$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58/4706c6ca-b19a-44a6-94e1-340cbfd29a58.mft File: 4706c6ca-b19a-44a6-94e1-340cbfd29a58.mft (raw, json) Hash identifier: LFEtNGO7pZwDxML+rtqSsvJG77V9FiAKcAXDTQKahBw= Subject key identifier: 85:15:3A:08:E8:A7:4F:CC:98:56:3A:13:6B:DD:52:12:33:68:5F:B5 Authority key identifier: 70:13:15:9B:39:84:C7:41:92:FE:7E:8E:DE:C1:14:07:A0:64:E4:6B Certificate issuer: /CN=4706c6ca-b19a-44a6-94e1-340cbfd29a58 Certificate serial: 010D0C9F43285849D234E7CEA253E815FF73E080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58/4706c6ca-b19a-44a6-94e1-340cbfd29a58.mft Manifest number: 010D0C9F4328584073A825DD0D87DDFA8AA20470 Signing time: Sun 11 May 2025 20:00:07 +0000 Manifest this update: Sun 11 May 2025 20:00:07 +0000 Manifest next update: Tue 13 May 2025 20:00:00 +0000 Files and hashes: 1: 2264f8e0-5c11-3ff0-a91b-36855cd2e850.roa (hash: DmFHe3e8lf9Oh2fjYvsYLi3h8ltsn5ULWbW5Vfia7Fo=) 2: 4706c6ca-b19a-44a6-94e1-340cbfd29a58.crl (hash: 4RaFPWE1Xj6se4dMBfD7IuXAfuw0CzsJiYUxsCRCnVA=) 3: f060337d-b71d-3704-ad4c-66ef4b8ebb74.roa (hash: 7vmy8aLRDcviNhIxsMkP9e5fwqofec4Q1TU8tg3QsYM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58/4706c6ca-b19a-44a6-94e1-340cbfd29a58.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58/4706c6ca-b19a-44a6-94e1-340cbfd29a58.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d2:34:e7:ce:a2:53:e8:15:ff:73:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4706c6ca-b19a-44a6-94e1-340cbfd29a58 Validity Not Before: May 11 20:00:07 2025 GMT Not After : May 13 20:00:00 2025 GMT Subject: CN=5dcfd8cc-6a4c-4382-80a5-205509dc67f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d7:c8:d1:d1:55:a9:3b:44:53:8a:92:f7:1a: 77:71:2b:28:c6:ab:90:57:be:98:2f:da:eb:02:65: 3a:28:f0:01:18:a6:68:ec:72:b5:89:89:b8:76:76: 1d:3e:6b:d3:82:24:97:1d:89:4e:22:a2:d0:3b:ce: 39:05:de:7e:48:a3:bf:de:14:dd:26:36:6f:93:97: 92:88:a8:a0:53:8a:80:b1:e7:e3:ff:69:07:a8:00: 94:67:56:8d:cf:30:b3:36:96:3e:6e:f4:a5:d3:54: 75:ce:0f:37:ba:ab:8b:2b:d6:d0:fa:9d:85:57:0d: 8f:e6:03:5f:57:35:68:ea:2a:ed:de:08:af:95:c9: 5e:c8:98:1d:5b:b6:5d:f8:7f:d4:4b:6f:ca:35:e8: fd:a5:99:cd:be:ef:9f:d1:a1:29:51:1c:53:6e:33: b6:2d:a8:49:c1:65:f6:58:fe:46:2c:d7:6c:ac:a1: aa:8e:16:75:a2:8a:99:72:54:60:4e:94:98:54:74: 17:33:ab:4e:42:a8:8e:55:d4:a7:22:79:e1:da:4b: 3a:02:65:e3:9a:57:ad:b6:69:ae:2d:c8:2a:d2:fa: 54:3b:97:98:ad:05:5c:f3:33:f6:cc:89:7b:b8:6e: 77:66:80:a3:fa:1b:3a:74:9c:c2:4e:e5:b0:58:d1: 9d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:15:3A:08:E8:A7:4F:CC:98:56:3A:13:6B:DD:52:12:33:68:5F:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58/4706c6ca-b19a-44a6-94e1-340cbfd29a58.