$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/b71baebf-1a7d-40e5-90c9-370c088ebc71.mft File: b71baebf-1a7d-40e5-90c9-370c088ebc71.mft (raw, json) Hash identifier: IFokVEWHBjv2WfyH7Y6tTvCbjX0w0BtJYshQp34K0Xo= Subject key identifier: 3B:DE:BC:3A:6F:F6:65:69:57:B2:73:B2:29:72:09:C7:6E:50:6F:60 Authority key identifier: AB:1F:DE:B3:29:CA:4F:D4:72:C5:96:28:DF:07:D7:DC:BD:C1:11:27 Certificate issuer: /CN=b71baebf-1a7d-40e5-90c9-370c088ebc71 Certificate serial: 010D0C9F43285849C93FEB5697DF0CF1373D4F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/b71baebf-1a7d-40e5-90c9-370c088ebc71.mft Manifest number: 010D0C9F432858440CDDF92011879AA29300CBE0 Signing time: Thu 08 May 2025 15:00:03 +0000 Manifest this update: Thu 08 May 2025 15:00:03 +0000 Manifest next update: Sun 11 May 2025 15:00:00 +0000 Files and hashes: 1: 037241b6-887f-3fe9-80c8-7090ba2e6dbd.roa (hash: QjFoz3crIlsgx4hkk85DRnzcyy1KL3jLolPnGWUU07w=) 2: 1cdc08f9-9a58-3f7a-aea2-713c294b41ea.roa (hash: NJeoutSQJ7xwcf7LLGu2bLlFat4g0uoWfo+h1eRHpgE=) 3: b71baebf-1a7d-40e5-90c9-370c088ebc71.crl (hash: QzQ3zzT8EP21jrQYQt4ol4umnc2wjwWhb81WYiSsAxY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/b71baebf-1a7d-40e5-90c9-370c088ebc71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/b71baebf-1a7d-40e5-90c9-370c088ebc71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:3f:eb:56:97:df:0c:f1:37:3d:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b71baebf-1a7d-40e5-90c9-370c088ebc71 Validity Not Before: May 8 15:00:03 2025 GMT Not After : May 11 15:00:00 2025 GMT Subject: CN=b519d075-f0f7-4299-9d70-34bb6c5c0d22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:01:a9:c7:9c:bd:6f:32:ef:2a:88:27:f1:f3: 15:e5:af:24:69:22:0f:5c:97:90:de:f2:1a:b3:a6: 63:2a:50:ca:31:68:5b:28:5e:31:f2:85:d9:2b:42: cb:30:dc:06:14:4c:e0:c5:e1:df:56:1e:67:af:70: 99:54:f3:41:07:f2:90:64:aa:e4:05:dd:48:dc:9e: 4f:9a:aa:5c:c3:73:28:5e:b8:19:c6:58:74:b9:97: c2:1e:92:0d:04:f8:50:64:24:3c:bc:b5:79:fe:a3: e5:10:dd:c8:3b:fe:68:e2:04:a9:cb:fc:c3:ec:ed: 00:f2:68:5a:df:73:52:a7:c7:d9:d0:af:97:c5:23: 82:a5:1c:7e:3e:62:4d:6a:8f:fd:18:f5:83:64:94: 3c:47:d6:63:26:02:f1:e9:93:0d:4c:8c:64:ae:22: cc:46:dc:5f:96:60:6b:03:25:5c:44:d0:04:af:11: d5:13:63:19:a3:a8:f2:4a:b3:96:20:57:6c:36:22: 6a:2d:06:e7:6f:f9:dd:b6:47:2c:d2:33:75:08:3c: b8:08:6d:82:d7:2a:c8:09:ef:b9:f0:ae:f7:07:cb: d0:09:0f:61:0d:75:9c:c4:27:36:6e:99:31:7e:39: d0:4d:46:f9:ff:09:a3:54:2c:86:3f:92:2f:32:8e: 7a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:DE:BC:3A:6F:F6:65:69:57:B2:73:B2:29:72:09:C7:6E:50:6F:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/b71baebf-1a7d-40e5-90c9-370c088ebc71.