$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft File: 3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft (raw, json) Hash identifier: 1aMmfvmH6doZi+uuaW2cG0iR4gnZtX3junKopVrJfwA= Subject key identifier: F9:EF:BD:56:08:95:7C:02:21:FA:19:08:F0:9C:E4:2E:DD:2E:04:CF Authority key identifier: 0A:AA:92:08:33:0F:0A:CE:C8:0E:39:69:7F:E1:85:63:D1:49:4A:50 Certificate issuer: /CN=3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7 Certificate serial: 010D0C9F43285849C1570A358F6C974323FEB2A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft Manifest number: 010D0C9F43285844D615D248DD853730ADA3F9D1 Signing time: Mon 05 May 2025 19:00:07 +0000 Manifest this update: Mon 05 May 2025 19:00:07 +0000 Manifest next update: Wed 07 May 2025 19:00:00 +0000 Files and hashes: 1: 3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.crl (hash: WgfrLMTpJBPNMHAp+PAtCFQSZKDXiVERPrbkbx9/gr8=) 2: 7dae22f8-939a-3a54-b81c-8890233bc71a.roa (hash: mxdQX7Y619irzFGa/cUMI2xlhFeHtx9Od/Lt9rFaBxE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c1:57:0a:35:8f:6c:97:43:23:fe:b2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7 Validity Not Before: May 5 19:00:07 2025 GMT Not After : May 7 19:00:00 2025 GMT Subject: CN=bf7d6eed-44c2-4d41-a52f-78b1b503ab8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3e:3f:a3:b3:e0:36:2e:f9:76:5c:e7:13:48: fb:83:c1:eb:95:a2:2f:1e:5a:ef:ff:2c:80:74:34: aa:2a:c4:25:b4:f6:c7:f6:1b:3f:a4:07:c7:af:5d: 20:c6:67:4d:35:f1:18:80:f6:f7:d2:e8:ff:9f:90: 05:ad:59:4b:3a:c8:6b:3e:1f:64:15:26:df:66:b7: 0f:7b:42:a9:90:56:65:42:1d:4d:59:e8:c0:ee:b4: 10:fd:5a:75:e1:b7:ea:2b:c9:08:a9:52:14:78:a5: 85:d3:1e:d7:d9:e5:cc:83:3a:90:32:f0:56:65:3d: 09:b6:ca:df:5b:e7:31:8a:30:f3:91:b7:8f:f6:8f: a4:04:00:65:f8:20:c1:3e:6a:5f:f9:9d:1a:56:3c: 88:1e:16:24:3e:9f:95:3e:da:c5:05:b2:56:99:66: 24:90:4e:1f:df:89:d1:c5:8d:11:10:dd:d7:4a:f1: cc:53:8a:f1:16:6a:04:47:4e:09:2f:ac:6e:0b:bf: 24:98:2b:f5:5b:78:aa:78:7b:17:91:8e:fc:8e:c4: bf:29:83:27:4a:62:9a:1d:86:8b:d8:ec:3b:8d:15: 12:b2:b5:4b:8b:d2:34:00:cc:78:5a:cd:7b:4b:d7: 35:8e:31:2c:07:ad:ed:10:a8:8a:4e:6b:3b:57:dc: 8e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:EF:BD:56:08:95:7C:02:21:FA:19:08:F0:9C:E4:2E:DD:2E:04:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.crl X509v3 Authority Key Identifier: keyid:0A:AA:92:08:33:0F:0A:CE:C8:0E:39:69:7F:E1:85:63:D1:49:4A:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:79:32:9b:b8:02:cd:1d:79:18:0a:34:56:f5:93:73:29:8b: 