$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1db84b45-be4f-4be4-8853-ec7e2099af75/1db84b45-be4f-4be4-8853-ec7e2099af75.mft File: 1db84b45-be4f-4be4-8853-ec7e2099af75.mft (raw, json) Hash identifier: PHUX/3YrfFB+hFXy/g7AhQJBktyBjYVTEdwMlkdsmVU= Subject key identifier: 43:45:8D:C8:91:BA:46:DF:23:D8:4F:15:89:BD:55:20:47:0C:63:43 Authority key identifier: 71:58:C4:59:20:10:62:39:B3:19:0D:2F:4A:DD:A5:9C:CD:59:76:38 Certificate issuer: /CN=1db84b45-be4f-4be4-8853-ec7e2099af75 Certificate serial: 010D0C9F43285849C1B05AB63ABB070C52773300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1db84b45-be4f-4be4-8853-ec7e2099af75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1db84b45-be4f-4be4-8853-ec7e2099af75/1db84b45-be4f-4be4-8853-ec7e2099af75.mft Manifest number: 010D0C9F4328584073A82D97BA9FB9CBF4D8BFE9 Signing time: Mon 05 May 2025 22:00:07 +0000 Manifest this update: Mon 05 May 2025 22:00:07 +0000 Manifest next update: Wed 07 May 2025 22:00:00 +0000 Files and hashes: 1: 1db84b45-be4f-4be4-8853-ec7e2099af75.crl (hash: TlIZtewW2Y4IBY0rsUiczoiQE7i7redPnmE03lsgQSw=) 2: fe798b9c-61a6-3bfa-a8df-f42f7e89cd9d.roa (hash: SVju9iT4WEAOlK3KHzMMN7ZOy0FyTGmfxltZoRhQl8A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1db84b45-be4f-4be4-8853-ec7e2099af75/1db84b45-be4f-4be4-8853-ec7e2099af75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1db84b45-be4f-4be4-8853-ec7e2099af75/1db84b45-be4f-4be4-8853-ec7e2099af75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1db84b45-be4f-4be4-8853-ec7e2099af75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c1:b0:5a:b6:3a:bb:07:0c:52:77:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1db84b45-be4f-4be4-8853-ec7e2099af75 Validity Not Before: May 5 22:00:07 2025 GMT Not After : May 7 22:00:00 2025 GMT Subject: CN=5fc623d9-b57d-4697-9e65-a0e646678cdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:88:87:ec:bf:50:6c:f4:d4:11:62:c2:17:58: 5d:8a:11:f7:78:47:09:67:92:05:3d:46:50:cc:64: 4e:87:1b:3e:2f:0f:7f:72:a1:63:9d:97:b3:8f:05: 03:81:77:fa:a9:ca:96:98:fc:2f:a8:c9:3b:73:e9: 68:9c:08:d5:1f:17:7d:2d:82:7d:4a:b0:02:6c:7d: 81:4b:18:5e:32:ca:63:42:c6:5a:74:83:7b:3e:8a: 21:fb:68:57:25:73:9f:be:6f:31:eb:67:43:72:9d: f9:9e:16:3c:54:99:19:52:38:31:fb:01:f8:da:6f: 33:56:71:68:76:85:15:1a:c7:ba:9f:78:7c:f6:68: 28:8e:1e:11:bf:27:9c:e6:33:4b:d3:19:ac:63:17: bc:82:4c:9b:ff:47:15:84:3a:16:c8:bf:c7:83:26: 3a:1d:de:14:dd:1e:6e:24:c9:14:8d:8c:ed:57:b6: 75:9c:4d:70:d8:4a:82:c7:7c:2e:b2:c0:15:79:b2: 7a:65:54:e2:19:00:b2:6f:46:f5:90:c7:cd:ab:b4: 7d:9c:a7:ab:54:af:b3:c0:b5:b6:04:be:28:ef:9d: d5:d1:9b:70:37:ff:49:0b:3c:ca:ec:6b:b1:4e:ba: ef:fa:94:fe:bc:fc:fa:df:a1:ea:10:a6:10:2f:ad: 96:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:45:8D:C8:91:BA:46:DF:23:D8:4F:15:89:BD:55:20:47:0C:63:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1db84b45-be4f-4be4-8853-ec7e2099af75/1db84b45-be4f-4be4-8853-ec7e2099af75.