$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.mft File: 13fecd24-0da7-4140-9636-71a72de851ec.mft (raw, json) Hash identifier: C75Bk9xHZNVVONIKMNqetMKwinerYbUQmNW8Gr8G0WE= Subject key identifier: C8:E9:A9:5C:C0:7F:1F:06:3B:01:B3:A8:87:E4:40:2A:1E:B7:89:E1 Authority key identifier: 71:FB:07:EC:96:DD:BA:1E:51:4A:24:E7:48:C8:35:54:36:D1:14:7E Certificate issuer: /CN=13fecd24-0da7-4140-9636-71a72de851ec Certificate serial: 010D0C9F43285849D0B1C8C04F550C20CBE37380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.mft Manifest number: 010D0C9F4328584073A843ECAF13B595B7FA40BA Signing time: Sun 11 May 2025 07:00:07 +0000 Manifest this update: Sun 11 May 2025 07:00:07 +0000 Manifest next update: Wed 14 May 2025 07:00:00 +0000 Files and hashes: 1: 13fecd24-0da7-4140-9636-71a72de851ec.crl (hash: k3OaT0XJHHiWxhZU9VeeUNQ8AE46ptBkPo7fAwYG3bk=) 2: 46d8321f-218e-36f3-a679-435b61da0163.roa (hash: QLs2YUQ35hykXkFfEmN9fUkV9Nt43shi3uhuy/1wsas=) 3: 56510e5b-a1c3-3cf0-b907-0500c8eaefc4.roa (hash: NnPh9CHGPmfwpY37Y76BmpYSMwjPo9pK6PLSHZU7sf8=) 4: 94256b14-27a0-3be6-a9ff-020cd5a9e0db.roa (hash: EiNAOpGYOdxozgMMvjhMRA1LjEBRxRCsupsbXfJvk+I=) 5: a2cca32f-d310-3d5c-9deb-b89b4d9253ca.roa (hash: e6aPClKrFVgEP6HOLyTgOVfSuJbt9DssuaPZF9WlJ+U=) 6: a6e39eee-173b-35b9-ac53-2ff67455d848.roa (hash: eXKzC6R0OwR09NCFLSFbGx4XdX8npf8YGNVBrWe3WTk=) 7: f1770e4c-16cb-301a-aac8-ba7ec98b8e25.roa (hash: nGCmM0/31OEO5gCDQObhJQofWJonLMl4VAYHsnEJ8dE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d0:b1:c8:c0:4f:55:0c:20:cb:e3:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13fecd24-0da7-4140-9636-71a72de851ec Validity Not Before: May 11 07:00:07 2025 GMT Not After : May 14 07:00:00 2025 GMT Subject: CN=40e51f0f-546b-4eee-bfab-b94f10946370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1e:1b:f3:8a:30:33:7f:6f:93:19:60:4d:d0: 1f:1a:ba:83:ca:40:90:8c:c6:ef:22:50:f9:75:32: 25:83:5d:68:05:67:96:dc:a3:9e:b0:65:f9:cc:e2: 32:c3:f0:e2:2b:d3:e5:05:5c:e3:a0:90:6e:45:98: de:b8:69:70:27:03:01:bc:16:54:c4:1c:fc:90:e7: a6:d3:39:83:2a:18:65:0b:9f:5a:7d:eb:d9:ea:b4: 83:31:be:00:2b:68:0d:97:58:cd:59:3f:9c:96:31: ed:86:28:ad:6f:49:64:f3:3f:55:23:44:43:e8:4d: 4c:1f:c8:f0:31:5d:13:2d:13:53:52:77:e8:41:cb: 89:83:64:3c:62:ad:4d:3e:bb:be:d3:68:5b:48:17: 47:ad:b7:a1:71:43:af:25:45:00:cc:61:23:e7:bd: 6b:95:5a:c0:1f:c1:29:bb:51:ef:ef:f7:2f:a9:3b: 08:94:33:8e:b3:82:97:c7:a8:cf:e8:ce:57:f3:98: b3:b7:28:64:dc:23:d5:f5:a2:60:36:2a:4a:17:52: 41:e7:1e:69:c4:9b:4f:c2:c6:17:06:a8:96:64:27: 4f:2b:4d:c7:76:17:43:7c:f8:39:1a:a2:c1:49:94: 4a:59:cd:3d:35:8e:88:7a:b9:4c:6b:39:dd:00:d7: d3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E9:A9:5C:C0:7F:1F:06:3B:01:B3:A8:87:E4:40:2A:1E:B7:89:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.crl