$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/43d85349-fcc3-4834-8564-24f8a824b0cd.mft File: 43d85349-fcc3-4834-8564-24f8a824b0cd.mft (raw, json) Hash identifier: TahYKzMRKRfjCIRHTSfBE9PhE5TXWjrSZl/tEhCYPMA= Subject key identifier: 09:FA:06:03:AE:51:64:65:F9:86:80:39:5D:00:E1:E3:E1:78:21:9A Authority key identifier: 04:E6:CE:C5:24:7C:98:A4:6B:C3:A2:9A:16:AB:E3:9B:E5:A2:4E:82 Certificate issuer: /CN=43d85349-fcc3-4834-8564-24f8a824b0cd Certificate serial: 010D0C9F43285849CCF8E03129DA8307C5A3A580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/43d85349-fcc3-4834-8564-24f8a824b0cd.mft Manifest number: 010D0C9F43285849766F9B3881ED30AF4E950B20 Signing time: Fri 09 May 2025 23:00:07 +0000 Manifest this update: Fri 09 May 2025 23:00:07 +0000 Manifest next update: Sun 11 May 2025 23:00:00 +0000 Files and hashes: 1: 43d85349-fcc3-4834-8564-24f8a824b0cd.crl (hash: JPlE6ls7T0gWgoeVy1zPEbYINSwQizylUa9Fe7mPSig=) 2: da0869fc-7a2f-3359-ac12-16c14348d383.roa (hash: uoIQxYXUDD+3lq9E+PYkjc30YqQz2j8AGW/lPyN0new=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/43d85349-fcc3-4834-8564-24f8a824b0cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/43d85349-fcc3-4834-8564-24f8a824b0cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cc:f8:e0:31:29:da:83:07:c5:a3:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43d85349-fcc3-4834-8564-24f8a824b0cd Validity Not Before: May 9 23:00:07 2025 GMT Not After : May 11 23:00:00 2025 GMT Subject: CN=e8b29e5c-e8e3-4c89-ac82-d7217af11101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6b:23:13:a2:d0:27:9d:23:a9:de:ff:f8:75: 05:e4:5a:ee:46:ec:19:c2:ed:6f:e0:4f:1a:95:d1: 4e:1b:1b:24:48:b0:00:c0:87:17:06:f6:b8:46:a7: 7c:04:ee:04:5a:81:ec:a9:00:cd:41:4b:8f:5e:c8: 28:69:fc:bd:96:74:eb:66:f8:04:f2:ce:3b:36:e5: fe:d4:b1:df:45:ca:0c:64:d4:f4:c7:74:b2:95:b1: e7:b3:c5:1a:6a:f4:27:35:3c:78:e8:54:fe:26:15: d9:86:8a:0b:78:76:41:1e:c7:0e:a8:74:f3:12:e3: fc:c3:22:ca:42:8f:7c:5b:cc:35:34:15:6f:2f:49: 46:30:82:d3:de:a7:75:1b:80:3c:e4:8f:d3:32:2f: f4:bf:f4:cc:b0:ce:7d:5b:77:2c:80:f7:64:63:34: 02:59:96:0d:d5:21:58:0b:5c:4a:b1:c4:79:51:58: a4:a9:db:e3:fc:05:2d:fa:0e:77:a4:a6:51:75:48: 41:1f:81:83:27:ac:09:0f:61:5f:2d:f3:8e:10:02: 14:5c:76:08:cc:01:b4:71:69:e1:dc:ed:ea:e2:72: 4c:82:3c:f4:d0:ff:03:07:35:06:e2:73:e6:67:86: 33:84:6e:9e:ba:31:26:56:a7:8c:3d:27:5f:57:8c: be:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:FA:06:03:AE:51:64:65:F9:86:80:39:5D:00:E1:E3:E1:78:21:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/43d85349-fcc3-4834-8564-24f8a824b0cd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/43d85349-fcc3-4834-8564-24f8a824b0cd.crl