$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a/093dd42f-849c-49fe-b795-49e66b3b3b7a.mft File: 093dd42f-849c-49fe-b795-49e66b3b3b7a.mft (raw, json) Hash identifier: r5yGIXbQpg3OgYUm01JWXBTlxWmG5XmLkCmoUJdMn18= Subject key identifier: CF:98:A1:D6:70:BA:21:CF:91:DD:EE:EF:F0:02:18:97:04:99:BE:C6 Authority key identifier: 70:40:2F:13:DE:4B:CF:1F:36:0C:22:D7:6C:CF:D9:59:4B:8C:AE:21 Certificate issuer: /CN=093dd42f-849c-49fe-b795-49e66b3b3b7a Certificate serial: 010D0C9F43285849D18230DDCB40FDE950CDCA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a/093dd42f-849c-49fe-b795-49e66b3b3b7a.mft Manifest number: 010D0C9F43285847DB12F1F07E6AEBE8DBDB16B9 Signing time: Sun 11 May 2025 14:00:03 +0000 Manifest this update: Sun 11 May 2025 14:00:03 +0000 Manifest next update: Wed 14 May 2025 14:00:00 +0000 Files and hashes: 1: 093dd42f-849c-49fe-b795-49e66b3b3b7a.crl (hash: fvwsN8C4br2big7Hz5yWfMEh+ivJQbcl+jtPHYRYZSA=) 2: 34e0a6e4-865d-3aa5-bce9-f8059fb70647.roa (hash: 2KXuT+gbm6oiY5aI9gVbLpcL2o7aMgNyNQnJuTa+UcE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a/093dd42f-849c-49fe-b795-49e66b3b3b7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a/093dd42f-849c-49fe-b795-49e66b3b3b7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:82:30:dd:cb:40:fd:e9:50:cd:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093dd42f-849c-49fe-b795-49e66b3b3b7a Validity Not Before: May 11 14:00:03 2025 GMT Not After : May 14 14:00:00 2025 GMT Subject: CN=b79ba9ec-4de7-492e-9574-1c617eebefe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:dc:2f:79:bd:e7:05:6a:a5:b9:ec:13:1c:10: c6:fd:5c:29:27:8e:58:e3:98:14:1b:9a:57:ac:e5: 07:95:db:a6:85:cb:27:e8:54:bb:e6:6d:35:ce:dd: fe:ed:43:d8:28:c3:d1:a9:55:6d:c7:f3:85:13:7f: 7e:6b:1d:53:d3:3c:f7:6c:ef:71:06:2b:05:6d:7a: 19:b9:90:41:9c:87:fb:a8:49:29:49:2d:c4:4f:e0: 99:ad:3c:30:65:f6:b1:0e:1b:31:93:4b:ce:ec:e1: a5:87:64:7c:23:15:f7:24:df:e0:9a:74:86:91:48: 95:43:74:4c:85:04:d7:fe:ff:95:ac:c2:96:a0:97: 1f:0a:9c:ff:0e:7e:d0:62:1d:2f:5c:2d:b5:2f:39: b6:93:55:a9:fb:7d:09:4d:18:5a:a5:2c:e4:76:da: ea:f0:6d:43:c9:0d:95:96:48:d9:48:1c:a4:ab:51: 05:ca:de:1f:83:fa:09:57:65:94:f6:f8:66:ae:62: 20:ed:df:cb:74:a2:4d:77:b2:55:4f:11:72:53:88: 71:38:f2:23:1e:23:d7:80:bd:9e:7e:99:9a:1f:86: 87:1a:cd:d4:c2:65:e0:a7:ec:77:d1:6a:2d:38:25: 14:c5:73:af:67:1b:43:c8:4a:9d:01:22:5f:01:6f: 60:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:98:A1:D6:70:BA:21:CF:91:DD:EE:EF:F0:02:18:97:04:99:BE:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a/093dd42f-849c-49fe-b795-49e66b3b3b7a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a/093dd42f-849c-49fe-b795-49e66b3b3b7a.crl