$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/25a08492-b3b1-4aa1-b56d-01a98f7d0919.mft File: 25a08492-b3b1-4aa1-b56d-01a98f7d0919.mft (raw, json) Hash identifier: qhgMjgtFInCClqs/cIMSTNfxZ+mZQL5u/mDQPPvQP70= Subject key identifier: F8:3E:98:7F:50:61:6E:25:78:E1:20:65:39:12:72:5C:32:4E:38:9D Authority key identifier: 13:09:FA:21:7C:D7:8E:9E:A4:DE:A4:06:DE:33:AF:CB:24:DA:6B:06 Certificate issuer: /CN=25a08492-b3b1-4aa1-b56d-01a98f7d0919 Certificate serial: 010D0C9F43285849D2ACF76E61AE943A961D0380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/25a08492-b3b1-4aa1-b56d-01a98f7d0919.mft Manifest number: 010D0C9F4328584073A83163B1533E4B8D3564AF Signing time: Mon 12 May 2025 00:02:03 +0000 Manifest this update: Mon 12 May 2025 00:02:03 +0000 Manifest next update: Wed 14 May 2025 00:00:00 +0000 Files and hashes: 1: 22b878a0-4ced-3a26-a8b2-ce7e7d25c056.roa (hash: 0rVg0IfRn5aro55tS7fMzHqgnRXQZxYSNslT/eaTh8U=) 2: 25a08492-b3b1-4aa1-b56d-01a98f7d0919.crl (hash: fuY+KfuP5u5FyLzg/OBz0qDWOOjuX+5YXBpNIl1zRqk=) 3: b53ac133-8c37-36a8-a00a-6e1693d86389.roa (hash: KntxEDndKx4HAlLHWoQJjRtyAffU4Pkkd90jL9ziYT8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/25a08492-b3b1-4aa1-b56d-01a98f7d0919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/25a08492-b3b1-4aa1-b56d-01a98f7d0919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d2:ac:f7:6e:61:ae:94:3a:96:1d:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25a08492-b3b1-4aa1-b56d-01a98f7d0919 Validity Not Before: May 12 00:02:03 2025 GMT Not After : May 14 00:00:00 2025 GMT Subject: CN=a8d22d2b-637c-49db-b524-7620279d1664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:02:27:b6:59:de:5e:9a:83:40:44:ee:c7:87: 43:91:c0:f2:91:df:70:fb:b2:d8:dd:58:31:57:72: b3:12:bd:64:97:70:2a:fd:61:7f:90:17:af:cd:aa: 98:a6:9a:f5:3b:f8:12:e5:d8:ea:36:f2:4f:20:75: 55:64:5b:6a:bd:2d:f9:d0:68:e6:37:f8:b3:dc:13: d7:d4:db:26:45:09:3a:48:88:0e:07:8b:04:74:81: f6:c5:f5:37:74:8b:d4:f0:49:bb:8a:75:fd:8e:77: 13:0f:82:5d:d4:28:d7:49:32:23:4e:e6:cb:f8:f3: aa:55:40:d2:a6:08:95:fb:76:82:30:7d:85:4a:2d: bc:2b:e7:ae:f3:60:c5:b6:68:71:34:f9:0a:9d:c6: ce:36:d4:ba:19:d4:ef:f3:c1:86:3b:d9:ca:57:35: cd:f1:ed:6d:cb:06:c8:3e:cb:49:6f:5e:9f:20:b0: 47:88:48:0c:ae:cb:8f:25:61:8b:05:7c:9a:20:f1: 87:da:d6:32:dd:a7:00:53:01:9a:a3:4a:cc:1d:a0: 1c:d4:d1:0f:d9:df:8e:0d:19:2b:d2:28:d4:cf:3f: b8:30:68:0e:a5:19:61:b5:af:12:73:81:d8:69:d4: 8a:ec:7a:d2:b9:26:ea:ef:19:13:32:cc:63:e2:8b: f2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:3E:98:7F:50:61:6E:25:78:E1:20:65:39:12:72:5C:32:4E:38:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/25a08492-b3b1-4aa1-b56d-01a98f7d0919.