X509v3 Authority Key Identifier: keyid:04:E6:CE:C5:24:7C:98:A4:6B:C3:A2:9A:16:AB:E3:9B:E5:A2:4E:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:90:ac:ff:cf:7c:d7:53:4b:24:4c:e3:80:a6:24:96:cb:8e: 30:b4:16:86:02:b6:4c:52:5c:81:04:f9:db:bf:d9:46:45:8d: 15:8a:28:93:9a:f7:a6:a4:60:9c:94:bc:65:39:2d:06:16:79: 44:11:84:e0:18:ea:89:a0:16:ec:5e:3d:c0:03:1a:e5:e9:b9: da:f2:6e:12:e5:25:a2:8c:86:1e:9a:ac:ee:5d:d5:f3:87:c4: a2:df:e7:24:cf:0c:3a:5d:d4:15:13:d5:46:10:4e:c7:03:e5: a6:33:15:55:a4:02:cf:09:54:42:e1:39:7c:a2:67:df:03:02: 43:b0:9b:16:e0:cd:0c:49:d0:d4:9f:48:b4:f7:03:eb:f6:4f: bb:cc:d4:3b:7c:a5:5e:36:12:df:b9:4a:b9:d8:69:89:e8:f6: 0a:fb:2c:e4:6d:e5:d0:3f:f1:b3:24:8a:43:d9:4c:e7:42:8a: e6:9a:c4:dd:ca:44:12:8d:3c:ac:4b:50:95:1a:f2:63:b1:3a: 5e:32:fe:b7:47:12:be:0b:37:cd:11:f0:2d:77:76:41:46:f0: ca:8f:c5:26:7c:4f:9a:41:16:47:11:10:56:93:02:29:44:d6: 89:ce:32:ed:00:37:e0:6b:a5:45:f6:7d:db:d7:12:ea:08:c2: c4:20:4b:00 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnM+OAxKdqDB8WjpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDNkODUzNDktZmNjMy00ODM0LTg1NjQtMjRmOGE4MjRi MGNkMB4XDTI1MDUwOTIzMDAwN1oXDTI1MDUxMTIzMDAwMFowLzEtMCsGA1UEAxMk ZThiMjllNWMtZThlMy00Yzg5LWFjODItZDcyMTdhZjExMTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GsjE6LQJ50jqd7/+HUF5FruRuwZwu1v4E8a ldFOGxskSLAAwIcXBva4Rqd8BO4EWoHsqQDNQUuPXsgoafy9lnTrZvgE8s47NuX+ 1LHfRcoMZNT0x3SylbHns8UaavQnNTx46FT+JhXZhooLeHZBHscOqHTzEuP8wyLK Qo98W8w1NBVvL0lGMILT3qd1G4A85I/TMi/0v/TMsM59W3csgPdkYzQCWZYN1SFY C1xKscR5UVikqdvj/AUt+g53pKZRdUhBH4GDJ6wJD2FfLfOOEAIUXHYIzAG0cWnh 3O3q4nJMgjz00P8DBzUG4nPmZ4YzhG6eujEmVqeMPSdfV4y+8QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAn6BgOuUWRl+YaAOV0A4ePheCGaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80M2Q4 NTM0OS1mY2MzLTQ4MzQtODU2NC0yNGY4YTgyNGIwY2QvNDNkODUzNDktZmNjMy00 ODM0LTg1NjQtMjRmOGE4MjRiMGNkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDNkODUzNDktZmNjMy00ODM0LTg1 NjQtMjRmOGE4MjRiMGNkLzQzZDg1MzQ5LWZjYzMtNDgzNC04NTY0LTI0ZjhhODI0 YjBjZC5jcmwwHwYDVR0jBBgwFoAUBObOxSR8mKRrw6KaFqvjm+WiToIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80M2Q4NTM0OS1mY2MzLTQ4MzQtODU2NC0yNGY4 YTgyNGIwY2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC5kKz/z3zXU0skTOOApiSW y44wtBaGArZMUlyBBPnbv9lGRY0ViiiTmvempGCclLxlOS0GFnlEEYTgGOqJoBbs Xj3AAxrl6bna8m4S5SWijIYemqzuXdXzh8Si3+ckzww6XdQVE9VGEE7HA+WmMxVV pALPCVRC4Tl8omffAwJDsJsW4M0MSdDUn0i09wPr9k+7zNQ7fKVeNhLfuUq52GmJ 6PYK+yzkbeXQP/GzJIpD2UznQormmsTdykQSjTysS1CVGvJjsTpeMv63RxK+CzfN EfAtd3ZBRvDKj8UmfE+aQRZHERBWkwIpRNaJzjLtADfga6VF9n3b1xLqCMLEIEsA -----END CERTIFICATE-----Generated at Sat May 10 12:01:00 2025 by rpki-client