$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba1f9bb3-fbcd-4126-8d2e-691836a4b162/ba1f9bb3-fbcd-4126-8d2e-691836a4b162.mft File: ba1f9bb3-fbcd-4126-8d2e-691836a4b162.mft (raw, json) Hash identifier: 9dCvVPbEUxF/CQrBIyqKhkz09fiVlmjZGAIDTAI1eFE= Subject key identifier: DD:38:E8:6F:14:92:02:6E:DA:4D:8E:08:6F:2B:25:B3:A1:FD:4B:53 Authority key identifier: 82:7E:C2:DD:8F:70:61:02:77:BD:AB:8B:2B:2B:D7:27:A7:84:B5:92 Certificate issuer: /CN=ba1f9bb3-fbcd-4126-8d2e-691836a4b162 Certificate serial: 010D0C9F43285849CF87F762239F31456D8D35A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba1f9bb3-fbcd-4126-8d2e-691836a4b162.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba1f9bb3-fbcd-4126-8d2e-691836a4b162/ba1f9bb3-fbcd-4126-8d2e-691836a4b162.mft Manifest number: 010D0C9F432858461A7033E06281D61720798363 Signing time: Sat 10 May 2025 21:00:03 +0000 Manifest this update: Sat 10 May 2025 21:00:03 +0000 Manifest next update: Tue 13 May 2025 21:00:00 +0000 Files and hashes: 1: b10c05eb-84b7-3df3-b210-cc3e86e14c00.roa (hash: 3X5RIsWUAA9zfDhjfQtZYZJPu7LZNVD2pg6qyQsFczU=) 2: ba1f9bb3-fbcd-4126-8d2e-691836a4b162.crl (hash: eBTF+qEiSn9pupahptcRcJdrmIMJbLuptgr5HTUADGU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba1f9bb3-fbcd-4126-8d2e-691836a4b162/ba1f9bb3-fbcd-4126-8d2e-691836a4b162.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba1f9bb3-fbcd-4126-8d2e-691836a4b162/ba1f9bb3-fbcd-4126-8d2e-691836a4b162.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba1f9bb3-fbcd-4126-8d2e-691836a4b162.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cf:87:f7:62:23:9f:31:45:6d:8d:35:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba1f9bb3-fbcd-4126-8d2e-691836a4b162 Validity Not Before: May 10 21:00:03 2025 GMT Not After : May 13 21:00:00 2025 GMT Subject: CN=874d0f89-639e-4a60-8540-3d7461b61c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:45:22:aa:40:31:98:4e:b0:c2:f6:25:16:9e: 8f:e8:99:3f:19:9f:af:4d:41:ca:da:90:d2:0c:a8: 75:b1:c0:55:70:9e:3e:bc:8f:e8:eb:05:27:0a:51: 23:61:0f:1f:1d:05:5b:13:b5:dc:d9:2f:95:7c:f2: 18:4c:76:a3:07:c9:0d:fb:be:ae:d5:81:11:8b:62: ee:a0:6d:87:eb:01:dd:42:b9:97:61:ad:38:aa:32: 0b:a7:5e:fc:74:52:4b:46:fe:d2:8e:8f:b4:86:d9: 69:c7:3d:31:27:4e:d9:d4:f7:87:cf:eb:00:23:60: ce:08:a3:27:e9:fc:15:d1:8e:b5:46:7f:aa:9e:b2: 80:b1:e9:d8:49:58:33:3f:7e:f4:b5:77:ef:78:67: f8:96:43:9d:1d:06:da:85:7d:db:b7:c9:47:f5:99: 9d:60:00:7f:8b:27:6b:b7:9c:dc:1b:75:16:05:f1: cd:fe:9d:43:ca:04:a4:e9:f9:90:37:1d:e6:d5:4b: e4:39:86:9f:86:f1:fa:ec:83:19:7c:50:11:5c:1f: 85:a4:7f:cd:dd:cd:56:13:a0:ad:63:6e:66:7d:31: 2b:ef:aa:1c:ca:15:63:57:24:ca:b4:c9:6c:26:9b: d0:f9:fb:5f:55:4c:60:37:5d:28:b3:06:c8:e6:b5: 2a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:38:E8:6F:14:92:02:6E:DA:4D:8E:08:6F:2B:25:B3:A1:FD:4B:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba1f9bb3-fbcd-4126-8d2e-691836a4b162/ba1f9bb3-fbcd-4126-8d2e-691836a4b162.