$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/1cf30977-73f6-4522-b061-66f0061f58dd.mft File: 1cf30977-73f6-4522-b061-66f0061f58dd.mft (raw, json) Hash identifier: UJOrenVfpO6UDi1IeVCI2oTISlSWVWaxTakkUwx4rc4= Subject key identifier: 30:20:F6:30:97:97:EE:68:E1:8F:2F:B4:5D:93:EF:BD:D0:E8:7A:6F Authority key identifier: 8C:7B:72:58:A8:E7:5D:32:06:BA:47:53:70:B1:0C:36:80:A3:7F:A5 Certificate issuer: /CN=1cf30977-73f6-4522-b061-66f0061f58dd Certificate serial: 010D0C9F43285849CF10DA131347E8B77A123D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/1cf30977-73f6-4522-b061-66f0061f58dd.mft Manifest number: 010D0C9F432858435D3B6876837249857343825E Signing time: Sat 10 May 2025 17:00:03 +0000 Manifest this update: Sat 10 May 2025 17:00:03 +0000 Manifest next update: Mon 12 May 2025 17:00:00 +0000 Files and hashes: 1: 1cf30977-73f6-4522-b061-66f0061f58dd.crl (hash: wh2KJQb9tu13K9Yp4B3eazG8vn+tAqowhFYqFQda6TA=) 2: c8823d7b-5ece-3489-b72b-ced743ec137b.roa (hash: flbdUJb3DbaJSl9JWp+R6nDx8OzIfJ3BHijzLu6HRZU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/1cf30977-73f6-4522-b061-66f0061f58dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/1cf30977-73f6-4522-b061-66f0061f58dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cf:10:da:13:13:47:e8:b7:7a:12:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cf30977-73f6-4522-b061-66f0061f58dd Validity Not Before: May 10 17:00:03 2025 GMT Not After : May 12 17:00:00 2025 GMT Subject: CN=2c85f102-c388-4a1e-b3c4-ff42305f1737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a8:f1:df:04:48:ce:ae:1a:c6:23:b1:1b:21: e1:94:04:5e:ed:a1:19:d5:73:03:79:b2:fd:4d:b9: b9:5e:37:b3:35:9e:58:f8:89:96:55:83:46:18:9c: f3:4a:36:3f:85:16:14:08:45:7a:21:c2:6f:0a:ab: d9:41:88:11:93:0c:67:10:25:fb:e6:4a:7f:d1:b4: 27:88:e4:17:1d:68:6e:de:93:2d:01:0c:af:a5:06: cf:3f:02:d1:3a:11:79:8a:db:19:70:bf:e0:5f:89: 36:25:5f:d8:e3:11:92:7d:32:e1:db:c8:68:1f:c6: ae:5e:8a:8a:2c:0c:b5:d2:5a:df:8e:9f:98:60:70: 49:df:9f:f7:2d:32:42:b9:c8:00:1f:8b:90:51:22: e3:8c:56:11:73:62:b7:eb:5d:4f:43:99:d6:37:1d: 6f:63:cf:78:a6:3d:6f:f0:6b:ac:cc:38:c1:ce:bb: 15:c6:6b:24:6e:7b:d0:e0:73:e2:5b:3b:ba:45:5b: 1b:a1:ba:f7:19:0b:0d:f5:0c:1f:7d:4c:88:73:17: 04:c1:24:e7:e2:f3:fe:1a:6c:b7:48:55:68:d3:a4: 1a:de:10:01:1f:b7:85:49:dc:78:f8:b3:89:79:36: c9:a1:0f:9c:38:32:5e:2c:c9:2c:dc:68:e9:1c:ad: b3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:20:F6:30:97:97:EE:68:E1:8F:2F:B4:5D:93:EF:BD:D0:E8:7A:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/1cf30977-73f6-4522-b061-66f0061f58dd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/1cf30977-73f6-4522-b061-66f0061f58dd.crl