57:78:25:b4:a0:cc:7d:db:47:dd:37:a6:9b:f2:9c:00:15:8c: 92:86:4f:be:f6:65:0a:06:eb:ab:ec:c5:c4:d7:36:c1:85:ec: bb:ce:36:e7:08:d6:df:5f:50:59:b6:e9:67:ee:21:f9:aa:ef: b9:08:16:32:73:c0:b8:fc:d3:80:35:b6:2c:56:fc:04:ac:04: ed:28:ca:4c:d4:1b:31:e9:4f:70:59:e6:22:06:8f:57:06:24: 03:e6:0f:43:55:e6:f5:6d:9a:c4:3a:ec:24:80:95:b7:68:98: 4b:34:0f:63:50:02:a7:c7:ff:06:a5:48:63:ef:60:73:49:40: 7b:09:1a:51:ca:93:5a:c7:60:43:a1:af:72:d8:5c:e9:34:2a: 75:99:ed:85:17:52:48:7e:08:00:e0:62:0a:57:0f:64:e4:d4: ad:cf:b6:e5:55:e6:3f:4e:68:9a:87:b6:3b:06:97:69:d7:b0: 5d:0a:ac:d3:9e:01:94:25:68:a2:5e:a0:8c:fc:b3:35:32:ef: 6a:53:f2:de:71:2d:17:19:33:97:73:b5:19:3d:80:5f:43:6d: 40:8c:cf:9c:bf:ae:e1:c4:d3:01:bd:63:c7:7e:92:ff:25:c8: 52:ae:2d:70 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnBVwo1j2yXQyP+sqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2YyZDM3OGQtMjBlMS00YjVmLTg1YjktZThjNGNiYTVk NWQ3MB4XDTI1MDUwNTE5MDAwN1oXDTI1MDUwNzE5MDAwMFowLzEtMCsGA1UEAxMk YmY3ZDZlZWQtNDRjMi00ZDQxLWE1MmYtNzhiMWI1MDNhYjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz4/o7PgNi75dlznE0j7g8HrlaIvHlrv/yyA dDSqKsQltPbH9hs/pAfHr10gxmdNNfEYgPb30uj/n5AFrVlLOshrPh9kFSbfZrcP e0KpkFZlQh1NWejA7rQQ/Vp14bfqK8kIqVIUeKWF0x7X2eXMgzqQMvBWZT0Jtsrf W+cxijDzkbeP9o+kBABl+CDBPmpf+Z0aVjyIHhYkPp+VPtrFBbJWmWYkkE4f34nR xY0REN3XSvHMU4rxFmoER04JL6xuC78kmCv1W3iqeHsXkY78jsS/KYMnSmKaHYaL 2Ow7jRUSsrVLi9I0AMx4Ws17S9c1jjEsB63tEKiKTms7V9yOKwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPnvvVYIlXwCIfoZCPCc5C7dLgTPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZjJk Mzc4ZC0yMGUxLTRiNWYtODViOS1lOGM0Y2JhNWQ1ZDcvM2YyZDM3OGQtMjBlMS00 YjVmLTg1YjktZThjNGNiYTVkNWQ3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2YyZDM3OGQtMjBlMS00YjVmLTg1 YjktZThjNGNiYTVkNWQ3LzNmMmQzNzhkLTIwZTEtNGI1Zi04NWI5LWU4YzRjYmE1 ZDVkNy5jcmwwHwYDVR0jBBgwFoAUCqqSCDMPCs7IDjlpf+GFY9FJSlAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZjJkMzc4ZC0yMGUxLTRiNWYtODViOS1lOGM0 Y2JhNWQ1ZDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC/eTKbuALNHXkYCjRW9ZNz KYtXeCW0oMx920fdN6ab8pwAFYyShk++9mUKBuur7MXE1zbBhey7zjbnCNbfX1BZ tuln7iH5qu+5CBYyc8C4/NOANbYsVvwErATtKMpM1Bsx6U9wWeYiBo9XBiQD5g9D Veb1bZrEOuwkgJW3aJhLNA9jUAKnx/8GpUhj72BzSUB7CRpRypNax2BDoa9y2Fzp NCp1me2FF1JIfggA4GIKVw9k5NStz7blVeY/Tmiah7Y7Bpdp17BdCqzTngGUJWii XqCM/LM1Mu9qU/LecS0XGTOXc7UZPYBfQ21AjM+cv67hxNMBvWPHfpL/JchSri1w -----END CERTIFICATE-----Generated at Tue May 6 20:35:15 2025 by rpki-client