$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.mft File: a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.mft (raw, json) Hash identifier: ROlFBLgVt+KYqiTsib9N9T8tstXAE0M07qO4X62peII= Subject key identifier: 4B:07:EB:33:66:99:70:FE:BA:CB:35:61:FA:AB:A9:63:57:12:FD:54 Authority key identifier: 72:97:B1:4E:30:CE:D9:7E:2E:B8:0E:8B:95:8A:B7:1D:37:5D:45:D7 Certificate issuer: /CN=a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7 Certificate serial: 010D0C9F43285849C1B05F1B11DA942A0E661B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.mft Manifest number: 010D0C9F43285844EA3B75C49737B70931798407 Signing time: Mon 05 May 2025 22:00:07 +0000 Manifest this update: Mon 05 May 2025 22:00:07 +0000 Manifest next update: Thu 08 May 2025 22:00:00 +0000 Files and hashes: 1: 58910c8c-d0fa-30e9-a2fd-18e1b80b12ab.roa (hash: AGiPGe04ldNdDaw77s3510DtyL/bglMBQCjNs6SkPsg=) 2: a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.crl (hash: y3/gd7udE+9N0mgF2QD3gll9VTVu3rd5EfQyOh+c2Rg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c1:b0:5f:1b:11:da:94:2a:0e:66:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7 Validity Not Before: May 5 22:00:07 2025 GMT Not After : May 8 22:00:00 2025 GMT Subject: CN=8a9a82de-dff3-40da-8b69-e623620d9b87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d5:ef:fe:a0:9a:8e:e5:4f:38:71:84:3f:48: dd:b2:6b:86:a7:44:17:4a:9c:34:c1:3a:ef:db:b6: fe:29:2c:29:74:42:4c:0a:78:fe:f1:08:23:27:32: a8:49:d8:2b:21:e0:40:83:d5:99:1d:9f:68:7c:05: 7c:30:ae:2b:b3:64:53:ee:b6:d2:54:11:f1:0b:b9: 0f:79:b0:79:ff:32:16:c0:7a:3c:37:f7:b5:c3:e6: 1d:2c:04:4a:db:8a:28:74:cb:46:6d:98:1b:ee:ff: e7:e6:9e:49:3c:26:da:40:e4:2f:85:ad:a4:f5:4f: 4c:dc:38:c3:7e:e3:f4:ed:80:bf:11:ae:7a:24:69: 80:50:f9:ee:9f:69:6e:6e:aa:ab:e5:62:22:c7:5a: f2:52:c9:4d:4a:fa:18:a4:d9:ee:88:73:99:ed:ee: e8:fd:83:89:f8:28:71:60:36:8a:a8:38:cb:64:5c: 83:06:dc:6e:49:5e:60:de:a7:bc:0e:c8:7a:e9:41: aa:95:55:4d:30:3a:fe:28:04:3a:de:a3:94:5e:bf: 29:9d:83:10:2f:0a:35:65:cc:75:0c:b0:2f:61:53: 0c:1c:68:ca:7e:f1:43:96:3b:e8:ab:d1:c3:b5:65: 7c:ad:40:08:a0:33:5f:b4:43:c3:4b:b0:1b:bf:95: a1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:07:EB:33:66:99:70:FE:BA:CB:35:61:FA:AB:A9:63:57:12:FD:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.crl X509v3 Authority Key Identifier: keyid:72:97:B1:4E:30:CE:D9:7E:2E:B8:0E:8B:95:8A:B7:1D:37:5D:45:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:28:8e:22:45:b1:0e:ae:37:15:e4:9d:64:39:38:83:18:cc: 