$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.mft File: b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.mft (raw, json) Hash identifier: 8hIFazu5W8blqvZJxdk9Tr95tgcSCqRFVzgYldsHzFg= Subject key identifier: 88:41:39:C8:E5:F4:1B:12:31:7E:F6:03:00:35:42:33:5D:23:32:0A Authority key identifier: 4F:84:29:20:F1:6A:65:B2:5E:48:CA:51:3F:B5:25:8B:50:8A:F5:FB Certificate issuer: /CN=b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6 Certificate serial: 010D0C9F43285849C5A4D2E641D068794B1C4080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.mft Manifest number: 010D0C9F4328584073A848110A4299D6DF1F1803 Signing time: Wed 07 May 2025 08:00:07 +0000 Manifest this update: Wed 07 May 2025 08:00:07 +0000 Manifest next update: Sat 10 May 2025 08:00:00 +0000 Files and hashes: 1: 7955ed0f-1153-3896-a51e-5d367bf0cc64.roa (hash: Ap3t+hX/iswYLlvKxQHjWgwIRJve2DGBhvO9Uao3HOg=) 2: b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.crl (hash: GU1BfH8Wd4jq0MGVxCoZFuqHFk6NeKwPtbydv8Z71rY=) 3: ee1a4e04-68da-38e4-9471-1d40d048b137.roa (hash: 4YhdLqNW/nAQSeTCFkRsYrzWB+BHGah3SfiAeArgCNA=) 4: ffd9f8d6-0f97-3fc2-87fc-63cc08d4488f.roa (hash: PagCQbGGmtZhrGN5Olugl8ASc/DLmBT0g/FCNiaJwGM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c5:a4:d2:e6:41:d0:68:79:4b:1c:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6 Validity Not Before: May 7 08:00:07 2025 GMT Not After : May 10 08:00:00 2025 GMT Subject: CN=8784e334-95ed-4d5c-b58d-3512f356fdbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fe:52:93:76:41:ce:35:8f:c5:7c:64:b4:95: af:30:cf:03:e0:10:f5:52:bb:88:30:cb:96:fd:e5: 90:48:f2:37:ce:6f:00:2a:a7:ad:0a:d3:16:67:b4: 67:d2:10:6f:71:09:d8:a9:f7:b0:18:05:f8:5d:6d: 40:0c:22:7e:51:b0:16:dd:df:da:96:12:79:a8:f3: a0:88:88:13:3f:1a:ac:12:b8:e5:6d:ac:14:78:9d: fa:07:d6:2d:38:62:7c:22:3a:a5:38:0f:6a:f8:d2: ee:f1:c8:03:ea:f7:c7:66:b7:f0:66:d7:cb:a4:18: 85:95:d9:25:92:f0:13:da:ba:59:0c:74:6e:81:1a: de:43:34:9b:97:cf:c9:0a:b0:8b:14:b1:44:ac:5c: 7d:2e:df:03:70:71:fa:f3:13:85:d2:aa:b8:15:dc: b2:36:dd:7c:c3:4f:fb:b6:bc:7f:fd:c0:3c:76:cc: 2f:62:db:35:06:b1:ad:4b:32:e2:fa:82:6a:cd:16: 57:33:46:ca:11:af:c0:1f:02:88:9c:a8:d8:ce:ba: 16:59:c5:72:10:98:f0:09:ee:d0:db:b2:84:8b:df: 06:c6:33:63:bb:64:6b:18:d8:f7:09:40:66:7e:34: a1:9d:ae:3f:87:cc:d5:ce:fb:06:b8:fb:3e:10:76: 56:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:41:39:C8:E5:F4:1B:12:31:7E:F6:03:00:35:42:33:5D:23:32:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.crl X509v3 Authority Key Identifier: keyid:4F:84:29:20:F1:6A:65:B2:5E:48:CA:51:3F:B5:25:8B:50:8A:F5:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:82:b0:e0:90:8e:13:bb:97:00:67:85:87:d7:66:f5:d6:4b: ea:43:95:15:06:85:e5:40:db:1c:92:ef:45:6c:cd:ac:dd:3d: 23:26:dc:7d:65:5d:eb:33:c5:68:9e:42:99:20:d8:2e:64:ae: 93:42:42:55:91:f5:c6:71:f1:af:b1:c9:de:40:93:8d:6d:b1: 0a:42:51:84:aa:b9:ae:eb:03:d4:d1:87:b3:e9:3d:4a:63:1b: 96:58:88:62:37:9f:c0:86:fe:e5:fa:a6:7d:f0:10:11:17:68: 2e:0e:00:e4:1a:96:46:28:d1:40:49:63:81:be:87:3a:ab:3e: b5:e1:b9:66:f2:7b:f1:08:7c:2e:af:67:ee:65:65:29:42:39: d1:7b:e1:86:5b:0b:26:40:5b:cb:ba:ad:76:3d:8a:dc:95:09: 46:5b:1a:4b:a5:9b:a9:6f:2a:83:10:4e:2a:f5:01:d2:cf:dc: 71:6a:33:f5:e0:e9:19:d4:aa:c9:4e:8b:ae:fb:aa:a1:b2:5c: 02:7d:76:66:7f:f5:41:6b:ac:b6:1d:7a:d2:5a:df:02:60:90: d3:8e:6e:26:69:f2:07:b1:31:cc:d8:bc:aa:d9:90:88:54:2c: e5:f8:06:75:05:97:8e:aa:d3:ab:d3:01:40:1a:e6:75:8f:cf: e4:cb:f5:c2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnFpNLmQdBoeUscQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjRkNzFkYTktNmZmMS00OWFiLWExZTUtNmM0OGY4ZjBj MWQ2MB4XDTI1MDUwNzA4MDAwN1oXDTI1MDUxMDA4MDAwMFowLzEtMCsGA1UEAxMk ODc4NGUzMzQtOTVlZC00ZDVjLWI1OGQtMzUxMmYzNTZmZGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuP5Sk3ZBzjWPxXxktJWvMM8D4BD1UruIMMuW /eWQSPI3zm8AKqetCtMWZ7Rn0hBvcQnYqfewGAX4XW1ADCJ+UbAW3d/alhJ5qPOg iIgTPxqsErjlbawUeJ36B9YtOGJ8IjqlOA9q+NLu8cgD6vfHZrfwZtfLpBiFldkl kvAT2rpZDHRugRreQzSbl8/JCrCLFLFErFx9Lt8DcHH68xOF0qq4FdyyNt18w0/7 trx//cA8dswvYts1BrGtSzLi+oJqzRZXM0bKEa/AHwKInKjYzroWWcVyEJjwCe7Q 27KEi98GxjNju2RrGNj3CUBmfjShna4/h8zVzvsGuPs+EHZWWwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIhBOcjl9BsSMX72AwA1QjNdIzIKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNGQ3 MWRhOS02ZmYxLTQ5YWItYTFlNS02YzQ4ZjhmMGMxZDYvYjRkNzFkYTktNmZmMS00 OWFiLWExZTUtNmM0OGY4ZjBjMWQ2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjRkNzFkYTktNmZmMS00OWFiLWEx ZTUtNmM0OGY4ZjBjMWQ2L2I0ZDcxZGE5LTZmZjEtNDlhYi1hMWU1LTZjNDhmOGYw YzFkNi5jcmwwHwYDVR0jBBgwFoAUT4QpIPFqZbJeSMpRP7Uli1CK9fswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNGQ3MWRhOS02ZmYxLTQ5YWItYTFlNS02YzQ4 ZjhmMGMxZDYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBOgrDgkI4Tu5cAZ4WH12b1 1kvqQ5UVBoXlQNscku9FbM2s3T0jJtx9ZV3rM8VonkKZINguZK6TQkJVkfXGcfGv scneQJONbbEKQlGEqrmu6wPU0Yez6T1KYxuWWIhiN5/Ahv7l+qZ98BARF2guDgDk GpZGKNFASWOBvoc6qz614blm8nvxCHwur2fuZWUpQjnRe+GGWwsmQFvLuq12PYrc lQlGWxpLpZupbyqDEE4q9QHSz9xxajP14OkZ1KrJTouu+6qhslwCfXZmf/VBa6y2 HXrSWt8CYJDTjm4mafIHsTHM2Lyq2ZCIVCzl+AZ1BZeOqtOr0wFAGuZ1j8/ky/XC -----END CERTIFICATE-----Generated at Thu May 8 01:25:34 2025 by rpki-client