certificate issuer: /CN=3a86f711-5e97-4a68-9b21-940a312b854a Certificate serial: 010D0C9F43285849B2911DCF457BE488EBFAC900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft Manifest number: 010D0C9F4328584988B6CEF62A3C901C9E4B5FB9 Signing time: Wed 30 Apr 2025 12:00:03 +0000 Manifest this update: Wed 30 Apr 2025 12:00:03 +0000 Manifest next update: Fri 02 May 2025 12:00:00 +0000 Files and hashes: 1: 341487ac-a3e5-383d-bb5e-c10826c39192.roa (hash: HnHuSukrJeUg0RxaKhsKvUcH0awxWXLzfnu/EJ5QZnY=) 2: 3a86f711-5e97-4a68-9b21-940a312b854a.crl (hash: 0R6mJpiOAGzB2NdJdfNi55EM29aAQBH9La2BYztiZ60=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b2:91:1d:cf:45:7b:e4:88:eb:fa:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a86f711-5e97-4a68-9b21-940a312b854a Validity Not Before: Apr 30 12:00:03 2025 GMT Not After : May 2 12:00:00 2025 GMT Subject: CN=9b5a1a93-f2c7-4518-b0fc-710b32e73541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:74:01:04:49:5f:81:58:d8:7a:ea:72:73:2a: f9:9a:c2:45:aa:45:93:73:29:dc:dd:66:6f:ed:54: af:25:a2:df:0f:b8:a1:7a:69:2b:2e:a9:b8:73:7d: 3d:37:59:f4:ee:42:fe:f4:47:0f:46:7e:ff:f9:69: 9d:50:99:29:03:df:1a:31:df:a7:12:4d:dd:33:aa: 70:8b:a4:f2:53:10:4a:8f:82:ef:47:b8:6a:f7:34: c4:07:f0:4b:d9:fd:e5:41:9e:dc:db:60:3b:69:3e: f4:d7:e5:32:34:21:85:d2:bd:70:c7:1a:a6:1e:30: c9:06:04:a2:0e:aa:12:d3:7e:23:b2:4d:4f:61:7a: 3b:d0:87:4d:c7:60:34:eb:55:ed:c2:ad:13:26:5f: 97:63:3a:cb:c0:77:e9:ee:dc:82:c5:49:3e:81:52: fb:3f:99:d7:40:48:eb:6a:a3:64:42:28:0a:52:dd: 3f:62:70:1b:7f:96:17:0d:53:df:2e:07:24:ec:50: 50:f2:73:94:cf:91:be:fa:2a:05:c9:1c:68:cc:9c: d5:52:d6:75:13:01:fe:d6:f9:59:7e:a0:fc:64:0e: 5f:04:64:fa:31:c9:58:94:f5:ae:83:00:d3:f0:0f: b4:11:a2:ae:9d:f9:e2:72:ae:db:36:5e:7c:66:78: 8f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:A2:43:ED:F1:C2:92:56:9D:76:BA:40:A1:4E:24:17:82:B0:32:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.crl X509v3 Authority Key Identifier: keyid:D3:F6:F7:C7:D5:CB:2F:40:EA:DE:48:27:9A:35:C5:AA:11:11:F8:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:e2:56:26:f0:07:8a:71:8c:21:6a:6b:cc:4c:8c:48:eb:80: 6d:94:f3:c3:d4:10:fd:21:56:3e:c8:a2:d5:f9:32:ff:0e:ba: de:52:6b:7d:e4:48:e0:3c:20:03:9c:f1:13:41:7c:d0:c9:e8: 92:47:27:db:69:71:91:45:cf:6e:15:12:e4:51:f4:01:04:3f: e1:03:e1:6d:dd:93:05:c9:4a:af:83:18:94:a1:23:97:69:6b: 5e:fe:6b:89:29:7a:67:a6:38:22:d8:b1:b7:6b:16:13:e3:18: 7d:f3:6f:fa:70:1c:51:12:de:d4:e4:e3:ef:30:d6:c6:15:f6: 39:0d:54:e1:94:22:7c:bb:1b:b5:fa:2d:9a:32:0b:25:53:78: a1:94:61:9a:6b:8b:cd:a6:bc:ef:1b:84:32:79:de:b9:c3:83: 4e:2e:e2:a1:f9:af:b6:68:3f:15:94:27:5d:f4:fa:39:ad:ca: e5:96:77:23:81:16:8e:9e:66:98:4c:87:22:d6:cb:09:0c:8c: 65:05:20:cb:99:05:e3:5e:82:70:8f:65:15:38:62:f9:db:bc: ca:c0:95:9b:4a:91:7b:6c:51:b8:a0:31:06:3e:5a:07:42:a2: 49:70:48:f0:90:59:14:58:96:6a:6f:d6:3d:5d:16:38:a0:ff: 7e:dd:3b:b4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmykR3PRXvkiOv6yQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E4NmY3MTEtNWU5Ny00YTY4LTliMjEtOTQwYTMxMmI4 NTRhMB4XDTI1MDQzMDEyMDAwM1oXDTI1MDUwMjEyMDAwMFowLzEtMCsGA1UEAxMk OWI1YTFhOTMtZjJjNy00NTE4LWIwZmMtNzEwYjMyZTczNTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknQBBElfgVjYeupycyr5msJFqkWTcync3WZv 7VSvJaLfD7ihemkrLqm4c309N1n07kL+9EcPRn7/+WmdUJkpA98aMd+nEk3dM6pw i6TyUxBKj4LvR7hq9zTEB/BL2f3lQZ7c22A7aT701+UyNCGF0r1wxxqmHjDJBgSi DqoS034jsk1PYXo70IdNx2A061Xtwq0TJl+XYzrLwHfp7tyCxUk+gVL7P5nXQEjr aqNkQigKUt0/YnAbf5YXDVPfLgck7FBQ8nOUz5G++ioFyRxozJzVUtZ1EwH+1vlZ fqD8ZA5fBGT6MclYlPWugwDT8A+0EaKunfnicq7bNl58ZniPzQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEiiQ+3xwpJWnXa6QKFOJBeCsDIRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYTg2 ZjcxMS01ZTk3LTRhNjgtOWIyMS05NDBhMzEyYjg1NGEvM2E4NmY3MTEtNWU5Ny00 YTY4LTliMjEtOTQwYTMxMmI4NTRhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2E4NmY3MTEtNWU5Ny00YTY4LTli MjEtOTQwYTMxMmI4NTRhLzNhODZmNzExLTVlOTctNGE2OC05YjIxLTk0MGEzMTJi ODU0YS5jcmwwHwYDVR0jBBgwFoAU0/b3x9XLL0Dq3kgnmjXFqhER+FUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYTg2ZjcxMS01ZTk3LTRhNjgtOWIyMS05NDBh MzEyYjg1NGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAt4lYm8AeKcYwhamvMTIxI 64BtlPPD1BD9IVY+yKLV+TL/DrreUmt95EjgPCADnPETQXzQyeiSRyfbaXGRRc9u FRLkUfQBBD/hA+Ft3ZMFyUqvgxiUoSOXaWte/muJKXpnpjgi2LG3axYT4xh982/6 cBxREt7U5OPvMNbGFfY5DVThlCJ8uxu1+i2aMgslU3ihlGGaa4vNprzvG4Qyed65 w4NOLuKh+a+2aD8VlCdd9Po5rcrllncjgRaOnmaYTIci1ssJDIxlBSDLmQXjXoJw j2UVOGL527zKwJWbSpF7bFG4oDEGPloHQqJJcEjwkFkUWJZqb9Y9XRY4oP9+3Tu0 -----END CERTIFICATE-----Generated at Thu May 1 12:52:58 2025 by rpki-client