$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.mft File: 71fff491-7667-44b2-bd66-cb5aeb51a394.mft (raw, json) Hash identifier: t5kHr8v6jIJGpzyGYLf7n2YjjxjQiN4pixIxWVE6lXc= Subject key identifier: AF:61:28:74:E4:19:CF:6A:96:6C:D6:89:37:23:2E:2A:83:83:14:FC Authority key identifier: 05:EC:1F:A7:91:0F:A2:4E:58:50:9F:7E:D2:74:35:E4:05:35:B5:F8 Certificate issuer: /CN=71fff491-7667-44b2-bd66-cb5aeb51a394 Certificate serial: 010D0C9F43285849B9A9A3C4A69314CBC0699300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.mft Manifest number: 010D0C9F432858498FD2459324F7C67623684B90 Signing time: Sat 03 May 2025 01:00:07 +0000 Manifest this update: Sat 03 May 2025 01:00:07 +0000 Manifest next update: Mon 05 May 2025 01:00:00 +0000 Files and hashes: 1: 048aa03a-d6ce-37bd-8455-177c3fe11c3b.roa (hash: p5/LFQtwRPjOsz2047MOm/Nkj7+OciwSl45q0IGqP+4=) 2: 71fff491-7667-44b2-bd66-cb5aeb51a394.crl (hash: YXq1VcyTi+KNBKFmfkg589NDCGm1tdgUzqBztUx1FmM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:a9:a3:c4:a6:93:14:cb:c0:69:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71fff491-7667-44b2-bd66-cb5aeb51a394 Validity Not Before: May 3 01:00:07 2025 GMT Not After : May 5 01:00:00 2025 GMT Subject: CN=3fcd4ba1-c714-49c4-9337-320f9b54d589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ef:c1:12:3a:89:49:4a:aa:1a:65:96:e3:b3: 37:03:4a:8b:61:97:63:f2:61:aa:b3:9d:f1:f3:1c: 14:9a:59:15:a1:a5:8d:59:e2:79:13:36:0b:45:dd: 73:3e:94:aa:b9:1e:49:c0:bf:3d:cd:86:35:22:3e: 57:e7:7d:5c:1e:14:35:4a:36:f2:64:d2:00:0f:6e: 4c:82:b6:25:42:81:9b:80:36:1f:f1:01:a5:ec:0a: 16:84:59:55:bf:69:13:f3:c3:27:86:60:b8:e9:d4: 35:48:c3:11:b4:ea:fd:d1:d7:fc:b1:d2:53:8f:54: dd:66:03:49:44:06:86:bf:a1:2e:08:56:55:bc:6b: b4:0e:1e:18:02:4b:94:34:f7:8e:ce:1f:7f:6d:64: 59:97:66:27:33:28:db:76:f9:30:45:8e:4b:bf:62: b1:5c:c8:e9:94:c3:74:0f:a0:9a:a8:ed:3f:bb:71: 54:9e:b1:76:7a:f6:bf:1f:ec:e8:1d:40:d6:46:e1: 19:39:19:73:ca:85:9f:cf:59:da:a8:9f:a1:8f:c9: a6:60:a8:2a:2f:ce:22:96:44:4d:77:2a:87:5a:ad: 65:39:16:94:17:8e:8f:5a:07:ad:5b:e9:02:04:68: 94:08:16:45:73:a4:7e:52:76:5c:2a:8f:bd:87:69: 18:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:61:28:74:E4:19:CF:6A:96:6C:D6:89:37:23:2E:2A:83:83:14:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.crl X509v3 Authority Key Identifier: keyid:05:EC:1F:A7:91:0F:A2:4E:58:50:9F:7E:D2:74:35:E4:05:35:B5:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:ab:8b:de:bb:e6:15:cb:4f:70:dd:b8:66:7d:50:3d:97:f7: 