$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd.mft File: a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd.mft (raw, json) Hash identifier: hN+bpw4TEoH+EMmBv8LbV8matXBYcpk+UoWe5IFjLw8= Subject key identifier: 35:A0:3D:1C:2A:A4:C2:20:58:05:FA:18:CC:0B:2B:76:38:E5:F0:A3 Authority key identifier: D5:39:15:F9:DF:04:40:E1:1F:6F:20:04:3B:D2:4E:60:B1:12:03:AB Certificate issuer: /CN=a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd Certificate serial: 010D0C9F43285849BF5CBF3FFEB743A7E85DAE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd.mft Manifest number: 010D0C9F4328584073A836D3D1AF1179948867E7 Signing time: Mon 05 May 2025 02:00:03 +0000 Manifest this update: Mon 05 May 2025 02:00:03 +0000 Manifest next update: Thu 08 May 2025 02:00:00 +0000 Files and hashes: 1: 6377132b-c138-3ca8-903b-d7b5fbef607d.roa (hash: dKuLAD5RMqucB1pWnFSLcCCqkqu38ik1eQ4S+gM/RXI=) 2: a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd.crl (hash: s2jhG4DSsYP2YcXoWe2rsXZ/RPnI8tWCV0ziGbkVKSI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:5c:bf:3f:fe:b7:43:a7:e8:5d:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd Validity Not Before: May 5 02:00:03 2025 GMT Not After : May 8 02:00:00 2025 GMT Subject: CN=fddae244-cdbb-408b-99e9-6b3f35246e03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f6:67:16:f8:dd:8a:ff:c3:8e:c7:aa:1d:1b: 6f:17:33:53:34:23:a2:9f:0b:71:b7:e3:be:c0:27: 75:26:09:a8:4b:69:18:46:85:d6:84:18:ef:24:9b: d7:ac:48:ff:2e:e7:d2:7a:0d:15:6d:e3:59:44:d0: 6c:b0:6b:aa:d5:61:71:db:1b:c4:62:67:33:b2:d9: 91:7a:52:54:a1:81:8b:5e:fb:ac:30:09:01:7b:bf: ef:17:ea:0d:dd:48:ab:7c:5b:f7:d7:9f:4b:a7:b7: e5:4e:7c:6e:00:ac:9e:f4:16:f6:30:e4:78:6b:5d: 3b:13:74:52:d9:c0:0a:f3:8d:5a:c5:26:36:b4:14: 0b:78:ea:50:dc:8e:d1:14:6a:e0:26:13:1a:eb:9f: df:c9:dd:6b:85:a9:64:f9:23:80:39:a7:e4:c5:fa: 61:7f:bb:1a:79:a2:6f:68:0d:ec:7e:31:1f:57:98: b8:30:f5:61:3d:12:99:7d:66:cf:d7:a5:93:dc:0b: d4:64:d4:41:ac:fa:fc:58:65:1e:2a:aa:89:97:ef: 0c:fb:6e:cf:42:8e:95:a5:e4:ee:58:5f:92:d6:ac: 96:13:2a:7c:be:05:9b:00:f4:4e:cd:5f:68:8d:19: 70:48:8a:90:64:f4:25:03:2e:9a:fa:06:5f:1b:f6: f9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A0:3D:1C:2A:A4:C2:20:58:05:FA:18:CC:0B:2B:76:38:E5:F0:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd.crl X509v3 Authority Key Identifier: keyid:D5:39:15:F9:DF:04:40:E1:1F:6F:20:04:3B:D2:4E:60:B1:12:03:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1b7c5b5-3d8b-4d6d-acf1-4b7299fbe4cd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:95:98:06:02:89:6f:0d:8e:77:0f:bd:2e:c6:43:71:06:38: 