$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152/f471d673-d293-405b-9549-4421d0436152.mft File: f471d673-d293-405b-9549-4421d0436152.mft (raw, json) Hash identifier: mmeB0Da40QJ/KwezZgXRvLfzeD8itlYUKO5p+nKA22k= Subject key identifier: 25:AD:05:DF:12:FA:CA:A6:62:A1:BB:1E:80:26:0B:28:AB:FA:EC:15 Authority key identifier: 30:A0:26:0A:E6:B5:9F:36:6B:1C:77:3F:5A:31:D7:FB:EF:B1:24:0B Certificate issuer: /CN=f471d673-d293-405b-9549-4421d0436152 Certificate serial: 010D0C9F43285849B53E03A2857F7A7435DC09A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152/f471d673-d293-405b-9549-4421d0436152.mft Manifest number: 010D0C9F4328584961818006EF0695468BAF1F9F Signing time: Thu 01 May 2025 11:00:03 +0000 Manifest this update: Thu 01 May 2025 11:00:03 +0000 Manifest next update: Sun 04 May 2025 11:00:00 +0000 Files and hashes: 1: 5d22fed2-523a-322d-a47d-2db5b0e1e874.roa (hash: 3C9FewueWziYOL2GM0WB+/VxE4DUwWOvjpP8XPR4O+A=) 2: f471d673-d293-405b-9549-4421d0436152.crl (hash: 93RKB0FGEyWsFR+35+6Gb+vKB94K6N7eE3KSybyDONw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152/f471d673-d293-405b-9549-4421d0436152.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152/f471d673-d293-405b-9549-4421d0436152.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:3e:03:a2:85:7f:7a:74:35:dc:09:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f471d673-d293-405b-9549-4421d0436152 Validity Not Before: May 1 11:00:03 2025 GMT Not After : May 4 11:00:00 2025 GMT Subject: CN=326c3fc8-7cf5-444e-be3c-a6db47dc794a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:01:81:b1:da:98:04:77:49:ac:92:06:5f:e1: 81:13:bd:b3:79:01:38:93:79:07:74:90:d1:33:18: 02:60:a0:0c:1b:22:4c:58:ad:9c:45:dd:54:e8:6c: 74:5a:15:f4:69:7b:f2:5a:69:34:d2:70:91:46:90: 82:d2:3f:6e:ad:5a:ee:e8:b0:77:1b:10:81:d8:53: 44:2c:fd:1d:c2:8c:24:aa:bc:26:fb:97:c0:fd:d7: 03:73:d8:9e:b0:00:e2:b9:6d:e0:94:15:33:d0:27: 4c:af:71:df:ce:a8:b0:ea:90:37:bb:61:a4:6b:dd: 17:b1:e6:10:10:b8:3c:fd:fe:7e:0f:55:2a:9c:0c: d5:11:d4:cb:7d:31:b5:07:c1:1b:d7:66:5c:aa:c0: 75:c7:08:05:28:f1:23:80:3c:68:e3:31:d1:e3:5a: 10:42:a2:3b:ae:41:ac:e1:c8:b7:1b:3c:78:5c:d6: e3:0c:d6:31:58:fc:0c:de:7c:9d:d5:8f:75:e8:e5: 50:c6:47:e2:59:d8:17:29:38:37:29:d3:46:70:1c: 82:d3:2b:3e:0b:ae:f1:9d:91:84:40:50:90:63:74: d6:c8:01:4c:b6:96:7b:e3:41:6b:e5:05:e3:5b:28: bc:41:2b:8c:28:d5:79:f5:78:44:81:65:c4:4a:db: 47:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:AD:05:DF:12:FA:CA:A6:62:A1:BB:1E:80:26:0B:28:AB:FA:EC:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152/f471d673-d293-405b-9549-4421d0436152.