$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.mft File: 3a033ee1-5d03-497a-8120-3969593cdf7e.mft (raw, json) Hash identifier: QYJmeyaq8A070ctcQ4Rz0aQYArRaNSgBv67+iUGy6kY= Subject key identifier: 08:F3:FB:2E:2A:DD:76:9D:81:16:BC:5F:21:E6:0F:E9:3E:A9:0E:DB Authority key identifier: F8:10:57:08:22:D1:4D:24:0B:47:33:71:7E:77:77:21:75:97:18:07 Certificate issuer: /CN=3a033ee1-5d03-497a-8120-3969593cdf7e Certificate serial: 010D0C9F43285849C95DB53A099E0C43AEF84A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.mft Manifest number: 010D0C9F4328584534EC3BF001B4FD74E407FFAF Signing time: Thu 08 May 2025 16:00:03 +0000 Manifest this update: Thu 08 May 2025 16:00:03 +0000 Manifest next update: Sun 11 May 2025 16:00:00 +0000 Files and hashes: 1: 3a033ee1-5d03-497a-8120-3969593cdf7e.crl (hash: m6ZfTaWR3pJP6nRgUGCCElTOC3V7+bgrkKaZRZNlhxM=) 2: 9a8d9685-4393-3f04-898b-1b075a4b6c59.roa (hash: qhY5LPDyNOfLV+3BMpovE4qNROgY8qjIRrnhElAKyUU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:5d:b5:3a:09:9e:0c:43:ae:f8:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a033ee1-5d03-497a-8120-3969593cdf7e Validity Not Before: May 8 16:00:03 2025 GMT Not After : May 11 16:00:00 2025 GMT Subject: CN=254d894d-44ac-4566-862c-ab799a3087d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:bb:af:4e:f0:d5:cb:eb:43:89:f6:35:32:38: 29:32:bf:cd:33:ad:f3:36:a7:05:d1:7a:ec:c2:78: 8d:eb:b1:20:1d:2c:46:1b:e2:53:0b:e1:24:20:42: 72:44:9b:32:e4:b1:e3:2a:7c:53:3e:e1:7a:89:3e: d6:dd:9a:45:45:bd:d7:35:11:57:dd:fd:ec:7e:50: fe:ad:7d:32:b9:31:19:36:b8:c0:74:20:9d:9f:7b: f8:e6:d7:50:21:7e:f3:b7:74:13:0f:29:5f:a9:d8: f8:4b:44:73:d7:f1:5c:be:cb:a0:9a:77:ba:a4:fe: 1d:af:2f:eb:83:9e:1e:de:78:9c:6d:a7:32:b7:31: c2:d9:90:c5:fd:91:19:3a:94:4c:a3:40:4e:65:09: 34:13:97:38:a5:eb:ed:e5:aa:bf:01:36:5a:b8:c3: ea:a3:70:b1:e7:19:c5:88:52:33:51:6f:ab:27:67: 6f:62:fd:5b:2e:fe:81:03:d8:57:e5:c6:d8:bf:47: 0d:fe:98:19:c4:5d:e4:58:73:07:37:fa:44:26:c3: 8c:f5:bd:7c:ad:bb:c7:69:1e:65:28:6a:61:65:0d: 99:6c:5e:f3:6b:2c:f0:ca:c3:24:1a:d7:4f:01:5e: b6:4b:09:a6:fd:dc:44:49:77:0a:30:68:cd:15:22: b0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F3:FB:2E:2A:DD:76:9D:81:16:BC:5F:21:E6:0F:E9:3E:A9:0E:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.crl X509v3 Authority Key Identifier: keyid:F8:10:57:08:22:D1:4D:24:0B:47:33:71:7E:77:77:21:75:97:18:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:44:f6:7c:89:22:2a:19:fb:e0:d0:f7:88:47:57:0f:92:ea: e8:82:f2:ad:33:93:e0:a7:57:1b:6f:73:8c:62:91:57:a8:67: 69:5d:f4:21:33:eb:a0:da:d1:71:3c:c2:6d:8a:b1:8e:8b:57: e7:76:0a:c7:89:0c:64:de:e1:5c:86:ff:18:bb:5a:27:66:6d: 23:3c:ec:3d:11:17:bd:d4:2c:98:81:48:44:02:c1:e7:b6:c8: 74:9b:c7:11:48:71:c0:1f:64:fd:1a:8c:7d:1f:7e:fe:58:78: be:fc:f1:21:0c:ea:c0:e6:80:53:88:ea:c2:2e:02:95:9e:1d: c5:35:51:c4:17:8f:59:83:4a:34:48:73:ae:3b:88:0b:ba:32: c7:13:9e:d9:89:ad:47:a5:c1:ff:e2:b5:2b:df:fe:eb:27:09: 65:0d:ea:39:7a:45:01:93:b5:74:58:06:e7:21:d7:f5:b9:ab: f0:26:0a:2e:66:31:29:ac:1a:e6:a6:40:cf:88:df:9c:d4:18: 92:6f:43:fe:32:72:fb:02:16:59:ef:9d:44:df:2e:89:97:64: 4c:f9:20:c4:23:5f:80:52:31:d9:8e:36:c4:cd:ec:da:5e:5c: cc:13:89:63:78:d0:5b:86:1e:a4:e6:65:2b:c7:21:3b:63:5b: f2:51:2c:42 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnJXbU6CZ4MQ674SgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2EwMzNlZTEtNWQwMy00OTdhLTgxMjAtMzk2OTU5M2Nk ZjdlMB4XDTI1MDUwODE2MDAwM1oXDTI1MDUxMTE2MDAwMFowLzEtMCsGA1UEAxMk MjU0ZDg5NGQtNDRhYy00NTY2LTg2MmMtYWI3OTlhMzA4N2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLuvTvDVy+tDifY1MjgpMr/NM63zNqcF0Xrs wniN67EgHSxGG+JTC+EkIEJyRJsy5LHjKnxTPuF6iT7W3ZpFRb3XNRFX3f3sflD+ rX0yuTEZNrjAdCCdn3v45tdQIX7zt3QTDylfqdj4S0Rz1/Fcvsugmne6pP4dry/r g54e3nicbacytzHC2ZDF/ZEZOpRMo0BOZQk0E5c4pevt5aq/ATZauMPqo3Cx5xnF iFIzUW+rJ2dvYv1bLv6BA9hX5cbYv0cN/pgZxF3kWHMHN/pEJsOM9b18rbvHaR5l KGphZQ2ZbF7zayzwysMkGtdPAV62Swmm/dxESXcKMGjNFSKwwwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAjz+y4q3XadgRa8XyHmD+k+qQ7bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYTAz M2VlMS01ZDAzLTQ5N2EtODEyMC0zOTY5NTkzY2RmN2UvM2EwMzNlZTEtNWQwMy00 OTdhLTgxMjAtMzk2OTU5M2NkZjdlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2EwMzNlZTEtNWQwMy00OTdhLTgx MjAtMzk2OTU5M2NkZjdlLzNhMDMzZWUxLTVkMDMtNDk3YS04MTIwLTM5Njk1OTNj ZGY3ZS5jcmwwHwYDVR0jBBgwFoAU+BBXCCLRTSQLRzNxfnd3IXWXGAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYTAzM2VlMS01ZDAzLTQ5N2EtODEyMC0zOTY5 NTkzY2RmN2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA2RPZ8iSIqGfvg0PeIR1cP kurogvKtM5Pgp1cbb3OMYpFXqGdpXfQhM+ug2tFxPMJtirGOi1fndgrHiQxk3uFc hv8Yu1onZm0jPOw9ERe91CyYgUhEAsHntsh0m8cRSHHAH2T9Gox9H37+WHi+/PEh DOrA5oBTiOrCLgKVnh3FNVHEF49Zg0o0SHOuO4gLujLHE57Zia1HpcH/4rUr3/7r JwllDeo5ekUBk7V0WAbnIdf1uavwJgouZjEprBrmpkDPiN+c1BiSb0P+MnL7AhZZ 751E3y6Jl2RM+SDEI1+AUjHZjjbEzezaXlzME4ljeNBbhh6k5mUrxyE7Y1vyUSxC -----END CERTIFICATE-----Generated at Fri May 9 00:25:53 2025 by rpki-client