$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.mft File: a9b32a2c-3e49-43f1-a969-2604ded458fe.mft (raw, json) Hash identifier: dmZAEo8b1evi56HsHXSdBEkvu/tL6aMXeq4XBkfSf1w= Subject key identifier: 77:66:2F:71:27:8D:09:12:D0:31:1E:15:4E:B4:C1:CD:07:CD:E3:DE Authority key identifier: 4F:F0:52:06:21:55:28:99:71:59:FF:7F:BA:C9:4A:C3:65:15:7C:22 Certificate issuer: /CN=a9b32a2c-3e49-43f1-a969-2604ded458fe Certificate serial: 010D0C9F43285849C0DFE9F1BA33B971900B4580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.mft Manifest number: 010D0C9F4328584436B54D2ACE298200FB697E88 Signing time: Mon 05 May 2025 15:00:07 +0000 Manifest this update: Mon 05 May 2025 15:00:07 +0000 Manifest next update: Thu 08 May 2025 15:00:00 +0000 Files and hashes: 1: a9b32a2c-3e49-43f1-a969-2604ded458fe.crl (hash: LeEcUXoooFny3XQY9qcfKBuT0oIqL/3mTGDwnCf1j48=) 2: f2fcc349-624c-38b7-88a5-9fee47bc052d.roa (hash: AOP808W24KRC/Jl2BPIwAN5q+uVEk0l6ttJug9a5gys=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:df:e9:f1:ba:33:b9:71:90:0b:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9b32a2c-3e49-43f1-a969-2604ded458fe Validity Not Before: May 5 15:00:07 2025 GMT Not After : May 8 15:00:00 2025 GMT Subject: CN=6547cb1f-c1a7-487f-b14a-d1b544092671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e5:f1:11:86:97:32:71:9b:8e:c8:f1:e6:a8: f4:f7:11:f7:3b:11:e6:f4:2e:6f:12:9b:65:36:23: b1:e7:59:93:29:f9:3f:38:9b:f1:79:6d:8a:4d:65: 88:e2:3c:bd:65:72:38:75:a9:81:34:1a:a3:00:a8: a7:e4:ad:cd:50:82:0f:e5:3b:80:97:81:45:b8:3e: 93:39:e5:d6:69:52:c5:fb:a3:b5:64:b5:7f:83:03: 74:bb:d2:32:75:37:bf:2f:1d:14:d1:a9:16:68:cd: f9:87:b6:9f:f0:75:b2:c9:c4:3a:91:fe:36:d9:c0: 71:17:b2:5c:0e:04:00:55:c3:6e:81:0f:84:50:ca: 91:c6:fc:cb:bc:7b:9a:96:d8:4d:59:bd:fb:e7:7a: 57:55:39:80:84:20:e0:b7:85:a3:fd:3a:20:cd:86: 05:5b:94:20:06:72:a0:cc:a2:66:cf:3a:58:7e:9b: 13:5a:e6:3d:b0:c5:32:f8:5c:a7:3c:a1:ff:70:cd: 9c:f1:c5:95:83:69:69:bc:4e:98:fa:57:2c:ed:99: 4a:30:2c:34:61:c3:61:36:61:8c:c9:e1:98:72:3e: 9d:aa:af:ce:dd:27:21:96:ef:10:db:85:a6:62:1d: 19:50:1b:90:48:15:bf:3b:0c:6b:cf:bc:aa:5e:63: b3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:66:2F:71:27:8D:09:12:D0:31:1E:15:4E:B4:C1:CD:07:CD:E3:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.crl X509v3 Authority Key Identifier: keyid:4F:F0:52:06:21:55:28:99:71:59:FF:7F:BA:C9:4A:C3:65:15:7C:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:31:1d:7b:20:8c:90:42:f4:8f:b3:51:8a:26:ee:03:b7:6d: 