$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d/c9b2f783-ae49-438b-a994-34e0ab78157d.mft File: c9b2f783-ae49-438b-a994-34e0ab78157d.mft (raw, json) Hash identifier: oO45lKwmdlObvTIIQ0j9X7l0kg4C4LHNO8K3HPzeOyk= Subject key identifier: A1:B6:7E:90:89:57:34:F7:D6:12:E6:22:3C:3D:F1:91:EB:13:A4:A7 Authority key identifier: 38:65:96:E0:5E:8A:27:9F:15:10:B0:A6:5E:25:73:F2:60:57:56:BF Certificate issuer: /CN=c9b2f783-ae49-438b-a994-34e0ab78157d Certificate serial: 010D0C9F43285849CED54D019155A912391CA980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d/c9b2f783-ae49-438b-a994-34e0ab78157d.mft Manifest number: 010D0C9F432858440FABA223BDB764CA76CF1576 Signing time: Sat 10 May 2025 15:00:03 +0000 Manifest this update: Sat 10 May 2025 15:00:03 +0000 Manifest next update: Mon 12 May 2025 15:00:00 +0000 Files and hashes: 1: 564b1b50-6023-33cd-a752-4ef64eceb812.roa (hash: ojNwqnL/5BAfTVVShYMBEMu4JJdj2y+4t+foQsVKK2E=) 2: 869b015f-245e-39b5-a14b-be829d15c505.roa (hash: p+fQOshxo3u7y5Ws1I/q1XXY9k9BZka8Mba3FL9fgNw=) 3: bd24ede7-95bd-3be0-9995-86905a63b155.roa (hash: O/rXp9vtxcrAdRB8fLGRRIR8VapAKtNyEmNNioiJyLk=) 4: c9b2f783-ae49-438b-a994-34e0ab78157d.crl (hash: 90SQQA0bdf5FwE9knnOyoM0lZoeqbxalUlPyTI3HQL0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d/c9b2f783-ae49-438b-a994-34e0ab78157d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d/c9b2f783-ae49-438b-a994-34e0ab78157d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:d5:4d:01:91:55:a9:12:39:1c:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9b2f783-ae49-438b-a994-34e0ab78157d Validity Not Before: May 10 15:00:03 2025 GMT Not After : May 12 15:00:00 2025 GMT Subject: CN=41f8cd6d-bbdd-4223-bf65-d3e6e33eadff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:17:dd:ae:3c:2e:ff:63:3c:4d:91:fd:69:b6: 7b:ae:c1:36:ae:84:9b:b8:d2:ab:2b:16:1a:6d:ba: d6:f6:dc:ee:80:b5:b2:39:eb:3d:30:61:17:7b:6d: c7:95:5f:0e:29:52:ad:90:b0:9b:cb:50:b5:73:6c: d6:6b:39:8a:27:a7:2d:87:62:c5:70:1f:c3:67:94: 4d:6d:cc:0e:e6:19:ba:d6:88:fb:06:6b:18:a9:88: 6c:07:5d:0c:05:b1:16:50:72:6b:96:f4:f2:35:85: 48:ba:55:25:90:08:fa:7c:7b:01:c3:25:5e:9d:87: 76:c9:eb:8c:a7:0f:24:7e:55:72:4c:2a:7a:a5:f8: ef:b6:7a:13:9f:10:de:e8:81:45:2c:3e:d9:09:2b: 9a:74:59:c3:d7:42:04:47:d2:c4:dd:b9:78:d8:bc: d5:69:d3:55:9a:21:4e:b2:65:b7:82:27:39:f2:fc: 3a:21:8d:d1:4d:f8:95:77:04:88:8e:75:1d:ca:22: 8f:a1:60:ff:18:46:21:58:72:16:40:c5:1f:32:32: 77:af:14:ca:97:2c:8b:44:eb:e8:d2:1c:8f:1d:05: 84:14:32:f8:df:a1:f0:de:f4:36:81:ef:61:63:4f: 9d:e1:9c:48:c4:8b:0a:5b:16:46:05:b1:dc:ae:61: 84:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:B6:7E:90:89:57:34:F7:D6:12:E6:22:3C:3D:F1:91:EB:13:A4:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d/c9b2f783-ae49-438b-a994-34e0ab78157d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d/c9b2f783-ae49-438b-a994-34e0ab78157d.crl