$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2.mft File: 9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2.mft (raw, json) Hash identifier: JIJYTatU50NvqDne+Y0NU22b0d8RgOZs0QecSDe/0RY= Subject key identifier: C1:3C:37:41:3B:53:70:44:DC:4A:35:59:FF:53:83:18:E0:D2:A5:1F Authority key identifier: 4A:50:AF:35:A5:D1:64:97:78:A1:8A:FD:E4:D2:43:0D:8C:EF:32:49 Certificate issuer: /CN=9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2 Certificate serial: 010D0C9F43285849CAC3162F5883CFDD0C908400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2.mft Manifest number: 010D0C9F432858451D258287B1CF819125FCEF38 Signing time: Fri 09 May 2025 04:00:07 +0000 Manifest this update: Fri 09 May 2025 04:00:07 +0000 Manifest next update: Sun 11 May 2025 04:00:00 +0000 Files and hashes: 1: 9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2.crl (hash: 5APEfLqOs6ej23Kh8SrwMhn+gWUA/LYZbJiT/Vinj60=) 2: a32864a7-8943-31ea-94c0-9969594288ea.roa (hash: 5B4GfBff78HP465LkoNcfwP34ZCEzSB37mghAv6iXJw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ca:c3:16:2f:58:83:cf:dd:0c:90:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2 Validity Not Before: May 9 04:00:07 2025 GMT Not After : May 11 04:00:00 2025 GMT Subject: CN=85b17bb2-6a7a-4944-be97-28b57e9dfb6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:1e:96:e7:58:39:aa:2d:ab:4a:72:47:8f:13: 69:5f:0c:af:e9:15:21:47:29:a1:5e:91:5f:55:c6: 93:3b:d6:7e:cf:31:a5:3d:1b:82:e4:a3:5b:0a:f6: 68:02:39:9a:3b:10:fe:2f:a3:01:64:da:62:64:55: 03:a8:9f:10:d9:01:c4:60:85:b5:dc:d4:c9:bd:eb: 41:29:b0:0b:a1:45:e1:a2:78:10:52:99:d8:9a:56: 09:3d:1d:db:f7:dc:e0:3b:ae:19:e0:11:e0:0e:83: 03:b3:10:08:6e:d1:15:cc:ec:48:ae:43:f7:8a:27: 3c:df:8c:49:96:3f:c7:a5:96:61:0d:ee:69:76:e2: 41:55:a6:16:2e:44:da:ae:f6:1e:e7:86:5e:6c:2e: 50:8d:ce:6e:53:e1:b8:3f:9e:21:f4:1b:89:18:49: 47:6d:78:dd:c4:67:e2:ea:14:e9:b3:25:46:8f:d1: 8c:c2:7f:fe:c2:db:d7:a6:61:f0:e1:86:f9:80:33: bc:92:9b:b3:a7:27:5b:1c:f9:c3:64:66:04:36:e7: 9c:21:36:fa:79:3a:95:09:1b:d7:7e:e3:74:20:15: 88:a8:7d:04:e3:5d:94:6f:15:39:82:08:a7:b6:6b: fc:aa:45:d1:ab:36:3d:06:16:fd:c0:b5:2c:df:5f: 19:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:3C:37:41:3B:53:70:44:DC:4A:35:59:FF:53:83:18:E0:D2:A5:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2.crl X509v3 Authority Key Identifier: keyid:4A:50:AF:35:A5:D1:64:97:78:A1:8A:FD:E4:D2:43:0D:8C:EF:32:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b7f57a5-8ad1-49c1-8e53-f6b122ed62e2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:21:3a:d4:ac:76:f2:b8:33:1f:5a:d4:e4:74:29:a1:5f:1f: 