$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft File: 3a636afd-ece5-4e23-a54f-c43e0fc08124.mft (raw, json) Hash identifier: ETpA041hkLCMRXKBOUziphQYNVk9HOTcTRyNAsKXnVI= Subject key identifier: 88:D0:93:B3:82:58:D6:4E:44:B8:E9:ED:33:54:D7:09:61:E3:C0:7F Authority key identifier: 8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 Certificate issuer: /CN=3a636afd-ece5-4e23-a54f-c43e0fc08124 Certificate serial: 010D0C9F43285849C04B0571DAA6B886720AA580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft Manifest number: 010D0C9F4328584073A84C6382713EC3B9026BE9 Signing time: Mon 05 May 2025 10:00:07 +0000 Manifest this update: Mon 05 May 2025 10:00:07 +0000 Manifest next update: Thu 08 May 2025 10:00:00 +0000 Files and hashes: 1: 2ed04e60-1e97-3647-b39a-9a93be9e3ceb.roa (hash: 8zWcV4y3LmVz6RTzQCkkErVc+7nZmlxrVNA3cSSEQ54=) 2: 3a636afd-ece5-4e23-a54f-c43e0fc08124.crl (hash: T3ylBpOmSufJFGnGrUZOTpd+rI2wFXCxlr7FZ7OZG5w=) 3: 86ce795d-c584-310b-9693-21cb26b6e90a.roa (hash: SPgueYvQaAn9kHRjy08CWgTrSsg0s0i8FVMkoHJqsTs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:4b:05:71:da:a6:b8:86:72:0a:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a636afd-ece5-4e23-a54f-c43e0fc08124 Validity Not Before: May 5 10:00:07 2025 GMT Not After : May 8 10:00:00 2025 GMT Subject: CN=53234b96-b41e-45e3-8767-df0ec67ce800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ab:0b:06:4e:95:03:9f:00:db:21:de:38:7f: 69:af:04:e9:e4:fb:89:9a:cc:02:c7:c7:41:ba:5c: 05:78:5e:81:52:e7:ca:eb:c4:0a:91:d6:68:d6:39: 09:ed:5d:a4:05:22:37:8c:f8:63:99:d9:82:c8:f1: 2c:99:10:00:56:b7:b8:75:4b:21:7c:79:34:78:a3: d9:83:c4:92:08:08:2e:42:d3:54:0f:03:6c:78:fb: 1a:7f:09:fd:bc:9b:2b:e9:45:f3:1c:d9:22:d6:34: 1c:76:2a:21:cf:fc:0d:fc:0b:df:99:6c:07:fa:9e: 48:e5:65:9e:b7:f5:f9:db:2c:8c:4d:55:aa:e7:2b: ca:8f:1c:27:5b:44:d6:a3:93:bb:a4:c3:b8:6a:a6: fa:90:6c:35:c1:36:e8:e0:98:22:7b:ca:ba:98:89: 09:0f:85:87:4d:24:0f:98:f3:90:81:1b:06:41:c5: b6:c3:3e:ec:bd:62:71:98:f3:39:80:26:2a:bb:91: c1:7e:25:4e:47:ef:ac:a0:bc:6a:58:6e:5c:45:79: ab:01:16:e1:be:9e:ad:9e:b8:ae:a9:23:1a:6d:7a: 27:c8:72:af:e1:40:60:38:8d:f3:81:34:da:2b:05: 13:a6:f2:63:51:ed:3a:ae:9e:b8:06:96:00:66:b0: d4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D0:93:B3:82:58:D6:4E:44:B8:E9:ED:33:54:D7:09:61:E3:C0:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl X509v3 Authority Key Identifier: keyid:8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:ee:d3:22:b5:4f:bd:aa:d6:71:72:fe:4e:d9:6f:9e:54:3f: 