$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.mft File: 1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.mft (raw, json) Hash identifier: RgqoHg2pOXwgM1kfs1YAvgIRlIhq/XLtWJ5xsySTeYQ= Subject key identifier: 58:F8:19:47:6A:2F:C5:BF:20:5B:7F:04:5B:A1:AE:47:33:03:20:7E Authority key identifier: 07:9B:4F:44:5B:60:A0:FC:DB:28:42:37:22:6D:6D:18:B4:1C:8E:B0 Certificate issuer: /CN=1e5f8ff8-77a0-47e9-ba79-ccaf147a2071 Certificate serial: 010D0C9F43285849D10B1D2326E698C01235CFC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.mft Manifest number: 010D0C9F4328584073A84E30D430488252D8626E Signing time: Sun 11 May 2025 10:00:07 +0000 Manifest this update: Sun 11 May 2025 10:00:07 +0000 Manifest next update: Wed 14 May 2025 10:00:00 +0000 Files and hashes: 1: 1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.crl (hash: ETzCcCPH8qnLfNb7IsJ+VhYpAiaoReeMbsAsNBZfjBI=) 2: a4e3b6e2-c7d0-3434-b7d2-cebca6c2eebb.roa (hash: xQNNJv2NQA02HzHWbj5Gvu5C0lXGYk4hxo4FBBU7wRo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:0b:1d:23:26:e6:98:c0:12:35:cf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e5f8ff8-77a0-47e9-ba79-ccaf147a2071 Validity Not Before: May 11 10:00:07 2025 GMT Not After : May 14 10:00:00 2025 GMT Subject: CN=89493dcb-5abe-452b-8c7b-b783b948cfeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b3:d1:d8:7b:ed:c1:8b:62:05:e7:73:b2:ad: 4b:dd:bd:b0:8f:44:44:72:f3:c5:4b:8f:8f:6d:ff: 6d:66:9a:9e:6b:16:4b:d1:09:db:9e:52:4b:60:1d: 38:7f:63:5d:d2:c9:2d:64:d1:7c:1d:eb:03:47:50: 22:cf:98:75:f9:0d:e6:2c:f9:af:6e:95:67:d5:c6: b8:42:3f:c3:eb:e5:c5:c5:e2:47:e9:da:11:c8:94: fa:d0:bc:c3:20:4c:53:b5:02:49:57:14:e6:ac:80: 36:86:b0:b9:b4:6c:63:ec:29:8b:3d:2d:94:29:08: 2d:2a:6a:0b:51:5b:d5:c3:c1:7e:e0:3c:0b:fd:b4: a2:b5:ae:74:7c:d0:13:e6:15:f5:b9:2d:71:b7:79: 53:80:d0:e0:4c:d7:45:e6:86:67:6f:da:0a:db:6f: 2e:7d:03:74:23:ca:09:70:99:eb:00:8f:10:92:8b: 29:83:17:f6:d8:85:40:19:9d:59:3f:37:c4:06:cc: 24:66:ff:53:92:74:97:12:77:80:3a:63:56:89:aa: 1d:7c:ff:d2:09:57:a6:a2:69:a7:b4:e4:73:bc:61: 4a:7b:71:3f:d4:5a:bd:71:a2:90:5f:3f:1c:08:d4: 77:6b:b2:8d:a3:38:6f:84:d5:65:97:b9:c0:7f:6f: 3c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F8:19:47:6A:2F:C5:BF:20:5B:7F:04:5B:A1:AE:47:33:03:20:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.crl X509v3 Authority Key Identifier: keyid:07:9B:4F:44:5B:60:A0:FC:DB:28:42:37:22:6D:6D:18:B4:1C:8E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:9f:0f:15:03:1c:bc:0a:56:81:66:f1:ff:c8:a5:1f:5d:ae: 