$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e88e678b-ac52-45d1-af21-8805bf2307d2/e88e678b-ac52-45d1-af21-8805bf2307d2.mft File: e88e678b-ac52-45d1-af21-8805bf2307d2.mft (raw, json) Hash identifier: oV8PHx0HukDdU5ngqiTNQ6i/YgxD+tiGcC5YMb4VBcw= Subject key identifier: C1:FE:9C:22:69:2F:5B:87:4E:3C:C9:A0:BA:9E:0D:42:66:62:50:C2 Authority key identifier: F4:B6:0B:45:B2:E6:55:85:08:51:6D:B8:29:24:92:E7:8B:F2:A2:19 Certificate issuer: /CN=e88e678b-ac52-45d1-af21-8805bf2307d2 Certificate serial: 010D0C9F43285849C3E61E22A4BCA0383547ADC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e88e678b-ac52-45d1-af21-8805bf2307d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e88e678b-ac52-45d1-af21-8805bf2307d2/e88e678b-ac52-45d1-af21-8805bf2307d2.mft Manifest number: 010D0C9F43285846A5806F6F05D1DFA1BE95D897 Signing time: Tue 06 May 2025 17:00:03 +0000 Manifest this update: Tue 06 May 2025 17:00:03 +0000 Manifest next update: Fri 09 May 2025 17:00:00 +0000 Files and hashes: 1: 712d1a2b-b5b8-3735-ab0d-e057322b7e05.roa (hash: o1nUQyEfvGK6avVY1rMc5d2uDbFbsDsHlhUAzuo7nIk=) 2: e88e678b-ac52-45d1-af21-8805bf2307d2.crl (hash: MqoSw1QRhc3Y8lagHZ9OU9qdRqlCsrsTPGSLxPo0iz8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e88e678b-ac52-45d1-af21-8805bf2307d2/e88e678b-ac52-45d1-af21-8805bf2307d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e88e678b-ac52-45d1-af21-8805bf2307d2/e88e678b-ac52-45d1-af21-8805bf2307d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e88e678b-ac52-45d1-af21-8805bf2307d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c3:e6:1e:22:a4:bc:a0:38:35:47:ad:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e88e678b-ac52-45d1-af21-8805bf2307d2 Validity Not Before: May 6 17:00:03 2025 GMT Not After : May 9 17:00:00 2025 GMT Subject: CN=b695cbf6-ad41-46f3-9bbb-1a933096d539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:80:46:eb:92:52:28:c7:cf:9d:cd:d1:f5:69: 47:45:1c:aa:10:c1:c9:d6:f8:36:fa:ab:72:3f:79: f0:49:e8:ca:96:84:84:da:e2:c6:89:00:85:38:88: c6:79:31:e5:f0:7e:2f:1a:79:63:80:45:5c:9b:4a: 1b:b8:18:c3:f2:e1:14:c3:34:fc:f3:0e:98:38:ae: 7c:fc:3d:c8:40:86:34:37:b0:6a:d6:10:e4:39:7a: b4:06:34:31:5f:27:a0:12:f6:82:a6:9d:a6:d8:15: 2c:40:6a:73:42:4a:3e:6c:6f:9e:da:c8:96:5e:db: 0b:29:02:e6:4a:da:1a:58:fc:18:09:61:2e:46:7f: a0:c1:a5:08:93:a8:44:b3:63:35:48:89:03:00:ec: e9:be:3c:f5:80:5e:bd:26:67:9b:86:cb:ff:0f:4b: 74:d6:fb:3f:e5:dc:32:c4:b6:68:91:0b:27:ea:d5: c1:aa:e8:f4:18:da:d3:3c:55:18:1f:d6:2b:0b:c3: 4c:32:8f:65:1d:2c:fc:73:1a:20:39:79:1e:6a:f4: 71:d5:83:78:69:fd:44:5a:bf:76:26:d0:85:65:16: 91:f8:b5:6e:5e:7b:ec:5e:b1:2e:90:e3:fd:e1:a3: 95:fb:ad:1b:4b:40:6e:15:35:61:db:54:67:00:67: 6c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:FE:9C:22:69:2F:5B:87:4E:3C:C9:A0:BA:9E:0D:42:66:62:50:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e88e678b-ac52-45d1-af21-8805bf2307d2/e88e678b-ac52-45d1-af21-8805bf2307d2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e88e678b-ac52-45d1-af21-8805bf2307d2/e88e678b-ac52-45d1-af21-8805bf2307d2.crl