$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft File: cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft (raw, json) Hash identifier: xTqF45s1ka4Ozq+Bne8bKYbL6ZMfhxvDB4W08h4bO+g= Subject key identifier: 49:D6:62:B5:86:7D:B1:C2:7C:2E:5B:35:3F:CA:6D:41:CE:9E:9A:9D Authority key identifier: FB:E2:27:F9:FE:25:D0:8B:80:08:AC:FA:67:0D:8D:CF:71:68:0C:C3 Certificate issuer: /CN=cd9a9dcf-4448-45ff-8ea6-d13be97d91a2 Certificate serial: 010D0C9F43285849C922246277B49F6EC6290D20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft Manifest number: 010D0C9F432858478CDCDF69AB91A758982A0610 Signing time: Thu 08 May 2025 14:00:03 +0000 Manifest this update: Thu 08 May 2025 14:00:03 +0000 Manifest next update: Sat 10 May 2025 14:00:00 +0000 Files and hashes: 1: 0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer (hash: Kd/suIS4o6QtT1Sfl7AuRHI7ak0qI8RXySR8pSginbY=) 2: cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl (hash: EK8GqU8r/rgz6diUBTMfTJy2Q5dBNSwkAfaQSmEDZdc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:22:24:62:77:b4:9f:6e:c6:29:0d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd9a9dcf-4448-45ff-8ea6-d13be97d91a2 Validity Not Before: May 8 14:00:03 2025 GMT Not After : May 10 14:00:00 2025 GMT Subject: CN=a26df23f-4783-4e8e-81cc-b2369e0ded87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:27:2d:ba:9b:ce:4f:02:c1:58:fc:d9:6b:60: 83:40:70:b8:45:05:1c:8e:d0:22:15:ad:00:9b:b3: 43:b5:d9:35:dd:f6:66:4f:29:8c:0e:17:4a:e1:61: 75:6a:a4:3d:06:fe:fc:a1:87:15:5f:55:23:27:1d: 41:58:a3:0a:75:7c:14:89:1e:8c:b4:c5:fe:8a:af: 97:d5:25:b5:76:45:d6:a7:3b:bc:6d:78:4f:88:d5: 61:6d:e3:24:f5:fb:88:0e:b4:23:88:7a:07:95:48: 8d:50:df:21:9f:bf:92:78:94:64:95:60:aa:79:fd: 4c:70:57:08:c4:ab:13:21:51:26:01:49:90:fd:92: b1:14:c3:85:cb:9d:17:c7:ac:6b:1f:17:5e:8d:f0: ca:32:25:d3:8e:13:62:70:bc:39:3b:b5:7e:61:14: b6:d3:28:8a:40:c0:0f:b5:13:0d:14:21:a6:0b:a8: 08:bf:bc:e6:96:b5:0b:5c:8e:3e:1e:05:3f:00:c8: 8d:50:5c:2c:4d:54:01:82:e3:37:c3:f6:82:ba:ab: 79:43:87:40:4b:96:29:27:67:e4:00:c6:95:2e:1b: cd:8c:d8:6c:8f:06:0d:78:b7:58:4e:3a:35:e6:40: dc:86:de:91:1c:c4:83:e5:89:df:e9:c5:43:cd:78: ce:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D6:62:B5:86:7D:B1:C2:7C:2E:5B:35:3F:CA:6D:41:CE:9E:9A:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl X509v3 Authority Key Identifier: keyid:FB:E2:27:F9:FE:25:D0:8B:80:08:AC:FA:67:0D:8D:CF:71:68:0C:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:3d:be:e4:0d:70:be:16:7a:ef:5b:37:d9:0d:df:65:af:9a: 