$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft File: cd1efaa6-01e7-4528-8278-46b312a6e020.mft (raw, json) Hash identifier: r42uHRn+KWRaIIv2zqtrn5dXLHZ43zxYpbtig16oi4s= Subject key identifier: 30:70:14:3D:3B:9F:E5:EE:02:99:23:21:0C:15:AE:39:53:DE:35:C7 Authority key identifier: 89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B Certificate issuer: /CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Certificate serial: 010D0C9F43285849D2E7892A7040653C5FC35080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft Manifest number: 010D0C9F4328584073A83840A2BEE7D9A333790B Signing time: Mon 12 May 2025 02:00:02 +0000 Manifest this update: Mon 12 May 2025 02:00:02 +0000 Manifest next update: Wed 14 May 2025 02:00:00 +0000 Files and hashes: 1: 15971b5a-708e-36a4-9675-d45099021eac.roa (hash: E3dPphqJ4RnfgqZVi5O4pk+nbPEM20oSxRaRGDrBBRc=) 2: 65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa (hash: 2u0ncU11WHzCt0+KA5u3fJ6wV1BwhVKWr0axhdSOfXw=) 3: cd1efaa6-01e7-4528-8278-46b312a6e020.crl (hash: xmqkH7sOTsFnqgdzv3QmhQcZ78bUUES+RWfEMCUy0II=) 4: faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa (hash: lwyZ0OHu4vqCa33sFakIZxkgcLvjWu5gYqEtdHpPS7A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d2:e7:89:2a:70:40:65:3c:5f:c3:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Validity Not Before: May 12 02:00:02 2025 GMT Not After : May 14 02:00:00 2025 GMT Subject: CN=3fb62603-08c6-4e5f-b7f4-7191b4b5bb69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1f:0c:1e:4f:d9:12:89:cb:7e:ee:ce:af:fb: 73:a3:12:a0:ec:21:b0:a6:a7:15:58:ac:14:0e:4f: 78:b9:c5:a5:8a:ff:56:77:c1:00:35:d9:8e:c8:5b: 71:05:9f:2e:09:a0:ad:da:32:9b:75:a2:dc:e0:97: 4c:62:96:17:93:7b:4e:4e:10:d3:be:aa:ee:41:87: 4e:d4:75:47:7a:de:d7:92:0f:56:bd:b3:db:99:e1: 7a:7e:9d:ae:25:1c:e2:cb:f1:09:2b:e5:da:da:59: d5:3f:20:87:56:40:10:7f:b4:f9:6f:11:b0:99:d8: e2:64:b8:64:88:4b:0b:3a:f4:62:ec:79:13:3c:d8: 49:0c:67:03:de:bd:60:f2:a7:d3:f2:10:65:ee:db: 4c:29:2a:21:78:53:bf:59:8d:d7:b7:9d:34:12:93: b8:17:39:6e:7c:c8:9c:93:d7:f3:ef:71:31:18:b1: bd:c6:31:e0:c3:ed:b4:e9:d3:2f:9c:df:96:5c:66: 22:90:91:99:0b:c4:04:15:d9:ca:eb:6c:87:92:c1: 3f:e6:e8:0d:4a:05:65:6e:fd:07:2c:9a:81:a3:73: 64:0a:ad:b3:c3:01:59:97:07:69:8b:80:db:45:51: e3:e7:09:cd:0c:76:de:43:af:84:0c:61:f6:c2:5c: 80:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:70:14:3D:3B:9F:E5:EE:02:99:23:21:0C:15:AE:39:53:DE:35:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl X509v3 Authority Key Identifier: