$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198/1347cdae-54c7-4fcb-9019-0bee16977198.mft File: 1347cdae-54c7-4fcb-9019-0bee16977198.mft (raw, json) Hash identifier: P95gatnS/uA4V3EaEpKwVsURyZeR6/N/uAQQv6TvIa8= Subject key identifier: 13:81:09:15:84:06:00:AC:B4:E1:73:74:A6:BD:F3:FF:C9:C6:B5:BA Authority key identifier: 29:C9:3E:41:B6:86:FB:0B:EA:53:17:40:CB:91:D0:B1:34:B2:36:F0 Certificate issuer: /CN=1347cdae-54c7-4fcb-9019-0bee16977198 Certificate serial: 010D0C9F43285849D0ED5773C6C9678DDC9A0240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198/1347cdae-54c7-4fcb-9019-0bee16977198.mft Manifest number: 010D0C9F4328584073A84A9ED84A9C5F2C3230ED Signing time: Sun 11 May 2025 09:00:07 +0000 Manifest this update: Sun 11 May 2025 09:00:07 +0000 Manifest next update: Wed 14 May 2025 09:00:00 +0000 Files and hashes: 1: 1347cdae-54c7-4fcb-9019-0bee16977198.crl (hash: 2wwjaNHY1+pfZdn7I+a92j0wgABM4FhIRViSPTfqQl4=) 2: cad5ca65-956d-31bd-87ac-8299da4f56ec.roa (hash: l+wJS4zDbJwG24UgZZg0npREzVP7r/KlBsBqed4XVF4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198/1347cdae-54c7-4fcb-9019-0bee16977198.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198/1347cdae-54c7-4fcb-9019-0bee16977198.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d0:ed:57:73:c6:c9:67:8d:dc:9a:02:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1347cdae-54c7-4fcb-9019-0bee16977198 Validity Not Before: May 11 09:00:07 2025 GMT Not After : May 14 09:00:00 2025 GMT Subject: CN=15ef7a4d-4f03-44d5-84dc-3fd979b71254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b8:17:4f:8d:94:fe:1f:91:ef:65:7a:05:82: f1:c4:89:67:85:d4:1d:37:1f:37:ee:be:08:f8:31: a8:99:0d:9c:f9:7b:4c:f3:5f:c7:a3:65:8d:17:7f: 48:4a:a0:8b:f9:8f:ac:a5:aa:ea:50:48:17:48:14: 78:e7:98:8e:4e:24:8a:b8:03:6c:9a:58:3f:d0:70: a0:88:d2:1a:5f:5a:0e:d1:30:c9:09:c9:1f:a5:db: a8:6f:20:0c:ff:36:0f:9d:ad:7a:3f:0f:39:78:35: 84:0f:90:c7:0d:18:8f:34:84:96:b0:97:f7:d8:7e: f4:1f:34:34:85:d8:b5:2f:d1:9c:44:b4:a1:64:b5: 2a:73:b1:c9:b6:84:ce:2f:f9:63:e6:c3:ad:9d:bb: 8b:92:5e:ee:5a:7b:0d:d2:86:8b:0c:b9:38:fc:76: 27:e6:58:4f:03:48:a0:3d:9b:72:bb:ab:47:6d:f7: 6b:4d:ff:4a:e1:1d:51:4c:63:a8:ed:5f:bd:60:85: 2b:0c:f6:5f:4e:74:5d:71:1c:39:6a:6a:5b:25:72: a4:48:94:bc:9c:7c:b2:af:63:57:05:67:7c:ea:3b: 6f:c0:14:16:46:02:b3:a2:b8:33:5a:ec:c6:31:b8: 7a:73:aa:2c:ee:f5:ed:55:cf:7b:4b:c5:e0:79:5e: 04:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:81:09:15:84:06:00:AC:B4:E1:73:74:A6:BD:F3:FF:C9:C6:B5:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198/1347cdae-54c7-4fcb-9019-0bee16977198.