$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06dcca32-0336-4ac7-9c00-79ccd9e61ba0/06dcca32-0336-4ac7-9c00-79ccd9e61ba0.mft File: 06dcca32-0336-4ac7-9c00-79ccd9e61ba0.mft (raw, json) Hash identifier: MGhn0qgdkQsykThBr8zZb+xe5Mbai1Ul/IhiTX0sTHE= Subject key identifier: 5E:7A:86:EE:4F:B8:5B:2C:E7:90:BA:B9:BD:8E:9C:22:29:09:48:AC Authority key identifier: EF:0B:2B:E9:83:A2:A1:78:65:71:AE:D8:C3:FD:B7:BE:7F:AE:A9:7D Certificate issuer: /CN=06dcca32-0336-4ac7-9c00-79ccd9e61ba0 Certificate serial: 010D0C9F43285849D2706BEA84E9A709ED449E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06dcca32-0336-4ac7-9c00-79ccd9e61ba0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06dcca32-0336-4ac7-9c00-79ccd9e61ba0/06dcca32-0336-4ac7-9c00-79ccd9e61ba0.mft Manifest number: 010D0C9F4328584073A82BA8C386E263453A086F Signing time: Sun 11 May 2025 22:00:03 +0000 Manifest this update: Sun 11 May 2025 22:00:03 +0000 Manifest next update: Tue 13 May 2025 22:00:00 +0000 Files and hashes: 1: 06dcca32-0336-4ac7-9c00-79ccd9e61ba0.crl (hash: 370TfQnIsb803xhPgJwAFNJKrt55mMwq9z++eymPybc=) 2: f2d5b1f3-9be7-3c39-9b76-ff499d3173ae.roa (hash: ujCzKk/cqITPIpGn6X8rir8uMjPXeNUcCBoqVhEVvnM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06dcca32-0336-4ac7-9c00-79ccd9e61ba0/06dcca32-0336-4ac7-9c00-79ccd9e61ba0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06dcca32-0336-4ac7-9c00-79ccd9e61ba0/06dcca32-0336-4ac7-9c00-79ccd9e61ba0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06dcca32-0336-4ac7-9c00-79ccd9e61ba0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d2:70:6b:ea:84:e9:a7:09:ed:44:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06dcca32-0336-4ac7-9c00-79ccd9e61ba0 Validity Not Before: May 11 22:00:03 2025 GMT Not After : May 13 22:00:00 2025 GMT Subject: CN=0baa88dc-7dd2-4159-91dc-5232c5df709d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ac:90:47:e4:0f:3b:d3:e1:00:77:50:ed:d7: 9f:92:f4:f2:77:ca:b2:d2:ff:62:20:f6:4f:e9:db: 19:84:91:a4:74:d7:ec:d7:c6:0d:53:b9:91:8a:bc: fb:62:7d:30:4b:58:8e:51:3c:f0:8f:2c:b4:40:8f: 57:83:30:44:af:18:81:53:57:0b:cb:15:cd:2c:39: a8:0d:09:cd:fd:32:93:62:ca:82:72:11:e3:2d:90: 96:4c:d3:a2:a8:87:49:20:55:48:b7:01:a0:89:75: c0:47:54:7d:0c:3f:01:cf:3f:35:99:92:ff:5d:7a: 6a:ce:2e:e5:f6:13:0a:8e:2e:4d:c3:cb:84:e2:02: de:5a:ce:f3:ef:49:41:16:d2:01:a3:a2:77:bb:cc: 70:57:47:44:1a:cb:f5:6e:26:c8:eb:15:1e:56:2a: 05:f1:fc:7e:a3:d1:6f:5c:a2:a4:7c:e5:b6:64:d2: f8:db:2b:be:ea:eb:b8:30:ca:b2:15:7d:89:27:c0: 28:8b:3a:f6:ac:a7:d1:18:2d:c8:29:b8:c1:1b:d1: 7f:d9:ca:e6:99:5b:ae:65:98:86:c4:c0:23:30:6c: 08:70:62:1e:5c:0d:bf:94:98:c1:b1:bf:df:a4:a1: 31:d2:22:4e:3c:fd:1a:39:d5:d0:06:f7:1c:30:eb: f9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:7A:86:EE:4F:B8:5B:2C:E7:90:BA:B9:BD:8E:9C:22:29:09:48:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06dcca32-0336-4ac7-9c00-79ccd9e61ba0/06dcca32-0336-4ac7-9c00-79ccd9e61ba0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06dcca32-0336-4ac7-9c00-79ccd9e61ba0/06dcca32-0336-4ac7-9c00-79ccd9e61ba0.crl