X509v3 Authority Key Identifier: keyid:F4:B6:0B:45:B2:E6:55:85:08:51:6D:B8:29:24:92:E7:8B:F2:A2:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e88e678b-ac52-45d1-af21-8805bf2307d2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:d5:9d:c1:4e:e3:98:c0:d8:7a:07:b1:e0:d4:1a:da:20:fd: 4f:71:04:14:34:5a:c3:d9:00:b5:aa:a3:71:7b:61:12:2c:6b: 8e:53:ed:e9:66:7d:67:98:20:d7:ba:1d:61:fe:22:f5:fd:6a: 06:a5:ea:4e:62:7a:06:b0:fc:59:70:1e:29:4e:46:a8:6b:af: 5d:ba:b3:5a:ac:50:d8:25:26:57:be:31:04:99:44:0c:ed:77: 78:cc:c7:90:70:10:f8:a2:c0:0e:ab:bf:2c:7a:eb:fb:aa:c7: b0:5c:99:d3:b7:12:e9:a4:2d:27:aa:b9:ca:a3:2a:ac:37:04: c6:6f:d4:89:98:62:f9:11:10:a9:c2:eb:41:04:a5:a0:1e:dd: 9b:16:27:a6:5e:d9:ca:c5:92:ab:76:e2:12:87:4f:46:3a:6b: d5:fb:96:a0:e4:ab:e8:e5:0e:71:ea:8d:83:fa:59:69:2c:29: dd:db:7a:bf:a0:e1:0b:9c:a0:90:e3:46:36:6e:27:cf:0b:71: 93:d7:8a:d9:91:ac:15:c2:44:67:00:97:66:83:f7:23:ec:d9: 71:90:ea:5e:35:50:05:4b:21:c3:bc:6a:22:cb:8b:59:81:0d: 93:91:4e:69:32:f6:2f:e1:be:29:71:fe:dd:f8:b1:c7:41:3b: a6:f7:18:da -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnD5h4ipLygODVHrcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTg4ZTY3OGItYWM1Mi00NWQxLWFmMjEtODgwNWJmMjMw N2QyMB4XDTI1MDUwNjE3MDAwM1oXDTI1MDUwOTE3MDAwMFowLzEtMCsGA1UEAxMk YjY5NWNiZjYtYWQ0MS00NmYzLTliYmItMWE5MzMwOTZkNTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4BG65JSKMfPnc3R9WlHRRyqEMHJ1vg2+qty P3nwSejKloSE2uLGiQCFOIjGeTHl8H4vGnljgEVcm0obuBjD8uEUwzT88w6YOK58 /D3IQIY0N7Bq1hDkOXq0BjQxXyegEvaCpp2m2BUsQGpzQko+bG+e2siWXtsLKQLm StoaWPwYCWEuRn+gwaUIk6hEs2M1SIkDAOzpvjz1gF69Jmebhsv/D0t01vs/5dwy xLZokQsn6tXBquj0GNrTPFUYH9YrC8NMMo9lHSz8cxogOXkeavRx1YN4af1EWr92 JtCFZRaR+LVuXnvsXrEukOP94aOV+60bS0BuFTVh21RnAGdsnQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMH+nCJpL1uHTjzJoLqeDUJmYlDCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9lODhl Njc4Yi1hYzUyLTQ1ZDEtYWYyMS04ODA1YmYyMzA3ZDIvZTg4ZTY3OGItYWM1Mi00 NWQxLWFmMjEtODgwNWJmMjMwN2QyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZTg4ZTY3OGItYWM1Mi00NWQxLWFm MjEtODgwNWJmMjMwN2QyL2U4OGU2NzhiLWFjNTItNDVkMS1hZjIxLTg4MDViZjIz MDdkMi5jcmwwHwYDVR0jBBgwFoAU9LYLRbLmVYUIUW24KSSS54vyohkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9lODhlNjc4Yi1hYzUyLTQ1ZDEtYWYyMS04ODA1 YmYyMzA3ZDIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAI1Z3BTuOYwNh6B7Hg1Bra IP1PcQQUNFrD2QC1qqNxe2ESLGuOU+3pZn1nmCDXuh1h/iL1/WoGpepOYnoGsPxZ cB4pTkaoa69durNarFDYJSZXvjEEmUQM7Xd4zMeQcBD4osAOq78seuv7qsewXJnT txLppC0nqrnKoyqsNwTGb9SJmGL5ERCpwutBBKWgHt2bFiemXtnKxZKrduISh09G OmvV+5ag5Kvo5Q5x6o2D+llpLCnd23q/oOELnKCQ40Y2bifPC3GT14rZkawVwkRn AJdmg/cj7NlxkOpeNVAFSyHDvGoiy4tZgQ2TkU5pMvYv4b4pcf7d+LHHQTum9xja -----END CERTIFICATE-----Generated at Wed May 7 16:03:34 2025 by rpki-client