$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft File: bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft (raw, json) Hash identifier: 0GDpZp6lTQyC8pWaCL4ZEV+jNTiQtRUjmbnyWIQ/RcA= Subject key identifier: A3:51:34:4C:3A:54:63:7C:93:64:98:47:AB:1B:61:65:C6:B5:1F:D5 Authority key identifier: BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F Certificate issuer: /CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494 Certificate serial: 010D0C9F43285849D7179CCE78B03CD2A285BB50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft Manifest number: 010D0C9F4328584073A8581DA0CBF23298DB1E41 Signing time: Tue 13 May 2025 14:00:07 +0000 Manifest this update: Tue 13 May 2025 14:00:07 +0000 Manifest next update: Fri 16 May 2025 14:00:00 +0000 Files and hashes: 1: 8b5b3f60-d94d-3b96-bd51-7ecef919a034.roa (hash: uUovSan9qxg4hiGxUFkidBlN0HmJ5aopvx3QrmVVWpc=) 2: bb760eff-5d50-348f-809c-0dc1a1c253a5.roa (hash: NlY7+j6lzLmNp0TnCRmfmuFGQnTZufhzIZFosG+gZug=) 3: bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl (hash: TRl3wRkw0TOUIy9jQvm0gJOD5Snu7oFMbOQ3e02vRVg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d7:17:9c:ce:78:b0:3c:d2:a2:85:bb:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494 Validity Not Before: May 13 14:00:07 2025 GMT Not After : May 16 14:00:00 2025 GMT Subject: CN=aa85bf5c-427d-4594-a8ad-b9405e559fd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:53:24:d7:29:f7:9d:07:0a:90:ba:d8:c6:6c: 7e:4f:0d:27:76:76:71:91:3b:3e:93:60:3a:0e:3c: 4c:6f:ae:13:8f:b7:c8:f3:48:92:61:0e:c0:75:5e: a1:ee:56:79:f7:7c:51:44:6e:a2:1c:44:3d:a1:90: 14:d0:d1:f6:e7:35:d8:f8:02:c8:95:a1:8a:4c:6e: 69:98:40:12:80:08:62:6c:c3:73:b9:3b:44:93:02: c9:5e:fd:92:3e:29:f3:72:34:5d:93:6d:d3:84:f8: d8:79:ca:b1:8e:76:ec:cb:e7:0a:78:1f:9c:29:05: 6f:71:09:0f:04:e0:7c:45:90:a4:16:61:53:23:28: f6:f3:c1:ac:6c:82:6c:a8:31:47:57:cb:84:24:49: 7d:e2:23:9e:cd:47:f8:7a:6f:6b:d4:9c:5b:79:0f: 4f:c4:00:78:49:07:ef:8f:ab:c5:8e:ff:bd:41:3a: 1a:1a:a2:2e:12:de:de:78:47:65:69:77:6c:a6:a4: 80:c3:90:1d:9d:fa:a1:6a:8a:2a:22:81:6e:c5:52: e4:6e:63:01:e7:8b:8d:c5:0a:c2:dd:de:9e:ef:a6: 5e:eb:56:8a:6d:36:81:b9:80:ac:09:c9:58:8f:9c: bd:ce:9f:67:03:24:54:4b:88:46:37:05:5b:ea:ca: d9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:51:34:4C:3A:54:63:7C:93:64:98:47:AB:1B:61:65:C6:B5:1F:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl X509v3 Authority Key Identifier: keyid:BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:0e:d0:24:a9:76:dd:e0:07:8b:09:01:12:a3:7f:9c:c9:9f: c3:95:65:c6:26:05:70:f8:4b:05:47:0f:a8:e7:88:0c:78:6c: 16:15:4c:8a:1e:64:07:15:cf:41:fd:99:b7:0c:e4:62:02:b8: 31:36:18:27:f1:5b:f6:c5:df:75:eb:72:7d:72:fc:27:d6:7b: 70:44:28:a7:92:8f:2c:80:a7:c8:a9:89:3c:b7:8c:ff:a0:09: f9:cb:58:d3:4c:4b:dd:46:21:af:dd:ac:86:da:12:63:9c:ab: 99:66:05:76:85:b0:8a:a0:93:e0:9b:6f:ec:95:65:a4:4b:bf: 7b:81:cc:cd:f8:e0:c2:de:d1:8a:8c:60:d1:9a:57:af:1b:8a: 39:d5:85:28:2a:1e:e3:3a:a3:e7:b7:ce:e1:3d:0e:67:86:42: cd:e5:50:5d:6b:ce:8d:04:a5:d5:1c:6e:65:93:d7:36:2b:5c: 36:91:15:22:a3:25:65:fb:be:7d:f1:ea:eb:2e:6a:d4:b9:10: f4:d4:ea:4a:b2:c8:f6:3f:8c:65:42:8e:d0:b7:e2:60:b6:26: 51:fa:57:8d:28:cb:d6:89:8f:da:b4:17:c6:39:c1:94:75:8c: 25:33:ef:2a:24:53:2b:67:f4:43:5d:1f:7f:be:60:9e:76:d2: eb:3d:99:51 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnXF5zOeLA80qKFu1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYzYzNiZDUtM2I5NC00N2UyLTgxZmMtZjQ5MDA4MTRl NDk0MB4XDTI1MDUxMzE0MDAwN1oXDTI1MDUxNjE0MDAwMFowLzEtMCsGA1UEAxMk YWE4NWJmNWMtNDI3ZC00NTk0LWE4YWQtYjk0MDVlNTU5ZmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllMk1yn3nQcKkLrYxmx+Tw0ndnZxkTs+k2A6 DjxMb64Tj7fI80iSYQ7AdV6h7lZ593xRRG6iHEQ9oZAU0NH25zXY+ALIlaGKTG5p mEASgAhibMNzuTtEkwLJXv2SPinzcjRdk23ThPjYecqxjnbsy+cKeB+cKQVvcQkP BOB8RZCkFmFTIyj288GsbIJsqDFHV8uEJEl94iOezUf4em9r1JxbeQ9PxAB4SQfv j6vFjv+9QToaGqIuEt7eeEdlaXdspqSAw5AdnfqhaooqIoFuxVLkbmMB54uNxQrC 3d6e76Ze61aKbTaBuYCsCclYj5y9zp9nAyRUS4hGNwVb6srZtQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKNRNEw6VGN8k2SYR6sbYWXGtR/VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjNj M2JkNS0zYjk0LTQ3ZTItODFmYy1mNDkwMDgxNGU0OTQvYmYzYzNiZDUtM2I5NC00 N2UyLTgxZmMtZjQ5MDA4MTRlNDk0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmYzYzNiZDUtM2I5NC00N2UyLTgx ZmMtZjQ5MDA4MTRlNDk0L2JmM2MzYmQ1LTNiOTQtNDdlMi04MWZjLWY0OTAwODE0 ZTQ5NC5jcmwwHwYDVR0jBBgwFoAUv27gzbQvdJZGDC7Ndgx/FlpcgW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjNjM2JkNS0zYjk0LTQ3ZTItODFmYy1mNDkw MDgxNGU0OTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBGDtAkqXbd4AeLCQESo3+c yZ/DlWXGJgVw+EsFRw+o54gMeGwWFUyKHmQHFc9B/Zm3DORiArgxNhgn8Vv2xd91 63J9cvwn1ntwRCinko8sgKfIqYk8t4z/oAn5y1jTTEvdRiGv3ayG2hJjnKuZZgV2 hbCKoJPgm2/slWWkS797gczN+ODC3tGKjGDRmlevG4o51YUoKh7jOqPnt87hPQ5n hkLN5VBda86NBKXVHG5lk9c2K1w2kRUioyVl+7598errLmrUuRD01OpKssj2P4xl Qo7Qt+JgtiZR+leNKMvWiY/atBfGOcGUdYwlM+8qJFMrZ/RDXR9/vmCedtLrPZlR -----END CERTIFICATE-----Generated at Tue May 13 20:54:07 2025 by rpki-client