$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/785749fa-091c-4978-a918-3238e45d2a1c.mft File: 785749fa-091c-4978-a918-3238e45d2a1c.mft (raw, json) Hash identifier: v/dbQIQI0bHZRST92e3apdIw5HrTPudSBJGawxvP4vg= Subject key identifier: 45:EA:FB:63:27:FB:17:28:80:A2:A0:09:4A:75:F8:38:FD:5A:81:5C Authority key identifier: 33:F0:9A:2E:39:C5:2F:69:00:C8:DB:6A:A8:D7:FF:36:1D:F8:31:13 Certificate issuer: /CN=785749fa-091c-4978-a918-3238e45d2a1c Certificate serial: 010D0C9F43285849C192963F9F698734037A8680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/785749fa-091c-4978-a918-3238e45d2a1c.mft Manifest number: 010D0C9F432858463EB12C2B8F8C3639108C8BCA Signing time: Mon 05 May 2025 21:00:07 +0000 Manifest this update: Mon 05 May 2025 21:00:07 +0000 Manifest next update: Thu 08 May 2025 21:00:00 +0000 Files and hashes: 1: 785749fa-091c-4978-a918-3238e45d2a1c.crl (hash: bHzZ20hJymU4UhXr1c8ttRQiXZqGDBCKGlnPlKKOD9s=) 2: b686ce8c-32f6-3cf3-a720-88a81e5c9566.roa (hash: w8vAQhbzfAHfYOaxglZrizUlC3Ot4MWCLnZfoGYZ1jM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/785749fa-091c-4978-a918-3238e45d2a1c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/785749fa-091c-4978-a918-3238e45d2a1c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c1:92:96:3f:9f:69:87:34:03:7a:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=785749fa-091c-4978-a918-3238e45d2a1c Validity Not Before: May 5 21:00:07 2025 GMT Not After : May 8 21:00:00 2025 GMT Subject: CN=4acbe587-4567-4f33-8ece-3ab366531421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0e:c9:54:34:70:90:cf:c8:ce:41:17:40:88: 8c:05:5a:f5:18:bb:e7:4b:4a:b9:ee:96:cf:bb:a7: 77:7c:46:c9:5b:2c:dd:e5:18:6f:f1:45:04:f1:b6: f7:8b:52:1f:db:35:fa:71:15:3f:37:a7:2f:b9:29: ad:92:42:a6:20:64:80:ef:bf:86:ff:c6:49:25:ba: a7:fa:a5:46:b8:41:03:6d:c2:04:c1:57:68:14:e6: fc:f2:3e:a4:0b:60:06:b5:a7:20:d9:76:d1:97:44: 48:d0:cd:0c:20:76:85:9c:35:be:5c:89:2b:53:d1: 8a:72:6f:1f:b1:d1:43:75:56:a2:e4:35:a4:d4:5a: 4e:0a:87:e4:4b:e8:d1:cc:0f:b0:ca:84:e9:e4:e6: c5:0a:84:41:b2:21:ce:67:ea:69:70:93:3d:8a:c1: 11:be:41:d8:fb:ac:22:69:0b:72:cb:00:79:c8:48: 95:42:fa:31:1a:79:e4:c5:1f:f4:c4:1d:a2:89:2e: 20:8c:03:c9:1c:c8:22:c9:0b:05:ad:88:3f:45:15: d2:46:fd:a9:9c:8c:01:15:75:50:f3:33:91:f4:50: 5a:ba:4e:a3:dc:f1:3c:18:f7:73:4a:01:fb:ac:3d: 67:65:df:fd:d8:f2:65:5e:9d:ce:43:38:09:57:85: 32:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:EA:FB:63:27:FB:17:28:80:A2:A0:09:4A:75:F8:38:FD:5A:81:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/785749fa-091c-4978-a918-3238e45d2a1c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/785749fa-091c-4978-a918-3238e45d2a1c.crl