62:cd:b6:5a:74:b0:19:23:16:93:86:e5:74:16:fd:42:57:1f: 4b:6b:9d:42:7a:b6:3b:ce:e7:40:fd:64:35:18:73:fb:a2:0d: 58:67:18:52:51:f4:df:4c:5f:22:36:41:f6:63:12:f6:6e:a3: de:da:1d:92:92:e6:85:9a:76:3f:fd:56:a2:fe:20:a2:5e:71: cf:e4:04:43:ca:da:11:69:78:04:6d:8f:72:fb:9f:78:9a:05: 5c:13:72:93:1f:cd:f2:97:ea:01:90:01:a2:55:1d:18:27:e3: f8:80:96:2e:b9:c6:b4:7f:57:d2:00:3a:3d:ee:9a:fa:43:a8: b8:d5:16:da:3f:7a:2e:b7:9a:93:a6:34:1d:75:9e:5b:8d:f7: 04:53:e3:08:b6:bc:9c:85:00:10:98:e0:62:b2:37:0e:8b:1a: cb:ba:b1:2f:d5:5e:94:ea:7b:79:de:d0:1b:7f:46:75:bd:23: b5:7c:05:a2:de:81:58:66:cc:0e:70:f2:1b:e7:5a:99:e1:66: 72:1f:13:ea:31:ca:c7:05:79:fe:f6:b6:d8:b5:4c:5b:ad:f5: 2b:c6:b4:38:ae:df:00:d0:fb:1f:eb:90:b0:93:eb:a3:3f:a0: b1:97:c0:8e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEm5qaPEppMUy8BpkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFmZmY0OTEtNzY2Ny00NGIyLWJkNjYtY2I1YWViNTFh Mzk0MB4XDTI1MDUwMzAxMDAwN1oXDTI1MDUwNTAxMDAwMFowLzEtMCsGA1UEAxMk M2ZjZDRiYTEtYzcxNC00OWM0LTkzMzctMzIwZjliNTRkNTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+/BEjqJSUqqGmWW47M3A0qLYZdj8mGqs53x 8xwUmlkVoaWNWeJ5EzYLRd1zPpSquR5JwL89zYY1Ij5X531cHhQ1SjbyZNIAD25M grYlQoGbgDYf8QGl7AoWhFlVv2kT88MnhmC46dQ1SMMRtOr90df8sdJTj1TdZgNJ RAaGv6EuCFZVvGu0Dh4YAkuUNPeOzh9/bWRZl2YnMyjbdvkwRY5Lv2KxXMjplMN0 D6CaqO0/u3FUnrF2eva/H+zoHUDWRuEZORlzyoWfz1naqJ+hj8mmYKgqL84ilkRN dyqHWq1lORaUF46PWgetW+kCBGiUCBZFc6R+UnZcKo+9h2kY0QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFK9hKHTkGc9qlmzWiTcjLiqDgxT8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy83MWZm ZjQ5MS03NjY3LTQ0YjItYmQ2Ni1jYjVhZWI1MWEzOTQvNzFmZmY0OTEtNzY2Ny00 NGIyLWJkNjYtY2I1YWViNTFhMzk0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNzFmZmY0OTEtNzY2Ny00NGIyLWJk NjYtY2I1YWViNTFhMzk0LzcxZmZmNDkxLTc2NjctNDRiMi1iZDY2LWNiNWFlYjUx YTM5NC5jcmwwHwYDVR0jBBgwFoAUBewfp5EPok5YUJ9+0nQ15AU1tfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy83MWZmZjQ5MS03NjY3LTQ0YjItYmQ2Ni1jYjVh ZWI1MWEzOTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB6q4veu+YVy09w3bhmfVA9 l/dizbZadLAZIxaThuV0Fv1CVx9La51CerY7zudA/WQ1GHP7og1YZxhSUfTfTF8i NkH2YxL2bqPe2h2SkuaFmnY//Vai/iCiXnHP5ARDytoRaXgEbY9y+594mgVcE3KT H83yl+oBkAGiVR0YJ+P4gJYuuca0f1fSADo97pr6Q6i41RbaP3out5qTpjQddZ5b jfcEU+MItrychQAQmOBisjcOixrLurEv1V6U6nt53tAbf0Z1vSO1fAWi3oFYZswO cPIb51qZ4WZyHxPqMcrHBXn+9rbYtUxbrfUrxrQ4rt8A0Psf65Cwk+ujP6Cxl8CO -----END CERTIFICATE-----Generated at Sat May 3 03:01:41 2025 by rpki-client