$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.mft File: 1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.mft (raw, json) Hash identifier: JbdzcPjcVo4pXa0hJeFbKW0U+xrjAklM260M4H0b7UA= Subject key identifier: F0:CC:42:EB:98:44:07:29:7C:F8:28:0B:00:0F:54:DD:21:94:8D:28 Authority key identifier: 74:22:1F:E6:ED:43:72:AC:5F:84:E8:0C:58:56:B8:4A:27:56:B5:F7 Certificate issuer: /CN=1cf9e56a-5cc3-47a2-a96d-3650c4de45a7 Certificate serial: 010D0C9F43285849D78EBAECAC24FDDD819B0280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.mft Manifest number: 010D0C9F4328584733F8223248709F44DB210678 Signing time: Tue 13 May 2025 18:00:08 +0000 Manifest this update: Tue 13 May 2025 18:00:08 +0000 Manifest next update: Fri 16 May 2025 18:00:00 +0000 Files and hashes: 1: 0545c8d8-2be5-3872-8fa1-55668d1f1902.roa (hash: yXZbvV8fbSLRAPAXcWWYza8qrx0d8MilPSJwAPWusdE=) 2: 1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.crl (hash: xrnzrlzsXcholdvql5s0uLC+XYMOIJtH58RyUkrDxQI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d7:8e:ba:ec:ac:24:fd:dd:81:9b:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cf9e56a-5cc3-47a2-a96d-3650c4de45a7 Validity Not Before: May 13 18:00:08 2025 GMT Not After : May 16 18:00:00 2025 GMT Subject: CN=7bb3f420-81ae-40fa-86ac-5a48abd07da3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:94:d4:b5:fa:4c:ab:11:fd:df:cc:b6:b1:22: 46:79:22:94:b2:92:e3:e0:6f:a2:87:a6:d5:91:95: c3:cb:0f:84:c1:20:4b:7b:fa:21:ff:2c:b1:c0:88: d7:6a:9b:87:3d:53:7f:5e:1f:e5:75:c5:01:7d:8f: 22:ac:72:cf:1e:b5:6b:42:94:b8:8f:87:1f:4b:21: 54:89:b0:13:5c:b6:8f:46:da:7d:ad:be:be:3b:25: 50:13:3c:e0:d6:44:45:e8:9b:75:ec:f9:46:c0:1b: 41:66:40:3d:ff:eb:54:34:6c:d0:24:d5:4c:53:a4: 88:d3:a9:bc:3a:02:0c:96:08:e0:95:bb:8c:1e:30: 31:b5:95:4b:4d:c4:b3:34:8b:e6:79:fe:f4:80:ab: 73:b1:50:03:3e:4d:12:28:8f:b0:5e:02:88:e0:e0: a0:ae:81:f6:da:85:6a:1b:c2:71:e7:1a:33:8d:76: af:23:1f:66:d7:30:fb:5b:43:95:21:af:43:8b:6c: 1f:12:77:af:29:2b:c2:ff:68:be:42:7c:a9:82:51: 9c:13:ef:4b:b2:aa:e0:e8:c8:02:e5:c4:a5:f1:bb: 1d:c6:12:84:4f:e6:9f:d0:10:28:d2:ba:dc:c7:50: a7:27:18:32:a0:69:10:25:03:fa:91:ee:31:45:6b: e0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:CC:42:EB:98:44:07:29:7C:F8:28:0B:00:0F:54:DD:21:94:8D:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.crl X509v3 Authority Key Identifier: keyid:74:22:1F:E6:ED:43:72:AC:5F:84:E8:0C:58:56:B8:4A:27:56:B5:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:2a:c3:6e:47:79:55:83:30:70:7d:13:57:69:91:33:7c:c3: 