$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/787ecefc-952e-4f0a-9180-3f9d1ecd4ff3/787ecefc-952e-4f0a-9180-3f9d1ecd4ff3.mft File: 787ecefc-952e-4f0a-9180-3f9d1ecd4ff3.mft (raw, json) Hash identifier: 3RfhImQFvszGW1cvxBktPNTrnhKB9Wj9lO0q0doJGeI= Subject key identifier: 4E:3B:14:A6:66:83:86:C4:8A:A2:C8:6C:24:05:EB:1F:FF:83:1C:A6 Authority key identifier: 44:57:A7:4B:AE:BA:15:31:41:97:8F:49:C6:B8:A4:3B:05:18:F1:40 Certificate issuer: /CN=787ecefc-952e-4f0a-9180-3f9d1ecd4ff3 Certificate serial: 010D0C9F43285849C421AAF77052B7064F2C8BC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/787ecefc-952e-4f0a-9180-3f9d1ecd4ff3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/787ecefc-952e-4f0a-9180-3f9d1ecd4ff3/787ecefc-952e-4f0a-9180-3f9d1ecd4ff3.mft Manifest number: 010D0C9F43285843927A061DE833A9223C65E5C6 Signing time: Tue 06 May 2025 19:00:03 +0000 Manifest this update: Tue 06 May 2025 19:00:03 +0000 Manifest next update: Fri 09 May 2025 19:00:00 +0000 Files and hashes: 1: 787ecefc-952e-4f0a-9180-3f9d1ecd4ff3.crl (hash: etTfJooHagw+rfadiV5mxcYlijRErYIUv7wlM/RkIPc=) 2: 982e2aa8-acf6-3bab-9c3e-e2af7f3e0910.roa (hash: t5Zo7wSL/L2YxTb3/T5HvybeDHwGCfJ6wwc4JS87150=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/787ecefc-952e-4f0a-9180-3f9d1ecd4ff3/787ecefc-952e-4f0a-9180-3f9d1ecd4ff3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/787ecefc-952e-4f0a-9180-3f9d1ecd4ff3/787ecefc-952e-4f0a-9180-3f9d1ecd4ff3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/787ecefc-952e-4f0a-9180-3f9d1ecd4ff3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:21:aa:f7:70:52:b7:06:4f:2c:8b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=787ecefc-952e-4f0a-9180-3f9d1ecd4ff3 Validity Not Before: May 6 19:00:03 2025 GMT Not After : May 9 19:00:00 2025 GMT Subject: CN=afa53226-2d08-48ab-8cc1-a79d72694b71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6f:8e:73:b5:37:41:9b:d9:bf:47:ea:06:86: 5b:6e:71:f0:dd:81:16:91:75:68:39:6b:62:20:01: 94:73:16:87:e3:3f:40:b2:33:0f:60:4f:76:81:9c: e2:47:ee:29:7f:9e:dc:2f:46:8f:07:19:8d:4e:77: e1:43:41:25:62:51:bf:63:4c:80:26:cb:81:9b:8f: f0:bf:0a:cf:09:bf:69:99:88:9e:81:f3:a3:d6:4e: 66:f9:8d:84:62:ad:93:ca:ae:90:fd:cc:c8:08:5d: 65:2c:00:00:6a:21:8f:5c:4d:76:0e:6b:ee:71:4f: 6b:0f:14:22:c6:0f:c0:b0:dc:d4:ac:5b:d4:86:b9: 5a:6b:eb:4a:a3:78:b3:b2:88:b4:31:a7:46:50:2e: 93:07:59:8d:54:9e:3e:f2:83:de:34:16:e7:3a:e5: 44:de:4e:25:d8:1c:df:66:99:12:06:99:c5:20:f1: 1e:69:a4:bd:7d:d8:24:da:9d:8a:c7:90:19:47:fb: ba:b4:a9:a8:ad:18:1e:bd:40:4f:8f:3c:d2:ab:ad: 2e:94:3d:51:8a:27:28:3d:ea:66:45:bf:45:e0:5a: 0a:68:c6:a0:f0:fc:3b:d2:8d:9a:c7:82:74:b1:3d: d8:ca:25:e6:6d:20:62:6e:f5:f2:4f:8f:29:b6:ac: 70:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:3B:14:A6:66:83:86:C4:8A:A2:C8:6C:24:05:EB:1F:FF:83:1C:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/787ecefc-952e-4f0a-9180-3f9d1ecd4ff3/787ecefc-952e-4f0a-9180-3f9d1ecd4ff3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/787ecefc-952e-4f0a-9180-3f9d1ecd4ff3/787ecefc-952e-4f0a-9180-3f9d1ecd4ff3.crl