$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft File: b520faac-792a-4f70-8f4c-be06a5992ae1.mft (raw, json) Hash identifier: rQy613Q336BQiYRJojBKssfudmY0ppaA5KRyoNS/gpY= Subject key identifier: 93:1C:4A:97:C9:E3:58:9C:34:B4:E8:8C:83:A1:24:90:B7:EB:BA:9B Authority key identifier: 19:64:64:90:D5:34:4F:B1:82:2F:59:21:B8:D4:67:4D:10:F7:63:16 Certificate issuer: /CN=b520faac-792a-4f70-8f4c-be06a5992ae1 Certificate serial: 010D0C9F43285849C67546DBB1CFCC99A55B6C40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft Manifest number: 010D0C9F432858454B120EB453C95356C481C5A6 Signing time: Wed 07 May 2025 15:00:07 +0000 Manifest this update: Wed 07 May 2025 15:00:07 +0000 Manifest next update: Fri 09 May 2025 15:00:00 +0000 Files and hashes: 1: 26b53dee-927f-3932-9072-92163ff78f26.roa (hash: otBPMgJwtZ5POuXLV/vpmEiLbDFMs0eVTt3qgP5O6RI=) 2: b520faac-792a-4f70-8f4c-be06a5992ae1.crl (hash: LkaA2mKysgecHXfAsbRh6RkfnHtAA3BG5tDhMjzgxto=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c6:75:46:db:b1:cf:cc:99:a5:5b:6c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b520faac-792a-4f70-8f4c-be06a5992ae1 Validity Not Before: May 7 15:00:07 2025 GMT Not After : May 9 15:00:00 2025 GMT Subject: CN=5dc90b72-2660-4195-8113-8825bdd4d10d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8c:76:4d:55:c3:07:a0:10:7a:68:77:33:e0: 81:14:e9:03:19:3d:52:56:d6:7c:44:10:29:4d:c7: 68:0c:62:a8:37:a1:83:aa:ce:96:54:1b:2d:42:2c: 24:8b:0f:23:30:73:17:ad:ab:f2:9b:a7:26:b4:86: cf:f2:2d:2a:86:e9:4f:9a:56:78:2e:ca:dc:3c:d2: 16:96:bf:5e:ef:35:c1:f1:35:b0:c6:d6:b2:48:b3: 6b:28:f2:c5:47:fa:ad:60:a1:6d:6c:99:27:20:7c: 5d:23:2d:89:85:ec:66:ef:57:b2:93:11:d9:5c:35: 90:4f:bd:27:31:30:2b:29:62:bf:86:a9:5e:2e:06: 84:65:5f:54:94:72:82:5e:71:1d:5d:db:d7:6f:f1: 24:9e:97:e0:b8:77:c2:85:3d:69:3c:10:0e:f6:55: 2f:09:1e:65:b5:92:63:ae:8a:89:14:a8:90:7e:e7: a3:9f:51:77:aa:b4:b7:8f:62:ae:b2:c7:89:24:ea: 2c:ec:48:0e:09:7b:96:6f:62:eb:d1:1e:31:39:89: 77:ce:07:ae:12:13:b2:16:91:7b:17:16:df:d6:18: 5f:0e:08:0e:39:cd:04:8e:6c:5d:e7:af:29:85:b4: 06:e2:c4:4d:86:9e:36:ce:bd:26:79:cd:1c:ad:ee: 8d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:1C:4A:97:C9:E3:58:9C:34:B4:E8:8C:83:A1:24:90:B7:EB:BA:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.crl X509v3 Authority Key Identifier: keyid:19:64:64:90:D5:34:4F:B1:82:2F:59:21:B8:D4:67:4D:10:F7:63:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:e5:5f:22:a0:19:cf:c0:0f:de:00:24:e1:60:53:fb:e6:b2: