$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/90aacd5a-46ac-4e18-9ef2-722280ddfa94.mft File: 90aacd5a-46ac-4e18-9ef2-722280ddfa94.mft (raw, json) Hash identifier: /e3BEPNX8n+l8r4eAhndHPwrw6xbKc24dQ32IAkS0RE= Subject key identifier: 8F:E5:B3:62:C5:B1:F6:D3:1B:CE:9D:DF:2C:A8:FB:64:7D:64:77:1D Authority key identifier: AA:85:0D:9E:7F:43:06:C8:15:96:5D:EB:4C:1C:CF:E4:FB:76:70:06 Certificate issuer: /CN=90aacd5a-46ac-4e18-9ef2-722280ddfa94 Certificate serial: 010D0C9F43285849D28E3F5FB83BDDC27ACA0E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/90aacd5a-46ac-4e18-9ef2-722280ddfa94.mft Manifest number: 010D0C9F4328584073A82FCDA98589E8CBEB12EE Signing time: Sun 11 May 2025 23:00:07 +0000 Manifest this update: Sun 11 May 2025 23:00:07 +0000 Manifest next update: Tue 13 May 2025 23:00:00 +0000 Files and hashes: 1: 1dcc2252-c71a-345a-ba00-93c43b487133.roa (hash: Bkei1TPfeKRPWQCpzV1cMFv4ZnkZqOik5Ka9+PI6BEY=) 2: 90aacd5a-46ac-4e18-9ef2-722280ddfa94.crl (hash: HzXNeEVkY37RI+VVikWA4ufoGu5DJ7iY+OH03VY8bes=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/90aacd5a-46ac-4e18-9ef2-722280ddfa94.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/90aacd5a-46ac-4e18-9ef2-722280ddfa94.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d2:8e:3f:5f:b8:3b:dd:c2:7a:ca:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90aacd5a-46ac-4e18-9ef2-722280ddfa94 Validity Not Before: May 11 23:00:07 2025 GMT Not After : May 13 23:00:00 2025 GMT Subject: CN=7ac7e9a4-9aab-48e6-8b69-9a7199393858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9a:20:2d:1a:fe:f4:7b:30:79:6a:aa:a2:8d: da:ae:74:9e:2b:91:e1:aa:85:91:08:cb:ec:5c:ea: 12:b8:55:6a:86:81:3d:38:47:a5:3f:6d:45:f0:e3: 85:a7:ef:e2:10:be:a4:ce:13:a1:8d:4f:69:6b:db: 69:16:14:55:b1:94:e5:cc:49:82:d1:15:7c:05:6e: a7:90:c1:cc:61:09:7e:ef:84:04:89:42:d8:d2:ee: 28:85:7e:7a:9d:f1:1d:2a:7b:77:93:45:2b:74:9e: 35:69:22:9d:28:83:3b:a1:29:c8:1c:75:0a:f7:3f: f9:12:31:35:7c:12:fc:35:55:01:ed:e1:7b:87:0a: ad:c8:b6:ba:68:b1:95:42:fb:72:23:d6:3e:4b:d5: fe:74:ae:58:a9:a5:ed:90:20:f2:6f:40:f7:8d:0b: a6:30:e6:43:ea:1d:2b:d7:40:c6:ea:d7:aa:0a:09: b8:9a:ff:21:72:ce:63:48:49:38:12:d7:21:f4:13: 65:0c:2e:79:05:89:82:bd:cf:4e:b0:39:0d:0d:c9: 8c:68:25:73:9b:22:f9:e6:0c:a9:8e:57:72:5f:e0: 73:a7:29:a6:cb:58:be:48:58:60:76:bb:f6:0b:71: 90:98:dd:90:7b:2d:64:7e:07:f4:19:37:f4:97:fe: 8c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E5:B3:62:C5:B1:F6:D3:1B:CE:9D:DF:2C:A8:FB:64:7D:64:77:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/90aacd5a-46ac-4e18-9ef2-722280ddfa94.