X509v3 Authority Key Identifier: keyid:8C:7B:72:58:A8:E7:5D:32:06:BA:47:53:70:B1:0C:36:80:A3:7F:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:8a:b8:a6:8e:8e:ce:33:c7:33:82:12:80:e5:02:d1:5f:59: ed:3f:67:05:a3:d8:64:3d:bb:bd:8b:2a:34:d8:3a:ba:09:76: b3:ed:40:33:6c:78:b1:fc:0d:f5:bd:53:4c:6d:38:6b:f3:32: 92:1a:d3:0c:fe:4a:42:70:c9:9a:5f:e2:01:c0:e5:e5:7c:8a: a7:cc:0e:76:55:32:12:c7:c1:6e:88:f4:e2:da:db:ce:aa:b0: ec:e3:52:b2:7f:2c:80:7f:5f:f4:54:b9:fa:31:6a:a4:4f:10: c5:13:53:fc:e6:ec:ad:26:f4:28:ad:46:09:06:0a:84:52:4f: dc:c7:0f:f9:0d:57:3e:7f:03:2f:00:2f:b2:6a:f7:f9:c1:3c: 63:6c:7d:53:b0:00:2d:2b:d4:a5:6d:ad:ba:2b:8a:44:00:2a: 94:96:f3:15:c6:7d:b5:3a:6d:fd:7d:9d:2b:30:66:04:ba:50: 9b:2f:fa:ca:16:9e:c3:6f:67:13:94:6a:44:e0:48:6c:1c:01: 82:1b:4d:62:af:76:03:b8:a8:65:02:e2:73:8a:20:9d:e4:8c: 4d:a9:f7:7c:d2:b1:0c:5e:7b:f1:9a:48:2f:d0:32:b2:09:f8: e7:ce:ff:92:01:e3:a8:33:10:13:96:c6:c0:d2:ab:d0:20:c6: d1:c2:9e:70 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnPENoTE0fot3oSPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmMzA5NzctNzNmNi00NTIyLWIwNjEtNjZmMDA2MWY1 OGRkMB4XDTI1MDUxMDE3MDAwM1oXDTI1MDUxMjE3MDAwMFowLzEtMCsGA1UEAxMk MmM4NWYxMDItYzM4OC00YTFlLWIzYzQtZmY0MjMwNWYxNzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArajx3wRIzq4axiOxGyHhlARe7aEZ1XMDebL9 Tbm5XjezNZ5Y+ImWVYNGGJzzSjY/hRYUCEV6IcJvCqvZQYgRkwxnECX75kp/0bQn iOQXHWhu3pMtAQyvpQbPPwLROhF5itsZcL/gX4k2JV/Y4xGSfTLh28hoH8auXoqK LAy10lrfjp+YYHBJ35/3LTJCucgAH4uQUSLjjFYRc2K3611PQ5nWNx1vY894pj1v 8GuszDjBzrsVxmskbnvQ4HPiWzu6RVsbobr3GQsN9QwffUyIcxcEwSTn4vP+Gmy3 SFVo06Qa3hABH7eFSdx4+LOJeTbJoQ+cODJeLMks3GjpHK2zOwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDAg9jCXl+5o4Y8vtF2T773Q6HpvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xY2Yz MDk3Ny03M2Y2LTQ1MjItYjA2MS02NmYwMDYxZjU4ZGQvMWNmMzA5NzctNzNmNi00 NTIyLWIwNjEtNjZmMDA2MWY1OGRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWNmMzA5NzctNzNmNi00NTIyLWIw NjEtNjZmMDA2MWY1OGRkLzFjZjMwOTc3LTczZjYtNDUyMi1iMDYxLTY2ZjAwNjFm NThkZC5jcmwwHwYDVR0jBBgwFoAUjHtyWKjnXTIGukdTcLEMNoCjf6UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xY2YzMDk3Ny03M2Y2LTQ1MjItYjA2MS02NmYw MDYxZjU4ZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAcirimjo7OM8czghKA5QLR X1ntP2cFo9hkPbu9iyo02Dq6CXaz7UAzbHix/A31vVNMbThr8zKSGtMM/kpCcMma X+IBwOXlfIqnzA52VTISx8FuiPTi2tvOqrDs41KyfyyAf1/0VLn6MWqkTxDFE1P8 5uytJvQorUYJBgqEUk/cxw/5DVc+fwMvAC+yavf5wTxjbH1TsAAtK9Slba26K4pE ACqUlvMVxn21Om39fZ0rMGYEulCbL/rKFp7Db2cTlGpE4EhsHAGCG01ir3YDuKhl AuJziiCd5IxNqfd80rEMXnvxmkgv0DKyCfjnzv+SAeOoMxATlsbA0qvQIMbRwp5w -----END CERTIFICATE-----Generated at Sun May 11 18:09:54 2025 by rpki-client