X509v3 Authority Key Identifier: keyid:33:F0:9A:2E:39:C5:2F:69:00:C8:DB:6A:A8:D7:FF:36:1D:F8:31:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:fd:2e:d3:ab:ce:11:04:b9:01:eb:fd:96:54:86:e9:fc:ac: ec:c3:9b:11:17:a5:08:4c:93:18:4c:fe:4b:49:05:02:16:d5: 46:08:e5:fd:e7:5c:93:ab:d0:61:c2:6b:07:7c:74:56:27:3a: 90:9b:3e:2a:3d:1b:f8:fa:62:14:d8:1d:d6:81:3d:f6:8b:b2: 50:58:e7:0b:41:25:4d:e7:b1:4d:4c:09:e9:86:d3:1d:e6:3c: f5:88:c9:7a:ff:e4:bf:6a:5f:33:94:9f:04:84:4f:17:86:03: ea:c7:3d:48:17:4a:4f:b2:6b:16:0e:d1:df:b0:a3:5a:b0:e8: 49:7d:d6:dc:cf:13:f9:fd:36:1a:8e:b8:7b:2a:40:9e:44:2e: 44:48:4b:e8:e0:0a:e5:c2:2b:a9:f0:c4:0c:8f:26:7b:c1:44: 5d:00:45:b1:99:e6:d6:07:b7:51:21:cd:12:37:6d:64:95:59: de:4c:21:50:1a:21:30:72:27:4e:00:a0:66:ac:bf:6d:da:76: 66:aa:d0:50:59:85:9e:df:e4:18:61:5f:21:b1:ee:34:9a:58: fd:c4:52:56:3c:3f:f7:09:8f:9e:be:4d:04:f3:9a:37:7e:18: 6d:e5:d7:a9:fe:98:ac:75:70:56:21:69:f6:79:b2:33:9a:49: d1:14:19:44 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnBkpY/n2mHNAN6hoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg1NzQ5ZmEtMDkxYy00OTc4LWE5MTgtMzIzOGU0NWQy YTFjMB4XDTI1MDUwNTIxMDAwN1oXDTI1MDUwODIxMDAwMFowLzEtMCsGA1UEAxMk NGFjYmU1ODctNDU2Ny00ZjMzLThlY2UtM2FiMzY2NTMxNDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAig7JVDRwkM/IzkEXQIiMBVr1GLvnS0q57pbP u6d3fEbJWyzd5Rhv8UUE8bb3i1If2zX6cRU/N6cvuSmtkkKmIGSA77+G/8ZJJbqn +qVGuEEDbcIEwVdoFOb88j6kC2AGtacg2XbRl0RI0M0MIHaFnDW+XIkrU9GKcm8f sdFDdVai5DWk1FpOCofkS+jRzA+wyoTp5ObFCoRBsiHOZ+ppcJM9isERvkHY+6wi aQtyywB5yEiVQvoxGnnkxR/0xB2iiS4gjAPJHMgiyQsFrYg/RRXSRv2pnIwBFXVQ 8zOR9FBauk6j3PE8GPdzSgH7rD1nZd/92PJlXp3OQzgJV4UyFQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEXq+2Mn+xcogKKgCUp1+Dj9WoFcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83ODU3 NDlmYS0wOTFjLTQ5NzgtYTkxOC0zMjM4ZTQ1ZDJhMWMvNzg1NzQ5ZmEtMDkxYy00 OTc4LWE5MTgtMzIzOGU0NWQyYTFjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzg1NzQ5ZmEtMDkxYy00OTc4LWE5 MTgtMzIzOGU0NWQyYTFjLzc4NTc0OWZhLTA5MWMtNDk3OC1hOTE4LTMyMzhlNDVk MmExYy5jcmwwHwYDVR0jBBgwFoAUM/CaLjnFL2kAyNtqqNf/Nh34MRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83ODU3NDlmYS0wOTFjLTQ5NzgtYTkxOC0zMjM4 ZTQ1ZDJhMWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBf/S7Tq84RBLkB6/2WVIbp /Kzsw5sRF6UITJMYTP5LSQUCFtVGCOX951yTq9BhwmsHfHRWJzqQmz4qPRv4+mIU 2B3WgT32i7JQWOcLQSVN57FNTAnphtMd5jz1iMl6/+S/al8zlJ8EhE8XhgPqxz1I F0pPsmsWDtHfsKNasOhJfdbczxP5/TYajrh7KkCeRC5ESEvo4Arlwiup8MQMjyZ7 wURdAEWxmebWB7dRIc0SN21klVneTCFQGiEwcidOAKBmrL9t2nZmqtBQWYWe3+QY YV8hse40mlj9xFJWPD/3CY+evk0E85o3fhht5dep/pisdXBWIWn2ebIzmknRFBlE -----END CERTIFICATE-----Generated at Tue May 6 12:20:26 2025 by rpki-client