X509v3 Authority Key Identifier: keyid:70:40:2F:13:DE:4B:CF:1F:36:0C:22:D7:6C:CF:D9:59:4B:8C:AE:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:d7:63:a1:e0:d0:ee:e4:03:8c:02:07:d6:bf:7e:78:d5:d7: c4:8c:a9:33:67:d4:a7:3e:7e:53:4a:93:56:45:de:37:0a:5e: f1:21:c8:b9:47:b3:51:fd:79:50:81:a1:10:1b:d6:71:d8:a6: a8:ef:df:09:3d:a4:b4:bf:b5:57:d4:34:74:52:d5:9c:e9:36: fe:fd:04:46:c7:36:e8:96:e0:1d:94:0a:f6:cc:4b:71:d5:2b: e2:27:3b:d5:01:99:60:41:48:95:ba:2e:30:6b:17:c9:24:6a: 3d:2a:67:c6:f6:11:3e:b0:ab:a3:0c:32:fd:f3:23:55:20:41: 59:37:c5:86:4f:e6:95:57:49:0f:7d:cf:eb:de:2d:df:71:a7: d4:47:5e:01:5c:1f:07:0f:59:d0:e2:40:1a:fe:ce:ba:b3:ed: 59:22:9e:58:78:2d:f7:b2:42:7c:46:d3:86:02:3a:aa:4b:39: 03:34:da:23:c8:95:50:3f:9e:66:46:ce:79:86:3d:78:24:5a: 1c:d7:19:08:b5:82:ec:55:28:84:67:c3:c6:9d:47:a0:5c:1a: 45:2c:15:2d:75:e1:f4:53:40:47:36:16:bb:e8:3d:99:4b:1f: 44:70:b9:0d:bb:2e:24:82:51:20:dc:9b:be:83:23:2b:44:37: cf:a4:af:37 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnRgjDdy0D96VDNygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDkzZGQ0MmYtODQ5Yy00OWZlLWI3OTUtNDllNjZiM2Iz YjdhMB4XDTI1MDUxMTE0MDAwM1oXDTI1MDUxNDE0MDAwMFowLzEtMCsGA1UEAxMk Yjc5YmE5ZWMtNGRlNy00OTJlLTk1NzQtMWM2MTdlZWJlZmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNwveb3nBWqluewTHBDG/VwpJ45Y45gUG5pX rOUHldumhcsn6FS75m01zt3+7UPYKMPRqVVtx/OFE39+ax1T0zz3bO9xBisFbXoZ uZBBnIf7qEkpSS3ET+CZrTwwZfaxDhsxk0vO7OGlh2R8IxX3JN/gmnSGkUiVQ3RM hQTX/v+VrMKWoJcfCpz/Dn7QYh0vXC21Lzm2k1Wp+30JTRhapSzkdtrq8G1DyQ2V lkjZSBykq1EFyt4fg/oJV2WU9vhmrmIg7d/LdKJNd7JVTxFyU4hxOPIjHiPXgL2e fpmaH4aHGs3UwmXgp+x30WotOCUUxXOvZxtDyEqdASJfAW9gLwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFM+YodZwuiHPkd3u7/ACGJcEmb7GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wOTNk ZDQyZi04NDljLTQ5ZmUtYjc5NS00OWU2NmIzYjNiN2EvMDkzZGQ0MmYtODQ5Yy00 OWZlLWI3OTUtNDllNjZiM2IzYjdhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDkzZGQ0MmYtODQ5Yy00OWZlLWI3 OTUtNDllNjZiM2IzYjdhLzA5M2RkNDJmLTg0OWMtNDlmZS1iNzk1LTQ5ZTY2YjNi M2I3YS5jcmwwHwYDVR0jBBgwFoAUcEAvE95Lzx82DCLXbM/ZWUuMriEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wOTNkZDQyZi04NDljLTQ5ZmUtYjc5NS00OWU2 NmIzYjNiN2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAj12Oh4NDu5AOMAgfWv354 1dfEjKkzZ9SnPn5TSpNWRd43Cl7xIci5R7NR/XlQgaEQG9Zx2Kao798JPaS0v7VX 1DR0UtWc6Tb+/QRGxzboluAdlAr2zEtx1SviJzvVAZlgQUiVui4waxfJJGo9KmfG 9hE+sKujDDL98yNVIEFZN8WGT+aVV0kPfc/r3i3fcafUR14BXB8HD1nQ4kAa/s66 s+1ZIp5YeC33skJ8RtOGAjqqSzkDNNojyJVQP55mRs55hj14JFoc1xkItYLsVSiE Z8PGnUegXBpFLBUtdeH0U0BHNha76D2ZSx9EcLkNuy4kglEg3Ju+gyMrRDfPpK83 -----END CERTIFICATE-----Generated at Sun May 11 23:19:45 2025 by rpki-client