$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f/df156af0-49c2-46d4-906b-5cf25869e65f.mft File: df156af0-49c2-46d4-906b-5cf25869e65f.mft (raw, json) Hash identifier: 35Uq9HbSe5kLhEdtYkHo6JAa4AMc85Yud8sMWByzTTk= Subject key identifier: 0C:38:AC:32:27:F0:83:13:A9:ED:31:C6:1B:08:6F:6C:37:B2:FC:AA Authority key identifier: B9:69:84:6D:2E:E2:2C:10:2C:B2:AA:C6:E6:A3:5B:AE:F1:42:46:4F Certificate issuer: /CN=df156af0-49c2-46d4-906b-5cf25869e65f Certificate serial: 010D0C9F43285849D7E8113E70C6BCCD2398C040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f/df156af0-49c2-46d4-906b-5cf25869e65f.mft Manifest number: 010D0C9F432858476EEAE52E8023AB63E72D3327 Signing time: Tue 13 May 2025 21:00:07 +0000 Manifest this update: Tue 13 May 2025 21:00:07 +0000 Manifest next update: Thu 15 May 2025 21:00:00 +0000 Files and hashes: 1: df156af0-49c2-46d4-906b-5cf25869e65f.crl (hash: PpCddOg+qlyHUIyiplmjcMwJDi6N8D5gETPFTl9Deq8=) 2: e75d8978-0cca-3d04-885f-aabcb43ccc66.roa (hash: wn/yyUUyEH/OXEpFiw1wRx3w4F6efKS7h5eH2q+Qulc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f/df156af0-49c2-46d4-906b-5cf25869e65f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f/df156af0-49c2-46d4-906b-5cf25869e65f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d7:e8:11:3e:70:c6:bc:cd:23:98:c0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df156af0-49c2-46d4-906b-5cf25869e65f Validity Not Before: May 13 21:00:07 2025 GMT Not After : May 15 21:00:00 2025 GMT Subject: CN=8bac08b0-a01b-4202-9c57-360c1bdd1116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:33:02:33:df:42:2a:0f:94:5f:69:11:d6:cf: 31:12:54:dc:64:4d:d6:86:6d:74:a9:72:40:a6:5c: 07:92:a5:71:9d:8d:4f:c4:08:a0:1d:10:45:3d:0e: c3:a5:98:b2:16:12:4d:4f:7d:73:6a:d8:0c:cd:c7: 23:16:b4:43:7e:64:bf:d4:24:3e:c5:c1:e4:c6:4e: 5c:55:f7:65:81:2a:6e:4c:f5:bb:b2:2c:ac:17:41: 5a:b8:5d:05:fd:92:b2:1c:3f:a0:95:65:24:0a:6f: e6:e0:2b:b3:61:c0:8d:bf:fc:04:0d:9e:6b:47:8d: 61:26:47:86:2c:3d:eb:ed:58:53:15:4e:d6:97:f8: 9c:ac:ab:60:ba:4c:25:7b:1f:39:70:4e:64:d0:80: 39:45:39:4e:ad:13:7a:6a:77:13:b0:34:ae:25:fa: 18:7b:15:ec:c3:04:97:b4:4a:42:7e:8f:0a:ec:d2: fb:fa:d8:58:fb:34:69:ec:01:9a:e4:05:dc:af:c2: d7:a5:bd:4e:56:42:3f:98:c9:e2:7d:7d:37:6c:18: 00:c4:64:4f:2f:f6:ee:7a:f2:5d:fc:d4:74:d3:be: f4:51:b5:49:cd:82:aa:a4:2d:0b:ff:92:2a:ca:19: 9b:7d:af:5e:83:f1:79:c5:29:fe:80:6f:c2:14:a9: 4c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:38:AC:32:27:F0:83:13:A9:ED:31:C6:1B:08:6F:6C:37:B2:FC:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f/df156af0-49c2-46d4-906b-5cf25869e65f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f/df156af0-49c2-46d4-906b-5cf25869e65f.crl X509v3 Authority Key Identifier: keyid:B9:69:84:6D:2E:E2:2C:10:2C:B2:AA:C6:E6:A3:5B:AE:F1:42:46:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/df156af0-49c2-46d4-906b-5cf25869e65f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:e3:7c:16:a1:42:f3:e8:55:42:16:0b:7a:a4:05:ca:f7:a7: 9d:e4:60:31:6c:67:21:e7:0d:a6:ef:58:d0:d4:05:06:70:5f: 87:0b:48:ac:28:df:63:6c:db:df:4a:75:e2:c9:e7:92:a3:41: 63:d0:47:4c:5d:f6:5d:6e:03:74:05:64:b8:ba:40:8c:81:66: 78:31:58:80:d0:18:ea:e1:85:14:3c:d5:0c:c9:e4:ef:9e:9b: 4e:1e:cd:01:80:3f:f9:87:db:0a:b6:fe:fc:81:c8:d1:4a:76: 1e:b5:17:de:38:af:6e:ef:36:11:d0:22:cb:9a:c0:47:4d:f2: 5d:7e:5e:01:bf:48:17:5a:a7:66:1c:c9:68:8d:08:b8:42:90: cd:af:c1:4c:69:7e:23:00:88:63:b0:c3:51:95:4c:bd:82:73: 6d:0f:8f:d4:8f:82:f2:df:b0:f7:62:67:75:ac:06:f3:d0:87: 3a:ac:3c:46:b3:16:c2:b6:3e:33:1d:e0:94:8d:b0:9c:06:ca: 95:4f:73:02:aa:c8:26:dc:e3:17:dc:44:41:ba:66:d4:16:cf: 14:3a:eb:2f:1a:1b:e9:c1:3b:43:58:89:cd:16:39:80:48:fc: 52:1b:f7:95:6c:b7:79:64:ed:19:f9:9e:25:c3:b4:98:c0:e8: 3c:26:1e:ff -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnX6BE+cMa8zSOYwEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYxNTZhZjAtNDljMi00NmQ0LTkwNmItNWNmMjU4Njll NjVmMB4XDTI1MDUxMzIxMDAwN1oXDTI1MDUxNTIxMDAwMFowLzEtMCsGA1UEAxMk OGJhYzA4YjAtYTAxYi00MjAyLTljNTctMzYwYzFiZGQxMTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjMCM99CKg+UX2kR1s8xElTcZE3Whm10qXJA plwHkqVxnY1PxAigHRBFPQ7DpZiyFhJNT31zatgMzccjFrRDfmS/1CQ+xcHkxk5c VfdlgSpuTPW7siysF0FauF0F/ZKyHD+glWUkCm/m4CuzYcCNv/wEDZ5rR41hJkeG LD3r7VhTFU7Wl/icrKtgukwlex85cE5k0IA5RTlOrRN6ancTsDSuJfoYexXswwSX tEpCfo8K7NL7+thY+zRp7AGa5AXcr8LXpb1OVkI/mMnifX03bBgAxGRPL/buevJd /NR00770UbVJzYKqpC0L/5Iqyhmbfa9eg/F5xSn+gG/CFKlMdQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAw4rDIn8IMTqe0xxhsIb2w3svyqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kZjE1 NmFmMC00OWMyLTQ2ZDQtOTA2Yi01Y2YyNTg2OWU2NWYvZGYxNTZhZjAtNDljMi00 NmQ0LTkwNmItNWNmMjU4NjllNjVmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGYxNTZhZjAtNDljMi00NmQ0LTkw NmItNWNmMjU4NjllNjVmL2RmMTU2YWYwLTQ5YzItNDZkNC05MDZiLTVjZjI1ODY5 ZTY1Zi5jcmwwHwYDVR0jBBgwFoAUuWmEbS7iLBAssqrG5qNbrvFCRk8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kZjE1NmFmMC00OWMyLTQ2ZDQtOTA2Yi01Y2Yy NTg2OWU2NWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAS43wWoULz6FVCFgt6pAXK 96ed5GAxbGch5w2m71jQ1AUGcF+HC0isKN9jbNvfSnXiyeeSo0Fj0EdMXfZdbgN0 BWS4ukCMgWZ4MViA0Bjq4YUUPNUMyeTvnptOHs0BgD/5h9sKtv78gcjRSnYetRfe OK9u7zYR0CLLmsBHTfJdfl4Bv0gXWqdmHMlojQi4QpDNr8FMaX4jAIhjsMNRlUy9 gnNtD4/Uj4Ly37D3Ymd1rAbz0Ic6rDxGsxbCtj4zHeCUjbCcBsqVT3MCqsgm3OMX 3ERBumbUFs8UOusvGhvpwTtDWInNFjmASPxSG/eVbLd5ZO0Z+Z4lw7SYwOg8Jh7/ -----END CERTIFICATE-----Generated at Wed May 14 09:04:29 2025 by rpki-client