$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft File: b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft (raw, json) Hash identifier: 6d5M/wOhkp4MaFdmq5tYV4o/zhWre8fPI4MfoAmlWCA= Subject key identifier: A0:BC:C9:F8:FB:22:3C:D3:71:26:74:67:C4:75:CF:7E:F0:48:D2:78 Authority key identifier: 60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C Certificate issuer: /CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Certificate serial: 010D0C9F43285849D0B1CAFE61C2C6C0FE8047A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft Manifest number: 010D0C9F4328584073A846314C8AB161C39A32EE Signing time: Sun 11 May 2025 07:00:07 +0000 Manifest this update: Sun 11 May 2025 07:00:07 +0000 Manifest next update: Wed 14 May 2025 07:00:00 +0000 Files and hashes: 1: 95cbce52-a0f0-382c-8b81-d23c70ca3529.roa (hash: vOAni6H1lunQ1cY3c/gd3CIJupByB/QgzDaP5TqbHT8=) 2: b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl (hash: lgdorfWOrl3J52mWVry/FihcvqLZwsK7CsBmWgzFvL4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d0:b1:ca:fe:61:c2:c6:c0:fe:80:47:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Validity Not Before: May 11 07:00:07 2025 GMT Not After : May 14 07:00:00 2025 GMT Subject: CN=34315e94-bb27-4fa3-9b1a-439acbe46585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3a:d2:c5:2c:50:d8:36:8a:de:fc:e7:df:3e: 70:1c:7e:96:2a:9d:9e:b0:07:09:18:ad:b9:19:f8: 3c:93:19:dc:d0:b5:e7:8e:4d:c4:46:b1:bc:a1:33: 16:b3:64:58:ad:0f:47:e5:b5:7b:62:4d:e3:b9:1e: 02:89:f0:a2:23:48:3b:87:16:17:43:90:35:f8:45: 1b:eb:37:9f:ff:91:8e:60:a0:ad:14:91:ba:b7:50: f6:78:95:14:17:f6:ac:bc:03:8c:52:2d:38:1b:99: 39:1d:d8:f0:82:79:83:bc:76:65:aa:45:dd:8a:0b: fd:f0:36:72:b5:9e:62:bb:10:d8:76:cc:c2:66:02: 41:18:0e:83:88:97:cb:ef:99:f6:fb:78:b3:cb:4c: ad:f6:42:e9:30:75:05:8d:87:40:1a:f8:51:26:34: d2:52:0c:99:b0:c9:e9:a3:64:fc:12:52:37:a1:4d: 77:a0:05:fa:1f:f6:79:83:b8:af:63:71:96:55:8a: 97:f5:5c:d1:6f:4d:d7:b2:f3:4b:53:ae:bd:b0:67: 54:58:bb:a4:ef:14:2c:8b:5c:ef:23:d8:7c:ed:02: 1f:1d:88:50:09:24:2f:29:9d:42:8a:88:c4:1e:bd: ac:6e:f3:ea:89:2a:d7:da:19:fc:f5:1f:ce:75:a5: ef:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:BC:C9:F8:FB:22:3C:D3:71:26:74:67:C4:75:CF:7E:F0:48:D2:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl X509v3 Authority Key Identifier: keyid:60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:e8:91:db:6c:0e:17:84:c1:56:69:4b:15:ab:97:50:76:5d: d3:a2:cd:3f:23:9e:13:4f:6e:c3:3c:1a:2d:0b:92:e4:09:76: 23:d0:c8:62:19:b3:6e:51:a0:63:58:b0:7f:ac:93:96:ea:cf: 6f:99:ea:9b:d9:f0:02:7d:f8:38:74:19:8c:27:72:48:31:85: 23:ec:76:6a:02:45:70:cd:b7:39:56:88:92:54:79:f1:b4:f0: 63:41:e9:04:6f:87:a3:43:1b:dd:ed:a8:9d:79:ad:b0:2b:c7: 8d:af:2c:0a:eb:be:05:ce:9c:1b:aa:0b:8c:7b:48:c8:dc:80: 89:d0:5c:17:cb:dd:53:40:37:4b:0b:2b:e5:45:75:91:78:a5: fb:85:fd:8f:4c:d3:0d:2c:c0:53:8d:1c:26:82:43:92:b6:41: 42:42:2b:45:86:a6:9b:98:b8:6f:f9:1c:82:36:53:f8:41:c5: bf:d6:aa:77:f3:bb:8d:1b:ec:a8:d3:c1:d1:6e:16:1f:da:e5: e4:f3:9e:34:17:92:fb:59:46:fe:a0:30:ae:19:17:2e:83:dc: 1a:4d:95:10:ef:3d:52:db:82:64:ea:88:43:05:39:86:95:f5: 25:a4:c3:00:83:6a:83:07:a0:2e:5b:32:7f:83:a0:d6:23:2a: d5:fa:87:6f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnQscr+YcLGwP6AR6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVjMmZlNzgtYTQ0Ny00MGQ5LThlMTEtOWM5ZTZmODFk MDgyMB4XDTI1MDUxMTA3MDAwN1oXDTI1MDUxNDA3MDAwMFowLzEtMCsGA1UEAxMk MzQzMTVlOTQtYmIyNy00ZmEzLTliMWEtNDM5YWNiZTQ2NTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjrSxSxQ2DaK3vzn3z5wHH6WKp2esAcJGK25 Gfg8kxnc0LXnjk3ERrG8oTMWs2RYrQ9H5bV7Yk3juR4CifCiI0g7hxYXQ5A1+EUb 6zef/5GOYKCtFJG6t1D2eJUUF/asvAOMUi04G5k5HdjwgnmDvHZlqkXdigv98DZy tZ5iuxDYdszCZgJBGA6DiJfL75n2+3izy0yt9kLpMHUFjYdAGvhRJjTSUgyZsMnp o2T8ElI3oU13oAX6H/Z5g7ivY3GWVYqX9VzRb03XsvNLU669sGdUWLuk7xQsi1zv I9h87QIfHYhQCSQvKZ1CiojEHr2sbvPqiSrX2hn89R/OdaXvBQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKC8yfj7IjzTcSZ0Z8R1z37wSNJ4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMy ZmU3OC1hNDQ3LTQwZDktOGUxMS05YzllNmY4MWQwODIvYjVjMmZlNzgtYTQ0Ny00 MGQ5LThlMTEtOWM5ZTZmODFkMDgyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjVjMmZlNzgtYTQ0Ny00MGQ5LThl MTEtOWM5ZTZmODFkMDgyL2I1YzJmZTc4LWE0NDctNDBkOS04ZTExLTljOWU2Zjgx ZDA4Mi5jcmwwHwYDVR0jBBgwFoAUYEP282rtaIKx8gBu2kkraw9jVZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMyZmU3OC1hNDQ3LTQwZDktOGUxMS05Yzll NmY4MWQwODIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC56JHbbA4XhMFWaUsVq5dQ dl3Tos0/I54TT27DPBotC5LkCXYj0MhiGbNuUaBjWLB/rJOW6s9vmeqb2fACffg4 dBmMJ3JIMYUj7HZqAkVwzbc5VoiSVHnxtPBjQekEb4ejQxvd7aidea2wK8eNrywK 674FzpwbqguMe0jI3ICJ0FwXy91TQDdLCyvlRXWReKX7hf2PTNMNLMBTjRwmgkOS tkFCQitFhqabmLhv+RyCNlP4QcW/1qp387uNG+yo08HRbhYf2uXk8540F5L7WUb+ oDCuGRcug9waTZUQ7z1S24Jk6ohDBTmGlfUlpMMAg2qDB6AuWzJ/g6DWIyrV+odv -----END CERTIFICATE-----Generated at Sun May 11 20:28:11 2025 by rpki-client