$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft File: 4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft (raw, json) Hash identifier: HD9+qtHilSImMeGrLERGPQxroXe0yNkYco7pK50S5hk= Subject key identifier: 79:0B:B6:F6:BD:3D:91:8D:64:E0:D5:AB:5F:3B:00:BD:70:6B:91:37 Authority key identifier: 4C:31:43:41:4B:7B:18:75:0D:A5:83:40:42:11:7D:4D:95:0E:A3:0C Certificate issuer: /CN=4c85e42d-2171-4f6d-837f-3f7bac9d9a3d Certificate serial: 010D0C9F43285849D1646B59339C9644463AE36F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft Manifest number: 010D0C9F432858467B3AE8B15C5CB25608060BD9 Signing time: Sun 11 May 2025 13:00:03 +0000 Manifest this update: Sun 11 May 2025 13:00:03 +0000 Manifest next update: Wed 14 May 2025 13:00:00 +0000 Files and hashes: 1: 4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl (hash: v4Q9WaxZc0Ss+9JpZ0JjsXYF8uwtVp8mQ7VwYvOWix0=) 2: 9c8e17a0-b624-3b98-92e7-fbd40f1f5eb7.roa (hash: YTbzs4VEY0j6DrAsLVF5yxKOw6DmGYVUyd/kzzpCMOQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:64:6b:59:33:9c:96:44:46:3a:e3:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c85e42d-2171-4f6d-837f-3f7bac9d9a3d Validity Not Before: May 11 13:00:03 2025 GMT Not After : May 14 13:00:00 2025 GMT Subject: CN=34df2606-5841-4f4b-adb7-5d706a1d4289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:88:35:69:a1:43:5c:bb:29:71:59:f6:18:b4: a9:fa:86:ac:8b:74:6e:6b:02:9a:42:83:f7:bf:15: 63:92:b7:85:01:08:37:71:65:2c:64:65:78:58:cb: 2d:86:fe:d0:f1:d1:e4:0f:fc:04:89:1a:63:ed:56: 42:47:b9:41:0b:c7:54:72:3d:4c:a8:27:d5:69:6a: 9d:50:19:b5:93:61:0c:ea:17:88:07:d4:51:2e:a1: 10:92:32:8a:47:9a:08:99:64:2c:08:0e:5b:5e:a1: 0b:36:9a:a4:57:37:0f:17:b2:8d:d6:54:d9:56:9b: d8:81:55:df:7c:3d:79:77:69:5c:42:fc:95:c0:ca: 68:8a:72:42:b8:bb:36:36:a3:5f:46:56:10:d8:8b: 7b:14:22:b2:dd:57:6d:9a:77:23:22:65:02:26:68: ee:d1:79:4d:83:45:58:7e:05:5f:d1:96:75:ba:30: c0:ef:a9:86:54:11:9b:2a:3d:eb:c9:be:7c:47:61: d2:07:63:95:89:f7:88:71:08:58:bb:04:5b:2b:ec: aa:1c:f4:fc:97:4f:4d:fb:29:b2:67:5a:55:8c:9c: 45:1f:7e:09:89:bb:a3:9f:2a:65:1e:ae:01:51:21: 76:e2:52:37:a5:1a:eb:72:19:a5:93:74:29:7b:3d: cb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:0B:B6:F6:BD:3D:91:8D:64:E0:D5:AB:5F:3B:00:BD:70:6B:91:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl X509v3 Authority Key Identifier: keyid:4C:31:43:41:4B:7B:18:75:0D:A5:83:40:42:11:7D:4D:95:0E:A3:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:9a:c6:92:03:71:90:59:95:21:e9:0a:0e:cf:eb:26:bf:9e: 