$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.mft File: add35f11-0294-4be9-94b7-49cac2bcb001.mft (raw, json) Hash identifier: Pu6isc6fvAhhjGfOitAWW2pa6eowx1ds2Z8/ZjEKFJw= Subject key identifier: 2C:79:00:99:89:AF:E8:42:A5:37:6B:67:8C:48:A4:5F:1B:86:72:63 Authority key identifier: A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA Certificate issuer: /CN=add35f11-0294-4be9-94b7-49cac2bcb001 Certificate serial: 010D0C9F43285849C3C8589A53AAA06EEA058780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.mft Manifest number: 010D0C9F4328584073A81AE12C42C5F2542C3191 Signing time: Tue 06 May 2025 16:00:03 +0000 Manifest this update: Tue 06 May 2025 16:00:03 +0000 Manifest next update: Fri 09 May 2025 16:00:00 +0000 Files and hashes: 1: 724dc813-9136-3075-bcba-f77834af4133.roa (hash: N650mvvedp/nTrcW2RaCZjFJAgGTBSBghQAUwWS8Evg=) 2: 76b42bc4-57ac-394d-ba88-7d614145118a.roa (hash: hFMG4jFkJyDq/sMvj+dV7GVUULdWOv8RXswqoQcpFF0=) 3: add35f11-0294-4be9-94b7-49cac2bcb001.crl (hash: uxDYfHuyZmLFHELWSCig8aKUv5gRu1tdxd5A0IEHkEk=) 4: b7718956-829a-3e02-9a2b-7cfb84f2012b.roa (hash: MH3ZuKJvFkQ/LDsK1Mp6WlDekKQmZYewR7gCkxn1AE0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c3:c8:58:9a:53:aa:a0:6e:ea:05:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=add35f11-0294-4be9-94b7-49cac2bcb001 Validity Not Before: May 6 16:00:03 2025 GMT Not After : May 9 16:00:00 2025 GMT Subject: CN=e0a81c24-5f5d-47f2-9079-d87276bfdd20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:13:e3:bb:d3:88:25:16:69:cc:80:67:29:d7: 23:5c:f2:b2:5b:64:b8:d9:2c:f7:15:7e:09:c9:78: 1f:b8:6a:7f:80:19:b1:28:bc:f6:9d:81:ae:67:34: 66:02:88:8d:cf:15:57:d5:06:49:69:20:1a:d7:a2: 3e:a6:b3:cd:fa:5e:ac:f8:a7:19:14:9d:f9:1a:05: 07:e9:4f:71:65:6b:56:90:88:a3:91:0f:3a:0e:df: 11:f6:db:fd:25:c7:74:8c:00:29:d1:9c:ec:75:a9: c3:0a:b6:64:65:b4:40:78:26:f2:23:5e:b2:c3:77: aa:69:db:dc:a8:1a:a1:66:86:3b:99:35:85:b2:56: ea:ec:d0:17:a9:ca:95:c1:75:d6:28:39:20:de:c7: eb:1a:c8:6e:e6:c6:90:eb:bf:c1:0a:d1:f8:3e:72: dd:58:a8:ac:ee:1b:4f:f7:a6:21:89:1b:ce:f4:c0: c3:32:60:4b:40:6d:09:9a:17:6e:99:3f:b8:ab:05: 47:1e:31:ef:f2:09:28:28:7f:03:65:02:50:e0:9f: 17:c7:67:8f:0c:9f:82:91:26:cd:3a:b0:da:b3:89: b7:c5:98:16:15:e2:7e:3f:2c:0d:93:44:85:5e:71: 10:e0:2e:ab:f6:33:ea:ca:71:1f:51:94:ed:6c:b0: 23:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:79:00:99:89:AF:E8:42:A5:37:6B:67:8C:48:A4:5F:1B:86:72:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl X509v3 Authority Key Identifier: keyid:A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:eb:85:06:d6:13:9f:fd:a2:af:99:40:79:2e:3a:d3:a2:26: 3b:3b:71:13:03:59:36:74:bf:b2:2c:cc:81:53:d1:13:aa:6a: 00:f3:3a:53:e5:12:4d:e8:93:4b:5e:66:13:e0:3c:e1:eb:c9: 91:70:c3:74:f6:77:c7:34:fe:91:b3:b8:3d:1a:31:a3:39:64: e6:3b:a1:da:d7:f3:79:ca:8e:03:b5:a4:91:8c:dc:8e:fa:56: 3a:ed:c1:2a:b9:cf:e1:dd:47:f4:6d:22:d6:5c:1c:eb:64:cd: 45:93:3b:84:83:9c:85:d8:4c:52:ec:fa:04:54:98:f7:ac:8c: fd:a9:d3:52:3b:28:72:08:c8:5a:8f:0d:00:13:e7:9a:bd:15: 9b:5f:24:93:70:2f:ed:98:f8:5a:93:74:ce:3e:45:18:ec:02: 48:4e:99:db:8e:14:04:ed:50:6f:9e:87:bf:45:c1:1f:58:45: dc:14:8c:1c:91:06:ae:d2:8e:6c:64:e1:f7:ff:0c:22:9b:fe: d8:17:e8:0f:40:f4:d1:e6:75:6f:7b:b9:d4:02:15:c6:64:7e: fb:29:c2:f6:97:72:6d:30:25:d5:6a:ee:59:2d:37:69:d1:4a: 75:86:94:5f:f9:ce:df:45:be:00:2f:b6:a8:64:1b:9a:09:e2: 43:54:35:40 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnDyFiaU6qgbuoFh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWRkMzVmMTEtMDI5NC00YmU5LTk0YjctNDljYWMyYmNi MDAxMB4XDTI1MDUwNjE2MDAwM1oXDTI1MDUwOTE2MDAwMFowLzEtMCsGA1UEAxMk ZTBhODFjMjQtNWY1ZC00N2YyLTkwNzktZDg3Mjc2YmZkZDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhPju9OIJRZpzIBnKdcjXPKyW2S42Sz3FX4J yXgfuGp/gBmxKLz2nYGuZzRmAoiNzxVX1QZJaSAa16I+prPN+l6s+KcZFJ35GgUH 6U9xZWtWkIijkQ86Dt8R9tv9Jcd0jAAp0ZzsdanDCrZkZbRAeCbyI16yw3eqadvc qBqhZoY7mTWFslbq7NAXqcqVwXXWKDkg3sfrGshu5saQ67/BCtH4PnLdWKis7htP 96YhiRvO9MDDMmBLQG0JmhdumT+4qwVHHjHv8gkoKH8DZQJQ4J8Xx2ePDJ+CkSbN OrDas4m3xZgWFeJ+PywNk0SFXnEQ4C6r9jPqynEfUZTtbLAjIQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCx5AJmJr+hCpTdrZ4xIpF8bhnJjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hZGQz NWYxMS0wMjk0LTRiZTktOTRiNy00OWNhYzJiY2IwMDEvYWRkMzVmMTEtMDI5NC00 YmU5LTk0YjctNDljYWMyYmNiMDAxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWRkMzVmMTEtMDI5NC00YmU5LTk0 YjctNDljYWMyYmNiMDAxL2FkZDM1ZjExLTAyOTQtNGJlOS05NGI3LTQ5Y2FjMmJj YjAwMS5jcmwwHwYDVR0jBBgwFoAUpXphLLBJKDwfCZ0NXgzzjrlY+MowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hZGQzNWYxMS0wMjk0LTRiZTktOTRiNy00OWNh YzJiY2IwMDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAz64UG1hOf/aKvmUB5LjrT oiY7O3ETA1k2dL+yLMyBU9ETqmoA8zpT5RJN6JNLXmYT4Dzh68mRcMN09nfHNP6R s7g9GjGjOWTmO6Ha1/N5yo4DtaSRjNyO+lY67cEquc/h3Uf0bSLWXBzrZM1FkzuE g5yF2ExS7PoEVJj3rIz9qdNSOyhyCMhajw0AE+eavRWbXySTcC/tmPhak3TOPkUY 7AJITpnbjhQE7VBvnoe/RcEfWEXcFIwckQau0o5sZOH3/wwim/7YF+gPQPTR5nVv e7nUAhXGZH77KcL2l3JtMCXVau5ZLTdp0Up1hpRf+c7fRb4AL7aoZBuaCeJDVDVA -----END CERTIFICATE-----Generated at Tue May 6 21:43:44 2025 by rpki-client