$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft File: 589c840d-5406-45bd-ac1d-d77b3c5c3780.mft (raw, json) Hash identifier: OUIxQRO+BBaseS749kzHd0l15WoNda37s5vNUCjz/Jc= Subject key identifier: 06:21:1B:F8:98:4A:BD:5D:22:76:4A:DD:D8:8D:89:5F:3F:83:74:B6 Authority key identifier: BC:15:7B:E2:B9:B7:0E:AD:68:06:A5:B6:A8:9F:03:D4:E2:E0:46:4F Certificate issuer: /CN=589c840d-5406-45bd-ac1d-d77b3c5c3780 Certificate serial: 010D0C9F43285849D234E6580A6EC4CE3B3BE7E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft Manifest number: 010D0C9F4328584073A8273D6C0F9AE946A9C55D Signing time: Sun 11 May 2025 20:00:07 +0000 Manifest this update: Sun 11 May 2025 20:00:07 +0000 Manifest next update: Tue 13 May 2025 20:00:00 +0000 Files and hashes: 1: 0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer (hash: qbW5Oe8ZH8LXRkGL+tJMOyuvkonBqhPduSzgcBMu+QY=) 2: 589c840d-5406-45bd-ac1d-d77b3c5c3780.crl (hash: +Fp7U0H4Gy1nM3W4DvOiFbAycO1WnTF7jXvQ64vh8dI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d2:34:e6:58:0a:6e:c4:ce:3b:3b:e7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=589c840d-5406-45bd-ac1d-d77b3c5c3780 Validity Not Before: May 11 20:00:07 2025 GMT Not After : May 13 20:00:00 2025 GMT Subject: CN=6ed9db62-8f7e-4682-8e8c-e872c59f2aa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0a:56:cd:aa:b5:f8:e6:74:0b:81:c1:7e:5d: 06:bc:77:9c:1c:20:bd:01:29:f9:87:97:e6:66:6e: ec:a4:fb:70:d8:d5:bf:d9:92:7d:2b:63:f1:52:e4: 5c:94:24:f8:c9:ab:13:e4:83:a7:50:dc:24:85:5a: f2:5b:0a:4e:7f:e7:b5:93:e3:34:77:a3:d4:4b:4c: a3:8f:5d:a0:7a:f5:35:df:1b:db:35:6b:aa:90:df: 2d:48:eb:8c:be:d3:72:18:a2:1a:e1:35:a0:e9:a7: b0:0e:a0:7d:65:2e:d5:98:6b:93:b5:34:4e:99:8f: d2:4f:c6:e3:8f:77:8d:64:49:3e:20:80:cb:56:a1: e9:2a:d8:1b:ad:93:c2:e6:b6:41:86:d4:bc:98:6e: f1:46:a9:7b:c1:f5:cc:f4:68:01:26:ba:f7:c1:62: 4d:2b:22:58:ba:03:0b:d1:a9:07:4c:eb:76:0d:b1: db:ca:f0:74:78:d8:a0:6f:6c:93:c8:f2:3b:0b:59: 2c:eb:18:42:81:8b:6b:84:00:d7:5b:c4:c9:55:cd: 06:45:bc:49:43:cb:2f:24:3b:89:a9:12:38:38:34: b8:d7:45:15:1d:3b:f0:07:4c:c4:72:24:2e:96:dc: ba:ed:36:01:84:8a:40:ee:f4:11:ce:e4:08:ed:80: 97:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:21:1B:F8:98:4A:BD:5D:22:76:4A:DD:D8:8D:89:5F:3F:83:74:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl X509v3 Authority Key Identifier: keyid:BC:15:7B:E2:B9:B7:0E:AD:68:06:A5:B6:A8:9F:03:D4:E2:E0:46:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:5c:d9:b0:22:74:cb:c9:d7:ef:0f:58:3f:b0:7e:bc:d0:b1: 