42:98:da:8f:f1:c8:59:d2:80:c0:6c:c2:c0:84:37:43:f5:d7: 1f:35:bd:2c:20:12:d0:68:82:f9:df:a1:3d:fc:4c:7b:40:c3: 73:37:b5:ec:0b:7b:99:bc:31:cd:95:62:c9:47:80:a8:2d:2b: 9b:76:e8:25:b0:84:ef:c0:86:a5:1b:78:90:29:9c:35:cc:4c: 49:88:33:3f:8a:73:85:58:59:04:82:86:fa:f5:7f:ba:a3:58: 90:23:86:69:95:ab:6b:9f:27:8b:2d:24:6d:e0:7c:cb:f1:ae: bf:cd:16:c5:71:62:ab:1c:62:a8:df:43:8b:0e:36:51:f6:54: 5f:9d:9d:ca:d9:36:71:88:30:4b:6f:e5:42:91:59:a7:69:e9: f9:c5:0a:8b:3f:f0:2c:95:2d:3a:6b:6d:30:ce:1b:c6:59:fc: e1:7e:2f:de:63:62:26:94:8d:05:2f:da:5d:6b:4e:2e:1b:66: dd:f0:88:a0:e7:fc:5e:d5:9b:0a:27:d7:ff:16:0d:59:8f:06: cf:f1:25:5b:bf:80:b8:4d:08:cd:8b:8f:6e:7c:c6:58:4a:3e: 2d:92:b3:93:b1:99:4c:e1:ca:d9:f0:79:9e:91:81:5b:72:82: e7:c7:2e:70 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnXjrrsrCT93YGbAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmOWU1NmEtNWNjMy00N2EyLWE5NmQtMzY1MGM0ZGU0 NWE3MB4XDTI1MDUxMzE4MDAwOFoXDTI1MDUxNjE4MDAwMFowLzEtMCsGA1UEAxMk N2JiM2Y0MjAtODFhZS00MGZhLTg2YWMtNWE0OGFiZDA3ZGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JTUtfpMqxH938y2sSJGeSKUspLj4G+ih6bV kZXDyw+EwSBLe/oh/yyxwIjXapuHPVN/Xh/ldcUBfY8irHLPHrVrQpS4j4cfSyFU ibATXLaPRtp9rb6+OyVQEzzg1kRF6Jt17PlGwBtBZkA9/+tUNGzQJNVMU6SI06m8 OgIMlgjglbuMHjAxtZVLTcSzNIvmef70gKtzsVADPk0SKI+wXgKI4OCgroH22oVq G8Jx5xozjXavIx9m1zD7W0OVIa9Di2wfEnevKSvC/2i+QnypglGcE+9Lsqrg6MgC 5cSl8bsdxhKET+af0BAo0rrcx1CnJxgyoGkQJQP6ke4xRWvgdwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPDMQuuYRAcpfPgoCwAPVN0hlI0oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xY2Y5 ZTU2YS01Y2MzLTQ3YTItYTk2ZC0zNjUwYzRkZTQ1YTcvMWNmOWU1NmEtNWNjMy00 N2EyLWE5NmQtMzY1MGM0ZGU0NWE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWNmOWU1NmEtNWNjMy00N2EyLWE5 NmQtMzY1MGM0ZGU0NWE3LzFjZjllNTZhLTVjYzMtNDdhMi1hOTZkLTM2NTBjNGRl NDVhNy5jcmwwHwYDVR0jBBgwFoAUdCIf5u1DcqxfhOgMWFa4SidWtfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xY2Y5ZTU2YS01Y2MzLTQ3YTItYTk2ZC0zNjUw YzRkZTQ1YTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBZKsNuR3lVgzBwfRNXaZEz fMNCmNqP8chZ0oDAbMLAhDdD9dcfNb0sIBLQaIL536E9/Ex7QMNzN7XsC3uZvDHN lWLJR4CoLSubduglsITvwIalG3iQKZw1zExJiDM/inOFWFkEgob69X+6o1iQI4Zp latrnyeLLSRt4HzL8a6/zRbFcWKrHGKo30OLDjZR9lRfnZ3K2TZxiDBLb+VCkVmn aen5xQqLP/AslS06a20wzhvGWfzhfi/eY2ImlI0FL9pda04uG2bd8Iig5/xe1ZsK J9f/Fg1ZjwbP8SVbv4C4TQjNi49ufMZYSj4tkrOTsZlM4crZ8HmekYFbcoLnxy5w -----END CERTIFICATE-----Generated at Wed May 14 12:09:13 2025 by rpki-client