$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4/d0df77c4-4a94-461b-9582-441eb75796a4.mft File: d0df77c4-4a94-461b-9582-441eb75796a4.mft (raw, json) Hash identifier: oXx5gPRM+2ZzGNN8NnWlj8X4U0r0iBVUQWulHAa9HxI= Subject key identifier: 31:FB:34:7C:21:B3:34:7A:36:A6:F8:72:94:CB:DF:E7:76:18:C7:EE Authority key identifier: DA:61:E4:DF:36:71:36:8A:15:61:50:4B:93:78:46:05:F0:7B:C9:FC Certificate issuer: /CN=d0df77c4-4a94-461b-9582-441eb75796a4 Certificate serial: 010D0C9F43285849CC9F880E45C5EBFBF4AFC200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4/d0df77c4-4a94-461b-9582-441eb75796a4.mft Manifest number: 010D0C9F432858441E26108686929E8AC4BED996 Signing time: Fri 09 May 2025 20:00:07 +0000 Manifest this update: Fri 09 May 2025 20:00:07 +0000 Manifest next update: Sun 11 May 2025 20:00:00 +0000 Files and hashes: 1: d0df77c4-4a94-461b-9582-441eb75796a4.crl (hash: Vs2jLGIUm58HdgXNJyUratS2fSn5vtqpB8/bCXVWsqQ=) 2: e7dd884a-aed6-3cdb-959f-5446e5849ee7.roa (hash: TwvfnabrHoyxIW/mjhbmscgugZud1QKxlVMjgLkTowU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4/d0df77c4-4a94-461b-9582-441eb75796a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4/d0df77c4-4a94-461b-9582-441eb75796a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cc:9f:88:0e:45:c5:eb:fb:f4:af:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0df77c4-4a94-461b-9582-441eb75796a4 Validity Not Before: May 9 20:00:07 2025 GMT Not After : May 11 20:00:00 2025 GMT Subject: CN=53874dd4-bb75-4abf-9426-086f7a3bebee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8b:c7:60:bf:01:d0:41:26:9f:f0:56:4d:fe: 81:94:25:6d:4e:a4:37:91:09:b1:e2:c9:76:13:60: fd:a7:20:2b:02:02:29:ce:ab:d6:83:db:8a:11:f4: e6:ed:fe:b1:5d:95:3b:36:0b:8e:2a:9d:bf:c7:0d: 69:22:4a:b6:a1:ed:dc:eb:88:b5:cd:91:8c:80:40: df:a0:bb:8a:09:3b:f3:82:b6:e7:46:86:df:2a:d3: 2e:21:3b:e7:2b:8c:6a:0c:9f:c5:da:98:57:10:20: 76:44:6f:8f:a4:3c:f1:51:ce:3e:0b:90:4f:1b:f9: 08:b3:e9:73:01:86:e0:6b:41:f6:32:6e:6d:ec:56: 44:33:9c:e8:eb:11:4f:ac:0f:37:d7:41:79:ce:33: ea:18:23:dd:b9:fc:95:93:fd:16:e3:a6:51:5a:28: 4d:9c:28:a0:36:cd:a7:ca:0a:ca:48:3a:e5:af:b4: ba:1f:70:7f:0c:95:22:1b:be:41:92:7d:91:d4:9f: ec:63:9d:8c:c9:ed:26:ca:2e:62:5e:09:02:bc:f7: 8a:19:f8:28:18:0f:66:91:72:f7:13:b7:c4:72:42: f4:b5:40:e0:ee:62:7b:6b:87:02:95:3f:05:63:4a: 8e:1c:3f:d8:34:b9:17:ec:ea:78:aa:84:6b:38:3a: dc:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:FB:34:7C:21:B3:34:7A:36:A6:F8:72:94:CB:DF:E7:76:18:C7:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4/d0df77c4-4a94-461b-9582-441eb75796a4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4/d0df77c4-4a94-461b-9582-441eb75796a4.crl