$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/250ff67c-5904-4655-8b50-832a485ad1b8.mft File: 250ff67c-5904-4655-8b50-832a485ad1b8.mft (raw, json) Hash identifier: 2PxAha655VhbVk7PheI8EHjNv7xpBtQ20T6zkidhXF8= Subject key identifier: F6:5A:79:71:F1:F1:6A:1E:1A:BF:A7:77:DF:18:98:0B:18:9B:DB:2B Authority key identifier: D9:6C:55:DE:64:B8:CC:BB:AA:F1:2C:69:37:97:52:99:75:55:6B:39 Certificate issuer: /CN=250ff67c-5904-4655-8b50-832a485ad1b8 Certificate serial: 010D0C9F43285849D0B1CB00083D2D736EBED180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/250ff67c-5904-4655-8b50-832a485ad1b8.mft Manifest number: 010D0C9F4328584073A84550DC18A073FE69852E Signing time: Sun 11 May 2025 07:00:07 +0000 Manifest this update: Sun 11 May 2025 07:00:07 +0000 Manifest next update: Wed 14 May 2025 07:00:00 +0000 Files and hashes: 1: 0b601613-bb29-3f7b-9ff9-886f0c9a7dbc.roa (hash: 2bp/pyIL8z28aInVfibGuKOhhSu6OiJGP8euF+nUdEE=) 2: 250ff67c-5904-4655-8b50-832a485ad1b8.crl (hash: NdsGDCeEnDEFfvYsXh/c3D35OqsYuscF0iBLz06hkOk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/250ff67c-5904-4655-8b50-832a485ad1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/250ff67c-5904-4655-8b50-832a485ad1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d0:b1:cb:00:08:3d:2d:73:6e:be:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=250ff67c-5904-4655-8b50-832a485ad1b8 Validity Not Before: May 11 07:00:07 2025 GMT Not After : May 14 07:00:00 2025 GMT Subject: CN=6c71b468-5077-432d-baa7-28826feb8925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3c:aa:88:5f:c1:49:08:5b:c3:2a:67:1d:f8: 1c:f1:49:d7:9a:37:ed:04:b9:f8:9e:5e:de:01:11: b5:be:97:4e:03:d6:f9:cc:ab:a9:2c:cb:2b:38:f7: 48:18:ba:bd:ca:83:c9:e7:93:21:fe:54:7d:75:68: b7:03:96:27:6a:5f:6e:88:22:bc:f5:01:4b:7a:7d: 35:c1:e0:ad:cf:33:ac:d8:1f:c6:8c:ff:70:17:26: b1:28:0d:9e:16:d5:1f:1e:4d:9b:60:cf:be:25:fe: 95:c6:51:d9:ca:86:92:c7:a1:6d:67:e8:3b:f9:cc: 1d:95:90:4e:a7:d3:34:24:0e:14:b7:7c:42:56:18: 24:ff:24:74:6a:c7:2a:cd:32:35:84:fb:34:e8:9a: 52:1c:cd:c2:af:49:25:8f:f8:ac:45:da:50:cd:b1: 2f:91:d9:a2:aa:d2:da:c8:35:b1:60:cc:62:0c:d9: f2:c9:32:cb:db:63:42:96:c9:f1:29:59:f3:5d:1e: 7e:5b:e6:82:c4:d5:73:53:46:41:f5:da:38:d2:ce: e2:e5:1d:de:97:a4:e8:b8:d2:30:83:4b:4c:70:93: 03:cc:55:76:82:dd:7b:a5:76:19:fc:7f:5c:5f:b8: ce:16:a9:4c:df:b4:f1:2d:6d:73:b9:1e:f1:8f:bc: 61:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:5A:79:71:F1:F1:6A:1E:1A:BF:A7:77:DF:18:98:0B:18:9B:DB:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/250ff67c-5904-4655-8b50-832a485ad1b8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/250ff67c-5904-4655-8b50-832a485ad1b8.crl