$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.mft File: 5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.mft (raw, json) Hash identifier: WgNq0pXLV7nH3yJhEKraKDGBXBjm2T53siy9BFPAM1c= Subject key identifier: D9:33:D0:F2:37:74:BE:3C:28:B5:5E:19:07:EC:3F:37:3F:A3:07:7F Authority key identifier: A0:92:D8:21:7C:49:33:E4:FA:A7:F1:31:06:BB:75:92:C6:C8:0F:69 Certificate issuer: /CN=5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306 Certificate serial: 010D0C9F43285849C2DA1B94DBBBF60E951B7680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.mft Manifest number: 010D0C9F4328584073A848E50032DD6E7F7E977E Signing time: Tue 06 May 2025 08:00:03 +0000 Manifest this update: Tue 06 May 2025 08:00:03 +0000 Manifest next update: Thu 08 May 2025 08:00:00 +0000 Files and hashes: 1: 5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.crl (hash: 9/WZJ9VaiUk6rWEs1MCk6vyPWEtB3Vwbo40If8iQ6FU=) 2: 7dc5f10e-ddce-3970-80f8-6a11e52e6c28.roa (hash: vqR1Lrp0rO+0LAZuGHqbHMCUnOlJ0Lb448rngA2wAwE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:da:1b:94:db:bb:f6:0e:95:1b:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306 Validity Not Before: May 6 08:00:03 2025 GMT Not After : May 8 08:00:00 2025 GMT Subject: CN=32354e18-02ef-4847-ae88-b90c9117cea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b4:3a:0d:91:c4:37:44:0d:68:ad:b7:fb:fb: 98:46:1b:67:a8:e5:c1:7e:ab:34:14:22:a5:9c:86: c5:5e:df:22:7e:8c:81:68:7b:d4:16:35:ae:15:dd: e0:ac:97:d3:07:3a:fa:8f:c7:74:1f:1f:50:8a:8e: 62:bf:c9:20:8e:7c:d3:62:04:50:10:8b:62:13:b6: f8:a5:c3:ae:6d:54:32:08:d8:0c:24:cc:a8:39:ed: d9:ad:d6:c2:32:50:0f:da:79:72:18:61:70:63:cf: 61:71:1c:f8:6f:e3:8e:a5:e7:ed:22:49:89:3b:8a: 48:22:ed:50:2e:18:a8:27:6c:75:ab:76:ae:7b:9e: 66:29:df:d2:a6:69:f3:e7:ca:bf:18:f6:8e:1d:34: a7:e5:1d:1e:c7:19:02:cb:c5:11:1c:49:ea:e8:5f: 86:61:be:8a:4c:cd:88:4a:18:11:7b:fa:1a:e2:1e: 1f:9c:e1:eb:6b:99:5f:8b:6e:7e:31:5a:69:98:77: 5f:98:22:f2:3a:4d:4f:47:5d:eb:c6:43:8f:7f:cd: 61:64:af:a5:9b:db:c0:69:9f:92:e5:80:70:a0:af: b2:9a:87:c6:7a:a4:44:f9:0e:d0:b5:6c:af:36:3b: f9:9a:6e:64:c8:6b:94:a1:1e:77:6a:4f:ba:41:02: b6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:33:D0:F2:37:74:BE:3C:28:B5:5E:19:07:EC:3F:37:3F:A3:07:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.crl X509v3 Authority Key Identifier: keyid:A0:92:D8:21:7C:49:33:E4:FA:A7:F1:31:06:BB:75:92:C6:C8:0F:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:e3:45:d5:a2:da:a9:1e:a9:1d:27:08:22:96:3c:9b:94:46: 