X509v3 Authority Key Identifier: keyid:71:FB:07:EC:96:DD:BA:1E:51:4A:24:E7:48:C8:35:54:36:D1:14:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:ec:9c:77:33:2d:4d:2e:a3:54:d4:40:a6:db:1a:f9:24:f8: c0:1c:8c:f0:56:fd:93:a4:ac:0d:b1:3c:bf:66:13:1c:ed:7b: d4:92:e9:80:b5:44:2a:ad:5c:10:c9:b5:b2:69:33:65:7a:27: af:9c:02:de:e6:e7:d0:60:0a:0a:31:5b:3d:ad:3a:32:1d:4a: a8:cd:da:a3:59:73:7d:37:a4:72:12:4c:0b:c5:26:49:39:d0: 12:ac:d0:d0:e7:07:fb:1a:0e:2a:a7:5b:69:ce:a1:f7:8f:41: af:1a:c0:3a:fc:93:ce:04:6a:5f:33:a1:ef:63:b5:01:71:fe: 7a:12:5a:ef:e1:b2:53:d4:56:f0:f6:70:56:c9:03:c0:ad:7a: 70:7e:7c:36:d7:ab:67:9d:b1:90:89:f9:b1:9c:8e:c5:1d:37: fe:94:8b:8e:04:ad:08:f2:98:2a:67:2e:06:84:cd:a6:49:59: 3b:bb:46:d5:8a:b0:1d:3e:a6:b7:6a:e6:66:47:bb:6d:20:99: b4:53:1d:be:01:03:17:1e:35:f9:31:b7:a1:03:52:34:14:64: f5:b6:60:4b:6c:e5:3a:4c:2a:e7:10:41:9a:f8:86:bf:56:29: c1:b2:25:e3:c4:27:d7:f8:49:49:74:66:53:b6:0b:fa:c1:69: 27:a2:9b:92 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnQscjAT1UMIMvjc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTNmZWNkMjQtMGRhNy00MTQwLTk2MzYtNzFhNzJkZTg1 MWVjMB4XDTI1MDUxMTA3MDAwN1oXDTI1MDUxNDA3MDAwMFowLzEtMCsGA1UEAxMk NDBlNTFmMGYtNTQ2Yi00ZWVlLWJmYWItYjk0ZjEwOTQ2MzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwh4b84owM39vkxlgTdAfGrqDykCQjMbvIlD5 dTIlg11oBWeW3KOesGX5zOIyw/DiK9PlBVzjoJBuRZjeuGlwJwMBvBZUxBz8kOem 0zmDKhhlC59afevZ6rSDMb4AK2gNl1jNWT+cljHthiitb0lk8z9VI0RD6E1MH8jw MV0TLRNTUnfoQcuJg2Q8Yq1NPru+02hbSBdHrbehcUOvJUUAzGEj571rlVrAH8Ep u1Hv7/cvqTsIlDOOs4KXx6jP6M5X85iztyhk3CPV9aJgNipKF1JB5x5pxJtPwsYX BqiWZCdPK03HdhdDfPg5GqLBSZRKWc09NY6IerlMazndANfT8wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMjpqVzAfx8GOwGzqIfkQCoet4nhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xM2Zl Y2QyNC0wZGE3LTQxNDAtOTYzNi03MWE3MmRlODUxZWMvMTNmZWNkMjQtMGRhNy00 MTQwLTk2MzYtNzFhNzJkZTg1MWVjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTNmZWNkMjQtMGRhNy00MTQwLTk2 MzYtNzFhNzJkZTg1MWVjLzEzZmVjZDI0LTBkYTctNDE0MC05NjM2LTcxYTcyZGU4 NTFlYy5jcmwwHwYDVR0jBBgwFoAUcfsH7Jbduh5RSiTnSMg1VDbRFH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xM2ZlY2QyNC0wZGE3LTQxNDAtOTYzNi03MWE3 MmRlODUxZWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAg7Jx3My1NLqNU1ECm2xr5 JPjAHIzwVv2TpKwNsTy/ZhMc7XvUkumAtUQqrVwQybWyaTNleievnALe5ufQYAoK MVs9rToyHUqozdqjWXN9N6RyEkwLxSZJOdASrNDQ5wf7Gg4qp1tpzqH3j0GvGsA6 /JPOBGpfM6HvY7UBcf56Elrv4bJT1Fbw9nBWyQPArXpwfnw216tnnbGQifmxnI7F HTf+lIuOBK0I8pgqZy4GhM2mSVk7u0bVirAdPqa3auZmR7ttIJm0Ux2+AQMXHjX5 MbehA1I0FGT1tmBLbOU6TCrnEEGa+Ia/VinBsiXjxCfX+ElJdGZTtgv6wWknopuS -----END CERTIFICATE-----Generated at Sun May 11 15:07:53 2025 by rpki-client