$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/a1c33c08-b27a-4120-9af0-e2c3eef2713e.mft File: a1c33c08-b27a-4120-9af0-e2c3eef2713e.mft (raw, json) Hash identifier: hKdLsPreyNQqQl26H24hGEQ9mnzpres6lPquKQtCb4U= Subject key identifier: 52:04:B3:88:4D:68:26:51:C4:3D:9C:16:D8:32:85:63:AE:13:C4:28 Authority key identifier: 23:D4:80:FE:7D:88:22:2F:E2:ED:6F:EC:C6:1F:91:F3:9D:E6:02:F3 Certificate issuer: /CN=a1c33c08-b27a-4120-9af0-e2c3eef2713e Certificate serial: 010D0C9F43285849BF3EF8FDBCE9582260EB8700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/a1c33c08-b27a-4120-9af0-e2c3eef2713e.mft Manifest number: 010D0C9F4328584073A8340FD2B65F21CD12F3EA Signing time: Mon 05 May 2025 01:00:03 +0000 Manifest this update: Mon 05 May 2025 01:00:03 +0000 Manifest next update: Thu 08 May 2025 01:00:00 +0000 Files and hashes: 1: a1c33c08-b27a-4120-9af0-e2c3eef2713e.crl (hash: f5YBaNa9zFM7+K4pnAXAVgsGYJZFWghJjQd8M715zxQ=) 2: fad26696-a1c5-32d5-9507-e3a68a28d6f7.roa (hash: yR54mEaNMvD4853y3SE5cjsNa9eCJQ92+7Q9HmXWVbs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/a1c33c08-b27a-4120-9af0-e2c3eef2713e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/a1c33c08-b27a-4120-9af0-e2c3eef2713e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3e:f8:fd:bc:e9:58:22:60:eb:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1c33c08-b27a-4120-9af0-e2c3eef2713e Validity Not Before: May 5 01:00:03 2025 GMT Not After : May 8 01:00:00 2025 GMT Subject: CN=1da42706-020d-4ccb-a810-cc5b967bc16f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6d:eb:06:30:c5:45:a4:c5:3f:26:e7:a5:ee: b7:0b:4f:42:b3:f7:4e:cd:02:ed:63:6d:bf:56:5b: fb:03:3c:41:57:41:d1:e3:b8:e6:09:4f:4d:74:b3: 0a:69:4b:02:23:0a:c8:ab:df:63:95:65:57:68:5f: f3:48:3b:27:3e:ca:97:70:b1:81:02:6d:ab:5b:c1: bd:ef:ca:dd:21:1d:3a:cd:62:ab:24:fd:f6:b5:1c: 71:d9:0a:77:f5:02:aa:17:e8:fd:6b:bf:f2:1c:d3: c5:64:8e:32:34:7b:59:ac:7d:2c:48:3b:58:1e:6a: 10:8b:da:14:14:a4:ff:a4:c6:0d:f5:2c:71:a5:b2: dd:22:1a:27:27:0e:15:8e:1e:cd:0b:82:30:fd:6a: 92:ee:34:c2:bd:92:2e:8e:d2:05:32:3a:9d:39:28: e0:02:62:7a:14:30:26:1b:ce:c6:a8:30:a6:85:a9: ce:86:99:15:4f:24:07:19:72:cc:92:24:0b:87:3b: 4b:fc:9a:8d:ca:fc:2a:73:ea:9a:43:fe:e1:12:2a: eb:70:bf:76:03:4a:f1:54:f0:20:78:4f:7e:be:de: ee:b0:c2:c1:76:40:1d:02:f0:50:20:58:44:1f:b5: be:4b:09:b0:06:2f:25:8f:ca:f6:0a:43:24:08:43: 80:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:04:B3:88:4D:68:26:51:C4:3D:9C:16:D8:32:85:63:AE:13:C4:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/a1c33c08-b27a-4120-9af0-e2c3eef2713e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/a1c33c08-b27a-4120-9af0-e2c3eef2713e.crl