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198/1347cdae-54c7-4fcb-9019-0bee16977198.crl X509v3 Authority Key Identifier: keyid:29:C9:3E:41:B6:86:FB:0B:EA:53:17:40:CB:91:D0:B1:34:B2:36:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:fc:68:c1:cd:52:80:10:47:7e:b3:e1:0c:6c:6d:19:82:8d: 90:c6:d1:db:8e:a4:61:f1:6b:15:9e:22:3d:9d:ae:74:20:ba: aa:fb:75:8e:ef:b3:c8:91:22:b6:d7:59:ee:55:c4:fa:00:54: 63:4b:b5:e2:08:00:a0:f8:03:4c:11:1e:e0:71:31:29:6e:3a: f4:8d:d3:3f:72:5d:35:b1:f2:4c:d2:3c:5e:81:f5:f0:09:b1: c5:8a:21:80:fc:38:1a:d5:b7:3c:d9:41:01:49:71:d1:b0:ce: 75:79:c4:e7:34:bc:99:6c:d8:bc:8f:bb:70:e7:19:b0:9b:cc: 88:03:63:13:ce:79:c0:1f:1d:09:74:1e:a3:cb:fe:48:0e:0e: 94:dc:f0:67:9e:93:9c:4b:a1:d9:0a:81:54:b7:53:cb:76:91: ca:f4:ca:14:11:ea:60:b7:73:71:36:dd:1d:2a:1d:fd:28:5c: 93:52:c3:ed:f3:30:63:8d:17:82:92:68:cc:b1:a1:a6:9e:2d: 55:5a:cc:9f:22:73:81:d9:ca:41:76:c3:4b:b6:10:21:94:c7: 5b:94:a9:07:fb:a8:b5:c3:01:6e:8a:c1:6e:b8:ac:57:fb:c7: fb:a5:b5:dc:93:16:1e:ef:1b:10:00:74:f8:5f:c5:9d:27:ee: 34:75:3f:28 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnQ7VdzxslnjdyaAkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTM0N2NkYWUtNTRjNy00ZmNiLTkwMTktMGJlZTE2OTc3 MTk4MB4XDTI1MDUxMTA5MDAwN1oXDTI1MDUxNDA5MDAwMFowLzEtMCsGA1UEAxMk MTVlZjdhNGQtNGYwMy00NGQ1LTg0ZGMtM2ZkOTc5YjcxMjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbgXT42U/h+R72V6BYLxxIlnhdQdNx837r4I +DGomQ2c+XtM81/Ho2WNF39ISqCL+Y+sparqUEgXSBR455iOTiSKuANsmlg/0HCg iNIaX1oO0TDJCckfpduobyAM/zYPna16Pw85eDWED5DHDRiPNISWsJf32H70HzQ0 hdi1L9GcRLShZLUqc7HJtoTOL/lj5sOtnbuLkl7uWnsN0oaLDLk4/HYn5lhPA0ig PZtyu6tHbfdrTf9K4R1RTGOo7V+9YIUrDPZfTnRdcRw5ampbJXKkSJS8nHyyr2NX BWd86jtvwBQWRgKzorgzWuzGMbh6c6os7vXtVc97S8XgeV4EKwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBOBCRWEBgCstOFzdKa98//JxrW6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xMzQ3 Y2RhZS01NGM3LTRmY2ItOTAxOS0wYmVlMTY5NzcxOTgvMTM0N2NkYWUtNTRjNy00 ZmNiLTkwMTktMGJlZTE2OTc3MTk4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTM0N2NkYWUtNTRjNy00ZmNiLTkw MTktMGJlZTE2OTc3MTk4LzEzNDdjZGFlLTU0YzctNGZjYi05MDE5LTBiZWUxNjk3 NzE5OC5jcmwwHwYDVR0jBBgwFoAUKck+QbaG+wvqUxdAy5HQsTSyNvAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xMzQ3Y2RhZS01NGM3LTRmY2ItOTAxOS0wYmVl MTY5NzcxOTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAa/GjBzVKAEEd+s+EMbG0Z go2QxtHbjqRh8WsVniI9na50ILqq+3WO77PIkSK211nuVcT6AFRjS7XiCACg+ANM ER7gcTEpbjr0jdM/cl01sfJM0jxegfXwCbHFiiGA/Dga1bc82UEBSXHRsM51ecTn NLyZbNi8j7tw5xmwm8yIA2MTznnAHx0JdB6jy/5IDg6U3PBnnpOcS6HZCoFUt1PL dpHK9MoUEepgt3NxNt0dKh39KFyTUsPt8zBjjReCkmjMsaGmni1VWsyfInOB2cpB dsNLthAhlMdblKkH+6i1wwFuisFuuKxX+8f7pbXckxYe7xsQAHT4X8WdJ+40dT8o -----END CERTIFICATE-----Generated at Sun May 11 14:44:06 2025 by rpki-client