$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.mft File: bf10fe75-981f-4a3c-b77a-28e235bed9f1.mft (raw, json) Hash identifier: yT+/eTA92Kcx0U3WjR5M3kfK3VF9F/w44HNvFUx/U4A= Subject key identifier: 0D:59:20:C9:71:CD:20:85:54:B5:B2:60:6F:68:99:4E:65:A6:1E:0C Authority key identifier: 11:5E:01:9C:4C:7D:98:BB:75:92:64:5B:8D:DB:0B:38:BE:11:77:B7 Certificate issuer: /CN=bf10fe75-981f-4a3c-b77a-28e235bed9f1 Certificate serial: 010D0C9F43285849CE5F2AC9924C6FA2EB799800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.mft Manifest number: 010D0C9F4328584073A8508522A5167F0D71026D Signing time: Sat 10 May 2025 11:02:03 +0000 Manifest this update: Sat 10 May 2025 11:02:03 +0000 Manifest next update: Mon 12 May 2025 11:00:00 +0000 Files and hashes: 1: 4a34cd9f-1e66-36b9-ae43-e7a939ef4cb5.roa (hash: RPT8SPhpoQ/6XfZm6RMVKoF5vyVROVHn0AmMiySljgE=) 2: bf10fe75-981f-4a3c-b77a-28e235bed9f1.crl (hash: qyKjf6pEUL76z4maqD5MjkBp2KHMrWOdEdv4AfIYkC0=) 3: f2ad73f3-0f80-3cc2-9399-881a9101068b.roa (hash: HwTqDercRb3EEwdz4/Evn/wI1quYtvvagTwIKl8ByOA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:5f:2a:c9:92:4c:6f:a2:eb:79:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf10fe75-981f-4a3c-b77a-28e235bed9f1 Validity Not Before: May 10 11:02:03 2025 GMT Not After : May 12 11:00:00 2025 GMT Subject: CN=09b2d6e7-46fe-4b1e-a010-726ba2f89ba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2f:d6:47:f5:57:7f:6c:21:06:da:88:6f:64: 43:15:19:5f:65:66:91:a9:4b:ba:e1:36:a7:2d:93: 1e:67:48:4b:87:8e:a6:1c:33:4c:1d:c5:ff:b3:5a: e2:5b:fe:1d:dc:8e:7f:af:8a:04:8c:fc:c4:c9:0e: 6d:1d:b2:99:17:92:2c:dd:d9:9b:88:ca:40:dd:c7: 0b:ea:6d:c8:85:10:f0:5f:dc:35:5c:b3:64:26:9a: 6c:a2:ce:f6:e4:34:e3:9e:51:3d:7f:84:e5:44:0b: 97:df:9c:ea:96:57:c3:4e:12:ba:40:d2:6e:00:0b: 88:b7:7c:4f:a2:03:83:60:38:da:2b:2f:5a:61:ae: 61:5b:b7:0d:99:a8:25:d5:05:3d:f3:c0:76:94:8e: d9:ad:70:e8:90:f6:1b:5d:f7:bf:f4:ce:fa:4b:44: 25:79:32:cc:d5:f8:f1:d0:46:4a:f2:5f:f7:4a:86: 96:d5:e2:85:90:6b:1d:e8:b1:f6:97:a1:d5:55:30: f8:17:cc:77:5a:b4:5b:0f:6d:91:18:8b:f4:41:58: 83:35:76:c3:e7:ba:81:2e:2d:be:70:e6:61:ba:60: 2a:00:59:11:d6:6c:31:79:19:12:55:95:95:fa:fc: 32:a2:00:79:3a:9f:d3:f5:db:31:4c:d3:57:23:1e: 77:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:59:20:C9:71:CD:20:85:54:B5:B2:60:6F:68:99:4E:65:A6:1E:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.crl X509v3 Authority Key Identifier: keyid:11:5E:01:9C:4C:7D:98:BB:75:92:64:5B:8D:DB:0B:38:BE:11:77:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:98:61:09:ad:fa:2c:f0:90:cd:b1:b1:bb:fb:f8:6f:fb:20: