$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.mft File: 7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.mft (raw, json) Hash identifier: tv5VvQdO8FJtuhuf2lNnXQioZDNwJOQWArgw394xtV8= Subject key identifier: AC:07:96:C0:26:42:FC:1D:C8:13:7D:71:3C:A3:F7:70:B7:B8:87:CD Authority key identifier: 77:DC:D2:23:7A:87:58:BC:36:EC:B0:C2:E2:C5:FE:82:8B:CE:9B:FA Certificate issuer: /CN=7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7 Certificate serial: 010D0C9F43285849BE50C71EF847F3777A388940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.mft Manifest number: 010D0C9F4328584073A81E5213D3C90684E5CEA8 Signing time: Sun 04 May 2025 17:00:07 +0000 Manifest this update: Sun 04 May 2025 17:00:07 +0000 Manifest next update: Wed 07 May 2025 17:00:00 +0000 Files and hashes: 1: 3e06c13a-87c4-36d1-89be-3cf5da5c5024.roa (hash: 2kdv1C8KF0LrEiPnnHVzIAZxZ+E2AelrXZIlkh9w9Ao=) 2: 7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.crl (hash: Ml6iFS6h2do4dTZzto5aYsLyXR4pjNkn2ml7uzl6ne0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:be:50:c7:1e:f8:47:f3:77:7a:38:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7 Validity Not Before: May 4 17:00:07 2025 GMT Not After : May 7 17:00:00 2025 GMT Subject: CN=0aadc0ca-170d-4cf6-b5af-0377d931c391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d5:bc:53:d7:ea:cb:89:64:92:63:7f:d2:c5: a6:3a:5d:1c:4e:09:3c:cd:17:3c:2c:d7:a2:78:f6: 9c:6e:15:7b:7a:79:d5:0f:2f:a3:ab:a9:4f:a5:0f: 27:49:74:11:04:0e:3d:f4:a4:85:1e:1a:d0:62:db: 86:c2:69:ad:92:60:20:21:2e:c9:e1:4c:71:1d:54: 61:f4:b9:8a:be:cc:5e:5d:a9:fd:67:a1:8a:87:f3: 54:c1:07:6b:fc:fd:f6:f8:3d:ac:d4:55:b5:bb:86: e8:c2:e4:0c:e5:29:26:9e:d6:2e:e3:80:9b:fc:d0: 4a:19:75:19:52:62:10:94:79:aa:3f:c8:6e:dd:cf: 84:bd:9c:02:b4:15:61:c7:e5:83:a8:9a:c7:32:2e: a3:ea:78:46:24:7c:ad:dd:6a:cd:a2:04:e5:ec:6f: b4:b4:15:56:b0:32:78:9b:28:01:9e:9e:88:de:6f: ac:66:61:82:54:f7:6e:37:f4:24:ff:33:70:b0:0f: 11:ea:68:ff:d7:1f:09:80:ef:a5:76:26:70:31:6c: f4:56:3a:5b:6b:dd:66:2c:d6:6f:28:6a:62:db:c8: 52:05:5b:07:7a:cc:94:85:1c:00:66:8f:63:05:35: c5:90:02:97:99:af:28:06:3f:a9:f5:8b:03:b8:0f: 4c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:07:96:C0:26:42:FC:1D:C8:13:7D:71:3C:A3:F7:70:B7:B8:87:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.crl X509v3 Authority Key Identifier: keyid:77:DC:D2:23:7A:87:58:BC:36:EC:B0:C2:E2:C5:FE:82:8B:CE:9B:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:4e:08:32:e4:4a:f7:25:14:27:43:98:1a:9c:d3:18:3a:2e: b2:51:c7:d3:77:c4:d1:70:40:54:d1:28:d5:24:7b:20:11:8e: 78:7c:b7:79:0d:8b:e0:ef:7c:d8:8f:19:9d:90:ce:5b:89:ae: 16:bf:5c:b2:b4:86:b0:48:cd:20:8f:43:bb:80:f0:42:62:17: 59:64:2d:02:b9:08:20:d8:24:d4:32:34:79:2f:af:1b:cf:de: bb:ca:f2:55:c1:fe:14:bd:3d:05:20:43:bd:f2:75:b5:43:e5: ea:2b:22:17:c0:0a:27:6d:a8:04:ae:12:ed:3b:c9:29:f5:7f: 5a:1c:37:65:a9:bc:f3:cd:13:0e:18:e4:af:20:5f:c9:39:fd: fd:56:e1:3f:79:90:69:e9:16:6a:66:9b:55:b2:73:b8:17:0a: aa:39:7e:6f:35:e0:d2:c2:56:83:e3:ed:bb:ed:8f:48:70:25: f6:fc:6f:45:58:d7:b5:2d:a1:eb:1d:9f:af:ea:87:f2:56:7b: 7f:a3:17:4c:01:fe:e4:89:84:03:bc:1f:85:cf:3c:d5:41:1f: 0e:7c:ba:ff:da:ae:e5:00:1e:c8:39:f7:fd:12:5c:46:03:77: 51:ef:bc:76:dc:ad:3b:03:79:ba:53:f9:e5:2c:7c:99:d5:bb: 96:8c:a9:72 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEm+UMce+Efzd3o4iUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JjNmFiOWEtNTEwMy00Y2Y4LWI0YTItYzMwNDUyOTJj NWQ3MB4XDTI1MDUwNDE3MDAwN1oXDTI1MDUwNzE3MDAwMFowLzEtMCsGA1UEAxMk MGFhZGMwY2EtMTcwZC00Y2Y2LWI1YWYtMDM3N2Q5MzFjMzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNW8U9fqy4lkkmN/0sWmOl0cTgk8zRc8LNei ePacbhV7ennVDy+jq6lPpQ8nSXQRBA499KSFHhrQYtuGwmmtkmAgIS7J4UxxHVRh 9LmKvsxeXan9Z6GKh/NUwQdr/P32+D2s1FW1u4bowuQM5SkmntYu44Cb/NBKGXUZ UmIQlHmqP8hu3c+EvZwCtBVhx+WDqJrHMi6j6nhGJHyt3WrNogTl7G+0tBVWsDJ4 mygBnp6I3m+sZmGCVPduN/Qk/zNwsA8R6mj/1x8JgO+ldiZwMWz0Vjpba91mLNZv KGpi28hSBVsHesyUhRwAZo9jBTXFkAKXma8oBj+p9YsDuA9MQwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKwHlsAmQvwdyBN9cTyj93C3uIfNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83YmM2 YWI5YS01MTAzLTRjZjgtYjRhMi1jMzA0NTI5MmM1ZDcvN2JjNmFiOWEtNTEwMy00 Y2Y4LWI0YTItYzMwNDUyOTJjNWQ3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2JjNmFiOWEtNTEwMy00Y2Y4LWI0 YTItYzMwNDUyOTJjNWQ3LzdiYzZhYjlhLTUxMDMtNGNmOC1iNGEyLWMzMDQ1Mjky YzVkNy5jcmwwHwYDVR0jBBgwFoAUd9zSI3qHWLw27LDC4sX+govOm/owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83YmM2YWI5YS01MTAzLTRjZjgtYjRhMi1jMzA0 NTI5MmM1ZDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAeTggy5Er3JRQnQ5ganNMY Oi6yUcfTd8TRcEBU0SjVJHsgEY54fLd5DYvg73zYjxmdkM5bia4Wv1yytIawSM0g j0O7gPBCYhdZZC0CuQgg2CTUMjR5L68bz967yvJVwf4UvT0FIEO98nW1Q+XqKyIX wAonbagErhLtO8kp9X9aHDdlqbzzzRMOGOSvIF/JOf39VuE/eZBp6RZqZptVsnO4 FwqqOX5vNeDSwlaD4+277Y9IcCX2/G9FWNe1LaHrHZ+v6ofyVnt/oxdMAf7kiYQD vB+FzzzVQR8OfLr/2q7lAB7IOff9ElxGA3dR77x23K07A3m6U/nlLHyZ1buWjKly -----END CERTIFICATE-----Generated at Sun May 4 23:58:46 2025 by rpki-client