$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5/1c939443-d4d3-4122-9e02-8422f40f90c5.mft File: 1c939443-d4d3-4122-9e02-8422f40f90c5.mft (raw, json) Hash identifier: GPvjxZos63LuUJufTf4941vvLNiYJZi3hfV4vA+E6hc= Subject key identifier: 46:20:5B:17:58:01:78:1E:9E:74:90:D6:E4:A5:D1:85:F4:95:B7:8A Authority key identifier: 73:00:4C:55:91:03:A0:09:C4:2B:5D:E8:77:98:19:E6:6D:47:75:61 Certificate issuer: /CN=1c939443-d4d3-4122-9e02-8422f40f90c5 Certificate serial: 010D0C9F43285849C93FEDBCC44C0BFA46E3A240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5/1c939443-d4d3-4122-9e02-8422f40f90c5.mft Manifest number: 010D0C9F432858430ED6AE4515AF570837AF1838 Signing time: Thu 08 May 2025 15:00:03 +0000 Manifest this update: Thu 08 May 2025 15:00:03 +0000 Manifest next update: Sat 10 May 2025 15:00:00 +0000 Files and hashes: 1: 1c939443-d4d3-4122-9e02-8422f40f90c5.crl (hash: WDWaKgfDjHBqukPBF1/7laU8A1G/xCS5Z3WZeYnA/7E=) 2: 6fccbf45-4871-3804-845f-da32fb15f471.roa (hash: GqtWuX3Ad2TDFBAxSYcsUXzHBL93wMGPvEWRfYHId9g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5/1c939443-d4d3-4122-9e02-8422f40f90c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5/1c939443-d4d3-4122-9e02-8422f40f90c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:3f:ed:bc:c4:4c:0b:fa:46:e3:a2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c939443-d4d3-4122-9e02-8422f40f90c5 Validity Not Before: May 8 15:00:03 2025 GMT Not After : May 10 15:00:00 2025 GMT Subject: CN=6eb3cffe-c6f0-448d-8caa-a24f406b03aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:74:d5:c5:ba:b4:1c:91:ce:79:65:1b:f8:c0: d3:b7:41:e5:7f:10:a9:52:e0:5f:ac:46:86:be:98: f6:ed:85:90:46:67:73:36:b7:da:df:3c:35:ce:1d: 85:90:2d:5b:43:2c:13:01:3d:81:9e:0e:36:3a:46: a5:08:8f:f3:e8:04:6f:f6:f2:af:b4:bc:30:ea:29: a4:06:17:a6:92:57:26:19:3e:25:4f:4d:e8:39:65: d7:1c:05:79:62:01:9e:f9:48:33:e2:1d:96:16:5a: 5a:93:f5:df:bd:30:0f:2f:37:49:70:4c:dc:1c:93: 0c:a9:90:6e:54:54:c4:a2:c1:36:6e:e6:67:5f:c1: f3:f4:9c:1f:1a:c4:5f:f6:f9:c7:e3:66:27:01:c4: 4e:4d:4f:5d:df:76:89:90:2a:32:84:cd:0f:eb:10: ec:f0:9d:60:91:58:41:2f:28:eb:9d:30:f1:ee:16: 17:fe:38:8e:05:83:1f:f2:6e:9e:52:ee:e6:a9:cf: a3:d2:90:35:0d:f0:6a:e2:18:80:c4:01:33:a3:93: 76:17:c0:d5:c8:b5:0e:aa:ea:dd:d2:13:21:3d:23: de:eb:e2:13:ba:e6:42:89:26:2e:f2:90:1f:c3:78: 74:55:3d:84:db:09:f4:38:09:7b:a3:d2:e8:5f:2a: bd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:20:5B:17:58:01:78:1E:9E:74:90:D6:E4:A5:D1:85:F4:95:B7:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5/1c939443-d4d3-4122-9e02-8422f40f90c5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5/1c939443-d4d3-4122-9e02-8422f40f90c5.crl