$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/4c7bb7c9-9462-45de-9a96-5887b6042f79.mft File: 4c7bb7c9-9462-45de-9a96-5887b6042f79.mft (raw, json) Hash identifier: 3KIDdvzLysqd3YD7oln7ziCTPPwyPnVcjPloZP0a3jM= Subject key identifier: 34:19:F6:1B:3B:E2:7A:CB:72:FC:3F:1A:10:2F:0D:74:66:2B:E4:8B Authority key identifier: DA:DD:B7:A5:36:89:D6:40:54:A6:6B:41:71:04:A1:F4:04:9E:83:05 Certificate issuer: /CN=4c7bb7c9-9462-45de-9a96-5887b6042f79 Certificate serial: 010D0C9F43285849CE99C6035D9CB5FE0B85EF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/4c7bb7c9-9462-45de-9a96-5887b6042f79.mft Manifest number: 010D0C9F4328584073A8552C1E7F02A5CF81D62D Signing time: Sat 10 May 2025 13:00:07 +0000 Manifest this update: Sat 10 May 2025 13:00:07 +0000 Manifest next update: Mon 12 May 2025 13:00:00 +0000 Files and hashes: 1: 4c7bb7c9-9462-45de-9a96-5887b6042f79.crl (hash: TLdKkM3x77iXJgTIqtMEz9tccBdJgdeoPsXTSjnpz0s=) 2: dc37949b-fd68-31d3-8530-d51a972e599a.roa (hash: KPhOKaaJEl3WGLv3iEd9LRyDGykLDItVjUTfBqjLyL0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/4c7bb7c9-9462-45de-9a96-5887b6042f79.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/4c7bb7c9-9462-45de-9a96-5887b6042f79.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:99:c6:03:5d:9c:b5:fe:0b:85:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c7bb7c9-9462-45de-9a96-5887b6042f79 Validity Not Before: May 10 13:00:07 2025 GMT Not After : May 12 13:00:00 2025 GMT Subject: CN=b3863884-09b9-4199-a816-95ea847f66cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:7b:e6:51:dc:98:60:3b:6c:50:65:a7:f3:24: dc:27:f2:3e:5d:77:14:08:5e:f4:ed:bb:46:14:a4: 82:40:d3:3b:a0:1b:42:6c:15:95:f6:06:cd:18:2d: 22:04:db:18:92:d4:ee:3c:00:98:d0:a6:e9:4f:dc: ad:43:a4:19:eb:67:3b:a3:19:4a:0b:a4:fb:f7:5a: e2:62:0d:8b:33:76:fc:3b:78:ea:a5:73:b7:4d:ab: 42:9a:99:52:41:b7:3f:5b:f1:02:a4:0c:59:8a:4f: 2d:a2:d6:8e:ed:ea:9c:ea:a8:4c:4a:83:fe:46:70: 60:5c:c0:b5:22:f3:c8:70:2f:b6:fc:19:58:f4:0c: d3:fc:d5:23:dd:f8:d6:62:33:17:1d:2e:94:d8:74: 4c:09:4a:4a:26:90:50:d1:53:2b:fa:ce:f5:6e:8f: ac:e0:5c:3e:d0:ec:9b:9f:e6:c2:b5:db:1b:cf:28: 1d:7c:84:78:9f:a6:4c:db:3b:d5:da:3d:e3:d6:75: 29:68:e4:36:3d:47:e1:79:9c:c9:18:53:f7:ef:8c: c8:ae:15:04:84:52:49:70:16:5c:1e:2a:5d:37:5c: 00:5e:82:9d:58:fa:45:21:8e:fd:1e:ff:6e:ea:ba: 1b:f4:62:06:5a:e5:99:81:f4:96:76:0d:b3:47:78: 2a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:19:F6:1B:3B:E2:7A:CB:72:FC:3F:1A:10:2F:0D:74:66:2B:E4:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/4c7bb7c9-9462-45de-9a96-5887b6042f79.