$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/badf1586-901d-41a7-b0f3-521998d53931.mft File: badf1586-901d-41a7-b0f3-521998d53931.mft (raw, json) Hash identifier: 08j9msRkw1aHHnY6e9c2MDWcsBTefsDTDIWWOFMX8t4= Subject key identifier: 9D:5D:8E:07:94:78:2D:38:E7:01:98:FD:77:9A:F0:50:52:94:82:83 Authority key identifier: 17:DD:BE:D5:1B:27:91:56:B0:48:C7:7E:3D:0E:D9:4F:FA:37:AB:9E Certificate issuer: /CN=badf1586-901d-41a7-b0f3-521998d53931 Certificate serial: 010D0C9F43285849A8ADFAA3FB1756F5B1009CE3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/badf1586-901d-41a7-b0f3-521998d53931.mft Manifest number: 010D0C9F43285849873AAB6DCBFD842767CBBD8D Signing time: Sat 26 Apr 2025 23:00:07 +0000 Manifest this update: Sat 26 Apr 2025 23:00:07 +0000 Manifest next update: Tue 29 Apr 2025 23:00:00 +0000 Files and hashes: 1: 072f8713-d6b1-3633-b393-407d3f1fb9e4.roa (hash: NPJxgz7UDK/i/6K4YRyD9MYwAuouO7J5HtBN/74wI08=) 2: badf1586-901d-41a7-b0f3-521998d53931.crl (hash: afEpIaKd14XycTlygUg6beixlCZakLuW2LIxoTKZwvM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/badf1586-901d-41a7-b0f3-521998d53931.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/badf1586-901d-41a7-b0f3-521998d53931.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:ad:fa:a3:fb:17:56:f5:b1:00:9c:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=badf1586-901d-41a7-b0f3-521998d53931 Validity Not Before: Apr 26 23:00:07 2025 GMT Not After : Apr 29 23:00:00 2025 GMT Subject: CN=a16a2e18-3faa-4ddb-b391-c6f2930451b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d3:b4:6a:bd:af:8d:58:71:de:94:a3:d0:22: 76:21:25:0b:58:63:5c:50:16:e9:16:21:7b:9e:d3: ab:84:bc:fc:8c:c1:90:58:20:94:09:ea:d3:66:6b: a5:ec:43:9a:65:d2:1c:8a:4b:03:3d:59:b9:43:0b: e1:85:f7:7b:18:64:e0:8a:37:8b:9e:9c:95:e1:66: 93:24:a6:e3:67:1b:6a:26:47:a3:50:df:66:cc:fa: ee:30:5c:cb:43:c3:4b:1c:09:16:d1:cd:5b:cb:d9: 0c:cf:16:6f:d3:bd:49:95:56:87:e1:90:7c:2c:0b: 19:14:6c:9b:47:4b:76:cb:61:16:ed:7b:cf:10:56: b4:c0:8f:31:91:b7:a7:8d:fc:bd:c0:e6:db:9d:1c: 33:ad:1d:e6:c4:64:8d:e6:11:04:41:2d:c1:52:e3: e6:b5:6e:c2:b1:13:2d:79:f6:9f:f4:4c:d1:4c:de: ef:af:e1:8e:d8:47:ba:08:37:4e:f5:df:b5:c5:41: 97:a1:0f:fb:0f:cc:4a:e5:f6:79:c4:1b:1b:84:cc: dd:d1:6c:ea:dc:0f:46:c3:4d:d2:70:39:cb:24:11: 47:47:97:95:99:b3:a0:5e:a2:06:ef:6f:7e:da:0c: c0:f1:ee:e9:d0:30:df:cc:cd:b2:6b:73:37:b1:01: b9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:5D:8E:07:94:78:2D:38:E7:01:98:FD:77:9A:F0:50:52:94:82:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/badf1586-901d-41a7-b0f3-521998d53931.