cc:ba:a1:6f:4a:91:7d:98:aa:6f:ab:08:4b:3d:ae:1a:20:25: 49:91:e7:fd:99:ee:91:35:17:cb:c4:fe:24:bc:68:8a:22:24: 75:3e:46:36:00:aa:06:4a:d5:f4:f8:c4:b1:70:79:b3:41:d0: b3:66:fd:f3:17:19:46:b8:ac:41:a2:6d:dc:8b:c5:70:b6:1c: fd:f6:22:c8:fd:08:6c:df:7e:50:32:05:68:b2:44:0c:aa:32: 40:4d:6b:64:19:a5:70:1a:ef:96:7a:0e:58:3c:03:41:e5:e3: b7:b4:10:e7:5d:bb:48:a7:89:ca:f5:94:91:0f:9c:87:a5:24: 05:97:f7:1d:e3:c4:f7:c3:60:42:05:42:d8:05:11:ce:8c:5d: 4b:61:b6:1b:da:62:9b:d1:a5:f1:f2:2e:50:ad:a6:e5:8c:3b: 5a:f1:74:c0:48:3c:50:58:c0:52:b9:71:8c:5b:e6:c2:3b:99: 7b:fd:31:59:96:7a:de:85:aa:48:fd:be:bb:cf:31:f4:1a:bf: 05:a7:46:fa:2f:31:0b:9c:9f:52:8a:d2:59:66:a3:c5:0c:07: 90:47:22:4d:6a:0d:9e:4d:16:c2:3b:70:52:cc:ef:8a:17:58: bc:26:88:09 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnOXyrJkkxvout5mAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxMGZlNzUtOTgxZi00YTNjLWI3N2EtMjhlMjM1YmVk OWYxMB4XDTI1MDUxMDExMDIwM1oXDTI1MDUxMjExMDAwMFowLzEtMCsGA1UEAxMk MDliMmQ2ZTctNDZmZS00YjFlLWEwMTAtNzI2YmEyZjg5YmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwS/WR/VXf2whBtqIb2RDFRlfZWaRqUu64Tan LZMeZ0hLh46mHDNMHcX/s1riW/4d3I5/r4oEjPzEyQ5tHbKZF5Is3dmbiMpA3ccL 6m3IhRDwX9w1XLNkJppsos725DTjnlE9f4TlRAuX35zqllfDThK6QNJuAAuIt3xP ogODYDjaKy9aYa5hW7cNmagl1QU988B2lI7ZrXDokPYbXfe/9M76S0QleTLM1fjx 0EZK8l/3SoaW1eKFkGsd6LH2l6HVVTD4F8x3WrRbD22RGIv0QViDNXbD57qBLi2+ cOZhumAqAFkR1mwxeRkSVZWV+vwyogB5Op/T9dsxTNNXIx53SwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFA1ZIMlxzSCFVLWyYG9omU5lph4MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjEw ZmU3NS05ODFmLTRhM2MtYjc3YS0yOGUyMzViZWQ5ZjEvYmYxMGZlNzUtOTgxZi00 YTNjLWI3N2EtMjhlMjM1YmVkOWYxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmYxMGZlNzUtOTgxZi00YTNjLWI3 N2EtMjhlMjM1YmVkOWYxL2JmMTBmZTc1LTk4MWYtNGEzYy1iNzdhLTI4ZTIzNWJl ZDlmMS5jcmwwHwYDVR0jBBgwFoAUEV4BnEx9mLt1kmRbjdsLOL4Rd7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjEwZmU3NS05ODFmLTRhM2MtYjc3YS0yOGUy MzViZWQ5ZjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAvmGEJrfos8JDNsbG7+/hv +yDMuqFvSpF9mKpvqwhLPa4aICVJkef9me6RNRfLxP4kvGiKIiR1PkY2AKoGStX0 +MSxcHmzQdCzZv3zFxlGuKxBom3ci8Vwthz99iLI/Qhs335QMgVoskQMqjJATWtk GaVwGu+Weg5YPANB5eO3tBDnXbtIp4nK9ZSRD5yHpSQFl/cd48T3w2BCBULYBRHO jF1LYbYb2mKb0aXx8i5QrabljDta8XTASDxQWMBSuXGMW+bCO5l7/TFZlnrehapI /b67zzH0Gr8Fp0b6LzELnJ9SitJZZqPFDAeQRyJNag2eTRbCO3BSzO+KF1i8JogJ -----END CERTIFICATE-----Generated at Sat May 10 19:18:20 2025 by rpki-client