X509v3 Authority Key Identifier: keyid:DA:61:E4:DF:36:71:36:8A:15:61:50:4B:93:78:46:05:F0:7B:C9:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:fe:e5:52:c8:85:8a:51:09:99:46:5d:11:1d:56:fa:f9:54: 98:c1:d5:39:7a:37:cb:f7:7e:da:d9:78:c8:32:c1:fe:a8:d8: 48:8c:88:8b:12:c0:37:c4:e3:73:c0:09:ae:81:de:c0:19:99: 65:de:84:f9:0d:7c:6a:43:9c:c7:01:c8:6b:50:2e:c9:61:c6: 65:ad:b9:15:3c:5e:cb:df:2a:02:c7:bd:b6:9a:1a:8e:d4:fc: e5:55:b8:a5:d1:65:bd:9e:23:26:7f:ea:51:7c:a7:89:38:38: 09:79:45:2d:96:fd:a8:c4:b0:e0:11:a4:57:24:9e:cb:d0:f3: 3d:fb:c7:50:76:2a:76:4f:f8:e3:9a:b2:05:a8:99:9e:2c:a0: 39:a1:09:90:4e:68:19:bf:f3:ed:e2:f3:c2:8b:35:d8:e8:e4: 23:d8:4b:4c:9f:fd:e2:a2:d8:dc:20:d2:02:3d:cb:42:b4:e6: 96:5b:8d:54:e0:b5:ba:e7:7b:5b:83:06:08:26:50:be:11:be: e8:3d:3b:75:20:e3:1b:2e:8c:72:8c:f5:4f:23:0a:b7:ff:f0: d0:25:0c:44:11:3c:59:17:57:e6:93:d9:53:c7:59:8b:cb:f5: d8:e0:ee:40:35:fe:05:de:86:52:f5:54:98:77:61:58:68:d8: cd:8e:a5:44 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnMn4gORcXr+/SvwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBkZjc3YzQtNGE5NC00NjFiLTk1ODItNDQxZWI3NTc5 NmE0MB4XDTI1MDUwOTIwMDAwN1oXDTI1MDUxMTIwMDAwMFowLzEtMCsGA1UEAxMk NTM4NzRkZDQtYmI3NS00YWJmLTk0MjYtMDg2ZjdhM2JlYmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4vHYL8B0EEmn/BWTf6BlCVtTqQ3kQmx4sl2 E2D9pyArAgIpzqvWg9uKEfTm7f6xXZU7NguOKp2/xw1pIkq2oe3c64i1zZGMgEDf oLuKCTvzgrbnRobfKtMuITvnK4xqDJ/F2phXECB2RG+PpDzxUc4+C5BPG/kIs+lz AYbga0H2Mm5t7FZEM5zo6xFPrA8310F5zjPqGCPdufyVk/0W46ZRWihNnCigNs2n ygrKSDrlr7S6H3B/DJUiG75Bkn2R1J/sY52Mye0myi5iXgkCvPeKGfgoGA9mkXL3 E7fEckL0tUDg7mJ7a4cClT8FY0qOHD/YNLkX7Op4qoRrODrcZwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDH7NHwhszR6Nqb4cpTL3+d2GMfuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kMGRm NzdjNC00YTk0LTQ2MWItOTU4Mi00NDFlYjc1Nzk2YTQvZDBkZjc3YzQtNGE5NC00 NjFiLTk1ODItNDQxZWI3NTc5NmE0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDBkZjc3YzQtNGE5NC00NjFiLTk1 ODItNDQxZWI3NTc5NmE0L2QwZGY3N2M0LTRhOTQtNDYxYi05NTgyLTQ0MWViNzU3 OTZhNC5jcmwwHwYDVR0jBBgwFoAU2mHk3zZxNooVYVBLk3hGBfB7yfwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kMGRmNzdjNC00YTk0LTQ2MWItOTU4Mi00NDFl Yjc1Nzk2YTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAB/uVSyIWKUQmZRl0RHVb6 +VSYwdU5ejfL937a2XjIMsH+qNhIjIiLEsA3xONzwAmugd7AGZll3oT5DXxqQ5zH AchrUC7JYcZlrbkVPF7L3yoCx722mhqO1PzlVbil0WW9niMmf+pRfKeJODgJeUUt lv2oxLDgEaRXJJ7L0PM9+8dQdip2T/jjmrIFqJmeLKA5oQmQTmgZv/Pt4vPCizXY 6OQj2EtMn/3iotjcINICPctCtOaWW41U4LW653tbgwYIJlC+Eb7oPTt1IOMbLoxy jPVPIwq3//DQJQxEETxZF1fmk9lTx1mLy/XY4O5ANf4F3oZS9VSYd2FYaNjNjqVE -----END CERTIFICATE-----Generated at Sat May 10 15:12:35 2025 by rpki-client