$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft File: 704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft (raw, json) Hash identifier: FQMopzVtkAxmZ76a9SPx2tW51CQZ0Or6JXZEZobqXBE= Subject key identifier: 1E:72:7F:D7:CD:89:A8:01:D5:0F:B2:A7:0A:B5:70:6D:D0:F4:08:11 Authority key identifier: 52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97 Certificate issuer: /CN=704a761f-b71a-4fa2-b0e7-db5278e23dc3 Certificate serial: 010D0C9F43285849CE22A79C87654E27E2484900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft Manifest number: 010D0C9F4328584073A84BBB6D274A47E14402AC Signing time: Sat 10 May 2025 09:00:07 +0000 Manifest this update: Sat 10 May 2025 09:00:07 +0000 Manifest next update: Mon 12 May 2025 09:00:00 +0000 Files and hashes: 1: 704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl (hash: sjRoVdYTA+RURJK2QA0e8B3dXVGGFVgeYa0TMOT0CHk=) 2: e6965540-cbd0-3930-b638-a04886e69eac.roa (hash: /rIblcKEmq7cHoFaepGfJcX8rmjtsszK4w5tIcGlNJU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:22:a7:9c:87:65:4e:27:e2:48:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=704a761f-b71a-4fa2-b0e7-db5278e23dc3 Validity Not Before: May 10 09:00:07 2025 GMT Not After : May 12 09:00:00 2025 GMT Subject: CN=9ab7e333-1509-4b87-a39b-0afb729b4818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e5:e3:f5:4b:46:a8:ef:77:a9:13:02:ee:fc: 93:85:73:53:75:d7:cd:08:05:ef:cd:4f:71:d4:1d: 6b:eb:2e:6f:68:92:42:54:76:91:5f:57:fa:3e:8e: 31:5f:1e:33:84:ad:09:13:cf:99:75:0c:1b:23:df: bc:69:b7:58:80:f7:1e:e9:8e:20:b7:01:92:c0:2e: 7a:94:ff:3f:62:9c:68:ac:22:6d:60:4c:59:54:48: 33:bd:1a:60:7c:0a:93:d3:5f:28:c3:1e:2a:6d:0b: 45:f1:c8:c2:f7:aa:93:aa:8a:11:6c:62:a0:5f:82: d5:59:98:1f:1a:60:0a:77:8e:5c:26:87:01:70:1c: cf:a1:30:45:f0:ac:b0:2a:2b:68:94:cf:cd:be:6f: dd:94:c6:fd:5f:6d:88:45:45:f7:c8:2b:55:6c:c0: 59:a3:78:77:35:46:5b:fd:41:04:d7:7f:8c:52:41: 09:aa:f3:e4:04:8e:08:4b:19:1a:f7:8f:aa:bf:c7: 2f:24:50:4a:6c:78:2d:05:aa:b7:f2:c8:fe:c3:b3: 9f:b7:43:84:6a:36:59:cc:bc:78:b1:c3:8f:1c:2a: 8c:7e:27:50:e0:10:d2:fd:7e:9d:24:30:26:5e:91: 5c:9b:11:98:56:56:40:2a:e1:ac:82:f9:ea:5e:28: f5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:72:7F:D7:CD:89:A8:01:D5:0F:B2:A7:0A:B5:70:6D:D0:F4:08:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl X509v3 Authority Key Identifier: keyid:52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:ae:fd:3e:32:3e:7b:e3:65:1f:92:06:0d:af:ec:25:c1:f4: f2:82:d7:c8:b2:62:3d:c4:a9:18:4b:df:0d:64:81:d5:91:e7: ec:2d:2a:95:25:64:04:41:36:69:6a:e2:36:0e:ad:68:79:51: bb:74:76:34:68:e2:6a:41:b6:19:34:c9:40:26:de:5c:83:91: ce:49:00:87:1d:90:76:99:fc:bb:6f:62:f4:6b:3c:1f:31:62: 0a:63:26:e9:fa:6a:46:fc:d5:d1:3f:fe:4b:ca:aa:70:12:44: df:af:64:8f:80:72:07:6d:e4:0f:fa:b2:70:b2:3d:a3:98:ed: 32:d6:b1:f5:ac:70:1d:d8:83:f9:2d:da:d0:3c:58:25:d4:af: aa:b0:b7:9a:02:a5:93:81:ea:1c:dc:5a:93:60:11:b0:9d:e0: 1a:96:d8:78:6d:44:d7:94:6a:0b:ef:d2:e6:5b:c6:22:d6:0c: 6c:25:8f:5f:00:05:8f:41:56:0a:db:bb:05:95:e4:3f:fd:0c: 02:55:37:7c:bd:ae:d0:ab:b4:a5:b5:02:87:08:cf:0f:e2:e2: 8a:b3:e8:ff:e8:2c:df:a3:27:c8:89:12:c5:48:d7:c2:cc:31: 66:13:a8:a8:5f:56:9b:a8:dd:bf:87:5d:04:af:7f:3d:12:62: 29:24:c1:46 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnOIqech2VOJ+JISQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA0YTc2MWYtYjcxYS00ZmEyLWIwZTctZGI1Mjc4ZTIz ZGMzMB4XDTI1MDUxMDA5MDAwN1oXDTI1MDUxMjA5MDAwMFowLzEtMCsGA1UEAxMk OWFiN2UzMzMtMTUwOS00Yjg3LWEzOWItMGFmYjcyOWI0ODE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+Xj9UtGqO93qRMC7vyThXNTddfNCAXvzU9x 1B1r6y5vaJJCVHaRX1f6Po4xXx4zhK0JE8+ZdQwbI9+8abdYgPce6Y4gtwGSwC56 lP8/YpxorCJtYExZVEgzvRpgfAqT018owx4qbQtF8cjC96qTqooRbGKgX4LVWZgf GmAKd45cJocBcBzPoTBF8KywKitolM/Nvm/dlMb9X22IRUX3yCtVbMBZo3h3NUZb /UEE13+MUkEJqvPkBI4ISxka94+qv8cvJFBKbHgtBaq38sj+w7Oft0OEajZZzLx4 scOPHCqMfidQ4BDS/X6dJDAmXpFcmxGYVlZAKuGsgvnqXij18wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFB5yf9fNiagB1Q+ypwq1cG3Q9AgRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDRh NzYxZi1iNzFhLTRmYTItYjBlNy1kYjUyNzhlMjNkYzMvNzA0YTc2MWYtYjcxYS00 ZmEyLWIwZTctZGI1Mjc4ZTIzZGMzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzA0YTc2MWYtYjcxYS00ZmEyLWIw ZTctZGI1Mjc4ZTIzZGMzLzcwNGE3NjFmLWI3MWEtNGZhMi1iMGU3LWRiNTI3OGUy M2RjMy5jcmwwHwYDVR0jBBgwFoAUUi3Wa4cFBpviRD6NQcu1N8w4MZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MDRhNzYxZi1iNzFhLTRmYTItYjBlNy1kYjUy NzhlMjNkYzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB3rv0+Mj5742UfkgYNr+wl wfTygtfIsmI9xKkYS98NZIHVkefsLSqVJWQEQTZpauI2Dq1oeVG7dHY0aOJqQbYZ NMlAJt5cg5HOSQCHHZB2mfy7b2L0azwfMWIKYybp+mpG/NXRP/5LyqpwEkTfr2SP gHIHbeQP+rJwsj2jmO0y1rH1rHAd2IP5LdrQPFgl1K+qsLeaAqWTgeoc3FqTYBGw neAalth4bUTXlGoL79LmW8Yi1gxsJY9fAAWPQVYK27sFleQ//QwCVTd8va7Qq7Sl tQKHCM8P4uKKs+j/6CzfoyfIiRLFSNfCzDFmE6ioX1abqN2/h10Er389EmIpJMFG -----END CERTIFICATE-----Generated at Sun May 11 05:17:34 2025 by rpki-client