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1db84b45-be4f-4be4-8853-ec7e2099af75/1db84b45-be4f-4be4-8853-ec7e2099af75.crl X509v3 Authority Key Identifier: keyid:71:58:C4:59:20:10:62:39:B3:19:0D:2F:4A:DD:A5:9C:CD:59:76:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1db84b45-be4f-4be4-8853-ec7e2099af75.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:7e:f1:af:44:b4:57:52:7a:38:4f:36:17:bd:c6:12:cf:2f: a1:28:6e:6f:6e:0b:7a:05:31:7f:13:f5:e0:27:20:67:5a:09: 9e:a4:d1:c6:0e:d3:d2:2d:ee:da:a2:1c:0c:d2:13:46:dc:0b: b1:8f:d4:49:92:63:8b:ae:b7:b5:9d:ba:d7:05:8b:3e:c7:3b: 05:53:ba:a0:e5:19:f5:66:9d:bd:30:e7:a5:2c:d2:8d:27:5e: 47:2d:56:36:b9:64:54:3e:f9:b7:cd:a5:eb:4d:9e:30:39:dd: f9:36:d0:97:e1:48:ce:6b:ce:94:6d:90:06:5e:d3:2a:d5:bc: 3e:4f:6b:69:33:41:0b:cf:f6:bf:0b:01:bb:ce:85:50:65:35: 76:a1:f4:25:4c:73:38:91:eb:1e:15:4b:47:f8:ab:7c:a8:14: dc:9b:7d:72:76:14:d2:89:f9:74:c0:1b:54:58:13:c9:ea:7d: 00:f6:c0:0d:cc:bc:8e:4b:4d:ae:ee:df:c3:21:ed:89:a6:1b: e8:3d:2b:5e:70:ab:32:56:a4:fe:fc:04:8b:19:53:7b:9e:ab: 41:89:95:94:37:07:9a:dd:52:cc:64:38:c3:1c:40:3b:d0:d3: 33:db:2a:b3:cb:10:79:2c:c9:b4:da:02:22:99:8c:72:87:f8: 85:65:59:01 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnBsFq2OrsHDFJ3MwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRiODRiNDUtYmU0Zi00YmU0LTg4NTMtZWM3ZTIwOTlh Zjc1MB4XDTI1MDUwNTIyMDAwN1oXDTI1MDUwNzIyMDAwMFowLzEtMCsGA1UEAxMk NWZjNjIzZDktYjU3ZC00Njk3LTllNjUtYTBlNjQ2Njc4Y2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4iH7L9QbPTUEWLCF1hdihH3eEcJZ5IFPUZQ zGROhxs+Lw9/cqFjnZezjwUDgXf6qcqWmPwvqMk7c+lonAjVHxd9LYJ9SrACbH2B SxheMspjQsZadIN7Pooh+2hXJXOfvm8x62dDcp35nhY8VJkZUjgx+wH42m8zVnFo doUVGse6n3h89mgojh4Rvyec5jNL0xmsYxe8gkyb/0cVhDoWyL/HgyY6Hd4U3R5u JMkUjYztV7Z1nE1w2EqCx3wussAVebJ6ZVTiGQCyb0b1kMfNq7R9nKerVK+zwLW2 BL4o753V0ZtwN/9JCzzK7GuxTrrv+pT+vPz636HqEKYQL62WIwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFENFjciRukbfI9hPFYm9VSBHDGNDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZGI4 NGI0NS1iZTRmLTRiZTQtODg1My1lYzdlMjA5OWFmNzUvMWRiODRiNDUtYmU0Zi00 YmU0LTg4NTMtZWM3ZTIwOTlhZjc1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWRiODRiNDUtYmU0Zi00YmU0LTg4 NTMtZWM3ZTIwOTlhZjc1LzFkYjg0YjQ1LWJlNGYtNGJlNC04ODUzLWVjN2UyMDk5 YWY3NS5jcmwwHwYDVR0jBBgwFoAUcVjEWSAQYjmzGQ0vSt2lnM1ZdjgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZGI4NGI0NS1iZTRmLTRiZTQtODg1My1lYzdl MjA5OWFmNzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA4fvGvRLRXUno4TzYXvcYS zy+hKG5vbgt6BTF/E/XgJyBnWgmepNHGDtPSLe7aohwM0hNG3Auxj9RJkmOLrre1 nbrXBYs+xzsFU7qg5Rn1Zp29MOelLNKNJ15HLVY2uWRUPvm3zaXrTZ4wOd35NtCX 4UjOa86UbZAGXtMq1bw+T2tpM0ELz/a/CwG7zoVQZTV2ofQlTHM4keseFUtH+Kt8 qBTcm31ydhTSifl0wBtUWBPJ6n0A9sANzLyOS02u7t/DIe2JphvoPStecKsyVqT+ /ASLGVN7nqtBiZWUNwea3VLMZDjDHEA70NMz2yqzyxB5LMm02gIimYxyh/iFZVkB -----END CERTIFICATE-----Generated at Tue May 6 06:17:27 2025 by rpki-client