5b:a3:50:36:6f:88:d0:df:ce:7d:d5:a1:c8:02:07:e3:8c:ab: 82:87:6c:23:2c:1e:46:8d:ce:5f:dd:a4:d5:59:f0:d9:a8:b9: 14:9e:78:57:61:67:c8:08:1a:0f:3e:56:ed:d3:e8:ac:92:fc: d1:b8:43:3c:40:67:1b:b5:50:19:29:2b:01:45:28:87:59:61: 1c:4b:d1:6e:8c:0a:b6:52:7b:59:04:05:26:00:fc:7d:03:7d: 0a:e9:13:78:fa:1f:3d:ac:43:57:9a:c7:06:68:29:e9:8c:2b: f3:1b:44:64:15:4d:7a:ab:62:fc:96:5b:96:96:dc:a4:78:da: a0:5f:65:91:d6:bc:0e:a1:7c:cd:60:ea:d2:89:95:84:de:9b: 04:15:46:bb:89:0e:4b:3c:91:db:a1:e5:52:c5:00:6e:86:65: a5:f0:9d:12:f5:45:ac:3a:e8:34:6c:50:49:4d:4c:af:20:a4: 0d:72:e4:24:41:be:0d:ec:8f:c4:54:6e:3a:8f:a8:46:f5:f5: 8f:ff:97:df:82:c1:44:93:8f:d2:bd:44:cd:50:32:51:63:ba: 4c:79:aa:0a:f8:b3:ca:8e:da:74:6f:55:eb:1b:50:c3:ff:02: 77:1c:88:04 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnJIiRid7SfbsYpDSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q5YTlkY2YtNDQ0OC00NWZmLThlYTYtZDEzYmU5N2Q5 MWEyMB4XDTI1MDUwODE0MDAwM1oXDTI1MDUxMDE0MDAwMFowLzEtMCsGA1UEAxMk YTI2ZGYyM2YtNDc4My00ZThlLTgxY2MtYjIzNjllMGRlZDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoictupvOTwLBWPzZa2CDQHC4RQUcjtAiFa0A m7NDtdk13fZmTymMDhdK4WF1aqQ9Bv78oYcVX1UjJx1BWKMKdXwUiR6MtMX+iq+X 1SW1dkXWpzu8bXhPiNVhbeMk9fuIDrQjiHoHlUiNUN8hn7+SeJRklWCqef1McFcI xKsTIVEmAUmQ/ZKxFMOFy50Xx6xrHxdejfDKMiXTjhNicLw5O7V+YRS20yiKQMAP tRMNFCGmC6gIv7zmlrULXI4+HgU/AMiNUFwsTVQBguM3w/aCuqt5Q4dAS5YpJ2fk AMaVLhvNjNhsjwYNeLdYTjo15kDcht6RHMSD5Ynf6cVDzXjOUwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEnWYrWGfbHCfC5bNT/KbUHOnpqdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jZDlh OWRjZi00NDQ4LTQ1ZmYtOGVhNi1kMTNiZTk3ZDkxYTIvY2Q5YTlkY2YtNDQ0OC00 NWZmLThlYTYtZDEzYmU5N2Q5MWEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2Q5YTlkY2YtNDQ0OC00NWZmLThl YTYtZDEzYmU5N2Q5MWEyL2NkOWE5ZGNmLTQ0NDgtNDVmZi04ZWE2LWQxM2JlOTdk OTFhMi5jcmwwHwYDVR0jBBgwFoAU++In+f4l0IuACKz6Zw2Nz3FoDMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jZDlhOWRjZi00NDQ4LTQ1ZmYtOGVhNi1kMTNi ZTk3ZDkxYTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCOPb7kDXC+FnrvWzfZDd9l r5pbo1A2b4jQ38591aHIAgfjjKuCh2wjLB5Gjc5f3aTVWfDZqLkUnnhXYWfICBoP Plbt0+iskvzRuEM8QGcbtVAZKSsBRSiHWWEcS9FujAq2UntZBAUmAPx9A30K6RN4 +h89rENXmscGaCnpjCvzG0RkFU16q2L8lluWltykeNqgX2WR1rwOoXzNYOrSiZWE 3psEFUa7iQ5LPJHboeVSxQBuhmWl8J0S9UWsOug0bFBJTUyvIKQNcuQkQb4N7I/E VG46j6hG9fWP/5ffgsFEk4/SvUTNUDJRY7pMeaoK+LPKjtp0b1XrG1DD/wJ3HIgE -----END CERTIFICATE-----Generated at Thu May 8 19:03:48 2025 by rpki-client