$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft File: ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft (raw, json) Hash identifier: 4rVj6cutWmJ+QfgnF3cB8uyfykNfajjNrbUBBAJ2gus= Subject key identifier: 7A:9A:07:6C:A6:C7:6B:B6:CD:ED:67:6D:29:71:7B:F1:72:0F:E7:CD Authority key identifier: F6:56:13:C6:17:1B:30:8D:E2:86:D6:42:AC:2B:1D:F8:3C:DE:43:71 Certificate issuer: /CN=ddf98c7a-ee22-4693-8170-c9b197bc9da0 Certificate serial: 010D0C9F43285849CD169B25B093B3EDD26EA4A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft Manifest number: 010D0C9F43285849286C32D062B377DCDAAACCBC Signing time: Sat 10 May 2025 00:00:03 +0000 Manifest this update: Sat 10 May 2025 00:00:03 +0000 Manifest next update: Mon 12 May 2025 00:00:00 +0000 Files and hashes: 1: ddf98c7a-ee22-4693-8170-c9b197bc9da0.crl (hash: WhlfdQ33nElNpRu2GifqrUmRhUnI40ekWhsU7Qty9R4=) 2: f17090ed-14f3-32d9-9d34-9fc6bed092d1.roa (hash: NQuJVtt6KqKGNx2z6+oe9UMzxG2Q3jinHlQvDOE+azU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cd:16:9b:25:b0:93:b3:ed:d2:6e:a4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddf98c7a-ee22-4693-8170-c9b197bc9da0 Validity Not Before: May 10 00:00:03 2025 GMT Not After : May 12 00:00:00 2025 GMT Subject: CN=e588f9db-e80c-4943-9884-f0a23d4211e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:28:fb:d7:0f:11:66:aa:8c:95:ef:7c:0b:11: 8b:97:cc:62:b8:43:76:0b:5a:0a:13:14:22:dc:cc: 11:41:b6:a5:e6:d9:d4:00:53:a8:a8:5c:80:e2:a1: bc:8e:b4:cb:63:b0:53:55:3b:3c:3c:50:b8:6b:15: c3:c5:4d:6a:8b:79:75:37:be:80:ab:3d:d1:1d:3c: 14:04:65:a3:90:04:f1:e9:e9:e8:6d:e3:23:08:e7: c4:1d:4f:93:65:85:7e:14:37:61:3b:5a:5a:65:3b: 2a:cf:4b:b2:4b:6b:83:5f:50:80:30:ac:90:e1:e7: 3c:c7:ff:84:3e:da:96:31:a0:c5:c5:0c:a7:b0:b2: a8:51:e4:8f:39:24:d0:2b:7d:fd:26:60:37:24:ff: 90:92:bd:d5:44:c0:fc:93:2b:6d:27:73:fd:b8:12: fe:84:ad:cb:1b:6b:b1:bd:9e:18:5a:bd:88:18:d0: 90:65:e6:d0:07:f4:fe:84:02:26:40:20:62:cb:02: bd:1e:dc:e9:75:fd:43:51:2b:57:f2:4a:ae:98:12: b0:22:64:58:f1:80:15:c7:f4:7e:f6:0c:00:30:bc: e8:0a:af:bd:12:7b:23:bb:9e:c3:b4:b2:0d:6e:fb: dd:d9:ac:ff:1a:84:93:71:8c:ba:18:de:ec:89:c9: e0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:9A:07:6C:A6:C7:6B:B6:CD:ED:67:6D:29:71:7B:F1:72:0F:E7:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.crl X509v3 Authority Key Identifier: keyid:F6:56:13:C6:17:1B:30:8D:E2:86:D6:42:AC:2B:1D:F8:3C:DE:43:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:74:66:29:e7:21:7a:01:71:0f:7a:02:e8:68:b5:26:78:d9: 