$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef.mft File: cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef.mft (raw, json) Hash identifier: lMPDDvSY+sHsuXx0WoR5x3O0yNbh7tDoPDvVvLV3hEY= Subject key identifier: B2:FB:73:CC:43:F1:1B:A3:7A:82:15:67:80:05:DA:20:45:72:F9:6D Authority key identifier: A2:87:E7:BA:DC:3B:3A:CD:21:31:DD:4C:39:D4:8D:CD:FE:A6:3A:A8 Certificate issuer: /CN=cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef Certificate serial: 010D0C9F43285849DA1DDB8749D01480DDF18100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef.mft Manifest number: 010D0C9F4328584073A81A706B18454F6000BD72 Signing time: Wed 14 May 2025 16:00:09 +0000 Manifest this update: Wed 14 May 2025 16:00:09 +0000 Manifest next update: Sat 17 May 2025 16:00:00 +0000 Files and hashes: 1: 69d41eb5-ba8e-3a7d-8c7c-019c2a156f54.roa (hash: Bc+8vMBAbh4DAEb2UibuyvJyqtt4F7+xd8PHeCiKRM0=) 2: cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef.crl (hash: XrGMVQ6hxLhdyDoxroPSjIIsViovDjdPuCKY1DyyRAg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:da:1d:db:87:49:d0:14:80:dd:f1:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef Validity Not Before: May 14 16:00:09 2025 GMT Not After : May 17 16:00:00 2025 GMT Subject: CN=4b72ca6d-0d08-41fa-bbbf-195c30a86505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f0:51:60:ca:7d:58:91:e7:90:ad:a9:18:a7: 6c:bb:a7:c5:58:ac:f4:fa:f2:ae:32:c9:00:81:de: 30:8a:c9:ca:44:e0:42:93:b0:e6:b0:3d:3e:9f:37: 75:29:80:18:ec:b1:f8:a6:4b:9c:43:00:32:00:91: f8:0e:34:25:0f:12:f6:9a:40:d6:ee:8f:07:94:6a: fd:57:46:e4:a2:9f:f2:e8:c0:80:88:3d:11:dc:0d: 6e:1f:02:e2:53:e1:4c:a3:16:7f:79:bc:fb:4d:3f: e3:fd:d4:25:7a:6b:d1:68:38:27:8c:65:dd:0f:dd: 96:4a:4a:41:da:ba:66:67:9b:f4:47:41:46:48:d4: cf:0b:8d:45:43:f2:6b:30:ca:e0:e3:a6:c1:74:ef: 09:da:12:ad:d0:78:ae:29:0e:62:9c:34:f6:b7:5f: 37:0f:03:c7:52:a1:23:f8:1e:1f:85:af:12:d6:7b: 4e:1d:0d:a4:35:1f:50:04:67:45:0e:a3:8f:2b:99: 0f:c2:de:a7:93:62:b2:38:24:c6:15:35:61:12:a2: 38:6f:6e:cf:a3:97:7d:16:15:43:57:e3:81:9f:0d: 49:78:49:9c:7e:9c:8a:73:c3:63:ca:2b:08:8a:b2: a8:0e:80:a4:fd:81:54:39:55:82:30:07:31:40:a7: 12:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:FB:73:CC:43:F1:1B:A3:7A:82:15:67:80:05:DA:20:45:72:F9:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef.crl X509v3 Authority Key Identifier: keyid:A2:87:E7:BA:DC:3B:3A:CD:21:31:DD:4C:39:D4:8D:CD:FE:A6:3A:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:60:a1:b8:00:13:aa:45:a5:25:e0:d6:f7:94:d4:4e:44:cb: d1:6a:d8:5b:ad:84:ba:91:db:bd:a8:3f:fa:bd:76:26:91:18: a1:e8:1f:4c:0d:b0:06:cc:b2:f6:fc:0e:30:b7:36:f0:72:bb: a2:ec:8e:06:52:e0:bc:22:8b:2b:c5:95:65:35:60:a8:dd:8c: 05:71:cf:39:b9:eb:a4:39:6d:26:1e:92:8b:d7:eb:34:01:95: 56:fb:72:c6:8d:71:86:dd:82:cc:8f:c5:e7:b6:5a:4c:12:dd: 3e:6e:08:b2:7a:cb:8c:f8:21:77:76:78:2e:a2:2b:8f:7e:70: 09:91:5e:08:cb:ec:72:43:46:41:07:4f:d2:ad:b3:ac:c4:1c: e1:87:7d:13:0e:12:60:f4:59:ca:f7:60:bd:6f:7e:f0:00:a7: 95:5a:7e:45:1e:0c:b0:e8:ed:68:2c:b5:6d:07:42:01:1e:9a: ea:7b:05:19:bc:03:01:41:80:3b:30:56:4f:44:5d:19:7d:83: 5a:5c:d4:85:6f:1c:95:f2:11:f1:00:f6:bf:05:03:35:00:a0: ae:6c:b3:61:78:69:6b:44:97:15:44:4f:a0:62:0f:4e:df:b2: e2:ea:93:8b:55:bc:85:17:fe:d0:c5:40:e1:ec:fd:7c:ab:0e: e7:63:81:a5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnaHduHSdAUgN3xgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JkN2QyOWItMmM4NS00YWJmLWE0ZDYtNjc5NzhkN2Fl N2VmMB4XDTI1MDUxNDE2MDAwOVoXDTI1MDUxNzE2MDAwMFowLzEtMCsGA1UEAxMk NGI3MmNhNmQtMGQwOC00MWZhLWJiYmYtMTk1YzMwYTg2NTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovBRYMp9WJHnkK2pGKdsu6fFWKz0+vKuMskA gd4wisnKROBCk7DmsD0+nzd1KYAY7LH4pkucQwAyAJH4DjQlDxL2mkDW7o8HlGr9 V0bkop/y6MCAiD0R3A1uHwLiU+FMoxZ/ebz7TT/j/dQlemvRaDgnjGXdD92WSkpB 2rpmZ5v0R0FGSNTPC41FQ/JrMMrg46bBdO8J2hKt0HiuKQ5inDT2t183DwPHUqEj +B4fha8S1ntOHQ2kNR9QBGdFDqOPK5kPwt6nk2KyOCTGFTVhEqI4b27Po5d9FhVD V+OBnw1JeEmcfpyKc8NjyisIirKoDoCk/YFUOVWCMAcxQKcSXwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLL7c8xD8RujeoIVZ4AF2iBFcvltMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jYmQ3 ZDI5Yi0yYzg1LTRhYmYtYTRkNi02Nzk3OGQ3YWU3ZWYvY2JkN2QyOWItMmM4NS00 YWJmLWE0ZDYtNjc5NzhkN2FlN2VmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2JkN2QyOWItMmM4NS00YWJmLWE0 ZDYtNjc5NzhkN2FlN2VmL2NiZDdkMjliLTJjODUtNGFiZi1hNGQ2LTY3OTc4ZDdh ZTdlZi5jcmwwHwYDVR0jBBgwFoAUoofnutw7Os0hMd1MOdSNzf6mOqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jYmQ3ZDI5Yi0yYzg1LTRhYmYtYTRkNi02Nzk3 OGQ3YWU3ZWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBDYKG4ABOqRaUl4Nb3lNRO RMvRathbrYS6kdu9qD/6vXYmkRih6B9MDbAGzLL2/A4wtzbwcrui7I4GUuC8Iosr xZVlNWCo3YwFcc85ueukOW0mHpKL1+s0AZVW+3LGjXGG3YLMj8XntlpMEt0+bgiy esuM+CF3dnguoiuPfnAJkV4Iy+xyQ0ZBB0/SrbOsxBzhh30TDhJg9FnK92C9b37w AKeVWn5FHgyw6O1oLLVtB0IBHprqewUZvAMBQYA7MFZPRF0ZfYNaXNSFbxyV8hHx APa/BQM1AKCubLNheGlrRJcVRE+gYg9O37Li6pOLVbyFF/7QxUDh7P18qw7nY4Gl -----END CERTIFICATE-----Generated at Wed May 14 18:56:26 2025 by rpki-client