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152/f471d673-d293-405b-9549-4421d0436152.crl X509v3 Authority Key Identifier: keyid:30:A0:26:0A:E6:B5:9F:36:6B:1C:77:3F:5A:31:D7:FB:EF:B1:24:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:83:89:fb:f3:8e:96:d8:70:29:ce:ff:0e:8c:9d:77:d3:15: 2c:8f:1a:10:f4:c7:d7:85:2d:09:f1:03:93:ec:e2:90:7a:66: bb:b3:57:de:dd:73:21:e1:2a:2a:9a:4e:08:7a:74:a0:34:de: d2:50:1d:c9:93:e3:34:5c:34:c0:fa:c7:32:e3:6c:3a:f7:a3: b3:d1:a2:3b:a3:f7:8b:e7:60:3d:a7:17:41:66:57:fe:22:87: 34:df:ba:bb:c1:89:13:cc:0d:7a:c2:ea:91:9f:60:69:01:8a: 06:01:d9:a9:9e:27:e8:1b:ba:e7:3d:e9:42:57:f8:27:99:ac: 0f:b7:ca:a3:f8:be:66:b2:7d:27:bc:28:9b:bc:28:59:1a:95: 72:da:51:fd:57:68:50:fe:83:61:ea:8e:ed:1d:2b:bd:a2:38: 69:5a:1f:95:bd:04:ec:8f:ae:3a:d2:c3:7c:22:85:b6:43:5a: d2:88:9d:65:b6:51:5b:b8:33:6c:71:08:70:fb:ad:44:78:a8: 4e:ad:2c:4f:67:0a:20:ef:fb:f4:10:0a:f3:80:07:89:16:dc: 9d:ab:5b:12:d1:8a:35:19:15:b4:70:5b:50:da:3e:cb:69:14: c0:d4:b5:56:0e:23:3b:36:20:4a:91:23:dd:08:b7:e9:b6:1d: bb:79:d8:2c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEm1PgOihX96dDXcCaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ3MWQ2NzMtZDI5My00MDViLTk1NDktNDQyMWQwNDM2 MTUyMB4XDTI1MDUwMTExMDAwM1oXDTI1MDUwNDExMDAwMFowLzEtMCsGA1UEAxMk MzI2YzNmYzgtN2NmNS00NDRlLWJlM2MtYTZkYjQ3ZGM3OTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQGBsdqYBHdJrJIGX+GBE72zeQE4k3kHdJDR MxgCYKAMGyJMWK2cRd1U6Gx0WhX0aXvyWmk00nCRRpCC0j9urVru6LB3GxCB2FNE LP0dwowkqrwm+5fA/dcDc9iesADiuW3glBUz0CdMr3Hfzqiw6pA3u2Gka90XseYQ ELg8/f5+D1UqnAzVEdTLfTG1B8Eb12ZcqsB1xwgFKPEjgDxo4zHR41oQQqI7rkGs 4ci3Gzx4XNbjDNYxWPwM3nyd1Y916OVQxkfiWdgXKTg3KdNGcByC0ys+C67xnZGE QFCQY3TWyAFMtpZ740Fr5QXjWyi8QSuMKNV59XhEgWXESttHkQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCWtBd8S+sqmYqG7HoAmCyir+uwVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mNDcx ZDY3My1kMjkzLTQwNWItOTU0OS00NDIxZDA0MzYxNTIvZjQ3MWQ2NzMtZDI5My00 MDViLTk1NDktNDQyMWQwNDM2MTUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZjQ3MWQ2NzMtZDI5My00MDViLTk1 NDktNDQyMWQwNDM2MTUyL2Y0NzFkNjczLWQyOTMtNDA1Yi05NTQ5LTQ0MjFkMDQz NjE1Mi5jcmwwHwYDVR0jBBgwFoAUMKAmCua1nzZrHHc/WjHX+++xJAswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mNDcxZDY3My1kMjkzLTQwNWItOTU0OS00NDIx ZDA0MzYxNTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBag4n7846W2HApzv8OjJ13 0xUsjxoQ9MfXhS0J8QOT7OKQema7s1fe3XMh4Soqmk4IenSgNN7SUB3Jk+M0XDTA +scy42w696Oz0aI7o/eL52A9pxdBZlf+Ioc037q7wYkTzA16wuqRn2BpAYoGAdmp nifoG7rnPelCV/gnmawPt8qj+L5msn0nvCibvChZGpVy2lH9V2hQ/oNh6o7tHSu9 ojhpWh+VvQTsj6460sN8IoW2Q1rSiJ1ltlFbuDNscQhw+61EeKhOrSxPZwog7/v0 EArzgAeJFtydq1sS0Yo1GRW0cFtQ2j7LaRTA1LVWDiM7NiBKkSPdCLfpth27edgs -----END CERTIFICATE-----Generated at Thu May 1 16:51:27 2025 by rpki-client