33:8c:88:f4:5b:96:d4:27:09:db:e9:f8:7e:94:f2:f8:30:29: d6:59:fd:da:b0:4c:2b:f4:bb:e5:1d:00:83:d6:b1:dd:a1:95: 0c:2e:1e:a6:10:cd:d6:a5:73:b2:d0:bd:04:df:0b:b6:23:6b: d9:e1:ce:b8:7b:ee:95:a7:c0:91:f1:a7:29:4e:6c:c1:72:4b: 01:8d:e6:db:0c:3a:83:80:2f:7f:3b:88:27:83:57:9c:c1:95: 64:45:7a:73:19:a3:6b:bc:fe:68:d3:a1:2a:b1:5a:cd:ca:78: 44:b2:96:a9:bc:88:da:45:84:64:87:48:45:55:38:8a:2f:c5: 1d:7d:5a:64:5f:e8:6e:9f:fc:19:4a:9d:ec:e8:cf:ad:fc:14: 96:77:28:9e:ab:a9:41:58:33:11:9a:b6:4f:47:91:7b:68:26: 89:d4:cd:52:ff:24:aa:c1:bd:a8:c1:5e:96:c5:df:ca:fc:46: 2b:5b:4b:9b:15:e8:19:24:1c:ec:10:83:79:aa:3c:9b:b9:00: 48:6d:e5:6e:6e:9b:3a:6b:15:63:7f:58:0b:76:05:bf:b7:7e: 4c:89:07:70:3d:54:6c:6e:c9:e3:36:47:38:5d:13:1a:ed:5d: db:39:23:d4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnNFpslsJOz7dJupKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGRmOThjN2EtZWUyMi00NjkzLTgxNzAtYzliMTk3YmM5 ZGEwMB4XDTI1MDUxMDAwMDAwM1oXDTI1MDUxMjAwMDAwMFowLzEtMCsGA1UEAxMk ZTU4OGY5ZGItZTgwYy00OTQzLTk4ODQtZjBhMjNkNDIxMWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCj71w8RZqqMle98CxGLl8xiuEN2C1oKExQi 3MwRQbal5tnUAFOoqFyA4qG8jrTLY7BTVTs8PFC4axXDxU1qi3l1N76Aqz3RHTwU BGWjkATx6enobeMjCOfEHU+TZYV+FDdhO1paZTsqz0uyS2uDX1CAMKyQ4ec8x/+E PtqWMaDFxQynsLKoUeSPOSTQK339JmA3JP+Qkr3VRMD8kyttJ3P9uBL+hK3LG2ux vZ4YWr2IGNCQZebQB/T+hAImQCBiywK9Htzpdf1DUStX8kqumBKwImRY8YAVx/R+ 9gwAMLzoCq+9Ensju57DtLINbvvd2az/GoSTcYy6GN7sicngrwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHqaB2ymx2u2ze1nbSlxe/FyD+fNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZGY5 OGM3YS1lZTIyLTQ2OTMtODE3MC1jOWIxOTdiYzlkYTAvZGRmOThjN2EtZWUyMi00 NjkzLTgxNzAtYzliMTk3YmM5ZGEwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGRmOThjN2EtZWUyMi00NjkzLTgx NzAtYzliMTk3YmM5ZGEwL2RkZjk4YzdhLWVlMjItNDY5My04MTcwLWM5YjE5N2Jj OWRhMC5jcmwwHwYDVR0jBBgwFoAU9lYTxhcbMI3ihtZCrCsd+DzeQ3EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZGY5OGM3YS1lZTIyLTQ2OTMtODE3MC1jOWIx OTdiYzlkYTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBzdGYp5yF6AXEPegLoaLUm eNkzjIj0W5bUJwnb6fh+lPL4MCnWWf3asEwr9LvlHQCD1rHdoZUMLh6mEM3WpXOy 0L0E3wu2I2vZ4c64e+6Vp8CR8acpTmzBcksBjebbDDqDgC9/O4gng1ecwZVkRXpz GaNrvP5o06EqsVrNynhEspapvIjaRYRkh0hFVTiKL8UdfVpkX+hun/wZSp3s6M+t /BSWdyieq6lBWDMRmrZPR5F7aCaJ1M1S/ySqwb2owV6Wxd/K/EYrW0ubFegZJBzs EIN5qjybuQBIbeVubps6axVjf1gLdgW/t35MiQdwPVRsbsnjNkc4XRMa7V3bOSPU -----END CERTIFICATE-----Generated at Sat May 10 23:14:51 2025 by rpki-client