X509v3 Authority Key Identifier: keyid:D9:6C:55:DE:64:B8:CC:BB:AA:F1:2C:69:37:97:52:99:75:55:6B:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:a3:fc:ec:40:7b:d8:33:56:62:30:65:92:86:7f:72:6f:2c: 23:71:03:dd:63:6e:3d:83:c9:14:d8:38:0e:ba:db:c7:6b:25: d5:67:c4:91:6d:e7:72:34:fb:c1:25:70:64:0e:8a:83:76:08: 4c:f3:d1:c9:db:5f:05:01:0c:d7:c4:e5:3d:30:60:c9:d1:4c: b1:76:b5:4f:aa:44:42:95:69:78:cb:00:b6:22:19:23:09:03: 6e:4a:43:4e:ac:66:77:9f:ac:c5:0f:7f:75:ae:16:34:58:e7: 0f:c0:d9:f9:2f:1e:91:ce:be:09:48:72:04:db:c5:6c:7d:90: 97:10:95:30:0e:fe:09:5f:38:c4:b2:30:f7:ad:9f:c8:da:67: 6c:7e:d1:db:61:20:cb:ac:d4:f1:08:9b:ed:80:3e:64:70:ad: 22:16:4c:ac:ef:b8:83:fb:cf:2c:79:fd:02:60:4c:41:56:2e: ea:8c:2f:5d:96:19:a3:91:b5:45:be:bf:75:9d:03:51:ff:12: d6:22:ea:a2:e2:f4:af:87:94:db:6d:65:0a:b0:ef:d1:5e:e6: 50:be:3d:12:9e:ef:ce:da:8b:dc:c3:39:71:c7:b0:25:71:28: 1d:45:e0:85:2c:f3:8f:15:bf:59:9f:6c:38:52:82:97:01:0d: 25:6e:51:06 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnQscsACD0tc26+0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUwZmY2N2MtNTkwNC00NjU1LThiNTAtODMyYTQ4NWFk MWI4MB4XDTI1MDUxMTA3MDAwN1oXDTI1MDUxNDA3MDAwMFowLzEtMCsGA1UEAxMk NmM3MWI0NjgtNTA3Ny00MzJkLWJhYTctMjg4MjZmZWI4OTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzyqiF/BSQhbwypnHfgc8UnXmjftBLn4nl7e ARG1vpdOA9b5zKupLMsrOPdIGLq9yoPJ55Mh/lR9dWi3A5Ynal9uiCK89QFLen01 weCtzzOs2B/GjP9wFyaxKA2eFtUfHk2bYM++Jf6VxlHZyoaSx6FtZ+g7+cwdlZBO p9M0JA4Ut3xCVhgk/yR0ascqzTI1hPs06JpSHM3Cr0klj/isRdpQzbEvkdmiqtLa yDWxYMxiDNnyyTLL22NClsnxKVnzXR5+W+aCxNVzU0ZB9do40s7i5R3el6TouNIw g0tMcJMDzFV2gt17pXYZ/H9cX7jOFqlM37TxLW1zuR7xj7xhfwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPZaeXHx8WoeGr+nd98YmAsYm9srMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTBm ZjY3Yy01OTA0LTQ2NTUtOGI1MC04MzJhNDg1YWQxYjgvMjUwZmY2N2MtNTkwNC00 NjU1LThiNTAtODMyYTQ4NWFkMWI4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjUwZmY2N2MtNTkwNC00NjU1LThi NTAtODMyYTQ4NWFkMWI4LzI1MGZmNjdjLTU5MDQtNDY1NS04YjUwLTgzMmE0ODVh ZDFiOC5jcmwwHwYDVR0jBBgwFoAU2WxV3mS4zLuq8SxpN5dSmXVVazkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTBmZjY3Yy01OTA0LTQ2NTUtOGI1MC04MzJh NDg1YWQxYjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBdo/zsQHvYM1ZiMGWShn9y bywjcQPdY249g8kU2DgOutvHayXVZ8SRbedyNPvBJXBkDoqDdghM89HJ218FAQzX xOU9MGDJ0UyxdrVPqkRClWl4ywC2IhkjCQNuSkNOrGZ3n6zFD391rhY0WOcPwNn5 Lx6Rzr4JSHIE28VsfZCXEJUwDv4JXzjEsjD3rZ/I2mdsftHbYSDLrNTxCJvtgD5k cK0iFkys77iD+88sef0CYExBVi7qjC9dlhmjkbVFvr91nQNR/xLWIuqi4vSvh5Tb bWUKsO/RXuZQvj0Snu/O2ovcwzlxx7AlcSgdReCFLPOPFb9Zn2w4UoKXAQ0lblEG -----END CERTIFICATE-----Generated at Sun May 11 10:23:21 2025 by rpki-client