c1:b0:ce:ca:c4:c3:43:9c:33:40:f3:e4:87:8b:d2:e4:5d:22: 78:40:29:17:7d:12:9d:4c:cb:db:a9:e5:aa:6f:5e:7b:24:22: 6d:9e:56:5f:81:6d:d6:75:9d:46:80:79:d7:40:02:fe:e9:79: 8f:23:26:9b:d5:24:16:37:de:53:c1:18:7e:bd:75:75:b6:95: e1:52:9f:c4:d3:00:a8:c7:70:11:c4:a9:50:fc:15:e6:89:24: 1d:3c:2d:de:9d:48:02:78:d7:71:c7:86:e2:3b:61:57:c5:b6: 9e:97:c7:ad:59:f0:0d:98:ba:db:06:0c:e8:76:27:3c:b3:56: 37:9c:41:02:39:4d:9d:e1:c8:0a:29:68:8e:d9:8f:c6:6f:fe: 95:2f:6b:e1:cb:c1:3d:11:c7:34:3a:ca:b5:1a:3d:c4:e0:45: c5:3d:79:76:a7:50:d1:93:e4:e3:fb:ab:f1:96:11:b4:3b:17: 71:3d:e1:50:9e:27:47:2e:a1:1c:21:c6:73:54:26:3d:ea:c4: 20:3e:0d:54:e3:cf:94:53:e0:3a:8c:db:7f:d1:d8:63:10:48: 68:83:44:bf:44:79:df:8c:d6:e9:af:f0:70:55:c8:1d:a5:2b: 27:90:1b:91 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnGdUbbsc/MmaVbbEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjUyMGZhYWMtNzkyYS00ZjcwLThmNGMtYmUwNmE1OTky YWUxMB4XDTI1MDUwNzE1MDAwN1oXDTI1MDUwOTE1MDAwMFowLzEtMCsGA1UEAxMk NWRjOTBiNzItMjY2MC00MTk1LTgxMTMtODgyNWJkZDRkMTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkox2TVXDB6AQemh3M+CBFOkDGT1SVtZ8RBAp TcdoDGKoN6GDqs6WVBstQiwkiw8jMHMXravym6cmtIbP8i0qhulPmlZ4LsrcPNIW lr9e7zXB8TWwxtaySLNrKPLFR/qtYKFtbJknIHxdIy2Jhexm71eykxHZXDWQT70n MTArKWK/hqleLgaEZV9UlHKCXnEdXdvXb/EknpfguHfChT1pPBAO9lUvCR5ltZJj roqJFKiQfuejn1F3qrS3j2KusseJJOos7EgOCXuWb2Lr0R4xOYl3zgeuEhOyFpF7 Fxbf1hhfDggOOc0Ejmxd568phbQG4sRNhp42zr0mec0cre6NBQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJMcSpfJ41icNLTojIOhJJC367qbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNTIw ZmFhYy03OTJhLTRmNzAtOGY0Yy1iZTA2YTU5OTJhZTEvYjUyMGZhYWMtNzkyYS00 ZjcwLThmNGMtYmUwNmE1OTkyYWUxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjUyMGZhYWMtNzkyYS00ZjcwLThm NGMtYmUwNmE1OTkyYWUxL2I1MjBmYWFjLTc5MmEtNGY3MC04ZjRjLWJlMDZhNTk5 MmFlMS5jcmwwHwYDVR0jBBgwFoAUGWRkkNU0T7GCL1khuNRnTRD3YxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iNTIwZmFhYy03OTJhLTRmNzAtOGY0Yy1iZTA2 YTU5OTJhZTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCO5V8ioBnPwA/eACThYFP7 5rLBsM7KxMNDnDNA8+SHi9LkXSJ4QCkXfRKdTMvbqeWqb157JCJtnlZfgW3WdZ1G gHnXQAL+6XmPIyab1SQWN95TwRh+vXV1tpXhUp/E0wCox3ARxKlQ/BXmiSQdPC3e nUgCeNdxx4biO2FXxbael8etWfANmLrbBgzodic8s1Y3nEECOU2d4cgKKWiO2Y/G b/6VL2vhy8E9Ecc0Osq1Gj3E4EXFPXl2p1DRk+Tj+6vxlhG0OxdxPeFQnidHLqEc IcZzVCY96sQgPg1U48+UU+A6jNt/0dhjEEhog0S/RHnfjNbpr/BwVcgdpSsnkBuR -----END CERTIFICATE-----Generated at Thu May 8 13:28:40 2025 by rpki-client