89:b2:85:6e:be:4a:88:b0:a5:d0:7b:71:78:f1:8b:4e:50:8f: ad:77:0e:33:48:12:cf:37:fa:75:8d:f0:4b:2f:f4:c1:94:10: 10:64:ce:fb:e4:21:4b:3e:71:43:42:17:85:6b:ca:14:ac:92: 53:7d:04:fa:86:b7:c1:7a:e8:4a:45:df:1d:1d:be:fb:b6:f2: 6e:13:a7:d7:69:d5:4f:61:21:71:28:91:45:c7:5a:82:8e:54: 7b:73:a4:f2:a3:ff:65:67:31:ec:21:a2:53:0c:40:9c:a7:1a: c4:ee:4a:0c:39:87:40:53:2e:16:6c:d8:ad:ee:2d:7f:38:b7: 32:3c:c8:2f:e9:2a:b0:2d:49:93:fb:a9:5b:2f:98:53:e6:0b: d1:fb:1d:d5:f7:e0:10:ac:6d:f2:a5:5e:ed:12:16:98:13:47: 8e:ef:13:46:7b:5f:18:7b:a2:93:19:9f:39:33:3e:01:ed:cc: 41:5c:c0:c6:86:d4:8a:82:75:64:97:f9:06:c3:96:02:e2:fa: 0a:90:86:b8:e3:2c:cb:8b:a7:64:10:a1:32:f4:97:14:c6:e7: 48:22:57:4e:69:54:11:a0:8c:60:16:1c:20:32:9c:85:0d:d2: fa:89:79:2d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnA3+nxujO5cZALRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTliMzJhMmMtM2U0OS00M2YxLWE5NjktMjYwNGRlZDQ1 OGZlMB4XDTI1MDUwNTE1MDAwN1oXDTI1MDUwODE1MDAwMFowLzEtMCsGA1UEAxMk NjU0N2NiMWYtYzFhNy00ODdmLWIxNGEtZDFiNTQ0MDkyNjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreXxEYaXMnGbjsjx5qj09xH3OxHm9C5vEptl NiOx51mTKfk/OJvxeW2KTWWI4jy9ZXI4damBNBqjAKin5K3NUIIP5TuAl4FFuD6T OeXWaVLF+6O1ZLV/gwN0u9IydTe/Lx0U0akWaM35h7af8HWyycQ6kf422cBxF7Jc DgQAVcNugQ+EUMqRxvzLvHualthNWb3753pXVTmAhCDgt4Wj/TogzYYFW5QgBnKg zKJmzzpYfpsTWuY9sMUy+FynPKH/cM2c8cWVg2lpvE6Y+lcs7ZlKMCw0YcNhNmGM yeGYcj6dqq/O3Schlu8Q24WmYh0ZUBuQSBW/Owxrz7yqXmOzyQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHdmL3EnjQkS0DEeFU60wc0HzePeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hOWIz MmEyYy0zZTQ5LTQzZjEtYTk2OS0yNjA0ZGVkNDU4ZmUvYTliMzJhMmMtM2U0OS00 M2YxLWE5NjktMjYwNGRlZDQ1OGZlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTliMzJhMmMtM2U0OS00M2YxLWE5 NjktMjYwNGRlZDQ1OGZlL2E5YjMyYTJjLTNlNDktNDNmMS1hOTY5LTI2MDRkZWQ0 NThmZS5jcmwwHwYDVR0jBBgwFoAUT/BSBiFVKJlxWf9/uslKw2UVfCIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hOWIzMmEyYy0zZTQ5LTQzZjEtYTk2OS0yNjA0 ZGVkNDU4ZmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAOMR17IIyQQvSPs1GKJu4D t22JsoVuvkqIsKXQe3F48YtOUI+tdw4zSBLPN/p1jfBLL/TBlBAQZM775CFLPnFD QheFa8oUrJJTfQT6hrfBeuhKRd8dHb77tvJuE6fXadVPYSFxKJFFx1qCjlR7c6Ty o/9lZzHsIaJTDECcpxrE7koMOYdAUy4WbNit7i1/OLcyPMgv6SqwLUmT+6lbL5hT 5gvR+x3V9+AQrG3ypV7tEhaYE0eO7xNGe18Ye6KTGZ85Mz4B7cxBXMDGhtSKgnVk l/kGw5YC4voKkIa44yzLi6dkEKEy9JcUxudIIldOaVQRoIxgFhwgMpyFDdL6iXkt -----END CERTIFICATE-----Generated at Tue May 6 00:06:54 2025 by rpki-client