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58/4706c6ca-b19a-44a6-94e1-340cbfd29a58.crl X509v3 Authority Key Identifier: keyid:70:13:15:9B:39:84:C7:41:92:FE:7E:8E:DE:C1:14:07:A0:64:E4:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:5a:2b:07:0f:2e:66:b9:d1:45:44:7e:9f:1b:24:3e:9e:27: b4:90:03:42:4e:26:d4:bb:9a:cf:fa:d3:81:e6:cd:6d:3c:5b: 26:3a:2c:32:a9:b6:c7:e8:2a:d7:ab:c7:7e:60:11:d3:30:8c: 71:43:f7:40:f2:95:f3:a1:c3:3b:4f:0b:e3:53:a5:3d:fa:f5: 5e:30:f2:f1:6d:53:aa:e2:0b:03:e2:72:29:78:b7:a3:4f:47: e9:4f:fe:7b:25:06:7f:48:89:2b:40:aa:26:c2:56:ba:31:12: 32:86:fa:d9:67:7c:d1:b9:c5:2c:90:30:6c:62:5b:18:44:f6: 31:1f:86:3e:ec:f4:b4:ce:6d:42:ec:e3:92:3d:04:0a:ee:e1: 62:b2:62:aa:47:09:ce:46:da:23:79:16:9e:4a:4f:9d:6f:3c: 3c:eb:6b:33:21:07:c7:0a:1a:e6:9e:70:2a:a7:c8:c6:0d:6a: 95:ab:f2:5f:3b:88:ed:19:5e:20:8f:ab:73:94:09:0c:0b:83: d0:6d:2f:9f:06:5c:f2:7d:d0:38:f9:da:46:b7:c7:ae:4b:65: 3c:8c:44:fa:f2:b3:8a:32:45:6b:1f:1b:b0:03:84:8f:2f:79: 48:b4:9d:7a:5b:fc:70:b9:fe:c7:3c:6d:89:a3:a3:3c:dd:17: 30:e9:80:5d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnSNOfOolPoFf9z4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDcwNmM2Y2EtYjE5YS00NGE2LTk0ZTEtMzQwY2JmZDI5 YTU4MB4XDTI1MDUxMTIwMDAwN1oXDTI1MDUxMzIwMDAwMFowLzEtMCsGA1UEAxMk NWRjZmQ4Y2MtNmE0Yy00MzgyLTgwYTUtMjA1NTA5ZGM2N2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tfI0dFVqTtEU4qS9xp3cSsoxquQV76YL9rr AmU6KPABGKZo7HK1iYm4dnYdPmvTgiSXHYlOIqLQO845Bd5+SKO/3hTdJjZvk5eS iKigU4qAsefj/2kHqACUZ1aNzzCzNpY+bvSl01R1zg83uquLK9bQ+p2FVw2P5gNf VzVo6irt3givlcleyJgdW7Zd+H/US2/KNej9pZnNvu+f0aEpURxTbjO2LahJwWX2 WP5GLNdsrKGqjhZ1ooqZclRgTpSYVHQXM6tOQqiOVdSnInnh2ks6AmXjmlettmmu Lcgq0vpUO5eYrQVc8zP2zIl7uG53ZoCj+hs6dJzCTuWwWNGdkwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIUVOgjop0/MmFY6E2vdUhIzaF+1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80NzA2 YzZjYS1iMTlhLTQ0YTYtOTRlMS0zNDBjYmZkMjlhNTgvNDcwNmM2Y2EtYjE5YS00 NGE2LTk0ZTEtMzQwY2JmZDI5YTU4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNDcwNmM2Y2EtYjE5YS00NGE2LTk0 ZTEtMzQwY2JmZDI5YTU4LzQ3MDZjNmNhLWIxOWEtNDRhNi05NGUxLTM0MGNiZmQy OWE1OC5jcmwwHwYDVR0jBBgwFoAUcBMVmzmEx0GS/n6O3sEUB6Bk5GswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80NzA2YzZjYS1iMTlhLTQ0YTYtOTRlMS0zNDBj YmZkMjlhNTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBEWisHDy5mudFFRH6fGyQ+ nie0kANCTibUu5rP+tOB5s1tPFsmOiwyqbbH6CrXq8d+YBHTMIxxQ/dA8pXzocM7 TwvjU6U9+vVeMPLxbVOq4gsD4nIpeLejT0fpT/57JQZ/SIkrQKomwla6MRIyhvrZ Z3zRucUskDBsYlsYRPYxH4Y+7PS0zm1C7OOSPQQK7uFismKqRwnORtojeRaeSk+d bzw862szIQfHChrmnnAqp8jGDWqVq/JfO4jtGV4gj6tzlAkMC4PQbS+fBlzyfdA4 +dpGt8euS2U8jET68rOKMkVrHxuwA4SPL3lItJ16W/xwuf7HPG2Jo6M83Rcw6YBd -----END CERTIFICATE-----Generated at Mon May 12 15:49:39 2025 by rpki-client