93:5a:d3:99:c1:39:33:34:1b:ba:6a:2c:c2:ac:27:f2:38:34: c1:5d:c6:80:23:5d:1c:29:c6:d1:1e:10:60:dd:52:fb:15:98: 5f:f7:e2:bc:48:0a:16:3a:f1:f7:f6:f0:48:2a:83:a4:d1:a0: 0f:c2:ab:bf:c2:ad:53:2b:6c:4e:b9:f0:b7:c5:15:93:7f:37: bd:b0:14:7a:d6:6b:14:f0:d2:35:5f:b2:72:fe:27:ff:28:66: e3:82:b3:27:b4:bf:7e:7d:70:b5:96:f0:08:bf:84:a2:e9:cc: 00:9a:7e:05:17:5e:44:df:37:e9:84:ee:48:36:60:c3:e2:ac: 67:12:f1:b2:8a:0c:09:b6:be:d3:04:9f:a2:bd:da:ec:df:1b: 84:4b:18:4c:e3:d5:16:29:5e:58:45:09:c0:31:fa:38:cb:7f: b8:01:46:59:4a:37:de:c6:46:f0:02:30:88:7b:64:a6:63:15: 4f:bb:eb:7a:31:09:67:6f:e8:af:90:de:6a:84:5f:a9:bc:d0: b5:0a:07:1e:6b:99:61:a2:93:9c:6c:87:d2:b2:db:30:2f:f3: 05:28:d2:b9:94:bc:14:bc:87:d0:06:28:ea:88:08:7d:ab:d5: 34:8d:b0:13 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnC2huU27v2DpUbdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ2YTVkN2EtNTFhMi00YTgzLWI1YjUtZDhjMTU0Yjhk MzA2MB4XDTI1MDUwNjA4MDAwM1oXDTI1MDUwODA4MDAwMFowLzEtMCsGA1UEAxMk MzIzNTRlMTgtMDJlZi00ODQ3LWFlODgtYjkwYzkxMTdjZWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27Q6DZHEN0QNaK23+/uYRhtnqOXBfqs0FCKl nIbFXt8ifoyBaHvUFjWuFd3grJfTBzr6j8d0Hx9Qio5iv8kgjnzTYgRQEItiE7b4 pcOubVQyCNgMJMyoOe3ZrdbCMlAP2nlyGGFwY89hcRz4b+OOpeftIkmJO4pIIu1Q LhioJ2x1q3aue55mKd/Spmnz58q/GPaOHTSn5R0exxkCy8URHEnq6F+GYb6KTM2I ShgRe/oa4h4fnOHra5lfi25+MVppmHdfmCLyOk1PR13rxkOPf81hZK+lm9vAaZ+S 5YBwoK+ymofGeqRE+Q7QtWyvNjv5mm5kyGuUoR53ak+6QQK2nQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNkz0PI3dL48KLVeGQfsPzc/owd/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81ZDZh NWQ3YS01MWEyLTRhODMtYjViNS1kOGMxNTRiOGQzMDYvNWQ2YTVkN2EtNTFhMi00 YTgzLWI1YjUtZDhjMTU0YjhkMzA2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNWQ2YTVkN2EtNTFhMi00YTgzLWI1 YjUtZDhjMTU0YjhkMzA2LzVkNmE1ZDdhLTUxYTItNGE4My1iNWI1LWQ4YzE1NGI4 ZDMwNi5jcmwwHwYDVR0jBBgwFoAUoJLYIXxJM+T6p/ExBrt1ksbID2kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81ZDZhNWQ3YS01MWEyLTRhODMtYjViNS1kOGMx NTRiOGQzMDYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBx40XVotqpHqkdJwgiljyb lEaTWtOZwTkzNBu6aizCrCfyODTBXcaAI10cKcbRHhBg3VL7FZhf9+K8SAoWOvH3 9vBIKoOk0aAPwqu/wq1TK2xOufC3xRWTfze9sBR61msU8NI1X7Jy/if/KGbjgrMn tL9+fXC1lvAIv4Si6cwAmn4FF15E3zfphO5INmDD4qxnEvGyigwJtr7TBJ+ivdrs 3xuESxhM49UWKV5YRQnAMfo4y3+4AUZZSjfexkbwAjCIe2SmYxVPu+t6MQlnb+iv kN5qhF+pvNC1Cgcea5lhopOcbIfSstswL/MFKNK5lLwUvIfQBijqiAh9q9U0jbAT -----END CERTIFICATE-----Generated at Wed May 7 00:54:47 2025 by rpki-client