1c:3a:fc:21:ec:2e:7b:c5:d6:3f:e0:a8:12:64:54:f0:75:fa: f5:a5:c4:52:7d:88:d9:56:85:1f:0b:8a:8e:d5:7c:dc:42:9d: 38:55:7c:cc:d4:13:25:1e:3e:25:ce:ac:7a:f7:db:c2:8d:65: 43:ec:f8:18:ea:f4:6e:03:83:09:c3:77:b1:48:70:a0:7c:06: 44:1a:25:e0:92:08:47:e9:90:42:a0:c3:6e:3b:a7:72:a6:b3: 88:80:c6:17:3c:7c:1c:c8:7d:da:d6:46:e9:07:88:10:74:de: 4f:43:6c:ef:3d:40:15:1b:96:fe:87:c0:8a:a1:6b:b9:d3:81: 87:26:48:2c:ec:1b:d8:c1:7b:fa:c8:86:5c:91:45:51:aa:fa: 6c:98:4e:44:66:8f:af:2a:ef:f1:90:14:bc:ca:5c:52:a7:e7: 84:0c:9c:f2:fb:00:e0:ba:e5:ab:80:d8:9f:9d:59:b5:cc:c3: 3e:de:7b:f4:3e:dd:3e:c4:c7:f6:5d:e7:2b:8c:dc:b1:83:5d: aa:0d:f8:96:52:69:e3:8f:04:86:09:61:38:4d:4a:ac:aa:08: 4d:97:57:a4:05:63:cd:4f:47:d6:f9:11:d4:70:df:74:3b:37: 28:9b:5c:4b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnRZGtZM5yWREY6428wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM4NWU0MmQtMjE3MS00ZjZkLTgzN2YtM2Y3YmFjOWQ5 YTNkMB4XDTI1MDUxMTEzMDAwM1oXDTI1MDUxNDEzMDAwMFowLzEtMCsGA1UEAxMk MzRkZjI2MDYtNTg0MS00ZjRiLWFkYjctNWQ3MDZhMWQ0Mjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIg1aaFDXLspcVn2GLSp+oasi3RuawKaQoP3 vxVjkreFAQg3cWUsZGV4WMsthv7Q8dHkD/wEiRpj7VZCR7lBC8dUcj1MqCfVaWqd UBm1k2EM6heIB9RRLqEQkjKKR5oImWQsCA5bXqELNpqkVzcPF7KN1lTZVpvYgVXf fD15d2lcQvyVwMpoinJCuLs2NqNfRlYQ2It7FCKy3VdtmncjImUCJmju0XlNg0VY fgVf0ZZ1ujDA76mGVBGbKj3ryb58R2HSB2OVifeIcQhYuwRbK+yqHPT8l09N+ymy Z1pVjJxFH34JibujnyplHq4BUSF24lI3pRrrchmlk3Qpez3L8wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHkLtva9PZGNZODVq187AL1wa5E3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yzg1 ZTQyZC0yMTcxLTRmNmQtODM3Zi0zZjdiYWM5ZDlhM2QvNGM4NWU0MmQtMjE3MS00 ZjZkLTgzN2YtM2Y3YmFjOWQ5YTNkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGM4NWU0MmQtMjE3MS00ZjZkLTgz N2YtM2Y3YmFjOWQ5YTNkLzRjODVlNDJkLTIxNzEtNGY2ZC04MzdmLTNmN2JhYzlk OWEzZC5jcmwwHwYDVR0jBBgwFoAUTDFDQUt7GHUNpYNAQhF9TZUOowwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Yzg1ZTQyZC0yMTcxLTRmNmQtODM3Zi0zZjdi YWM5ZDlhM2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBDmsaSA3GQWZUh6QoOz+sm v54cOvwh7C57xdY/4KgSZFTwdfr1pcRSfYjZVoUfC4qO1XzcQp04VXzM1BMlHj4l zqx699vCjWVD7PgY6vRuA4MJw3exSHCgfAZEGiXgkghH6ZBCoMNuO6dyprOIgMYX PHwcyH3a1kbpB4gQdN5PQ2zvPUAVG5b+h8CKoWu504GHJkgs7BvYwXv6yIZckUVR qvpsmE5EZo+vKu/xkBS8ylxSp+eEDJzy+wDguuWrgNifnVm1zMM+3nv0Pt0+xMf2 XecrjNyxg12qDfiWUmnjjwSGCWE4TUqsqghNl1ekBWPNT0fW+RHUcN90Ozcom1xL -----END CERTIFICATE-----Generated at Mon May 12 02:13:32 2025 by rpki-client