$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.mft File: a1e8ecad-d5af-414e-8573-f698bbb23263.mft (raw, json) Hash identifier: xnS2Bw2WMLXvawqjsOVWx7He+1eVX94duxOfvto9STw= Subject key identifier: 33:7D:85:FE:18:D9:19:B1:7F:D1:6D:90:66:10:43:EE:CF:C8:A8:5E Authority key identifier: FE:90:EE:79:8B:35:2E:08:3B:AE:AC:67:F0:01:CC:A7:C6:FB:07:99 Certificate issuer: /CN=a1e8ecad-d5af-414e-8573-f698bbb23263 Certificate serial: 010D0C9F43285849D4886EEE8A5719140B2F0B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.mft Manifest number: 010D0C9F432858425EDAC7AACB665475A0DFF93D Signing time: Mon 12 May 2025 16:00:03 +0000 Manifest this update: Mon 12 May 2025 16:00:03 +0000 Manifest next update: Thu 15 May 2025 16:00:00 +0000 Files and hashes: 1: 65b1ad36-cbe9-3771-9c96-e700744e68f2.roa (hash: c8W4mUEwymiiuUv2IgnZEghwnpQVBYoIf0TLvwj7jVw=) 2: a1e8ecad-d5af-414e-8573-f698bbb23263.crl (hash: w+vPntjzaPZef0eCCoYTUjzYhPsjw+A5uaMfqOvQIGc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:88:6e:ee:8a:57:19:14:0b:2f:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1e8ecad-d5af-414e-8573-f698bbb23263 Validity Not Before: May 12 16:00:03 2025 GMT Not After : May 15 16:00:00 2025 GMT Subject: CN=f3d9f61f-3c15-41d4-91e5-c9f546bd7a29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a0:e0:50:6b:2d:f3:9f:7e:68:b3:75:80:e5: 31:b5:3a:5b:87:8c:98:a3:49:8d:8d:ba:78:1d:5c: 6c:15:99:95:ab:ad:69:90:79:f8:31:56:98:95:2f: ae:89:be:fd:14:38:d4:47:e7:11:73:fd:65:5a:54: 91:e2:56:fb:aa:88:64:7a:01:13:ca:87:c9:d4:63: 8d:39:22:2c:56:12:4e:f3:46:b5:18:51:a6:15:28: 8b:9d:7b:42:6a:1d:f1:c4:0e:64:bf:7e:85:b4:37: 92:00:ca:7f:c4:d8:d6:42:7f:45:20:90:d6:d6:66: c4:93:a4:a9:2b:cd:08:43:78:d1:ef:e7:d2:3c:35: 63:db:c9:87:7d:f8:f5:2b:9c:76:88:3f:d8:a4:64: 03:2d:53:0f:33:14:67:51:98:fc:6b:95:ac:ba:28: 49:ed:d5:1f:10:cb:20:e8:bc:be:1e:aa:78:d8:cd: 86:31:d0:4a:90:c8:3d:7f:32:e3:b1:77:9a:3b:8c: 2f:35:77:1b:9f:fb:f5:e3:75:da:2a:1a:75:84:91: fb:88:6c:d7:48:bb:11:78:8c:b5:b6:3e:b7:2c:7a: 49:8a:ee:07:aa:d8:ac:be:4f:14:68:f4:85:d8:17: 1d:57:d7:5f:6a:59:03:14:71:72:4b:67:bd:7a:64: 10:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:7D:85:FE:18:D9:19:B1:7F:D1:6D:90:66:10:43:EE:CF:C8:A8:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.crl X509v3 Authority Key Identifier: keyid:FE:90:EE:79:8B:35:2E:08:3B:AE:AC:67:F0:01:CC:A7:C6:FB:07:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:cb:3c:b8:b2:a2:9d:ea:65:c4:24:cd:02:55:0b:8a:f4:65: a7:61:f4:1b:67:39:a6:cc:5e:dd:e2:ba:f3:11:00:7c:f9:9d: 6f:46:c8:38:b3:48:8d:9d:ce:30:fb:b6:51:74:24:b5:40:e4: d2:fd:cc:88:17:aa:8e:90:ac:32:a9:49:ae:0f:f8:c0:c6:5f: 43:82:cc:cf:6e:f5:4c:33:8f:a6:06:8b:79:86:17:9e:20:5a: b2:5e:01:4c:5b:f9:de:12:10:14:b3:d7:36:a6:ce:8e:87:e1: 28:a9:86:0a:e9:7b:61:0c:40:cf:76:81:84:4a:6c:41:81:57: 64:cb:8c:0a:47:74:72:19:2a:96:12:8a:7f:38:7b:72:7a:04: ee:e4:e9:dd:44:fb:20:68:19:6c:e3:08:26:4c:a6:44:3a:36: 17:06:3a:87:1e:c8:5f:a3:81:f2:1f:86:44:16:a6:98:d9:cd: 68:f9:08:20:7d:a7:0f:0e:e9:c7:36:56:37:93:df:d8:00:bd: 89:0b:7f:66:5d:a9:b4:e1:b3:50:d8:de:52:2c:a7:75:67:ed: 8f:36:7f:8c:35:c3:e0:f9:97:37:40:c1:1e:9a:27:a6:2b:53: c9:10:5e:ea:3a:d7:a9:aa:6b:62:a0:ea:bf:48:4e:e8:bc:4c: 3a:f7:8d:34 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnUiG7uilcZFAsvC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFlOGVjYWQtZDVhZi00MTRlLTg1NzMtZjY5OGJiYjIz MjYzMB4XDTI1MDUxMjE2MDAwM1oXDTI1MDUxNTE2MDAwMFowLzEtMCsGA1UEAxMk ZjNkOWY2MWYtM2MxNS00MWQ0LTkxZTUtYzlmNTQ2YmQ3YTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6DgUGst859+aLN1gOUxtTpbh4yYo0mNjbp4 HVxsFZmVq61pkHn4MVaYlS+uib79FDjUR+cRc/1lWlSR4lb7qohkegETyofJ1GON OSIsVhJO80a1GFGmFSiLnXtCah3xxA5kv36FtDeSAMp/xNjWQn9FIJDW1mbEk6Sp K80IQ3jR7+fSPDVj28mHffj1K5x2iD/YpGQDLVMPMxRnUZj8a5WsuihJ7dUfEMsg 6Ly+Hqp42M2GMdBKkMg9fzLjsXeaO4wvNXcbn/v143XaKhp1hJH7iGzXSLsReIy1 tj63LHpJiu4Hqtisvk8UaPSF2BcdV9dfalkDFHFyS2e9emQQiQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDN9hf4Y2Rmxf9FtkGYQQ+7PyKheMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMWU4 ZWNhZC1kNWFmLTQxNGUtODU3My1mNjk4YmJiMjMyNjMvYTFlOGVjYWQtZDVhZi00 MTRlLTg1NzMtZjY5OGJiYjIzMjYzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTFlOGVjYWQtZDVhZi00MTRlLTg1 NzMtZjY5OGJiYjIzMjYzL2ExZThlY2FkLWQ1YWYtNDE0ZS04NTczLWY2OThiYmIy MzI2My5jcmwwHwYDVR0jBBgwFoAU/pDueYs1Lgg7rqxn8AHMp8b7B5kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hMWU4ZWNhZC1kNWFmLTQxNGUtODU3My1mNjk4 YmJiMjMyNjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAGyzy4sqKd6mXEJM0CVQuK 9GWnYfQbZzmmzF7d4rrzEQB8+Z1vRsg4s0iNnc4w+7ZRdCS1QOTS/cyIF6qOkKwy qUmuD/jAxl9DgszPbvVMM4+mBot5hheeIFqyXgFMW/neEhAUs9c2ps6Oh+EoqYYK 6XthDEDPdoGESmxBgVdky4wKR3RyGSqWEop/OHtyegTu5OndRPsgaBls4wgmTKZE OjYXBjqHHshfo4HyH4ZEFqaY2c1o+QggfacPDunHNlY3k9/YAL2JC39mXam04bNQ 2N5SLKd1Z+2PNn+MNcPg+Zc3QMEemiemK1PJEF7qOtepqmtioOq/SE7ovEw69400 -----END CERTIFICATE-----Generated at Mon May 12 18:08:54 2025 by rpki-client