$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.mft File: f1ab8d45-a1ae-408a-9e45-b04fdd663f37.mft (raw, json) Hash identifier: 0+v0sfojPxY5BMGNXzTLvLZJCgV5Rm8kkOINsKfEMv0= Subject key identifier: D5:70:95:3F:74:43:A8:54:55:58:69:44:CE:7B:C0:09:C8:67:20:2F Authority key identifier: 02:E8:5B:AB:47:BE:DA:68:6A:D4:40:55:94:84:26:59:DE:6F:AB:50 Certificate issuer: /CN=f1ab8d45-a1ae-408a-9e45-b04fdd663f37 Certificate serial: 010D0C9F43285849CCF8DDD3A59747E406667480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.mft Manifest number: 010D0C9F4328584073A82EDE07D377C7FA5BAAB4 Signing time: Fri 09 May 2025 23:00:07 +0000 Manifest this update: Fri 09 May 2025 23:00:07 +0000 Manifest next update: Sun 11 May 2025 23:00:00 +0000 Files and hashes: 1: 6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355.cer (hash: jGv5Pl65NUHFGITRYoqj4IPJ4v3srVuZ14ix/UA/x3A=) 2: f1ab8d45-a1ae-408a-9e45-b04fdd663f37.crl (hash: ODglDlw5fiw23SshR1Sp9bWdNZ1wo/ID1oZ+6APmpos=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cc:f8:dd:d3:a5:97:47:e4:06:66:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1ab8d45-a1ae-408a-9e45-b04fdd663f37 Validity Not Before: May 9 23:00:07 2025 GMT Not After : May 11 23:00:00 2025 GMT Subject: CN=8c8f0317-13c0-472a-979c-3208d4e10455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:70:10:00:15:c3:f2:c8:b0:d2:6a:e0:81:bb: 97:15:ee:86:2e:e5:05:88:fc:41:49:88:87:ba:7a: f9:0d:81:b2:31:77:54:40:21:c9:a6:f2:2e:3a:b7: 66:6d:c2:c7:e0:45:75:54:51:05:b6:d8:db:93:ae: 6f:d2:8b:c9:dc:84:8c:31:70:53:8c:e2:9b:ee:7a: f6:3b:f1:d9:ff:5d:98:ab:25:4d:36:f9:3a:3f:25: f6:3e:27:30:8f:00:4c:67:4a:01:56:f8:a0:00:e6: 24:1e:5c:ee:00:7a:f0:c7:ec:e1:d9:4e:38:96:83: a3:26:0a:ad:87:1d:87:b7:0a:25:42:01:2d:b6:ca: 39:41:a6:e0:da:20:dc:e9:e1:e7:c9:6a:d6:67:03: b3:07:f8:27:ab:71:4e:4a:35:12:6e:4c:40:96:20: ea:16:ec:97:92:b1:ee:02:17:37:c2:7c:c9:8f:2d: b9:34:69:d4:4f:93:21:c7:3d:ad:1f:2c:45:20:4d: e1:6a:92:d8:24:18:da:dd:45:2c:b1:51:42:ca:bf: 3d:02:57:38:91:5b:19:df:d5:11:c6:32:47:42:5c: a9:6c:51:aa:0a:50:20:30:fb:c3:e9:38:c0:c4:ce: bd:f8:fb:98:d6:cd:e2:1a:95:35:38:30:9b:c7:86: 5c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:70:95:3F:74:43:A8:54:55:58:69:44:CE:7B:C0:09:C8:67:20:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.crl X509v3 Authority Key Identifier: keyid:02:E8:5B:AB:47:BE:DA:68:6A:D4:40:55:94:84:26:59:DE:6F:AB:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:21:6f:8c:4a:f9:f2:62:11:1e:2c:df:c8:74:4d:9c:bb:39: 