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/25a08492-b3b1-4aa1-b56d-01a98f7d0919.crl X509v3 Authority Key Identifier: keyid:13:09:FA:21:7C:D7:8E:9E:A4:DE:A4:06:DE:33:AF:CB:24:DA:6B:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:f3:50:26:74:5e:73:e4:e6:05:3e:20:7f:05:a1:0a:ae:b2: 30:cf:79:ab:4b:50:d6:29:02:75:43:47:b4:e6:cb:bd:55:30: 8e:4b:44:c4:51:29:ad:3c:ce:06:84:ce:71:7a:03:8b:67:bf: 78:9d:e6:a9:e6:5a:f0:77:46:da:b5:ca:75:b2:6b:5d:2a:55: da:85:1f:db:0c:39:14:9d:24:ea:38:cf:e5:e2:ad:12:6c:14: a9:cb:9d:31:8e:da:f8:f4:63:22:c3:d2:1e:8d:ce:a1:26:1f: f8:65:8b:30:ae:7f:cd:a4:3e:4d:a4:24:ba:51:90:cd:70:53: fd:0a:e1:9d:95:d9:fc:0d:a9:6a:4e:1a:82:f2:ab:11:0a:90: 21:ea:f7:94:b8:23:e0:66:32:96:2a:67:bb:62:b9:a3:17:53: 94:39:0c:5e:4a:ed:e9:e6:61:f7:2e:49:85:a4:14:09:48:ac: f4:ef:5e:d4:b0:69:cb:4f:0a:3c:67:a8:da:86:bd:e9:a9:65: 3a:43:2d:32:9e:a5:20:46:91:ac:07:ec:86:f3:42:93:3c:19: 8f:28:44:52:31:46:98:63:94:95:1f:76:1f:32:46:e1:7a:90: 5b:20:33:08:2d:f7:12:8f:5f:83:bf:6f:9b:bb:b8:53:35:41: 20:12:3f:41 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnSrPduYa6UOpYdA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVhMDg0OTItYjNiMS00YWExLWI1NmQtMDFhOThmN2Qw OTE5MB4XDTI1MDUxMjAwMDIwM1oXDTI1MDUxNDAwMDAwMFowLzEtMCsGA1UEAxMk YThkMjJkMmItNjM3Yy00OWRiLWI1MjQtNzYyMDI3OWQxNjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8AIntlneXpqDQETux4dDkcDykd9w+7LY3Vgx V3KzEr1kl3Aq/WF/kBevzaqYppr1O/gS5djqNvJPIHVVZFtqvS350GjmN/iz3BPX 1NsmRQk6SIgOB4sEdIH2xfU3dIvU8Em7inX9jncTD4Jd1CjXSTIjTubL+POqVUDS pgiV+3aCMH2FSi28K+eu82DFtmhxNPkKncbONtS6GdTv88GGO9nKVzXN8e1tywbI PstJb16fILBHiEgMrsuPJWGLBXyaIPGH2tYy3acAUwGao0rMHaAc1NEP2d+ODRkr 0ijUzz+4MGgOpRlhta8Sc4HYadSK7HrSuSbq7xkTMsxj4ovyvQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPg+mH9QYW4leOEgZTkSclwyTjidMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNWEw ODQ5Mi1iM2IxLTRhYTEtYjU2ZC0wMWE5OGY3ZDA5MTkvMjVhMDg0OTItYjNiMS00 YWExLWI1NmQtMDFhOThmN2QwOTE5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjVhMDg0OTItYjNiMS00YWExLWI1 NmQtMDFhOThmN2QwOTE5LzI1YTA4NDkyLWIzYjEtNGFhMS1iNTZkLTAxYTk4Zjdk MDkxOS5jcmwwHwYDVR0jBBgwFoAUEwn6IXzXjp6k3qQG3jOvyyTaawYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNWEwODQ5Mi1iM2IxLTRhYTEtYjU2ZC0wMWE5 OGY3ZDA5MTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCI81AmdF5z5OYFPiB/BaEK rrIwz3mrS1DWKQJ1Q0e05su9VTCOS0TEUSmtPM4GhM5xegOLZ794neap5lrwd0ba tcp1smtdKlXahR/bDDkUnSTqOM/l4q0SbBSpy50xjtr49GMiw9Iejc6hJh/4ZYsw rn/NpD5NpCS6UZDNcFP9CuGdldn8DalqThqC8qsRCpAh6veUuCPgZjKWKme7Yrmj F1OUOQxeSu3p5mH3LkmFpBQJSKz0717UsGnLTwo8Z6jahr3pqWU6Qy0ynqUgRpGs B+yG80KTPBmPKERSMUaYY5SVH3YfMkbhepBbIDMILfcSj1+Dv2+bu7hTNUEgEj9B -----END CERTIFICATE-----Generated at Mon May 12 10:47:47 2025 by rpki-client