$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.mft File: 432c4e45-9934-4a21-b56f-b27d7aa21e49.mft (raw, json) Hash identifier: 3osJkQaOpUad/O9qCrVPq2zZUQzq7kK5TUq1Jis9BVo= Subject key identifier: 23:56:39:E9:62:52:0E:7E:AC:76:78:E6:C6:54:76:E7:70:33:40:13 Authority key identifier: E4:3D:44:53:78:9C:D7:F5:23:11:F2:15:43:36:81:A8:19:E5:63:F0 Certificate issuer: /CN=432c4e45-9934-4a21-b56f-b27d7aa21e49 Certificate serial: 010D0C9F43285849CD6FF18CA60EC46948F2C100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.mft Manifest number: 010D0C9F4328584528435719157927FE2C784B35 Signing time: Sat 10 May 2025 03:00:03 +0000 Manifest this update: Sat 10 May 2025 03:00:03 +0000 Manifest next update: Tue 13 May 2025 03:00:00 +0000 Files and hashes: 1: 432c4e45-9934-4a21-b56f-b27d7aa21e49.crl (hash: okbzeNKVNfw5u3oFXzSnETT985GHHIiM9MY/A7K/xok=) 2: a64bf38f-925a-34bb-b213-9abac238d2a5.roa (hash: MJ0ljWH8xnksXoB9r7mm7iSbmwzWpNp7x/mjIbwD3VI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cd:6f:f1:8c:a6:0e:c4:69:48:f2:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=432c4e45-9934-4a21-b56f-b27d7aa21e49 Validity Not Before: May 10 03:00:03 2025 GMT Not After : May 13 03:00:00 2025 GMT Subject: CN=a4ce26f2-203b-4bc6-9ed5-5aa8bd9a1da0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a8:8f:59:08:07:c1:31:0c:87:4b:6c:5a:c0: 65:f0:e2:0f:3f:31:c2:96:e0:b0:3b:5a:3f:cd:e9: ab:a7:22:0a:69:d4:c5:63:2f:fa:a2:90:be:8f:e9: 18:cd:a0:32:c0:c3:d8:b4:55:23:a6:ba:bc:96:fa: 00:74:d6:59:36:fc:f1:d4:ac:f6:7d:45:6f:1f:b6: a0:d8:0e:80:9c:0e:93:2e:37:24:4a:b1:85:13:ed: 7d:d0:dd:4d:e7:8c:c7:02:92:2d:15:50:59:1b:c3: 38:a1:21:c1:1d:64:6a:9d:d4:f3:f6:01:d8:e3:1a: 00:46:46:bc:24:32:ae:bc:c3:ab:0b:02:19:16:4e: dd:97:94:90:94:d5:aa:52:cd:d3:83:5e:00:a4:70: 6f:2e:3f:5e:09:b3:ea:13:4d:35:ba:a7:9c:0a:23: 58:33:45:87:fd:ec:e9:db:95:e0:aa:b0:5f:2b:cc: d9:bc:fa:60:3e:a0:45:3f:3f:95:1d:5b:50:e1:55: a3:92:b6:98:98:24:34:80:66:df:75:97:82:d6:8b: ff:ac:ab:f5:60:bb:fe:cb:c3:67:88:8f:40:b0:bc: 3f:08:c8:a8:75:71:f1:ef:4e:8d:81:1e:da:bc:7b: 4d:78:28:d6:29:63:59:b3:51:80:a2:d6:57:2f:56: 1b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:56:39:E9:62:52:0E:7E:AC:76:78:E6:C6:54:76:E7:70:33:40:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.crl X509v3 Authority Key Identifier: keyid:E4:3D:44:53:78:9C:D7:F5:23:11:F2:15:43:36:81:A8:19:E5:63:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:60:03:a8:15:98:c5:ef:4c:fe:2d:b9:5c:0f:f4:a5:79:41: fc:2f:47:e5:9d:5a:e9:3b:95:03:b7:c1:8f:e3:9a:bf:56:dc: cb:9e:91:ef:ca:33:9a:96:18:a2:9c:30:36:fc:19:47:27:d5: b4:9e:de:d5:ca:b4:ec:97:a5:85:cc:00:4c:66:a4:d8:e8:b9: 21:05:0d:73:c8:e2:32:80:b8:5e:f8:b3:d6:47:37:cb:73:b0: 3c:db:3a:44:a2:1c:d1:93:d6:9e:19:90:a6:06:a3:50:6f:fd: f5:c8:e1:7e:fa:e4:92:98:95:0d:bb:d8:28:ce:df:b4:08:75: 6c:0f:69:61:06:ac:27:54:9f:af:db:ee:f5:6f:7e:2c:dd:c3: 1e:93:3b:4f:9a:fe:06:84:a5:ad:65:b4:39:6c:40:59:d9:03: b9:a7:8b:5a:26:a5:02:fe:85:32:90:af:53:d0:0d:23:97:d6: 56:cc:75:97:67:fd:e0:0b:6f:d7:15:6c:85:10:4a:15:da:2d: 68:25:10:3a:e9:e2:95:00:be:b2:5b:cb:9f:87:8c:d4:a2:a4: 79:a8:b1:fd:3f:0a:c7:71:e5:e4:86:1e:a3:03:7a:b9:48:4d: 72:27:3a:f8:e4:ed:96:2f:ef:e3:22:d6:0d:ee:b6:27:d8:2f: 71:4d:7f:30 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnNb/GMpg7EaUjywQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDMyYzRlNDUtOTkzNC00YTIxLWI1NmYtYjI3ZDdhYTIx ZTQ5MB4XDTI1MDUxMDAzMDAwM1oXDTI1MDUxMzAzMDAwMFowLzEtMCsGA1UEAxMk YTRjZTI2ZjItMjAzYi00YmM2LTllZDUtNWFhOGJkOWExZGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaiPWQgHwTEMh0tsWsBl8OIPPzHCluCwO1o/ zemrpyIKadTFYy/6opC+j+kYzaAywMPYtFUjprq8lvoAdNZZNvzx1Kz2fUVvH7ag 2A6AnA6TLjckSrGFE+190N1N54zHApItFVBZG8M4oSHBHWRqndTz9gHY4xoARka8 JDKuvMOrCwIZFk7dl5SQlNWqUs3Tg14ApHBvLj9eCbPqE001uqecCiNYM0WH/ezp 25XgqrBfK8zZvPpgPqBFPz+VHVtQ4VWjkraYmCQ0gGbfdZeC1ov/rKv1YLv+y8Nn iI9AsLw/CMiodXHx706NgR7avHtNeCjWKWNZs1GAotZXL1YbLQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCNWOeliUg5+rHZ45sZUdudwM0ATMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80MzJj NGU0NS05OTM0LTRhMjEtYjU2Zi1iMjdkN2FhMjFlNDkvNDMyYzRlNDUtOTkzNC00 YTIxLWI1NmYtYjI3ZDdhYTIxZTQ5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDMyYzRlNDUtOTkzNC00YTIxLWI1 NmYtYjI3ZDdhYTIxZTQ5LzQzMmM0ZTQ1LTk5MzQtNGEyMS1iNTZmLWIyN2Q3YWEy MWU0OS5jcmwwHwYDVR0jBBgwFoAU5D1EU3ic1/UjEfIVQzaBqBnlY/AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80MzJjNGU0NS05OTM0LTRhMjEtYjU2Zi1iMjdk N2FhMjFlNDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDJYAOoFZjF70z+LblcD/Sl eUH8L0flnVrpO5UDt8GP45q/VtzLnpHvyjOalhiinDA2/BlHJ9W0nt7VyrTsl6WF zABMZqTY6LkhBQ1zyOIygLhe+LPWRzfLc7A82zpEohzRk9aeGZCmBqNQb/31yOF+ +uSSmJUNu9gozt+0CHVsD2lhBqwnVJ+v2+71b34s3cMekztPmv4GhKWtZbQ5bEBZ 2QO5p4taJqUC/oUykK9T0A0jl9ZWzHWXZ/3gC2/XFWyFEEoV2i1oJRA66eKVAL6y W8ufh4zUoqR5qLH9PwrHceXkhh6jA3q5SE1yJzr45O2WL+/jItYN7rYn2C9xTX8w -----END CERTIFICATE-----Generated at Sat May 10 13:35:43 2025 by rpki-client