$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/3789343d-8560-48b0-9530-d2a1129fefe7.mft File: 3789343d-8560-48b0-9530-d2a1129fefe7.mft (raw, json) Hash identifier: blQS6W5FxRY9qLB9luGuYv14Ouu3T6IRN/1Bu7S0L+E= Subject key identifier: 20:36:B0:B3:7A:74:4A:E7:BB:89:66:B5:75:41:27:E5:34:42:80:3F Authority key identifier: 42:FD:E7:FA:D2:03:A1:BC:60:07:16:6B:17:B1:BA:42:B9:C1:9A:53 Certificate issuer: /CN=3789343d-8560-48b0-9530-d2a1129fefe7 Certificate serial: 010D0C9F43285849D4331AA614E61D73DD0B5D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/3789343d-8560-48b0-9530-d2a1129fefe7.mft Manifest number: 010D0C9F4328584676A999D1ED37E0ACB5EFAE3A Signing time: Mon 12 May 2025 13:08:07 +0000 Manifest this update: Mon 12 May 2025 13:08:07 +0000 Manifest next update: Wed 14 May 2025 22:00:00 +0000 Files and hashes: 1: 3789343d-8560-48b0-9530-d2a1129fefe7.crl (hash: Z7EXNBUg5J1vh7lPQUs717U5vjumcM5jAEP8dGCyS/E=) 2: d603bc48-0e7c-3f9c-ac30-aa2ddd7af2bc.roa (hash: pzYVWfXFRw+f5aS5DUdHaPysYiMsKpvjQTR1VivITnA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/3789343d-8560-48b0-9530-d2a1129fefe7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/3789343d-8560-48b0-9530-d2a1129fefe7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:33:1a:a6:14:e6:1d:73:dd:0b:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3789343d-8560-48b0-9530-d2a1129fefe7 Validity Not Before: May 12 13:08:07 2025 GMT Not After : May 14 22:00:00 2025 GMT Subject: CN=12ca6be3-dc37-455c-a9a4-00a31aac7c2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:01:94:24:37:11:b0:db:60:ac:b9:d4:85:89: 75:c4:d6:c3:31:42:f3:bf:b6:14:c9:50:1e:3c:b2: 33:1a:90:6e:28:45:ad:8b:c4:ab:a7:a8:6c:fa:70: 38:0f:05:eb:65:8f:83:44:3c:5e:d8:98:a6:4a:da: a0:b7:9d:4c:9f:34:99:b7:f9:0a:1b:95:cb:e3:71: be:90:00:4b:6a:06:8c:d1:d5:aa:75:61:92:58:7b: fe:75:bc:9b:72:69:2f:b2:5b:6b:cc:0d:1b:5b:14: e7:90:67:d3:ab:fc:e3:70:2b:ed:51:2e:ab:27:0c: ac:d2:0d:52:49:1d:99:f5:6c:38:36:32:3e:5d:7b: e4:1b:b9:af:21:f8:95:41:c5:e7:b5:89:2d:17:0b: d1:47:da:83:79:53:50:2f:db:e0:76:f3:9a:48:84: 8e:4c:55:5c:3d:f9:87:97:cd:3b:d0:63:d5:60:12: 97:86:0c:63:f2:29:66:e9:11:2f:b9:ca:a6:62:9a: c7:d1:3a:fe:ed:62:3e:b5:99:5b:85:d6:39:87:47: 7f:a8:14:78:ee:23:ac:18:22:c4:99:e9:dd:97:4c: d3:86:4b:22:f0:2e:23:d1:11:27:c5:25:78:74:df: 8e:1e:8d:15:e8:05:ab:e8:91:7e:a9:1e:b2:98:7a: 14:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:36:B0:B3:7A:74:4A:E7:BB:89:66:B5:75:41:27:E5:34:42:80:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/3789343d-8560-48b0-9530-d2a1129fefe7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/3789343d-8560-48b0-9530-d2a1129fefe7.crl