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/90aacd5a-46ac-4e18-9ef2-722280ddfa94.crl X509v3 Authority Key Identifier: keyid:AA:85:0D:9E:7F:43:06:C8:15:96:5D:EB:4C:1C:CF:E4:FB:76:70:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:84:29:17:ee:29:16:ed:56:0f:18:e0:b0:d9:e7:cc:4f:79: 63:74:eb:53:79:20:10:52:69:41:71:84:73:9b:af:3c:c4:ee: f2:f6:4a:a7:2e:cc:58:4d:16:42:dc:b9:80:08:b4:ed:17:2a: 1f:c4:96:52:21:29:14:ae:41:2e:2b:dc:52:65:20:df:10:31: 37:da:1b:87:de:5e:1c:b4:ee:95:7a:94:67:57:00:60:44:68: b7:3f:f9:65:b1:88:fd:b1:b1:01:53:30:5b:f3:c6:49:00:1b: 4a:8e:25:49:63:d3:2e:a1:91:cb:dc:ab:3d:cf:cc:4d:ab:82: 76:eb:fe:ca:27:52:52:dc:c5:31:a4:8d:c7:52:b9:0f:fa:7d: 98:81:87:2e:6d:62:ae:82:e4:04:87:4e:c8:04:5b:d2:72:90: 5b:a8:ba:68:29:a5:16:64:fc:a3:0b:b2:05:82:ca:3f:6f:33: 0f:80:34:89:13:4c:f6:f3:89:52:93:2d:d5:8b:81:bf:72:15: d6:86:04:70:6b:f6:9d:6d:ae:a3:7f:cd:30:ef:ee:56:d9:0f: 35:94:5b:9f:e6:4a:d1:2d:5c:c7:bc:34:17:90:7c:e1:b2:37: 0b:76:fa:21:83:70:31:e1:2e:1f:79:5c:6c:8e:f7:75:88:4e: da:70:2f:67 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnSjj9fuDvdwnrKDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBhYWNkNWEtNDZhYy00ZTE4LTllZjItNzIyMjgwZGRm YTk0MB4XDTI1MDUxMTIzMDAwN1oXDTI1MDUxMzIzMDAwMFowLzEtMCsGA1UEAxMk N2FjN2U5YTQtOWFhYi00OGU2LThiNjktOWE3MTk5MzkzODU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5ogLRr+9HsweWqqoo3arnSeK5HhqoWRCMvs XOoSuFVqhoE9OEelP21F8OOFp+/iEL6kzhOhjU9pa9tpFhRVsZTlzEmC0RV8BW6n kMHMYQl+74QEiULY0u4ohX56nfEdKnt3k0UrdJ41aSKdKIM7oSnIHHUK9z/5EjE1 fBL8NVUB7eF7hwqtyLa6aLGVQvtyI9Y+S9X+dK5YqaXtkCDyb0D3jQumMOZD6h0r 10DG6teqCgm4mv8hcs5jSEk4Etch9BNlDC55BYmCvc9OsDkNDcmMaCVzmyL55gyp jldyX+Bzpymmy1i+SFhgdrv2C3GQmN2Qey1kfgf0GTf0l/6MewIDAQABo4IDbjCC A2owHQYDVR0OBBYEFI/ls2LFsfbTG86d3yyo+2R9ZHcdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGFh Y2Q1YS00NmFjLTRlMTgtOWVmMi03MjIyODBkZGZhOTQvOTBhYWNkNWEtNDZhYy00 ZTE4LTllZjItNzIyMjgwZGRmYTk0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBhYWNkNWEtNDZhYy00ZTE4LTll ZjItNzIyMjgwZGRmYTk0LzkwYWFjZDVhLTQ2YWMtNGUxOC05ZWYyLTcyMjI4MGRk ZmE5NC5jcmwwHwYDVR0jBBgwFoAUqoUNnn9DBsgVll3rTBzP5Pt2cAYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGFhY2Q1YS00NmFjLTRlMTgtOWVmMi03MjIy ODBkZGZhOTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBfhCkX7ikW7VYPGOCw2efM T3ljdOtTeSAQUmlBcYRzm688xO7y9kqnLsxYTRZC3LmACLTtFyofxJZSISkUrkEu K9xSZSDfEDE32huH3l4ctO6VepRnVwBgRGi3P/llsYj9sbEBUzBb88ZJABtKjiVJ Y9MuoZHL3Ks9z8xNq4J26/7KJ1JS3MUxpI3HUrkP+n2YgYcubWKuguQEh07IBFvS cpBbqLpoKaUWZPyjC7IFgso/bzMPgDSJE0z284lSky3Vi4G/chXWhgRwa/adba6j f80w7+5W2Q81lFuf5krRLVzHvDQXkHzhsjcLdvohg3Ax4S4feVxsjvd1iE7acC9n -----END CERTIFICATE-----Generated at Mon May 12 18:39:34 2025 by rpki-client