$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f.mft File: 5f559cf8-ad18-44c0-90d7-3a1d9195ed2f.mft (raw, json) Hash identifier: uNIliS2eemHeBkoPYq0lkm3mkuw2RJEvCyALmeRLDfg= Subject key identifier: 19:2B:5A:F8:63:CB:3C:11:5B:A3:DB:00:3A:99:FB:E9:F8:90:72:0E Authority key identifier: FE:37:B6:6E:EB:6B:3C:CC:8A:B8:21:CA:24:3F:35:6A:51:02:00:44 Certificate issuer: /CN=5f559cf8-ad18-44c0-90d7-3a1d9195ed2f Certificate serial: 010D0C9F43285849CF6A36C48FD321E72F409F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f.mft Manifest number: 010D0C9F4328584073A826DC63937BC3F2F797EE Signing time: Sat 10 May 2025 20:00:07 +0000 Manifest this update: Sat 10 May 2025 20:00:07 +0000 Manifest next update: Tue 13 May 2025 20:00:00 +0000 Files and hashes: 1: 5f559cf8-ad18-44c0-90d7-3a1d9195ed2f.crl (hash: 2PjFWWn3QjF2/tahsAp8jkg37FfxT9eckU/48gILSKc=) 2: e25df40d-02c2-3a6c-9a95-6762ccfb7730.roa (hash: +x6zlEELz4VZD3D7JKVDs3HG5lF4ywTqpJeil05H+fs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cf:6a:36:c4:8f:d3:21:e7:2f:40:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f559cf8-ad18-44c0-90d7-3a1d9195ed2f Validity Not Before: May 10 20:00:07 2025 GMT Not After : May 13 20:00:00 2025 GMT Subject: CN=61a48117-8ce1-43d8-953d-bc17ec583eba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0b:6d:35:5b:c6:a7:a6:92:3a:0b:31:06:23: 04:66:e1:79:72:6f:e1:75:97:c7:f6:bf:ef:e4:41: 0e:59:09:ab:cf:38:9f:ef:b2:37:0f:5d:4f:fc:77: c6:12:2d:6a:c9:db:4f:b6:90:a6:63:f9:26:ab:36: 15:69:50:d0:43:9b:51:bc:98:ac:99:d5:95:84:cc: 81:c8:83:9a:36:95:51:10:e1:de:8c:62:eb:1e:ad: bc:bc:99:99:88:39:c3:e2:87:f8:dc:84:03:3e:ef: cf:04:13:76:5a:ea:2c:40:dc:03:11:bd:f9:63:ad: 34:7d:4a:a2:a3:f6:8d:7d:2a:04:07:f2:e8:d3:de: 65:db:d0:9a:e5:93:35:67:ec:5d:c9:8f:94:2c:2d: 5f:80:d1:df:f1:33:1b:ec:4c:33:16:c0:aa:b3:97: 45:ba:4b:d2:ae:9d:16:34:ba:ae:2c:b4:b2:dc:04: 31:35:48:dd:0b:63:8c:a7:95:52:88:76:8c:f2:0b: 41:76:63:60:01:6a:9e:a9:8b:87:d6:c5:0f:e4:93: cc:1b:87:9e:ea:2b:81:9e:b2:4a:a1:24:92:26:a2: 50:40:4f:c5:75:cf:de:d0:42:60:76:2c:42:e9:fb: 67:ce:73:54:aa:2b:e1:5c:95:90:70:1f:c9:06:da: b3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:2B:5A:F8:63:CB:3C:11:5B:A3:DB:00:3A:99:FB:E9:F8:90:72:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f.crl X509v3 Authority Key Identifier: keyid:FE:37:B6:6E:EB:6B:3C:CC:8A:B8:21:CA:24:3F:35:6A:51:02:00:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f559cf8-ad18-44c0-90d7-3a1d9195ed2f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:d6:63:86:63:bb:48:7c:0c:9c:80:06:9d:2c:1a:9f:e2:ad: af:2c:df:fa:80:b4:4e:9c:9f:1a:fe:6d:d7:ad:5a:56:71:14: f9:64:6a:d4:cc:b5:c7:0b:14:1c:1b:ac:a1:7a:c5:3d:37:d5: 74:1c:40:36:1f:6d:d8:ec:b0:88:d9:22:f4:0b:8d:1a:04:10: f2:5c:46:33:d0:b5:da:f3:c5:62:41:d8:87:17:57:0a:1c:60: 38:10:de:51:5e:04:a7:cb:9e:bb:b3:87:92:65:50:ee:6e:53: 03:62:11:49:d6:c8:82:21:10:29:d7:fb:3e:09:1f:a8:45:b3: 39:f1:34:58:04:85:14:67:cd:3a:b9:97:62:cf:99:48:0c:a1: 04:9a:51:3c:36:7e:e2:22:e0:a8:68:2b:8d:b2:32:76:0c:d6: fb:54:71:75:dd:a9:34:59:04:f9:9c:c3:97:d6:57:23:2a:01: 68:39:c6:84:de:ce:1b:3a:08:60:8a:8a:29:1c:b2:38:7e:4a: e4:d3:70:d8:de:ac:fd:ae:a7:61:30:cc:b2:89:38:a3:90:84: 01:08:68:37:f1:23:65:0a:08:e1:9a:35:79:bb:39:b7:37:ca: 5f:58:b1:c2:3d:0b:da:97:86:64:81:29:8c:ae:12:51:95:ba: 4e:b7:89:4b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnPajbEj9Mh5y9An4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWY1NTljZjgtYWQxOC00NGMwLTkwZDctM2ExZDkxOTVl ZDJmMB4XDTI1MDUxMDIwMDAwN1oXDTI1MDUxMzIwMDAwMFowLzEtMCsGA1UEAxMk NjFhNDgxMTctOGNlMS00M2Q4LTk1M2QtYmMxN2VjNTgzZWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAttNVvGp6aSOgsxBiMEZuF5cm/hdZfH9r/v 5EEOWQmrzzif77I3D11P/HfGEi1qydtPtpCmY/kmqzYVaVDQQ5tRvJismdWVhMyB yIOaNpVREOHejGLrHq28vJmZiDnD4of43IQDPu/PBBN2WuosQNwDEb35Y600fUqi o/aNfSoEB/Lo095l29Ca5ZM1Z+xdyY+ULC1fgNHf8TMb7EwzFsCqs5dFukvSrp0W NLquLLSy3AQxNUjdC2OMp5VSiHaM8gtBdmNgAWqeqYuH1sUP5JPMG4ee6iuBnrJK oSSSJqJQQE/Fdc/e0EJgdixC6ftnznNUqivhXJWQcB/JBtqzJwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBkrWvhjyzwRW6PbADqZ++n4kHIOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ZjU1 OWNmOC1hZDE4LTQ0YzAtOTBkNy0zYTFkOTE5NWVkMmYvNWY1NTljZjgtYWQxOC00 NGMwLTkwZDctM2ExZDkxOTVlZDJmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWY1NTljZjgtYWQxOC00NGMwLTkw ZDctM2ExZDkxOTVlZDJmLzVmNTU5Y2Y4LWFkMTgtNDRjMC05MGQ3LTNhMWQ5MTk1 ZWQyZi5jcmwwHwYDVR0jBBgwFoAU/je2butrPMyKuCHKJD81alECAEQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81ZjU1OWNmOC1hZDE4LTQ0YzAtOTBkNy0zYTFk OTE5NWVkMmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAv1mOGY7tIfAycgAadLBqf 4q2vLN/6gLROnJ8a/m3XrVpWcRT5ZGrUzLXHCxQcG6yhesU9N9V0HEA2H23Y7LCI 2SL0C40aBBDyXEYz0LXa88ViQdiHF1cKHGA4EN5RXgSny567s4eSZVDublMDYhFJ 1siCIRAp1/s+CR+oRbM58TRYBIUUZ806uZdiz5lIDKEEmlE8Nn7iIuCoaCuNsjJ2 DNb7VHF13ak0WQT5nMOX1lcjKgFoOcaE3s4bOghgioopHLI4fkrk03DY3qz9rqdh MMyyiTijkIQBCGg38SNlCgjhmjV5uzm3N8pfWLHCPQval4ZkgSmMrhJRlbpOt4lL -----END CERTIFICATE-----Generated at Sun May 11 21:00:13 2025 by rpki-client