06:ea:56:5e:39:20:31:48:1c:7a:20:1d:20:79:e1:0a:7c:79: 96:0d:ac:48:a3:cd:68:de:81:c6:3d:f4:21:a5:44:61:7b:71: e6:56:15:83:b6:b0:53:6f:c9:b0:bd:e9:cb:60:3e:91:cf:52: b6:9d:23:dd:6f:02:93:a0:e8:a9:ca:9f:6d:31:46:4d:25:73: bc:bd:ed:ae:7b:df:92:46:0c:55:77:16:fa:ec:24:b1:0f:88: f2:45:54:c5:a8:99:6e:03:2a:ee:6c:0c:9e:48:6e:15:02:55: 82:a3:4d:5f:43:e5:a2:2d:37:f4:86:6f:c0:e4:47:27:41:87: da:1b:0a:a5:ee:cc:58:c2:42:3e:71:52:68:e8:d1:6e:ee:a2: e7:f7:08:57:7f:9b:d0:46:18:0f:15:50:a0:40:e6:ef:5c:01: 68:45:73:5e:b3:07:ac:59:6b:0b:ed:93:d1:18:0a:0c:12:ca: f9:d7:ec:90:f0:2b:77:ab:79:8f:d8:36:6b:3d:46:77:16:5c: 72:c2:c5:01:2a:a7:48:e7:44:b3:f7:7b:2b:c3:0c:84:34:a4: ef:06:9f:d0:e9:0d:c3:10:f7:35:e5:db:21:0d:67:ee:a6:9d: e9:d9:ec:8b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnSNOZYCm7Ezjs75+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTg5Yzg0MGQtNTQwNi00NWJkLWFjMWQtZDc3YjNjNWMz NzgwMB4XDTI1MDUxMTIwMDAwN1oXDTI1MDUxMzIwMDAwMFowLzEtMCsGA1UEAxMk NmVkOWRiNjItOGY3ZS00NjgyLThlOGMtZTg3MmM1OWYyYWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQpWzaq1+OZ0C4HBfl0GvHecHCC9ASn5h5fm Zm7spPtw2NW/2ZJ9K2PxUuRclCT4yasT5IOnUNwkhVryWwpOf+e1k+M0d6PUS0yj j12gevU13xvbNWuqkN8tSOuMvtNyGKIa4TWg6aewDqB9ZS7VmGuTtTROmY/ST8bj j3eNZEk+IIDLVqHpKtgbrZPC5rZBhtS8mG7xRql7wfXM9GgBJrr3wWJNKyJYugML 0akHTOt2DbHbyvB0eNigb2yTyPI7C1ks6xhCgYtrhADXW8TJVc0GRbxJQ8svJDuJ qRI4ODS410UVHTvwB0zEciQulty67TYBhIpA7vQRzuQI7YCXSQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAYhG/iYSr1dInZK3diNiV8/g3S2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ODlj ODQwZC01NDA2LTQ1YmQtYWMxZC1kNzdiM2M1YzM3ODAvNTg5Yzg0MGQtNTQwNi00 NWJkLWFjMWQtZDc3YjNjNWMzNzgwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTg5Yzg0MGQtNTQwNi00NWJkLWFj MWQtZDc3YjNjNWMzNzgwLzU4OWM4NDBkLTU0MDYtNDViZC1hYzFkLWQ3N2IzYzVj Mzc4MC5jcmwwHwYDVR0jBBgwFoAUvBV74rm3Dq1oBqW2qJ8D1OLgRk8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81ODljODQwZC01NDA2LTQ1YmQtYWMxZC1kNzdi M2M1YzM3ODAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCAXNmwInTLydfvD1g/sH68 0LEG6lZeOSAxSBx6IB0geeEKfHmWDaxIo81o3oHGPfQhpURhe3HmVhWDtrBTb8mw venLYD6Rz1K2nSPdbwKToOipyp9tMUZNJXO8ve2ue9+SRgxVdxb67CSxD4jyRVTF qJluAyrubAyeSG4VAlWCo01fQ+WiLTf0hm/A5EcnQYfaGwql7sxYwkI+cVJo6NFu 7qLn9whXf5vQRhgPFVCgQObvXAFoRXNeswesWWsL7ZPRGAoMEsr51+yQ8Ct3q3mP 2DZrPUZ3FlxywsUBKqdI50Sz93srwwyENKTvBp/Q6Q3DEPc15dshDWfupp3p2eyL -----END CERTIFICATE-----Generated at Mon May 12 16:45:14 2025 by rpki-client