X509v3 Authority Key Identifier: keyid:44:57:A7:4B:AE:BA:15:31:41:97:8F:49:C6:B8:A4:3B:05:18:F1:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/787ecefc-952e-4f0a-9180-3f9d1ecd4ff3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:6c:1f:3e:52:28:cf:2e:54:93:38:a5:87:aa:c1:ba:28:e6: 42:9f:fb:57:b8:46:70:35:e7:8a:37:69:e9:67:88:37:b2:eb: 84:6e:56:ba:96:04:cd:07:2d:43:b7:b5:24:9d:0f:41:e0:f3: 49:a5:a2:85:17:c0:3c:c8:0b:a0:6d:de:43:aa:8c:0a:13:b9: 7b:92:ff:30:29:57:63:e0:8e:3e:22:87:4a:2e:f9:58:f1:a5: 8d:54:03:30:dc:d0:11:9e:03:18:c6:6f:4c:a8:81:21:4a:18: 6c:8b:54:05:33:87:50:df:bd:dc:c3:c1:31:d3:11:c8:9a:3c: 92:d5:8f:74:76:d1:63:16:7a:34:0e:3b:e9:f4:9e:e6:d2:eb: 11:9e:a4:61:93:81:a2:a1:dc:8d:0a:ab:d4:8f:1f:8e:e6:33: e6:1e:f1:d2:8f:7d:5c:0e:a6:1b:11:77:7a:40:12:5e:46:8c: 04:7e:41:ea:cf:3c:ed:b2:fe:df:6a:cb:10:9e:81:26:6c:57: 8b:a7:ea:74:72:14:b1:67:9e:80:58:26:a8:01:ba:4a:23:70: 88:38:14:93:d7:1b:e9:31:d4:35:71:e5:69:1a:98:81:9e:4b: 7d:29:eb:0d:77:4e:ef:28:56:26:c3:bd:c7:f3:10:ae:a6:fd: 00:3f:33:ea -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnEIar3cFK3Bk8si8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg3ZWNlZmMtOTUyZS00ZjBhLTkxODAtM2Y5ZDFlY2Q0 ZmYzMB4XDTI1MDUwNjE5MDAwM1oXDTI1MDUwOTE5MDAwMFowLzEtMCsGA1UEAxMk YWZhNTMyMjYtMmQwOC00OGFiLThjYzEtYTc5ZDcyNjk0YjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2+Oc7U3QZvZv0fqBoZbbnHw3YEWkXVoOWti IAGUcxaH4z9AsjMPYE92gZziR+4pf57cL0aPBxmNTnfhQ0ElYlG/Y0yAJsuBm4/w vwrPCb9pmYiegfOj1k5m+Y2EYq2Tyq6Q/czICF1lLAAAaiGPXE12DmvucU9rDxQi xg/AsNzUrFvUhrlaa+tKo3izsoi0MadGUC6TB1mNVJ4+8oPeNBbnOuVE3k4l2Bzf ZpkSBpnFIPEeaaS9fdgk2p2Kx5AZR/u6tKmorRgevUBPjzzSq60ulD1RiicoPepm Rb9F4FoKaMag8Pw70o2ax4J0sT3YyiXmbSBibvXyT48ptqxwqwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFE47FKZmg4bEiqLIbCQF6x//gxymMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ODdl Y2VmYy05NTJlLTRmMGEtOTE4MC0zZjlkMWVjZDRmZjMvNzg3ZWNlZmMtOTUyZS00 ZjBhLTkxODAtM2Y5ZDFlY2Q0ZmYzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzg3ZWNlZmMtOTUyZS00ZjBhLTkx ODAtM2Y5ZDFlY2Q0ZmYzLzc4N2VjZWZjLTk1MmUtNGYwYS05MTgwLTNmOWQxZWNk NGZmMy5jcmwwHwYDVR0jBBgwFoAURFenS666FTFBl49JxrikOwUY8UAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ODdlY2VmYy05NTJlLTRmMGEtOTE4MC0zZjlk MWVjZDRmZjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBzbB8+UijPLlSTOKWHqsG6 KOZCn/tXuEZwNeeKN2npZ4g3suuEbla6lgTNBy1Dt7UknQ9B4PNJpaKFF8A8yAug bd5DqowKE7l7kv8wKVdj4I4+IodKLvlY8aWNVAMw3NARngMYxm9MqIEhShhsi1QF M4dQ373cw8Ex0xHImjyS1Y90dtFjFno0Djvp9J7m0usRnqRhk4GiodyNCqvUjx+O 5jPmHvHSj31cDqYbEXd6QBJeRowEfkHqzzztsv7fassQnoEmbFeLp+p0chSxZ56A WCaoAbpKI3CIOBST1xvpMdQ1ceVpGpiBnkt9KesNd07vKFYmw73H8xCupv0APzPq -----END CERTIFICATE-----Generated at Wed May 7 04:48:05 2025 by rpki-client