$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c/bfc0b168-b834-4192-acf1-30565a4b3e0c.mft File: bfc0b168-b834-4192-acf1-30565a4b3e0c.mft (raw, json) Hash identifier: jsmahl8zMo04X+20F3cjlZbU6+371t+5hTBl9wsTXUc= Subject key identifier: 0A:DB:78:2A:01:E5:A9:73:BE:68:81:53:A6:C1:51:AE:BE:C9:99:D4 Authority key identifier: 0B:5F:68:42:78:8A:DF:A3:B0:1A:AB:9A:E1:3D:C6:B9:1E:0F:D1:A1 Certificate issuer: /CN=bfc0b168-b834-4192-acf1-30565a4b3e0c Certificate serial: 010D0C9F43285849CC63F38212F9EB39283D0800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c/bfc0b168-b834-4192-acf1-30565a4b3e0c.mft Manifest number: 010D0C9F4328584073A822049B70DB112D5CE259 Signing time: Fri 09 May 2025 18:00:03 +0000 Manifest this update: Fri 09 May 2025 18:00:03 +0000 Manifest next update: Sun 11 May 2025 18:00:00 +0000 Files and hashes: 1: bfc0b168-b834-4192-acf1-30565a4b3e0c.crl (hash: SemI66js35ylchlrZCebQv+/mS24ZVudkUkXHYAECPU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c/bfc0b168-b834-4192-acf1-30565a4b3e0c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c/bfc0b168-b834-4192-acf1-30565a4b3e0c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cc:63:f3:82:12:f9:eb:39:28:3d:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfc0b168-b834-4192-acf1-30565a4b3e0c Validity Not Before: May 9 18:00:03 2025 GMT Not After : May 11 18:00:00 2025 GMT Subject: CN=697b1899-429c-489f-8a41-01c12d02f36f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:24:c4:e5:eb:ec:6b:df:ca:73:92:e3:91:a4: bb:17:73:ba:bd:26:5e:48:df:ef:34:97:8b:79:6c: e9:27:6c:4d:48:c1:8a:90:45:65:e9:ad:32:3e:58: ab:da:a6:f9:af:6f:a6:2f:8a:b1:96:34:16:85:b8: 98:19:6c:18:8c:13:55:c8:94:c2:d4:ad:58:9a:54: ad:69:2f:5e:27:ca:17:c2:50:6d:5f:27:e4:07:8d: 5b:77:24:0a:89:0f:09:85:28:5b:90:e4:79:65:31: de:03:15:2f:67:4a:8a:4c:cb:6e:01:4e:1a:eb:11: d1:c2:e5:46:b4:ee:78:05:cb:5e:63:0a:9e:f5:ab: 92:a3:70:f8:80:8a:00:05:a6:94:5a:dd:69:df:be: 2f:60:63:53:bc:14:81:81:e9:8d:a6:03:3c:b5:ba: 55:3f:cd:7e:28:6e:69:fa:6e:6a:c6:fc:85:e4:5b: fa:7a:51:3b:9b:32:1b:e2:3e:90:16:41:ad:97:74: 8d:1f:b7:97:d2:32:87:f0:d4:91:fd:a8:9d:c6:23: 98:ff:1b:a5:d9:e5:f4:ca:24:d9:d4:d3:91:f2:69: 93:85:91:6b:84:91:78:e1:b7:1a:91:74:89:93:db: 22:0d:27:96:4e:94:f4:74:af:82:ea:4f:80:34:ba: 73:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:DB:78:2A:01:E5:A9:73:BE:68:81:53:A6:C1:51:AE:BE:C9:99:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c/bfc0b168-b834-4192-acf1-30565a4b3e0c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c/bfc0b168-b834-4192-acf1-30565a4b3e0c.crl X509v3 Authority Key Identifier: keyid:0B:5F:68:42:78:8A:DF:A3:B0:1A:AB:9A:E1:3D:C6:B9:1E:0F:D1:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:b8:b5:6e:fd:e5:53:9f:6c:4b:c5:63:6f:48:89:52:a5:c7: ce:44:f7:f9:8d:b0:dc:fb:f7:63:61:78:ec:ca:4c:90:ed:58: 8a:c1:d7:2b:25:d3:22:53:b7:91:df:3a:ee:12:ea:3f:77:0d: 07:a5:75:98:3f:96:1e:00:44:97:d3:1b:13:5a:09:e8:0c:e0: 1c:5e:c2:92:2d:26:2d:79:3b:75:2b:fa:47:a2:ad:e7:16:8c: 0a:04:d6:e9:b3:fa:0d:c3:39:68:74:3a:8e:d0:c0:2d:eb:4c: 68:01:1b:3a:2c:43:ae:fb:07:a6:af:b9:1b:ea:94:b3:0e:98: 6b:53:6b:95:90:43:77:dd:8d:ff:cb:dd:f5:79:32:d1:83:b6: ac:b2:8b:17:2e:fe:8b:c1:a3:7b:b6:7a:23:33:bb:80:63:a9: 7a:c2:0c:e0:1d:56:76:69:64:1d:d2:dd:4d:a4:a4:19:2b:ad: 96:a3:0a:49:59:6f:e5:b5:54:f1:b6:78:61:56:99:eb:c4:19: dc:3b:fc:43:b6:59:4e:3c:d8:d9:65:15:8c:44:5c:64:46:79: 39:30:84:8c:da:34:94:d5:b0:23:dd:3b:a7:ae:ca:ea:8f:4b: 54:da:d1:2a:42:87:89:0c:80:f9:ab:36:fc:2a:f8:6e:eb:86: 40:97:30:4c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnMY/OCEvnrOSg9CAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmZjMGIxNjgtYjgzNC00MTkyLWFjZjEtMzA1NjVhNGIz ZTBjMB4XDTI1MDUwOTE4MDAwM1oXDTI1MDUxMTE4MDAwMFowLzEtMCsGA1UEAxMk Njk3YjE4OTktNDI5Yy00ODlmLThhNDEtMDFjMTJkMDJmMzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSTE5evsa9/Kc5LjkaS7F3O6vSZeSN/vNJeL eWzpJ2xNSMGKkEVl6a0yPlir2qb5r2+mL4qxljQWhbiYGWwYjBNVyJTC1K1YmlSt aS9eJ8oXwlBtXyfkB41bdyQKiQ8JhShbkOR5ZTHeAxUvZ0qKTMtuAU4a6xHRwuVG tO54BcteYwqe9auSo3D4gIoABaaUWt1p374vYGNTvBSBgemNpgM8tbpVP81+KG5p +m5qxvyF5Fv6elE7mzIb4j6QFkGtl3SNH7eX0jKH8NSR/aidxiOY/xul2eX0yiTZ 1NOR8mmThZFrhJF44bcakXSJk9siDSeWTpT0dK+C6k+ANLpziwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFArbeCoB5alzvmiBU6bBUa6+yZnUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iZmMw YjE2OC1iODM0LTQxOTItYWNmMS0zMDU2NWE0YjNlMGMvYmZjMGIxNjgtYjgzNC00 MTkyLWFjZjEtMzA1NjVhNGIzZTBjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYmZjMGIxNjgtYjgzNC00MTkyLWFj ZjEtMzA1NjVhNGIzZTBjL2JmYzBiMTY4LWI4MzQtNDE5Mi1hY2YxLTMwNTY1YTRi M2UwYy5jcmwwHwYDVR0jBBgwFoAUC19oQniK36OwGqua4T3GuR4P0aEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iZmMwYjE2OC1iODM0LTQxOTItYWNmMS0zMDU2 NWE0YjNlMGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCguLVu/eVTn2xLxWNvSIlS pcfORPf5jbDc+/djYXjsykyQ7ViKwdcrJdMiU7eR3zruEuo/dw0HpXWYP5YeAESX 0xsTWgnoDOAcXsKSLSYteTt1K/pHoq3nFowKBNbps/oNwzlodDqO0MAt60xoARs6 LEOu+wemr7kb6pSzDphrU2uVkEN33Y3/y931eTLRg7assosXLv6LwaN7tnojM7uA Y6l6wgzgHVZ2aWQd0t1NpKQZK62WowpJWW/ltVTxtnhhVpnrxBncO/xDtllOPNjZ ZRWMRFxkRnk5MISM2jSU1bAj3Tunrsrqj0tU2tEqQoeJDID5qzb8Kvhu64ZAlzBM -----END CERTIFICATE-----Generated at Sat May 10 10:37:28 2025 by rpki-client