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/b71baebf-1a7d-40e5-90c9-370c088ebc71.crl X509v3 Authority Key Identifier: keyid:AB:1F:DE:B3:29:CA:4F:D4:72:C5:96:28:DF:07:D7:DC:BD:C1:11:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:fa:d4:b4:dd:f2:a2:7f:fd:10:e4:30:d8:75:53:f6:a1:a7: 45:b7:9a:e8:e3:b2:de:75:81:7d:16:0c:e8:b5:fd:8b:66:b9: 6a:23:70:90:91:23:73:b9:67:70:4b:e8:50:be:ac:ef:33:2b: 1e:6f:c0:ea:9a:6a:69:af:49:32:02:29:f8:b8:59:7b:f2:f1: 44:71:7b:c4:6e:e0:be:1e:0c:54:9b:40:40:72:5b:aa:05:ff: 35:ad:dc:ba:99:da:24:ad:a0:88:ba:d7:3b:27:92:cc:f3:0c: 80:cf:44:1d:3f:eb:5d:82:64:34:20:20:c1:77:39:18:cc:46: 01:22:ad:9a:dd:75:1b:2f:22:bf:33:6a:0a:6a:28:e4:8e:6b: 5b:0e:f6:ce:db:e5:53:cc:35:a0:3f:dc:4c:9b:d9:9f:13:b3: 23:25:fa:09:e2:19:ad:c2:68:d9:af:4b:65:b9:07:6a:5c:70: 84:97:d4:6b:30:5a:b6:9d:aa:c0:fb:be:dc:cd:ab:9d:26:4f: 07:01:8d:ce:d6:4c:7d:6a:f4:1c:77:6a:a5:08:e2:8e:e1:0c: 5a:db:fa:51:bb:e6:94:80:4a:a7:8c:76:8f:d6:d9:5b:95:08: 4d:08:1f:41:b4:bc:75:ab:eb:fa:98:1a:fa:26:e9:7e:92:0f: 65:a8:a2:07 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnJP+tWl98M8Tc9T4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjcxYmFlYmYtMWE3ZC00MGU1LTkwYzktMzcwYzA4OGVi YzcxMB4XDTI1MDUwODE1MDAwM1oXDTI1MDUxMTE1MDAwMFowLzEtMCsGA1UEAxMk YjUxOWQwNzUtZjBmNy00Mjk5LTlkNzAtMzRiYjZjNWMwZDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgGpx5y9bzLvKogn8fMV5a8kaSIPXJeQ3vIa s6ZjKlDKMWhbKF4x8oXZK0LLMNwGFEzgxeHfVh5nr3CZVPNBB/KQZKrkBd1I3J5P mqpcw3MoXrgZxlh0uZfCHpINBPhQZCQ8vLV5/qPlEN3IO/5o4gSpy/zD7O0A8mha 33NSp8fZ0K+XxSOCpRx+PmJNao/9GPWDZJQ8R9ZjJgLx6ZMNTIxkriLMRtxflmBr AyVcRNAErxHVE2MZo6jySrOWIFdsNiJqLQbnb/ndtkcs0jN1CDy4CG2C1yrICe+5 8K73B8vQCQ9hDXWcxCc2bpkxfjnQTUb5/wmjVCyGP5IvMo56IQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDvevDpv9mVpV7JzsilyCcduUG9gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNzFi YWViZi0xYTdkLTQwZTUtOTBjOS0zNzBjMDg4ZWJjNzEvYjcxYmFlYmYtMWE3ZC00 MGU1LTkwYzktMzcwYzA4OGViYzcxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjcxYmFlYmYtMWE3ZC00MGU1LTkw YzktMzcwYzA4OGViYzcxL2I3MWJhZWJmLTFhN2QtNDBlNS05MGM5LTM3MGMwODhl YmM3MS5jcmwwHwYDVR0jBBgwFoAUqx/esynKT9RyxZYo3wfX3L3BEScwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNzFiYWViZi0xYTdkLTQwZTUtOTBjOS0zNzBj MDg4ZWJjNzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAC+tS03fKif/0Q5DDYdVP2 oadFt5ro47LedYF9Fgzotf2LZrlqI3CQkSNzuWdwS+hQvqzvMyseb8Dqmmppr0ky Ain4uFl78vFEcXvEbuC+HgxUm0BAcluqBf81rdy6mdokraCIutc7J5LM8wyAz0Qd P+tdgmQ0ICDBdzkYzEYBIq2a3XUbLyK/M2oKaijkjmtbDvbO2+VTzDWgP9xMm9mf E7MjJfoJ4hmtwmjZr0tluQdqXHCEl9RrMFq2narA+77czaudJk8HAY3O1kx9avQc d2qlCOKO4Qxa2/pRu+aUgEqnjHaP1tlblQhNCB9BtLx1q+v6mBr6Jul+kg9lqKIH -----END CERTIFICATE-----Generated at Fri May 9 11:57:01 2025 by rpki-client