X509v3 Authority Key Identifier: keyid:23:D4:80:FE:7D:88:22:2F:E2:ED:6F:EC:C6:1F:91:F3:9D:E6:02:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:e1:89:0b:41:3d:35:f8:e0:4f:5d:35:bc:0e:04:b6:0c:f3: 0f:d2:4d:a3:81:1b:7f:07:ef:38:86:55:37:33:45:d0:27:f9: d3:de:4d:9a:2b:12:10:15:72:ba:12:ec:b8:e1:39:b7:34:1e: 46:75:fe:65:cf:59:4e:18:78:67:67:a6:5c:71:ef:90:6d:26: bd:ff:05:5f:4c:6e:d4:32:fe:53:b9:45:49:71:8c:97:79:d5: ca:86:37:75:fd:9a:18:4d:21:74:45:ee:bb:15:8e:b5:88:d9: 96:60:7a:7b:55:00:d3:ba:2e:80:d1:96:d7:71:c1:5d:97:6d: b6:ec:55:cc:6d:6d:c9:85:ca:be:8b:b3:ae:71:41:8c:8b:b5: 26:2b:f4:21:c8:95:ce:78:7e:6d:2e:84:c8:7f:8b:2c:74:ff: 28:cb:33:94:cc:32:53:67:bc:6e:cf:9b:33:77:0e:29:da:66: ce:8f:98:51:dd:c4:97:46:e7:31:6a:e6:ad:a0:1c:ba:c9:ec: 12:94:6a:d4:d6:b7:8a:58:88:bb:ad:39:64:ee:6e:4a:54:9c: ef:88:c1:11:74:8c:28:ff:f9:80:d7:b9:4e:35:cf:24:89:d1: e8:02:c9:a1:78:ae:8a:a5:e3:2f:10:28:04:fb:00:00:cc:1f: 31:28:b2:21 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEm/Pvj9vOlYImDrhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFjMzNjMDgtYjI3YS00MTIwLTlhZjAtZTJjM2VlZjI3 MTNlMB4XDTI1MDUwNTAxMDAwM1oXDTI1MDUwODAxMDAwMFowLzEtMCsGA1UEAxMk MWRhNDI3MDYtMDIwZC00Y2NiLWE4MTAtY2M1Yjk2N2JjMTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvW3rBjDFRaTFPybnpe63C09Cs/dOzQLtY22/ Vlv7AzxBV0HR47jmCU9NdLMKaUsCIwrIq99jlWVXaF/zSDsnPsqXcLGBAm2rW8G9 78rdIR06zWKrJP32tRxx2Qp39QKqF+j9a7/yHNPFZI4yNHtZrH0sSDtYHmoQi9oU FKT/pMYN9SxxpbLdIhonJw4Vjh7NC4Iw/WqS7jTCvZIujtIFMjqdOSjgAmJ6FDAm G87GqDCmhanOhpkVTyQHGXLMkiQLhztL/JqNyvwqc+qaQ/7hEirrcL92A0rxVPAg eE9+vt7usMLBdkAdAvBQIFhEH7W+SwmwBi8lj8r2CkMkCEOANwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFIEs4hNaCZRxD2cFtgyhWOuE8QoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMWMz M2MwOC1iMjdhLTQxMjAtOWFmMC1lMmMzZWVmMjcxM2UvYTFjMzNjMDgtYjI3YS00 MTIwLTlhZjAtZTJjM2VlZjI3MTNlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTFjMzNjMDgtYjI3YS00MTIwLTlh ZjAtZTJjM2VlZjI3MTNlL2ExYzMzYzA4LWIyN2EtNDEyMC05YWYwLWUyYzNlZWYy NzEzZS5jcmwwHwYDVR0jBBgwFoAUI9SA/n2IIi/i7W/sxh+R853mAvMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMWMzM2MwOC1iMjdhLTQxMjAtOWFmMC1lMmMz ZWVmMjcxM2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAB4YkLQT01+OBPXTW8DgS2 DPMP0k2jgRt/B+84hlU3M0XQJ/nT3k2aKxIQFXK6Euy44Tm3NB5Gdf5lz1lOGHhn Z6Zcce+QbSa9/wVfTG7UMv5TuUVJcYyXedXKhjd1/ZoYTSF0Re67FY61iNmWYHp7 VQDTui6A0ZbXccFdl2227FXMbW3Jhcq+i7OucUGMi7UmK/QhyJXOeH5tLoTIf4ss dP8oyzOUzDJTZ7xuz5szdw4p2mbOj5hR3cSXRucxauatoBy6yewSlGrU1reKWIi7 rTlk7m5KVJzviMERdIwo//mA17lONc8kidHoAsmheK6KpeMvECgE+wAAzB8xKLIh -----END CERTIFICATE-----Generated at Mon May 5 08:43:14 2025 by rpki-client