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/4c7bb7c9-9462-45de-9a96-5887b6042f79.crl X509v3 Authority Key Identifier: keyid:DA:DD:B7:A5:36:89:D6:40:54:A6:6B:41:71:04:A1:F4:04:9E:83:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:34:6c:1f:da:12:57:ef:82:b7:d0:b6:78:af:4c:9d:76:3c: 85:4c:e5:93:c4:7e:38:e4:7b:cf:50:99:42:de:38:16:5a:e7: 01:98:ce:26:42:dc:d8:7c:d7:bd:f8:e5:01:18:62:db:28:b2: 4b:30:31:df:84:b8:4b:3d:53:a2:cc:91:60:57:86:72:fc:c0: 93:f2:5f:5e:7b:28:9d:5b:1e:e4:bc:b7:ce:e4:2d:84:84:c2: 2f:2b:34:37:fa:b5:20:c0:8a:bc:36:b7:a5:95:e0:ae:e7:41: dd:a2:3a:d1:a2:ce:38:2c:4b:7e:9e:40:62:a8:5c:85:48:81: 97:af:b4:26:4e:ed:d6:38:60:5f:9f:9f:76:d2:f7:ed:10:76: 6c:45:37:d6:03:a9:95:4a:ca:2d:ef:82:ff:c7:50:91:53:54: ba:ea:91:07:87:f7:75:a0:52:0a:9d:ba:1f:1b:ad:c1:91:b0: e7:79:97:7f:99:67:22:38:d1:83:f0:44:41:96:1d:19:5d:cf: c6:cc:39:5b:b3:e4:e9:cc:5e:b1:97:dc:2c:e2:26:0e:24:a1: f0:ef:75:15:d2:55:00:34:39:9b:d8:94:04:0b:17:78:cb:92: e1:09:c1:e8:f3:a9:36:4b:e9:d2:2b:fa:76:ff:3e:7d:75:2e: f1:90:3c:83 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnOmcYDXZy1/guF74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM3YmI3YzktOTQ2Mi00NWRlLTlhOTYtNTg4N2I2MDQy Zjc5MB4XDTI1MDUxMDEzMDAwN1oXDTI1MDUxMjEzMDAwMFowLzEtMCsGA1UEAxMk YjM4NjM4ODQtMDliOS00MTk5LWE4MTYtOTVlYTg0N2Y2NmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XvmUdyYYDtsUGWn8yTcJ/I+XXcUCF707btG FKSCQNM7oBtCbBWV9gbNGC0iBNsYktTuPACY0KbpT9ytQ6QZ62c7oxlKC6T791ri Yg2LM3b8O3jqpXO3TatCmplSQbc/W/ECpAxZik8totaO7eqc6qhMSoP+RnBgXMC1 IvPIcC+2/BlY9AzT/NUj3fjWYjMXHS6U2HRMCUpKJpBQ0VMr+s71bo+s4Fw+0Oyb n+bCtdsbzygdfIR4n6ZM2zvV2j3j1nUpaOQ2PUfheZzJGFP374zIrhUEhFJJcBZc HipdN1wAXoKdWPpFIY79Hv9u6rob9GIGWuWZgfSWdg2zR3gqbwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDQZ9hs74nrLcvw/GhAvDXRmK+SLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80Yzdi YjdjOS05NDYyLTQ1ZGUtOWE5Ni01ODg3YjYwNDJmNzkvNGM3YmI3YzktOTQ2Mi00 NWRlLTlhOTYtNTg4N2I2MDQyZjc5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGM3YmI3YzktOTQ2Mi00NWRlLTlh OTYtNTg4N2I2MDQyZjc5LzRjN2JiN2M5LTk0NjItNDVkZS05YTk2LTU4ODdiNjA0 MmY3OS5jcmwwHwYDVR0jBBgwFoAU2t23pTaJ1kBUpmtBcQSh9ASegwUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80YzdiYjdjOS05NDYyLTQ1ZGUtOWE5Ni01ODg3 YjYwNDJmNzkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBBNGwf2hJX74K30LZ4r0yd djyFTOWTxH445HvPUJlC3jgWWucBmM4mQtzYfNe9+OUBGGLbKLJLMDHfhLhLPVOi zJFgV4Zy/MCT8l9eeyidWx7kvLfO5C2EhMIvKzQ3+rUgwIq8NrelleCu50HdojrR os44LEt+nkBiqFyFSIGXr7QmTu3WOGBfn5920vftEHZsRTfWA6mVSsot74L/x1CR U1S66pEHh/d1oFIKnbofG63BkbDneZd/mWciONGD8ERBlh0ZXc/GzDlbs+TpzF6x l9ws4iYOJKHw73UV0lUANDmb2JQECxd4y5LhCcHo86k2S+nSK/p2/z59dS7xkDyD -----END CERTIFICATE-----Generated at Sun May 11 11:02:25 2025 by rpki-client