17:97:2e:bd:45:91:78:7d:c8:c9:93:f8:e6:5b:46:ae:ff:23: cf:04:c6:af:1a:a4:e4:90:aa:98:c7:e8:6d:20:75:f8:5e:41: 23:e1:1c:72:81:06:4a:26:52:25:06:bc:7b:fd:da:65:d8:d3: 7a:1b:7a:fe:f2:be:94:e5:dd:7a:d0:e4:5f:64:e2:92:7a:f2: 29:66:cc:f7:da:a2:9c:50:81:71:bc:ff:aa:5c:65:ac:80:ce: 65:1c:5a:e0:71:bd:9f:ad:f9:38:83:86:0e:76:e4:e2:f4:f6: a2:6b:ae:88:d8:1a:61:1e:b3:72:55:7a:13:ea:be:7e:8d:b1: 9a:de:ac:23:c7:0e:fb:52:67:0b:b2:d1:e2:1e:bc:a6:5b:a3: 69:a1:1d:22:4b:cd:c5:5a:0e:02:20:d8:d7:e6:02:16:34:88: dc:c6:33:13:e1:76:7b:8d:86:67:72:9a:5f:3b:0c:e1:8f:12: 91:dc:4a:2c:06:47:5c:d5:b5:01:d2:f4:d9:a3:0c:f2:ea:89: b9:ba:39:98:8a:8b:71:ab:1b:0d:d4:ab:63:47:47:2e:13:e4: 06:97:07:0d:12:fa:d5:bf:d6:45:ba:3d:c8:d0:31:ce:d1:46: ff:34:77:2f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnBsF8bEdqUKg5mGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFiMWZiNDMtZGIwYy00MmU0LWFkNjItNGUwODZjYTJm NGQ3MB4XDTI1MDUwNTIyMDAwN1oXDTI1MDUwODIyMDAwMFowLzEtMCsGA1UEAxMk OGE5YTgyZGUtZGZmMy00MGRhLThiNjktZTYyMzYyMGQ5Yjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtXv/qCajuVPOHGEP0jdsmuGp0QXSpw0wTrv 27b+KSwpdEJMCnj+8QgjJzKoSdgrIeBAg9WZHZ9ofAV8MK4rs2RT7rbSVBHxC7kP ebB5/zIWwHo8N/e1w+YdLARK24oodMtGbZgb7v/n5p5JPCbaQOQvha2k9U9M3DjD fuP07YC/Ea56JGmAUPnun2lubqqr5WIix1ryUslNSvoYpNnuiHOZ7e7o/YOJ+Chx YDaKqDjLZFyDBtxuSV5g3qe8Dsh66UGqlVVNMDr+KAQ63qOUXr8pnYMQLwo1Zcx1 DLAvYVMMHGjKfvFDljvoq9HDtWV8rUAIoDNftEPDS7Abv5WhMQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEsH6zNmmXD+uss1YfqrqWNXEv1UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hMWIx ZmI0My1kYjBjLTQyZTQtYWQ2Mi00ZTA4NmNhMmY0ZDcvYTFiMWZiNDMtZGIwYy00 MmU0LWFkNjItNGUwODZjYTJmNGQ3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYTFiMWZiNDMtZGIwYy00MmU0LWFk NjItNGUwODZjYTJmNGQ3L2ExYjFmYjQzLWRiMGMtNDJlNC1hZDYyLTRlMDg2Y2Ey ZjRkNy5jcmwwHwYDVR0jBBgwFoAUcpexTjDO2X4uuA6LlYq3HTddRdcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hMWIxZmI0My1kYjBjLTQyZTQtYWQ2Mi00ZTA4 NmNhMmY0ZDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBHKI4iRbEOrjcV5J1kOTiD GMwXly69RZF4fcjJk/jmW0au/yPPBMavGqTkkKqYx+htIHX4XkEj4RxygQZKJlIl Brx7/dpl2NN6G3r+8r6U5d160ORfZOKSevIpZsz32qKcUIFxvP+qXGWsgM5lHFrg cb2frfk4g4YOduTi9Paia66I2BphHrNyVXoT6r5+jbGa3qwjxw77UmcLstHiHrym W6NpoR0iS83FWg4CINjX5gIWNIjcxjMT4XZ7jYZncppfOwzhjxKR3EosBkdc1bUB 0vTZowzy6om5ujmYiotxqxsN1KtjR0cuE+QGlwcNEvrVv9ZFuj3I0DHO0Ub/NHcv -----END CERTIFICATE-----Generated at Tue May 6 21:45:45 2025 by rpki-client