$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/2a093e3f-1d9b-4e68-9317-1de77daf9698.mft File: 2a093e3f-1d9b-4e68-9317-1de77daf9698.mft (raw, json) Hash identifier: eZSPmqYIgHzyqqfOVa/3e7EPsz3QV5czMvWnUZbSdiE= Subject key identifier: 84:65:17:7C:5B:F1:41:91:EC:C7:FF:86:CD:73:7A:17:45:1C:6D:57 Authority key identifier: C7:0D:B9:10:59:F5:11:FC:55:91:52:6C:72:82:C1:EA:45:45:A7:77 Certificate issuer: /CN=2a093e3f-1d9b-4e68-9317-1de77daf9698 Certificate serial: 010D0C9F43285849C498C73CE470B7F31669D540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/2a093e3f-1d9b-4e68-9317-1de77daf9698.mft Manifest number: 010D0C9F43285843E9795D6A0F89BC0E7A98B62E Signing time: Tue 06 May 2025 23:00:03 +0000 Manifest this update: Tue 06 May 2025 23:00:03 +0000 Manifest next update: Thu 08 May 2025 23:00:00 +0000 Files and hashes: 1: 2a093e3f-1d9b-4e68-9317-1de77daf9698.crl (hash: V3aWLfn4enGsj6MbI8U/uWJXsu+joyySPPJkb+pWgkc=) 2: 4a053d94-f778-3cf3-98a9-c6ea0a32091f.roa (hash: yWLm/fDqWiAlt0JWyX02c66FLvzXOouDTrl1OlMj5vw=) 3: ef3392a6-ef96-3774-8bd4-9944157036c5.roa (hash: vzBz9vXPG/xNLSu844zqahCOhQb4pOvQL2NlnBiGG5I=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/2a093e3f-1d9b-4e68-9317-1de77daf9698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/2a093e3f-1d9b-4e68-9317-1de77daf9698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:98:c7:3c:e4:70:b7:f3:16:69:d5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a093e3f-1d9b-4e68-9317-1de77daf9698 Validity Not Before: May 6 23:00:03 2025 GMT Not After : May 8 23:00:00 2025 GMT Subject: CN=157b089a-a9a2-4007-92de-9ab917cccb18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:92:f4:b3:95:da:e7:f9:3d:58:e0:4a:be:e4: 1b:df:a6:60:ac:e3:64:1e:3f:3e:5e:32:1a:35:b3: 04:8a:d2:37:de:69:8f:15:5f:76:e6:e9:10:34:4e: 58:d2:ac:8a:d5:ed:ae:8d:5d:a4:83:88:78:65:77: 5b:da:3f:90:81:ae:bd:02:7a:47:9e:b4:a3:22:4e: 5e:e1:4d:e4:45:5e:34:e7:50:80:39:84:ac:4f:86: df:54:ef:c7:df:a4:85:db:39:ea:5a:26:f0:9c:ed: d7:2e:c6:b3:ce:7d:18:0a:72:f3:a3:8c:29:97:09: ee:35:c1:84:32:91:cb:27:cb:17:a0:99:f2:ca:87: b5:55:78:9f:93:79:14:f2:45:b9:ff:43:6c:b3:02: 08:08:b5:ab:16:6e:da:33:b0:27:3a:29:9b:c4:39: 1b:a7:5a:ff:97:a2:91:08:01:27:3b:c2:bb:d5:21: 58:f2:38:cc:74:a9:2a:45:b0:3a:db:42:8b:e0:30: a7:8b:a7:00:d7:f8:6c:a2:b4:f5:a8:9c:f1:91:63: d2:01:92:53:75:44:f1:a8:a6:57:ec:fd:5d:69:90: 6d:2a:6e:e2:55:18:42:1e:15:c6:21:c9:73:7b:20: 89:12:95:b9:b2:67:9a:8d:0c:2c:f3:98:7b:f9:a1: 43:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:65:17:7C:5B:F1:41:91:EC:C7:FF:86:CD:73:7A:17:45:1C:6D:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/2a093e3f-1d9b-4e68-9317-1de77daf9698.