86:9e:2c:66:42:17:89:43:17:70:c2:44:04:0d:71:09:87:c6: 8d:a7:dd:84:d7:9a:c5:bb:75:a2:18:37:db:ea:86:e6:da:db: a6:02:d4:a8:75:e2:3c:52:41:36:0f:f7:9c:df:7b:41:07:c8: b0:4a:6e:db:bd:5a:6a:bf:66:a3:25:bb:02:9d:2e:94:1f:55: 33:e9:f1:73:57:e7:42:44:57:f0:c5:ef:ec:21:90:e2:cd:ad: c6:b4:5e:ad:66:bd:9f:d7:59:4a:0b:b1:69:55:39:4f:0f:6f: be:49:e6:ac:89:e0:39:53:ec:ce:f1:77:1b:9e:4c:4c:37:77: 2d:53:fe:db:cc:21:99:bf:55:87:96:82:5c:56:18:08:7f:fd: 54:4f:ed:cd:50:93:e1:bd:af:66:1c:96:ba:42:9d:fc:81:91: b6:26:64:cf:ee:11:97:6a:48:ec:b3:88:c8:c4:6e:69:c2:3b: 45:9c:b1:4e:cf:43:ef:5f:9d:2a:a3:48:d1:28:20:03:5d:86: 6b:52:78:20:71:2d:3c:8a:3e:58:5d:9e:33:7c:41:72:56:7c: a0:ea:2a:b1:eb:6b:1d:c5:cb:65:b1:f6:48:30:29:8b:4f:12: 79:7b:c0:ae -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnM+N3TpZdH5AZmdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjFhYjhkNDUtYTFhZS00MDhhLTllNDUtYjA0ZmRkNjYz ZjM3MB4XDTI1MDUwOTIzMDAwN1oXDTI1MDUxMTIzMDAwMFowLzEtMCsGA1UEAxMk OGM4ZjAzMTctMTNjMC00NzJhLTk3OWMtMzIwOGQ0ZTEwNDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnAQABXD8siw0mrggbuXFe6GLuUFiPxBSYiH unr5DYGyMXdUQCHJpvIuOrdmbcLH4EV1VFEFttjbk65v0ovJ3ISMMXBTjOKb7nr2 O/HZ/12YqyVNNvk6PyX2PicwjwBMZ0oBVvigAOYkHlzuAHrwx+zh2U44loOjJgqt hx2HtwolQgEttso5Qabg2iDc6eHnyWrWZwOzB/gnq3FOSjUSbkxAliDqFuyXkrHu Ahc3wnzJjy25NGnUT5Mhxz2tHyxFIE3hapLYJBja3UUssVFCyr89Alc4kVsZ39UR xjJHQlypbFGqClAgMPvD6TjAxM69+PuY1s3iGpU1ODCbx4ZclwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNVwlT90Q6hUVVhpRM57wAnIZyAvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mMWFi OGQ0NS1hMWFlLTQwOGEtOWU0NS1iMDRmZGQ2NjNmMzcvZjFhYjhkNDUtYTFhZS00 MDhhLTllNDUtYjA0ZmRkNjYzZjM3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjFhYjhkNDUtYTFhZS00MDhhLTll NDUtYjA0ZmRkNjYzZjM3L2YxYWI4ZDQ1LWExYWUtNDA4YS05ZTQ1LWIwNGZkZDY2 M2YzNy5jcmwwHwYDVR0jBBgwFoAUAuhbq0e+2mhq1EBVlIQmWd5vq1AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mMWFiOGQ0NS1hMWFlLTQwOGEtOWU0NS1iMDRm ZGQ2NjNmMzcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAbIW+MSvnyYhEeLN/IdE2c uzmGnixmQheJQxdwwkQEDXEJh8aNp92E15rFu3WiGDfb6obm2tumAtSodeI8UkE2 D/ec33tBB8iwSm7bvVpqv2ajJbsCnS6UH1Uz6fFzV+dCRFfwxe/sIZDiza3GtF6t Zr2f11lKC7FpVTlPD2++SeasieA5U+zO8XcbnkxMN3ctU/7bzCGZv1WHloJcVhgI f/1UT+3NUJPhva9mHJa6Qp38gZG2JmTP7hGXakjss4jIxG5pwjtFnLFOz0PvX50q o0jRKCADXYZrUnggcS08ij5YXZ4zfEFyVnyg6iqx62sdxctlsfZIMCmLTxJ5e8Cu -----END CERTIFICATE-----Generated at Sat May 10 07:31:50 2025 by rpki-client