X509v3 Authority Key Identifier: keyid:42:FD:E7:FA:D2:03:A1:BC:60:07:16:6B:17:B1:BA:42:B9:C1:9A:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:b7:52:20:b9:53:95:1a:f8:b2:09:ad:ea:5e:e6:79:d6:ba: d7:e9:88:cf:e4:df:47:43:65:08:9f:58:fa:43:f3:43:cd:c2: d8:09:be:1c:4a:2f:f7:c1:f6:9b:eb:fa:14:ed:bc:29:7a:dc: 79:41:90:a1:3d:39:2c:fd:ca:98:ce:78:4b:64:42:9e:3d:87: e8:a4:8f:fa:27:75:ec:78:77:3b:60:62:65:1e:5c:b6:a8:86: 4e:50:4d:d7:b4:16:17:53:e0:af:f5:da:d9:ae:e9:30:fc:6c: 94:31:af:d2:10:db:f4:26:14:1b:4a:58:28:0d:84:67:71:6e: b7:3e:92:b0:f5:16:8f:72:ed:80:d5:96:f9:8b:87:aa:fd:04: 18:a1:f4:e7:1d:96:27:57:51:11:d9:fb:1a:df:e6:f1:2f:29: bf:41:91:76:c2:f6:1f:61:1f:62:90:bd:65:10:4c:20:07:71: bc:ef:0c:38:25:7a:10:87:e9:10:06:da:9a:3d:20:f2:41:4e: 85:19:c9:6c:57:7f:0d:23:f1:01:a9:ed:46:1e:0f:0c:1a:ef: 78:e6:da:c6:cf:39:4e:36:8e:51:19:66:bc:77:b9:90:f3:38: af:1b:a6:7b:82:2b:87:fb:b7:35:7f:de:bb:7b:82:5d:fd:94: 5b:d3:81:59 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnUMxqmFOYdc90LXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzc4OTM0M2QtODU2MC00OGIwLTk1MzAtZDJhMTEyOWZl ZmU3MB4XDTI1MDUxMjEzMDgwN1oXDTI1MDUxNDIyMDAwMFowLzEtMCsGA1UEAxMk MTJjYTZiZTMtZGMzNy00NTVjLWE5YTQtMDBhMzFhYWM3YzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQGUJDcRsNtgrLnUhYl1xNbDMULzv7YUyVAe PLIzGpBuKEWti8Srp6hs+nA4DwXrZY+DRDxe2JimStqgt51MnzSZt/kKG5XL43G+ kABLagaM0dWqdWGSWHv+dbybcmkvsltrzA0bWxTnkGfTq/zjcCvtUS6rJwys0g1S SR2Z9Ww4NjI+XXvkG7mvIfiVQcXntYktFwvRR9qDeVNQL9vgdvOaSISOTFVcPfmH l8070GPVYBKXhgxj8ilm6REvucqmYprH0Tr+7WI+tZlbhdY5h0d/qBR47iOsGCLE mendl0zThksi8C4j0REnxSV4dN+OHo0V6AWr6JF+qR6ymHoUHwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCA2sLN6dErnu4lmtXVBJ+U0QoA/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zNzg5 MzQzZC04NTYwLTQ4YjAtOTUzMC1kMmExMTI5ZmVmZTcvMzc4OTM0M2QtODU2MC00 OGIwLTk1MzAtZDJhMTEyOWZlZmU3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMzc4OTM0M2QtODU2MC00OGIwLTk1 MzAtZDJhMTEyOWZlZmU3LzM3ODkzNDNkLTg1NjAtNDhiMC05NTMwLWQyYTExMjlm ZWZlNy5jcmwwHwYDVR0jBBgwFoAUQv3n+tIDobxgBxZrF7G6QrnBmlMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zNzg5MzQzZC04NTYwLTQ4YjAtOTUzMC1kMmEx MTI5ZmVmZTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBat1IguVOVGviyCa3qXuZ5 1rrX6YjP5N9HQ2UIn1j6Q/NDzcLYCb4cSi/3wfab6/oU7bwpetx5QZChPTks/cqY znhLZEKePYfopI/6J3XseHc7YGJlHly2qIZOUE3XtBYXU+Cv9drZrukw/GyUMa/S ENv0JhQbSlgoDYRncW63PpKw9RaPcu2A1Zb5i4eq/QQYofTnHZYnV1ER2fsa3+bx Lym/QZF2wvYfYR9ikL1lEEwgB3G87ww4JXoQh+kQBtqaPSDyQU6FGclsV38NI/EB qe1GHg8MGu945trGzzlONo5RGWa8d7mQ8zivG6Z7giuH+7c1f967e4Jd/ZRb04FZ -----END CERTIFICATE-----Generated at Mon May 12 19:42:07 2025 by rpki-client