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/2a093e3f-1d9b-4e68-9317-1de77daf9698.crl X509v3 Authority Key Identifier: keyid:C7:0D:B9:10:59:F5:11:FC:55:91:52:6C:72:82:C1:EA:45:45:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:96:18:5f:2f:3e:a4:26:43:c9:af:c8:ba:d9:81:54:1a:08: e2:3e:a0:b0:20:bc:ed:d8:83:12:55:51:da:f4:f4:ff:1c:93: f8:a2:d0:a8:b5:fe:84:36:da:a5:0b:26:04:5d:7d:36:f8:10: 06:0d:c7:ea:dc:da:1b:7d:30:95:de:80:c2:e6:44:4a:04:0d: 16:5b:f3:61:86:ab:d7:39:73:5c:21:12:ad:21:1d:92:72:aa: e0:17:cb:cf:2c:11:d9:8a:1f:2d:b5:45:b3:2f:3e:f9:6c:2a: b6:b7:d7:b5:6c:f2:b7:2b:4a:c6:83:7f:32:b1:26:e5:06:46: 6a:0f:8a:cc:4b:cd:60:47:9e:1c:5b:8e:bb:2b:cd:d8:7e:ad: b0:e6:14:f3:a2:2f:d4:72:ce:11:e2:c3:3c:f7:bd:81:e3:4b: 6d:fa:4c:86:94:95:39:3b:11:4b:47:d3:21:81:c9:7c:dc:f4: b1:d6:b3:d3:52:f8:df:cc:13:aa:57:50:34:3b:a8:0a:f0:1d: 05:57:9f:10:77:33:aa:04:cd:96:67:ec:99:11:a0:74:80:c6: 4f:d4:8b:97:7b:d3:f8:fc:ed:3b:2d:f3:f2:72:61:19:51:32: 2b:87:8c:fb:a1:9e:2e:5d:95:fc:67:2c:3a:ac:36:d8:58:e4: 8e:9f:74:93 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnEmMc85HC38xZp1UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEwOTNlM2YtMWQ5Yi00ZTY4LTkzMTctMWRlNzdkYWY5 Njk4MB4XDTI1MDUwNjIzMDAwM1oXDTI1MDUwODIzMDAwMFowLzEtMCsGA1UEAxMk MTU3YjA4OWEtYTlhMi00MDA3LTkyZGUtOWFiOTE3Y2NjYjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZL0s5Xa5/k9WOBKvuQb36ZgrONkHj8+XjIa NbMEitI33mmPFV925ukQNE5Y0qyK1e2ujV2kg4h4ZXdb2j+Qga69AnpHnrSjIk5e 4U3kRV4051CAOYSsT4bfVO/H36SF2znqWibwnO3XLsazzn0YCnLzo4wplwnuNcGE MpHLJ8sXoJnyyoe1VXifk3kU8kW5/0NsswIICLWrFm7aM7AnOimbxDkbp1r/l6KR CAEnO8K71SFY8jjMdKkqRbA620KL4DCni6cA1/hsorT1qJzxkWPSAZJTdUTxqKZX 7P1daZBtKm7iVRhCHhXGIclzeyCJEpW5smeajQws85h7+aFDoQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIRlF3xb8UGR7Mf/hs1zehdFHG1XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yYTA5 M2UzZi0xZDliLTRlNjgtOTMxNy0xZGU3N2RhZjk2OTgvMmEwOTNlM2YtMWQ5Yi00 ZTY4LTkzMTctMWRlNzdkYWY5Njk4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmEwOTNlM2YtMWQ5Yi00ZTY4LTkz MTctMWRlNzdkYWY5Njk4LzJhMDkzZTNmLTFkOWItNGU2OC05MzE3LTFkZTc3ZGFm OTY5OC5jcmwwHwYDVR0jBBgwFoAUxw25EFn1EfxVkVJscoLB6kVFp3cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yYTA5M2UzZi0xZDliLTRlNjgtOTMxNy0xZGU3 N2RhZjk2OTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBxlhhfLz6kJkPJr8i62YFU GgjiPqCwILzt2IMSVVHa9PT/HJP4otCotf6ENtqlCyYEXX02+BAGDcfq3NobfTCV 3oDC5kRKBA0WW/NhhqvXOXNcIRKtIR2ScqrgF8vPLBHZih8ttUWzLz75bCq2t9e1 bPK3K0rGg38ysSblBkZqD4rMS81gR54cW467K83Yfq2w5hTzoi/Ucs4R4sM8972B 40tt+kyGlJU5OxFLR9Mhgcl83PSx1rPTUvjfzBOqV1A0O6gK8B0FV58QdzOqBM2W Z+yZEaB0gMZP1IuXe9P4/O07LfPycmEZUTIrh4z7oZ4uXZX8Zyw6rDbYWOSOn3ST -----END CERTIFICATE-----Generated at Wed May 7 05:25:41 2025 by rpki-client