6a:c3:2c:b7:05:11:7e:0a:58:f6:7d:8e:62:f5:4c:bd:3a:98: f6:ca:79:7e:b1:05:3f:20:32:9d:1d:15:ee:42:89:5a:83:92: 0d:5c:8d:c6:80:7a:75:54:4f:6d:05:4c:de:c2:5d:66:4c:24: 81:0a:21:a4:b5:fe:d2:98:f4:5c:b0:d9:d9:a2:b8:23:3b:b6: e9:c7:37:0a:53:45:6a:8d:1d:4f:50:b1:c6:8e:dc:16:b2:10: f1:c0:d8:11:15:cd:4c:c1:b0:3a:42:07:d1:c1:b6:c7:3e:95: 00:83:59:01:79:a1:39:ae:d6:16:85:e1:06:07:7c:e2:4b:14: e6:f0:19:61:e2:f1:64:ff:7a:b1:12:d4:4e:59:e4:c6:78:35: df:50:8c:44:9c:2b:44:7e:76:86:d8:3e:ac:31:ad:65:21:39: 43:84:90:4a:03:94:c0:da:b8:1d:23:20:48:44:f0:54:c3:f9: d7:3b:9a:dc:9a:5f:33:82:a1:30:f8:64:ba:2b:87:97:8d:a4: 3e:17:b4:ec:bb:7f:2e:f4:7a:10:2b:0a:29:8f:ec:ad:9c:0d: b1:75:1b:fa:00:6c:1a:04:10:83:96:e7:b0:b3:77:be:05:75: a2:f2:74:f4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnKwxYvWIPP3QyQhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWI3ZjU3YTUtOGFkMS00OWMxLThlNTMtZjZiMTIyZWQ2 MmUyMB4XDTI1MDUwOTA0MDAwN1oXDTI1MDUxMTA0MDAwMFowLzEtMCsGA1UEAxMk ODViMTdiYjItNmE3YS00OTQ0LWJlOTctMjhiNTdlOWRmYjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7x6W51g5qi2rSnJHjxNpXwyv6RUhRymhXpFf VcaTO9Z+zzGlPRuC5KNbCvZoAjmaOxD+L6MBZNpiZFUDqJ8Q2QHEYIW13NTJvetB KbALoUXhongQUpnYmlYJPR3b99zgO64Z4BHgDoMDsxAIbtEVzOxIrkP3iic834xJ lj/HpZZhDe5pduJBVaYWLkTarvYe54ZebC5Qjc5uU+G4P54h9BuJGElHbXjdxGfi 6hTpsyVGj9GMwn/+wtvXpmHw4Yb5gDO8kpuzpydbHPnDZGYENuecITb6eTqVCRvX fuN0IBWIqH0E412UbxU5ggintmv8qkXRqzY9Bhb9wLUs318ZkQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFME8N0E7U3BE3Eo1Wf9Tgxjg0qUfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85Yjdm NTdhNS04YWQxLTQ5YzEtOGU1My1mNmIxMjJlZDYyZTIvOWI3ZjU3YTUtOGFkMS00 OWMxLThlNTMtZjZiMTIyZWQ2MmUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWI3ZjU3YTUtOGFkMS00OWMxLThl NTMtZjZiMTIyZWQ2MmUyLzliN2Y1N2E1LThhZDEtNDljMS04ZTUzLWY2YjEyMmVk NjJlMi5jcmwwHwYDVR0jBBgwFoAUSlCvNaXRZJd4oYr95NJDDYzvMkkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85YjdmNTdhNS04YWQxLTQ5YzEtOGU1My1mNmIx MjJlZDYyZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCJITrUrHbyuDMfWtTkdCmh Xx9qwyy3BRF+Clj2fY5i9Uy9Opj2ynl+sQU/IDKdHRXuQolag5INXI3GgHp1VE9t BUzewl1mTCSBCiGktf7SmPRcsNnZorgjO7bpxzcKU0VqjR1PULHGjtwWshDxwNgR Fc1MwbA6QgfRwbbHPpUAg1kBeaE5rtYWheEGB3ziSxTm8Blh4vFk/3qxEtROWeTG eDXfUIxEnCtEfnaG2D6sMa1lITlDhJBKA5TA2rgdIyBIRPBUw/nXO5rcml8zgqEw +GS6K4eXjaQ+F7Tsu38u9HoQKwopj+ytnA2xdRv6AGwaBBCDluews3e+BXWi8nT0 -----END CERTIFICATE-----Generated at Fri May 9 12:39:55 2025 by rpki-client