2c:c7:93:a9:82:5b:3c:90:57:fe:1a:44:a4:e4:17:dc:39:54: 0a:ad:99:04:53:ff:10:75:b0:35:80:78:a4:df:b6:2b:54:da: 2e:91:12:a2:05:da:f0:95:66:90:c0:46:c8:b3:16:f7:2e:d4: c1:da:4f:53:fa:78:ba:d7:6f:da:6e:c0:15:3c:f3:5c:36:f5: fa:5a:19:64:2a:26:02:c3:a6:b7:95:c4:37:da:db:3d:99:d6: 77:ca:3f:e9:27:e8:e7:49:0e:a0:e5:fd:e5:47:d4:46:8b:ed: b8:e1:87:2b:14:29:66:7b:e3:6b:94:0d:ca:b9:87:67:4d:83: 99:02:3f:3a:0e:03:ad:4a:5a:d4:17:03:08:a4:be:b1:49:94: 9a:ff:9d:fc:96:0a:b8:5b:1d:47:23:f5:a4:34:97:04:46:6c: d1:a8:66:0a:5a:37:23:3a:75:4c:a7:ca:f6:30:0a:05:47:f3: 35:42:26:0d:75:c3:56:f2:b4:94:d6:af:fd:86:c4:8a:2f:7d: 46:12:2d:e1:a2:ff:cd:db:12:4a:41:0e:03:f0:b0:11:ae:73: 51:12:8c:62:6e:0f:8d:52:47:74:e8:df:bf:73:f7:14:de:d2: 84:3a:35:b1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnASwVx2qa4hnIKpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E2MzZhZmQtZWNlNS00ZTIzLWE1NGYtYzQzZTBmYzA4 MTI0MB4XDTI1MDUwNTEwMDAwN1oXDTI1MDUwODEwMDAwMFowLzEtMCsGA1UEAxMk NTMyMzRiOTYtYjQxZS00NWUzLTg3NjctZGYwZWM2N2NlODAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyasLBk6VA58A2yHeOH9prwTp5PuJmswCx8dB ulwFeF6BUufK68QKkdZo1jkJ7V2kBSI3jPhjmdmCyPEsmRAAVre4dUshfHk0eKPZ g8SSCAguQtNUDwNsePsafwn9vJsr6UXzHNki1jQcdiohz/wN/AvfmWwH+p5I5WWe t/X52yyMTVWq5yvKjxwnW0TWo5O7pMO4aqb6kGw1wTbo4Jgie8q6mIkJD4WHTSQP mPOQgRsGQcW2wz7svWJxmPM5gCYqu5HBfiVOR++soLxqWG5cRXmrARbhvp6tnriu qSMabXonyHKv4UBgOI3zgTTaKwUTpvJjUe06rp64BpYAZrDUnwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIjQk7OCWNZORLjp7TNU1wlh48B/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYz NmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNlMGZjMDgxMjQvM2E2MzZhZmQtZWNlNS00 ZTIzLWE1NGYtYzQzZTBmYzA4MTI0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2E2MzZhZmQtZWNlNS00ZTIzLWE1 NGYtYzQzZTBmYzA4MTI0LzNhNjM2YWZkLWVjZTUtNGUyMy1hNTRmLWM0M2UwZmMw ODEyNC5jcmwwHwYDVR0jBBgwFoAUi85A8V4+45U8NUK2BDw+0WEHNyMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYzNmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNl MGZjMDgxMjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA37tMitU+9qtZxcv5O2W+e VD8sx5Opgls8kFf+GkSk5BfcOVQKrZkEU/8QdbA1gHik37YrVNoukRKiBdrwlWaQ wEbIsxb3LtTB2k9T+ni612/absAVPPNcNvX6WhlkKiYCw6a3lcQ32ts9mdZ3yj/p J+jnSQ6g5f3lR9RGi+244YcrFClme+NrlA3KuYdnTYOZAj86DgOtSlrUFwMIpL6x SZSa/538lgq4Wx1HI/WkNJcERmzRqGYKWjcjOnVMp8r2MAoFR/M1QiYNdcNW8rSU 1q/9hsSKL31GEi3hov/N2xJKQQ4D8LARrnNREoxibg+NUkd06N+/c/cU3tKEOjWx -----END CERTIFICATE-----Generated at Tue May 6 10:03:06 2025 by rpki-client