3a:6f:0e:38:56:17:95:86:a8:83:8d:a3:40:0e:ff:6e:d2:3e: f2:76:46:62:15:e0:e8:17:5c:40:6d:07:98:92:79:58:e0:ee: 6b:87:f9:5e:b3:fb:52:2d:65:6a:89:df:69:a5:c3:77:36:60: d6:e9:d2:10:c0:13:46:d6:a1:cb:d1:56:00:63:00:b5:ee:3a: e0:1f:7b:7c:7a:e3:1b:0a:72:c0:bd:2f:6c:39:57:23:d5:4a: cb:b2:28:48:37:8d:c9:3a:80:de:0d:0f:b3:d5:5c:ae:3e:d0: 6f:66:ba:f2:9a:52:9d:b5:52:41:b0:41:e8:fd:06:54:1a:78: 42:ba:ea:4d:b9:04:9c:96:ed:87:0a:82:62:0f:17:af:ec:50: 2d:16:83:7d:4f:71:5f:85:f9:2e:2f:25:de:54:75:25:fe:18: e6:ae:ec:08:9a:36:c5:9c:b1:35:7a:86:a8:32:58:fb:dc:1a: 8e:1d:6f:e6:dd:52:c2:9a:da:ac:6b:cf:44:c2:49:b8:47:63: 39:25:b6:64:f3:3e:a7:f6:52:48:4a:e9:0e:85:c6:40:b7:71: 19:4f:20:91:be:f3:06:da:db:32:3d:d7:54:df:91:d2:32:20: 6c:1b:40:9e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnRCx0jJuaYwBI1z8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWU1ZjhmZjgtNzdhMC00N2U5LWJhNzktY2NhZjE0N2Ey MDcxMB4XDTI1MDUxMTEwMDAwN1oXDTI1MDUxNDEwMDAwMFowLzEtMCsGA1UEAxMk ODk0OTNkY2ItNWFiZS00NTJiLThjN2ItYjc4M2I5NDhjZmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7PR2HvtwYtiBedzsq1L3b2wj0REcvPFS4+P bf9tZpqeaxZL0QnbnlJLYB04f2Nd0sktZNF8HesDR1Aiz5h1+Q3mLPmvbpVn1ca4 Qj/D6+XFxeJH6doRyJT60LzDIExTtQJJVxTmrIA2hrC5tGxj7CmLPS2UKQgtKmoL UVvVw8F+4DwL/bSita50fNAT5hX1uS1xt3lTgNDgTNdF5oZnb9oK228ufQN0I8oJ cJnrAI8Qkospgxf22IVAGZ1ZPzfEBswkZv9TknSXEneAOmNWiaodfP/SCVemommn tORzvGFKe3E/1Fq9caKQXz8cCNR3a7KNozhvhNVll7nAf288CwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFj4GUdqL8W/IFt/BFuhrkczAyB+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZTVm OGZmOC03N2EwLTQ3ZTktYmE3OS1jY2FmMTQ3YTIwNzEvMWU1ZjhmZjgtNzdhMC00 N2U5LWJhNzktY2NhZjE0N2EyMDcxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWU1ZjhmZjgtNzdhMC00N2U5LWJh NzktY2NhZjE0N2EyMDcxLzFlNWY4ZmY4LTc3YTAtNDdlOS1iYTc5LWNjYWYxNDdh MjA3MS5jcmwwHwYDVR0jBBgwFoAUB5tPRFtgoPzbKEI3Im1tGLQcjrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZTVmOGZmOC03N2EwLTQ3ZTktYmE3OS1jY2Fm MTQ3YTIwNzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB4nw8VAxy8ClaBZvH/yKUf Xa46bw44VheVhqiDjaNADv9u0j7ydkZiFeDoF1xAbQeYknlY4O5rh/les/tSLWVq id9ppcN3NmDW6dIQwBNG1qHL0VYAYwC17jrgH3t8euMbCnLAvS9sOVcj1UrLsihI N43JOoDeDQ+z1VyuPtBvZrrymlKdtVJBsEHo/QZUGnhCuupNuQSclu2HCoJiDxev 7FAtFoN9T3FfhfkuLyXeVHUl/hjmruwImjbFnLE1eoaoMlj73BqOHW/m3VLCmtqs a89Ewkm4R2M5JbZk8z6n9lJISukOhcZAt3EZTyCRvvMG2tsyPddU35HSMiBsG0Ce -----END CERTIFICATE-----Generated at Mon May 12 06:14:58 2025 by rpki-client