keyid:89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:0a:46:96:bd:30:7b:62:2c:a5:ff:5b:d0:0f:24:43:1f:e7: ad:87:6d:34:ef:93:8b:d0:ae:cb:42:f5:f0:39:82:b0:8f:84: 44:cc:35:11:cd:51:63:df:8a:79:66:ad:93:7a:8f:b2:ea:14: cc:b3:33:ad:0e:78:4d:f9:8b:37:68:98:70:15:80:13:e0:96: 7e:5a:66:6b:c5:b1:f4:c6:97:cf:1a:2d:ed:c7:01:0c:eb:5b: 61:b7:1d:9c:4c:d0:68:e0:fa:3a:a3:55:73:67:60:0f:60:b7: 9c:6f:d8:40:2a:d6:2c:4e:f0:8d:ae:d3:b8:78:88:30:49:90: 26:5a:d0:65:94:76:78:7c:d1:69:1e:1b:2d:1e:45:dc:69:c9: fe:aa:80:93:33:df:59:2e:8d:bd:37:ae:3f:e2:26:4e:84:e0: c3:d0:f5:6d:27:bb:b8:45:6f:df:e1:00:fc:ae:8f:50:22:cd: d0:79:0b:75:57:65:c5:d8:96:79:58:64:6c:89:0b:40:79:07: 43:d4:12:48:5b:4e:34:1d:57:16:41:ad:f1:26:50:70:1e:d4: b1:43:f1:6c:df:8a:fa:f9:e0:fc:f7:45:01:f1:18:d9:64:b7: 24:3c:65:6a:96:1f:f2:a3:07:20:ad:bb:f4:d9:70:5e:a0:ad: 7f:ee:7e:db -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnS54kqcEBlPF/DUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxZWZhYTYtMDFlNy00NTI4LTgyNzgtNDZiMzEyYTZl MDIwMB4XDTI1MDUxMjAyMDAwMloXDTI1MDUxNDAyMDAwMFowLzEtMCsGA1UEAxMk M2ZiNjI2MDMtMDhjNi00ZTVmLWI3ZjQtNzE5MWI0YjViYjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoR8MHk/ZEonLfu7Or/tzoxKg7CGwpqcVWKwU Dk94ucWliv9Wd8EANdmOyFtxBZ8uCaCt2jKbdaLc4JdMYpYXk3tOThDTvqruQYdO 1HVHet7Xkg9WvbPbmeF6fp2uJRziy/EJK+Xa2lnVPyCHVkAQf7T5bxGwmdjiZLhk iEsLOvRi7HkTPNhJDGcD3r1g8qfT8hBl7ttMKSoheFO/WY3Xt500EpO4FzlufMic k9fz73ExGLG9xjHgw+206dMvnN+WXGYikJGZC8QEFdnK62yHksE/5ugNSgVlbv0H LJqBo3NkCq2zwwFZlwdpi4DbRVHj5wnNDHbeQ6+EDGH2wlyAcQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDBwFD07n+XuApkjIQwVrjlT3jXHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFl ZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIzMTJhNmUwMjAvY2QxZWZhYTYtMDFlNy00 NTI4LTgyNzgtNDZiMzEyYTZlMDIwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxZWZhYTYtMDFlNy00NTI4LTgy NzgtNDZiMzEyYTZlMDIwL2NkMWVmYWE2LTAxZTctNDUyOC04Mjc4LTQ2YjMxMmE2 ZTAyMC5jcmwwHwYDVR0jBBgwFoAUif7GoPBmoqNN/YF4r5KC7A05NpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFlZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIz MTJhNmUwMjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCICkaWvTB7Yiyl/1vQDyRD H+eth20075OL0K7LQvXwOYKwj4REzDURzVFj34p5Zq2Teo+y6hTMszOtDnhN+Ys3 aJhwFYAT4JZ+WmZrxbH0xpfPGi3txwEM61thtx2cTNBo4Po6o1VzZ2APYLecb9hA KtYsTvCNrtO4eIgwSZAmWtBllHZ4fNFpHhstHkXcacn+qoCTM99ZLo29N64/4iZO hODD0PVtJ7u4RW/f4QD8ro9QIs3QeQt1V2XF2JZ5WGRsiQtAeQdD1BJIW040HVcW Qa3xJlBwHtSxQ/Fs34r6+eD890UB8RjZZLckPGVqlh/yowcgrbv02XBeoK1/7n7b -----END CERTIFICATE-----Generated at Mon May 12 09:36:33 2025 by rpki-client