9e:87:c6:7d:37:2b:29:ad:bd:57:1d:c2:a3:f5:3a:38:e0:c6: f9:94:f4:61:95:37:94:4e:e3:1e:d0:2d:bf:d8:53:53:36:eb: 34:5d:da:2f:da:42:da:5d:68:2c:e9:43:19:9c:89:f5:33:ce: bd:b6:4e:39:1d:e9:3e:a8:70:20:40:77:5a:e4:e0:a3:b3:66: 70:b7:36:4b:af:17:3c:2d:db:55:71:a9:a9:d9:ad:07:95:f2: d6:0b:14:c5:f4:d0:96:37:0b:76:15:7e:5a:bc:e6:0a:bb:b6: 3d:3f:69:9c:83:8b:c7:cc:46:50:6b:5d:ca:ba:50:7a:b5:b8: 0f:ac:6e:d2:ca:94:5a:78:73:de:07:83:9c:0c:da:ab:d2:ad: d8:01:20:66:b1:d7:3e:34:da:4a:bd:b2:9e:4f:01:73:4d:0e: b6:9d:11:2b:b9:01:66:16:fe:c7:76:93:2b:9e:38:7f:3f:bc: be:26:37:a1:88:c4:e7:59:3a:2d:21:20:4e:cc:b6:33:cd:ef: da:bd:52:fe:8b:2e:c1:45:cc:f8:5d:df:03:96:95:ba:40:fb: 95:32:13:d8:28:55:aa:f9:40:fa:db:0c:3c:58:44:58:4a:8f: c3:54:e2:2d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEm/XL8//rdDp+hdrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFiN2M1YjUtM2Q4Yi00ZDZkLWFjZjEtNGI3Mjk5ZmJl NGNkMB4XDTI1MDUwNTAyMDAwM1oXDTI1MDUwODAyMDAwMFowLzEtMCsGA1UEAxMk ZmRkYWUyNDQtY2RiYi00MDhiLTk5ZTktNmIzZjM1MjQ2ZTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvZnFvjdiv/DjseqHRtvFzNTNCOinwtxt+O+ wCd1JgmoS2kYRoXWhBjvJJvXrEj/LufSeg0VbeNZRNBssGuq1WFx2xvEYmczstmR elJUoYGLXvusMAkBe7/vF+oN3UirfFv3159Lp7flTnxuAKye9Bb2MOR4a107E3RS 2cAK841axSY2tBQLeOpQ3I7RFGrgJhMa65/fyd1rhalk+SOAOafkxfphf7saeaJv aA3sfjEfV5i4MPVhPRKZfWbP16WT3AvUZNRBrPr8WGUeKqqJl+8M+27PQo6VpeTu WF+S1qyWEyp8vgWbAPROzV9ojRlwSIqQZPQlAy6a+gZfG/b5XQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDWgPRwqpMIgWAX6GMwLK3Y45fCjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hMWI3 YzViNS0zZDhiLTRkNmQtYWNmMS00YjcyOTlmYmU0Y2QvYTFiN2M1YjUtM2Q4Yi00 ZDZkLWFjZjEtNGI3Mjk5ZmJlNGNkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTFiN2M1YjUtM2Q4Yi00ZDZkLWFj ZjEtNGI3Mjk5ZmJlNGNkL2ExYjdjNWI1LTNkOGItNGQ2ZC1hY2YxLTRiNzI5OWZi ZTRjZC5jcmwwHwYDVR0jBBgwFoAU1TkV+d8EQOEfbyAEO9JOYLESA6swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hMWI3YzViNS0zZDhiLTRkNmQtYWNmMS00Yjcy OTlmYmU0Y2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCXlZgGAolvDY53D70uxkNx Bjieh8Z9Nysprb1XHcKj9To44Mb5lPRhlTeUTuMe0C2/2FNTNus0Xdov2kLaXWgs 6UMZnIn1M869tk45Hek+qHAgQHda5OCjs2ZwtzZLrxc8LdtVcamp2a0HlfLWCxTF 9NCWNwt2FX5avOYKu7Y9P2mcg4vHzEZQa13KulB6tbgPrG7SypRaeHPeB4OcDNqr 0q3YASBmsdc+NNpKvbKeTwFzTQ62nREruQFmFv7HdpMrnjh/P7y+JjehiMTnWTot ISBOzLYzze/avVL+iy7BRcz4Xd8DlpW6QPuVMhPYKFWq+UD62ww8WERYSo/DVOIt -----END CERTIFICATE-----Generated at Mon May 5 06:33:17 2025 by rpki-client