$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.mft File: 3bc8e9cb-88ee-455e-b012-1b1abfca72ab.mft (raw, json) Hash identifier: oaD4lJIOFP6u3Z/yub/HTMyDFyI+Ndw5PT8Fi8KJT6g= Subject key identifier: FB:F5:EE:18:A6:7F:E2:0D:67:24:93:22:FD:29:73:12:58:BD:08:DD Authority key identifier: 84:AD:69:95:E5:C7:F4:14:66:20:C8:C7:68:96:BA:C7:52:17:0D:14 Certificate issuer: /CN=3bc8e9cb-88ee-455e-b012-1b1abfca72ab Certificate serial: 010D0C9F43285849D3B80656034A3853D58BBF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.mft Manifest number: 010D0C9F4328584073A8498F3F05E22DFBDA95EF Signing time: Mon 12 May 2025 09:00:07 +0000 Manifest this update: Mon 12 May 2025 09:00:07 +0000 Manifest next update: Wed 14 May 2025 09:00:00 +0000 Files and hashes: 1: 3bc8e9cb-88ee-455e-b012-1b1abfca72ab.crl (hash: ZvKYET2j4dl4MvVCncCdtTfyfhbLx7cNtUSZT7679Uw=) 2: d9e1ae26-257a-3a0b-b46e-049aa014cc17.roa (hash: MEbmwC/Bz9ilf7FFmAI4A3fSyLBXduHkOl6jJ+UqYU0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d3:b8:06:56:03:4a:38:53:d5:8b:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bc8e9cb-88ee-455e-b012-1b1abfca72ab Validity Not Before: May 12 09:00:07 2025 GMT Not After : May 14 09:00:00 2025 GMT Subject: CN=7b55d51a-551e-469a-81cb-239ee7d00d5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:be:95:c6:fc:ff:bf:9e:13:5d:6a:04:b2:a6: 53:47:68:f8:aa:f0:15:fc:0f:3a:96:68:86:7b:0c: eb:27:7f:cd:6b:9e:bb:a2:7f:27:af:fb:f4:72:9c: 49:fb:dc:6b:c9:ee:31:d4:b6:b2:96:68:f8:8c:10: d7:e1:5e:b9:81:53:f2:32:6b:6c:d0:17:74:aa:15: 53:5c:ab:bf:4f:98:56:9d:d5:37:12:16:86:c7:e1: e0:c6:c9:27:05:b8:36:52:f3:ec:09:d2:75:81:8d: 5b:96:2c:ff:17:0c:26:16:c3:eb:2f:97:1b:c0:77: fe:82:23:08:cd:53:fd:f0:f2:39:c5:5e:a3:80:8a: 1f:1e:00:10:b5:4a:cb:6e:d3:31:11:b7:23:f4:b6: f0:9a:64:eb:65:83:6b:31:d1:26:28:7b:34:b9:d4: a9:bb:95:fc:4f:58:07:a6:fc:29:7b:3f:11:de:e5: d3:53:49:b5:00:3a:8a:d9:0d:1a:15:ff:46:1d:77: 54:cb:28:4e:88:74:14:ab:86:b7:9a:5f:40:71:00: c6:d1:95:12:42:a7:94:52:3a:49:0f:e1:16:be:65: 57:af:8b:0a:09:35:5a:82:e4:17:d4:46:d6:87:87: a6:90:7f:94:a8:d9:3b:e3:a8:68:97:41:8d:27:49: 63:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:F5:EE:18:A6:7F:E2:0D:67:24:93:22:FD:29:73:12:58:BD:08:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.crl X509v3 Authority Key Identifier: keyid:84:AD:69:95:E5:C7:F4:14:66:20:C8:C7:68:96:BA:C7:52:17:0D:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:c9:15:78:38:c5:ea:3d:0d:e7:c1:6c:9f:b0:8a:be:50:cd: cd:39:56:03:df:f0:b9:7a:8c:e6:a2:59:ea:f4:ad:39:40:c3: 33:22:5d:d0:33:8d:1e:2b:11:3e:54:f0:4c:bb:c7:45:22:40: 59:fc:55:ae:27:b4:7d:2b:52:83:6a:6c:d1:dd:a2:23:fa:5a: 34:c4:51:84:c3:26:19:08:93:6c:dd:8a:69:9f:09:67:37:e9: be:a3:3b:42:01:7d:8d:6b:cb:5c:86:e1:4e:a2:a1:0b:94:3b: d9:0a:ef:99:b6:24:41:e6:b5:87:4d:cf:21:62:0c:dd:66:94: 43:45:5b:bf:75:17:cf:49:6d:9f:94:11:ba:19:20:f1:84:8a: 4e:82:b6:53:55:03:19:4a:39:92:f2:78:5b:0a:f9:46:04:61: 69:4f:67:db:8e:ad:7a:79:cd:d0:99:f2:f2:07:ac:bb:d1:e4: 75:de:cb:3a:8d:a3:86:05:90:d9:2f:b9:37:eb:96:65:8c:aa: 1d:a9:16:f1:f0:99:37:8e:41:28:a1:74:63:45:93:c0:e4:cb: c3:73:9c:e4:2b:90:ec:1b:0d:ce:9a:dc:31:ca:b7:75:7c:5a: 12:d8:62:8f:5e:5a:58:17:c5:1e:ee:79:aa:c5:23:e0:2e:57: 20:d6:af:3e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnTuAZWA0o4U9WLvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JjOGU5Y2ItODhlZS00NTVlLWIwMTItMWIxYWJmY2E3 MmFiMB4XDTI1MDUxMjA5MDAwN1oXDTI1MDUxNDA5MDAwMFowLzEtMCsGA1UEAxMk N2I1NWQ1MWEtNTUxZS00NjlhLTgxY2ItMjM5ZWU3ZDAwZDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgL6Vxvz/v54TXWoEsqZTR2j4qvAV/A86lmiG ewzrJ3/Na567on8nr/v0cpxJ+9xrye4x1Laylmj4jBDX4V65gVPyMmts0Bd0qhVT XKu/T5hWndU3EhaGx+HgxsknBbg2UvPsCdJ1gY1bliz/FwwmFsPrL5cbwHf+giMI zVP98PI5xV6jgIofHgAQtUrLbtMxEbcj9LbwmmTrZYNrMdEmKHs0udSpu5X8T1gH pvwpez8R3uXTU0m1ADqK2Q0aFf9GHXdUyyhOiHQUq4a3ml9AcQDG0ZUSQqeUUjpJ D+EWvmVXr4sKCTVaguQX1EbWh4emkH+UqNk746hol0GNJ0lj6wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPv17himf+INZySTIv0pcxJYvQjdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYmM4 ZTljYi04OGVlLTQ1NWUtYjAxMi0xYjFhYmZjYTcyYWIvM2JjOGU5Y2ItODhlZS00 NTVlLWIwMTItMWIxYWJmY2E3MmFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2JjOGU5Y2ItODhlZS00NTVlLWIw MTItMWIxYWJmY2E3MmFiLzNiYzhlOWNiLTg4ZWUtNDU1ZS1iMDEyLTFiMWFiZmNh NzJhYi5jcmwwHwYDVR0jBBgwFoAUhK1pleXH9BRmIMjHaJa6x1IXDRQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYmM4ZTljYi04OGVlLTQ1NWUtYjAxMi0xYjFh YmZjYTcyYWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB6yRV4OMXqPQ3nwWyfsIq+ UM3NOVYD3/C5eozmolnq9K05QMMzIl3QM40eKxE+VPBMu8dFIkBZ/FWuJ7R9K1KD amzR3aIj+lo0xFGEwyYZCJNs3YppnwlnN+m+oztCAX2Na8tchuFOoqELlDvZCu+Z tiRB5rWHTc8hYgzdZpRDRVu/dRfPSW2flBG6GSDxhIpOgrZTVQMZSjmS8nhbCvlG BGFpT2fbjq16ec3QmfLyB6y70eR13ss6jaOGBZDZL7k365ZljKodqRbx8Jk3jkEo oXRjRZPA5MvDc5zkK5DsGw3Omtwxyrd1fFoS2GKPXlpYF8Ue7nmqxSPgLlcg1q8+ -----END CERTIFICATE-----Generated at Mon May 12 10:47:43 2025 by rpki-client