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/badf1586-901d-41a7-b0f3-521998d53931.crl X509v3 Authority Key Identifier: keyid:17:DD:BE:D5:1B:27:91:56:B0:48:C7:7E:3D:0E:D9:4F:FA:37:AB:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:97:6b:80:cc:cb:12:b5:a7:26:a2:67:67:d5:49:a9:84:31: 00:8b:aa:7a:8d:95:73:ee:26:8b:18:40:18:9b:ca:46:42:ea: d1:a5:29:11:1b:06:32:cb:e5:4c:f0:5c:ba:62:96:97:55:b0: 8d:58:ad:86:0e:80:c5:bb:75:a3:ff:17:bb:22:e9:fb:1b:85: 41:7d:fe:35:53:95:56:37:9e:bb:28:a4:17:21:2b:e2:c6:fa: bb:85:ab:a4:56:06:d7:fe:76:73:83:6c:5e:79:4b:68:52:30: c7:82:a6:ab:ca:d5:12:82:c4:67:05:ed:cf:d8:47:db:09:e6: 82:a7:37:0a:6d:d4:16:82:5d:7a:5c:15:38:e1:e7:a4:29:97: 4d:4c:a9:41:a6:00:93:55:28:69:e1:bb:99:db:1c:ce:ad:2d: dc:72:1f:1a:e4:f2:1b:97:f5:c1:8c:73:f7:5b:e5:fa:8c:dc: d0:73:73:47:29:bc:b8:6a:6e:20:06:d9:e7:b0:08:11:7a:79: 07:63:fa:bc:2b:96:25:03:66:7c:19:dc:d3:78:90:bd:2e:8c: 1d:71:ac:1c:36:6a:86:3b:07:2f:db:e1:ba:44:50:16:41:84: 0e:c2:5c:4c:cd:e3:87:79:14:14:f7:d7:1c:a6:26:5c:ae:e1: 01:70:7f:c6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmorfqj+xdW9bEAnOMwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFkZjE1ODYtOTAxZC00MWE3LWIwZjMtNTIxOTk4ZDUz OTMxMB4XDTI1MDQyNjIzMDAwN1oXDTI1MDQyOTIzMDAwMFowLzEtMCsGA1UEAxMk YTE2YTJlMTgtM2ZhYS00ZGRiLWIzOTEtYzZmMjkzMDQ1MWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9O0ar2vjVhx3pSj0CJ2ISULWGNcUBbpFiF7 ntOrhLz8jMGQWCCUCerTZmul7EOaZdIciksDPVm5Qwvhhfd7GGTgijeLnpyV4WaT JKbjZxtqJkejUN9mzPruMFzLQ8NLHAkW0c1by9kMzxZv071JlVaH4ZB8LAsZFGyb R0t2y2EW7XvPEFa0wI8xkbenjfy9wObbnRwzrR3mxGSN5hEEQS3BUuPmtW7CsRMt efaf9EzRTN7vr+GO2Ee6CDdO9d+1xUGXoQ/7D8xK5fZ5xBsbhMzd0Wzq3A9Gw03S cDnLJBFHR5eVmbOgXqIG729+2gzA8e7p0DDfzM2ya3M3sQG5LwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJ1djgeUeC045wGY/Xea8FBSlIKDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iYWRm MTU4Ni05MDFkLTQxYTctYjBmMy01MjE5OThkNTM5MzEvYmFkZjE1ODYtOTAxZC00 MWE3LWIwZjMtNTIxOTk4ZDUzOTMxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYmFkZjE1ODYtOTAxZC00MWE3LWIw ZjMtNTIxOTk4ZDUzOTMxL2JhZGYxNTg2LTkwMWQtNDFhNy1iMGYzLTUyMTk5OGQ1 MzkzMS5jcmwwHwYDVR0jBBgwFoAUF92+1RsnkVawSMd+PQ7ZT/o3q54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iYWRmMTU4Ni05MDFkLTQxYTctYjBmMy01MjE5 OThkNTM5MzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAal2uAzMsStacmomdn1Ump hDEAi6p6jZVz7iaLGEAYm8pGQurRpSkRGwYyy+VM8Fy6YpaXVbCNWK2GDoDFu3Wj /xe7Iun7G4VBff41U5VWN567KKQXISvixvq7haukVgbX/nZzg2xeeUtoUjDHgqar ytUSgsRnBe3P2EfbCeaCpzcKbdQWgl16XBU44eekKZdNTKlBpgCTVShp4buZ2xzO rS3cch8a5PIbl/XBjHP3W+X6jNzQc3NHKby4am4gBtnnsAgRenkHY/q8K5YlA2Z8 GdzTeJC9LowdcawcNmqGOwcv2+G6RFAWQYQOwlxMzeOHeRQU99ccpiZcruEBcH/G -----END CERTIFICATE-----Generated at Sun Apr 27 20:38:45 2025 by rpki-client