X509v3 Authority Key Identifier: keyid:73:00:4C:55:91:03:A0:09:C4:2B:5D:E8:77:98:19:E6:6D:47:75:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:d8:16:ac:38:56:38:71:b4:08:3d:64:74:bc:78:14:79:19: 93:96:c0:7a:85:21:3d:cc:a2:11:2c:c4:e6:ee:88:fa:1a:fd: 30:f9:93:cb:2d:30:3a:f3:7e:f8:7f:92:61:da:a9:d9:f1:60: 06:fc:27:66:13:68:b0:67:cd:5d:bc:7d:cc:93:a3:d1:a7:ef: 0b:a6:6d:3c:27:e1:7f:e5:94:34:aa:48:b9:2b:48:b2:ff:7c: 84:89:f7:6b:2a:08:cc:ce:ab:5b:62:66:a9:0a:be:c5:82:c3: 9b:4e:a6:f9:df:a8:1a:f5:aa:1f:d7:f4:9d:b0:73:c9:27:0f: 08:c6:48:0e:c2:45:84:64:43:f7:cf:52:55:6b:f9:e2:0b:e0: ba:64:a8:f4:5b:9b:8a:e4:d6:10:27:d8:e1:40:9b:98:ae:19: 87:cd:23:05:85:5d:66:9a:f9:4e:df:56:4b:28:d5:99:82:12: aa:91:88:15:e9:44:09:49:b1:03:b9:b6:20:d6:e9:85:11:37: 7d:b7:74:49:23:fb:f9:a7:d4:b7:3f:45:64:26:43:a5:ca:70: 9c:56:f9:5d:ba:8f:c7:fd:d1:5a:9c:0f:d7:fd:2b:e1:59:5a: 61:71:b0:1f:ad:34:2e:53:91:f5:d0:7d:93:b8:03:c8:89:56: 93:e5:f6:e8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnJP+28xEwL+kbjokAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM5Mzk0NDMtZDRkMy00MTIyLTllMDItODQyMmY0MGY5 MGM1MB4XDTI1MDUwODE1MDAwM1oXDTI1MDUxMDE1MDAwMFowLzEtMCsGA1UEAxMk NmViM2NmZmUtYzZmMC00NDhkLThjYWEtYTI0ZjQwNmIwM2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3TVxbq0HJHOeWUb+MDTt0HlfxCpUuBfrEaG vpj27YWQRmdzNrfa3zw1zh2FkC1bQywTAT2Bng42OkalCI/z6ARv9vKvtLww6imk BhemklcmGT4lT03oOWXXHAV5YgGe+Ugz4h2WFlpak/XfvTAPLzdJcEzcHJMMqZBu VFTEosE2buZnX8Hz9JwfGsRf9vnH42YnAcROTU9d33aJkCoyhM0P6xDs8J1gkVhB LyjrnTDx7hYX/jiOBYMf8m6eUu7mqc+j0pA1DfBq4hiAxAEzo5N2F8DVyLUOqurd 0hMhPSPe6+ITuuZCiSYu8pAfw3h0VT2E2wn0OAl7o9LoXyq9LwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEYgWxdYAXgennSQ1uSl0YX0lbeKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYzkz OTQ0My1kNGQzLTQxMjItOWUwMi04NDIyZjQwZjkwYzUvMWM5Mzk0NDMtZDRkMy00 MTIyLTllMDItODQyMmY0MGY5MGM1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWM5Mzk0NDMtZDRkMy00MTIyLTll MDItODQyMmY0MGY5MGM1LzFjOTM5NDQzLWQ0ZDMtNDEyMi05ZTAyLTg0MjJmNDBm OTBjNS5jcmwwHwYDVR0jBBgwFoAUcwBMVZEDoAnEK13od5gZ5m1HdWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYzkzOTQ0My1kNGQzLTQxMjItOWUwMi04NDIy ZjQwZjkwYzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAl2BasOFY4cbQIPWR0vHgU eRmTlsB6hSE9zKIRLMTm7oj6Gv0w+ZPLLTA68374f5Jh2qnZ8WAG/CdmE2iwZ81d vH3Mk6PRp+8Lpm08J+F/5ZQ0qki5K0iy/3yEifdrKgjMzqtbYmapCr7FgsObTqb5 36ga9aof1/SdsHPJJw8IxkgOwkWEZEP3z1JVa/niC+C6ZKj0W5uK5NYQJ9jhQJuY rhmHzSMFhV1mmvlO31ZLKNWZghKqkYgV6UQJSbEDubYg1umFETd9t3RJI/v5p9S3 P0VkJkOlynCcVvlduo/H/dFanA/X/SvhWVphcbAfrTQuU5H10H2TuAPIiVaT5fbo -----END CERTIFICATE-----Generated at Fri May 9 08:35:29 2025 by rpki-client