X509v3 Authority Key Identifier: keyid:38:65:96:E0:5E:8A:27:9F:15:10:B0:A6:5E:25:73:F2:60:57:56:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:7e:43:e6:f4:41:f1:7d:61:c8:3f:a6:c0:8a:96:f9:76:4a: 04:1f:b7:45:cc:75:97:00:20:c3:b3:bf:60:66:f6:7a:e1:a5: 64:a6:31:be:4f:cf:8d:12:59:5a:9b:70:70:c2:c1:22:70:e2: 0d:0f:10:f8:f6:82:18:6e:43:92:23:44:98:5b:ea:05:3a:ed: a6:74:f6:0d:22:07:07:9c:23:65:b0:9b:7a:6f:cd:76:c2:a5: ea:e8:83:fa:9e:4b:3e:35:d3:d7:94:72:65:50:38:da:94:ac: 7b:03:ed:c4:78:a5:11:6f:3a:09:96:2d:23:92:82:55:ad:52: 5d:9a:0a:22:38:e8:22:14:d5:34:d4:93:c7:ed:12:8b:b3:db: 5e:70:15:32:1b:71:fe:dd:4e:b1:62:cd:e0:fd:a4:fc:7d:88: 8d:be:60:9c:26:e2:1b:cf:45:c2:56:ee:cb:b1:17:5e:b4:28: 2b:5d:5d:51:19:c6:5c:8c:ea:68:ae:4b:23:3c:61:80:2f:00: 58:22:c0:96:f8:38:36:b3:54:7d:8d:0a:39:c5:81:b2:1d:c5: 67:bd:cb:a9:8d:67:8b:86:16:58:a8:31:7f:64:4f:5a:87:84: 9c:ce:ba:35:12:4c:9b:41:6a:23:d6:f4:1f:56:3f:99:81:d3: ff:20:03:0f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnO1U0BkVWpEjkcqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzliMmY3ODMtYWU0OS00MzhiLWE5OTQtMzRlMGFiNzgx NTdkMB4XDTI1MDUxMDE1MDAwM1oXDTI1MDUxMjE1MDAwMFowLzEtMCsGA1UEAxMk NDFmOGNkNmQtYmJkZC00MjIzLWJmNjUtZDNlNmUzM2VhZGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxfdrjwu/2M8TZH9abZ7rsE2roSbuNKrKxYa bbrW9tzugLWyOes9MGEXe23HlV8OKVKtkLCby1C1c2zWazmKJ6cth2LFcB/DZ5RN bcwO5hm61oj7BmsYqYhsB10MBbEWUHJrlvTyNYVIulUlkAj6fHsBwyVenYd2yeuM pw8kflVyTCp6pfjvtnoTnxDe6IFFLD7ZCSuadFnD10IER9LE3bl42LzVadNVmiFO smW3gic58vw6IY3RTfiVdwSIjnUdyiKPoWD/GEYhWHIWQMUfMjJ3rxTKlyyLROvo 0hyPHQWEFDL436Hw3vQ2ge9hY0+d4ZxIxIsKWxZGBbHcrmGElwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKG2fpCJVzT31hLmIjw98ZHrE6SnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jOWIy Zjc4My1hZTQ5LTQzOGItYTk5NC0zNGUwYWI3ODE1N2QvYzliMmY3ODMtYWU0OS00 MzhiLWE5OTQtMzRlMGFiNzgxNTdkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzliMmY3ODMtYWU0OS00MzhiLWE5 OTQtMzRlMGFiNzgxNTdkL2M5YjJmNzgzLWFlNDktNDM4Yi1hOTk0LTM0ZTBhYjc4 MTU3ZC5jcmwwHwYDVR0jBBgwFoAUOGWW4F6KJ58VELCmXiVz8mBXVr8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jOWIyZjc4My1hZTQ5LTQzOGItYTk5NC0zNGUw YWI3ODE1N2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAqfkPm9EHxfWHIP6bAipb5 dkoEH7dFzHWXACDDs79gZvZ64aVkpjG+T8+NEllam3BwwsEicOINDxD49oIYbkOS I0SYW+oFOu2mdPYNIgcHnCNlsJt6b812wqXq6IP6nks+NdPXlHJlUDjalKx7A+3E eKURbzoJli0jkoJVrVJdmgoiOOgiFNU01JPH7RKLs9tecBUyG3H+3U6xYs3g/aT8 fYiNvmCcJuIbz0XCVu7LsRdetCgrXV1RGcZcjOporksjPGGALwBYIsCW+Dg2s1R9 jQo5xYGyHcVnvcupjWeLhhZYqDF/ZE9ah4Sczro1EkybQWoj1vQfVj+ZgdP/IAMP -----END CERTIFICATE-----Generated at Sun May 11 09:26:59 2025 by rpki-client