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba1f9bb3-fbcd-4126-8d2e-691836a4b162/ba1f9bb3-fbcd-4126-8d2e-691836a4b162.crl X509v3 Authority Key Identifier: keyid:82:7E:C2:DD:8F:70:61:02:77:BD:AB:8B:2B:2B:D7:27:A7:84:B5:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba1f9bb3-fbcd-4126-8d2e-691836a4b162.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:22:02:0b:10:c4:46:89:67:42:56:36:ac:cd:51:9c:3f:f9: eb:08:61:0e:75:aa:f4:8a:49:f1:53:e0:7c:ec:ff:ca:fb:77: 2f:a5:b4:ff:d8:a5:b3:2c:2e:58:81:d9:bf:79:24:e1:44:30: 55:b6:63:59:d4:f2:c7:bc:3f:e1:bc:c6:39:90:17:b7:92:bf: 64:b1:c0:ca:45:b6:8b:43:09:31:f4:88:ae:f9:3a:f8:60:62: 8f:33:e7:b2:a5:1f:3b:aa:47:1d:da:86:8b:94:e3:e1:86:82: 87:e8:bd:f7:23:60:d4:a9:54:d5:e3:84:03:97:63:94:b1:23: 87:82:62:5d:45:aa:0e:af:e9:fb:7e:e4:4a:70:eb:28:c8:23: 59:9f:4c:4f:2c:c1:90:a8:9f:a0:a1:40:29:89:8b:f4:aa:27: fd:18:a1:0a:96:16:49:59:95:c3:06:22:84:9a:49:44:40:e9: ce:3e:23:55:d5:e2:9a:27:53:bf:2e:f6:28:ed:50:04:46:8c: 40:d9:c0:a1:28:94:8d:0c:d9:95:b9:39:c4:cb:3d:74:1c:61: 95:4d:47:87:98:6b:19:f9:4e:f5:b1:15:75:1e:ee:54:2c:06: 95:77:a8:52:94:22:57:ad:b8:a5:97:56:f1:ff:f9:18:72:28: d3:74:e0:e5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnPh/diI58xRW2NNaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmExZjliYjMtZmJjZC00MTI2LThkMmUtNjkxODM2YTRi MTYyMB4XDTI1MDUxMDIxMDAwM1oXDTI1MDUxMzIxMDAwMFowLzEtMCsGA1UEAxMk ODc0ZDBmODktNjM5ZS00YTYwLTg1NDAtM2Q3NDYxYjYxYzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEUiqkAxmE6wwvYlFp6P6Jk/GZ+vTUHK2pDS DKh1scBVcJ4+vI/o6wUnClEjYQ8fHQVbE7Xc2S+VfPIYTHajB8kN+76u1YERi2Lu oG2H6wHdQrmXYa04qjILp178dFJLRv7Sjo+0htlpxz0xJ07Z1PeHz+sAI2DOCKMn 6fwV0Y61Rn+qnrKAsenYSVgzP370tXfveGf4lkOdHQbahX3bt8lH9ZmdYAB/iydr t5zcG3UWBfHN/p1DygSk6fmQNx3m1UvkOYafhvH67IMZfFARXB+FpH/N3c1WE6Ct Y25mfTEr76ocyhVjVyTKtMlsJpvQ+ftfVUxgN10oswbI5rUqTwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFN046G8UkgJu2k2OCG8rJbOh/UtTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTFm OWJiMy1mYmNkLTQxMjYtOGQyZS02OTE4MzZhNGIxNjIvYmExZjliYjMtZmJjZC00 MTI2LThkMmUtNjkxODM2YTRiMTYyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmExZjliYjMtZmJjZC00MTI2LThk MmUtNjkxODM2YTRiMTYyL2JhMWY5YmIzLWZiY2QtNDEyNi04ZDJlLTY5MTgzNmE0 YjE2Mi5jcmwwHwYDVR0jBBgwFoAUgn7C3Y9wYQJ3vauLKyvXJ6eEtZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTFmOWJiMy1mYmNkLTQxMjYtOGQyZS02OTE4 MzZhNGIxNjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAEIgILEMRGiWdCVjaszVGc P/nrCGEOdar0iknxU+B87P/K+3cvpbT/2KWzLC5Ygdm/eSThRDBVtmNZ1PLHvD/h vMY5kBe3kr9kscDKRbaLQwkx9Iiu+Tr4YGKPM+eypR87qkcd2oaLlOPhhoKH6L33 I2DUqVTV44QDl2OUsSOHgmJdRaoOr+n7fuRKcOsoyCNZn0xPLMGQqJ+goUApiYv0 qif9GKEKlhZJWZXDBiKEmklEQOnOPiNV1eKaJ1O/LvYo7VAERoxA2cChKJSNDNmV uTnEyz10HGGVTUeHmGsZ+U71sRV1Hu5ULAaVd6hSlCJXrbill1bx//kYcijTdODl -----END CERTIFICATE-----Generated at Sun May 11 02:11:31 2025 by rpki-client