X509v3 Authority Key Identifier: keyid:EF:0B:2B:E9:83:A2:A1:78:65:71:AE:D8:C3:FD:B7:BE:7F:AE:A9:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06dcca32-0336-4ac7-9c00-79ccd9e61ba0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:a6:ae:ed:c4:42:c9:45:b3:22:2b:e6:a6:66:fe:ae:c9:c7: 74:c6:31:c3:96:b1:8d:6d:3c:54:a3:fc:ce:62:8d:01:06:2f: 48:e8:2a:2e:f0:c2:59:cf:b7:db:85:c8:1c:59:56:18:b6:70: 42:2a:48:76:12:39:77:f8:b9:2a:ef:31:0d:fc:11:b8:44:8a: 90:b3:59:16:2c:05:4d:38:cd:45:16:54:65:fa:4e:94:fe:27: 0c:99:f1:d8:b9:57:d9:ff:15:20:82:fc:e4:40:52:9e:30:a4: 3e:1d:92:55:84:87:4c:75:91:03:1d:15:53:36:14:46:df:6e: 37:76:ba:4f:ab:2f:39:fe:81:1f:46:a6:c0:37:0a:9f:9e:ea: 14:7c:ac:71:da:c6:09:c6:b3:56:ec:69:a6:08:f7:70:51:32: fd:df:a4:11:59:31:43:12:02:f2:5f:6a:a7:2b:08:ff:2c:60: dd:f3:c0:95:fe:25:69:2b:84:53:5d:93:c5:c7:bb:ec:c4:a5: 21:3f:b1:60:88:3b:84:ae:d1:ed:93:d2:61:bb:b4:74:ec:fc: 98:d2:26:f8:32:1e:c9:19:c7:4d:34:77:42:d0:7c:e8:ad:71: 08:b7:29:ec:39:d8:54:d0:6d:a4:52:b6:ad:81:86:0d:e9:8f: bd:fc:0d:95 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnScGvqhOmnCe1EnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDZkY2NhMzItMDMzNi00YWM3LTljMDAtNzljY2Q5ZTYx YmEwMB4XDTI1MDUxMTIyMDAwM1oXDTI1MDUxMzIyMDAwMFowLzEtMCsGA1UEAxMk MGJhYTg4ZGMtN2RkMi00MTU5LTkxZGMtNTIzMmM1ZGY3MDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6yQR+QPO9PhAHdQ7defkvTyd8qy0v9iIPZP 6dsZhJGkdNfs18YNU7mRirz7Yn0wS1iOUTzwjyy0QI9XgzBErxiBU1cLyxXNLDmo DQnN/TKTYsqCchHjLZCWTNOiqIdJIFVItwGgiXXAR1R9DD8Bzz81mZL/XXpqzi7l 9hMKji5Nw8uE4gLeWs7z70lBFtIBo6J3u8xwV0dEGsv1bibI6xUeVioF8fx+o9Fv XKKkfOW2ZNL42yu+6uu4MMqyFX2JJ8Aoizr2rKfRGC3IKbjBG9F/2crmmVuuZZiG xMAjMGwIcGIeXA2/lJjBsb/fpKEx0iJOPP0aOdXQBvccMOv5nQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF56hu5PuFss55C6ub2OnCIpCUisMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNmRj Y2EzMi0wMzM2LTRhYzctOWMwMC03OWNjZDllNjFiYTAvMDZkY2NhMzItMDMzNi00 YWM3LTljMDAtNzljY2Q5ZTYxYmEwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDZkY2NhMzItMDMzNi00YWM3LTlj MDAtNzljY2Q5ZTYxYmEwLzA2ZGNjYTMyLTAzMzYtNGFjNy05YzAwLTc5Y2NkOWU2 MWJhMC5jcmwwHwYDVR0jBBgwFoAU7wsr6YOioXhlca7Yw/23vn+uqX0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wNmRjY2EzMi0wMzM2LTRhYzctOWMwMC03OWNj ZDllNjFiYTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBkpq7txELJRbMiK+amZv6u ycd0xjHDlrGNbTxUo/zOYo0BBi9I6Cou8MJZz7fbhcgcWVYYtnBCKkh2Ejl3+Lkq 7zEN/BG4RIqQs1kWLAVNOM1FFlRl+k6U/icMmfHYuVfZ/xUggvzkQFKeMKQ+HZJV hIdMdZEDHRVTNhRG3243drpPqy85/oEfRqbANwqfnuoUfKxx2sYJxrNW7GmmCPdw UTL936QRWTFDEgLyX2qnKwj/LGDd88CV/iVpK4RTXZPFx7vsxKUhP7FgiDuErtHt k9Jhu7R07PyY0ib4Mh7JGcdNNHdC0HzorXEItynsOdhU0G2kUratgYYN6Y+9/A2V -----END CERTIFICATE-----Generated at Mon May 12 05:33:51 2025 by rpki-client