$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.mft File: d47a94a4-ac39-4383-91f3-389070353c6d.mft (raw, json) Hash identifier: ABf/Mo7t869sTlAdUr+nqthbvaNgXSov5gPVaBttsuE= Subject key identifier: F5:94:DE:45:2C:99:35:82:76:C5:06:BE:3D:22:06:3E:35:D6:F6:BF Authority key identifier: 3E:0C:D4:A2:7F:33:8F:7F:84:15:BB:CA:33:D1:2E:95:B9:EA:73:8D Certificate issuer: /CN=d47a94a4-ac39-4383-91f3-389070353c6d Certificate serial: 010D0C9F43285849D1DB91BAA9A9BBD3EC46E2C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.mft Manifest number: 010D0C9F43285840D2B61A936326539069E08FC3 Signing time: Sun 11 May 2025 17:00:07 +0000 Manifest this update: Sun 11 May 2025 17:00:07 +0000 Manifest next update: Tue 13 May 2025 17:00:00 +0000 Files and hashes: 1: 95b95446-035a-3b2b-aefd-734f3fb5f220.roa (hash: z5VSruEky2CP4pU2vebTjGdp6pnXGftstr7J+1deTGA=) 2: d47a94a4-ac39-4383-91f3-389070353c6d.crl (hash: HaII840XMqKQOKaqfQuyCUJKp1RKW7e0VFebcx/VotA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:db:91:ba:a9:a9:bb:d3:ec:46:e2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d47a94a4-ac39-4383-91f3-389070353c6d Validity Not Before: May 11 17:00:07 2025 GMT Not After : May 13 17:00:00 2025 GMT Subject: CN=f632d237-e92d-4cb5-8b9c-d792c1d481b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:04:86:ba:c4:18:50:e0:10:94:41:2f:6f:fa: 03:13:63:e0:67:a0:10:8f:88:81:1f:24:e5:49:f9: f9:fe:a6:dd:12:23:08:e0:95:27:20:bd:a5:d1:18: 69:a5:f1:82:18:ee:4a:67:13:ab:3d:e1:bb:d6:50: 76:cd:ae:df:78:45:33:ea:c0:09:af:8a:83:f0:91: 1e:f1:c7:27:09:50:46:70:38:af:90:79:8b:a7:04: e2:6e:27:a1:80:90:ac:c7:d0:76:9f:0f:11:9d:a0: 58:73:e3:b3:83:70:18:4e:50:36:70:b7:96:84:e1: 24:83:ff:41:62:ae:6c:5a:9c:07:26:15:b9:4d:e7: 99:28:f3:a0:ac:08:5e:91:f5:9b:aa:4c:41:de:37: e4:e5:ce:36:87:3a:1c:f4:d9:a0:8a:d6:e6:b0:d7: 7b:69:9d:ac:33:41:81:df:e6:06:38:91:db:53:dc: ea:25:72:b5:02:7b:e7:d8:e0:a7:58:d4:fb:63:e5: 3e:05:2a:21:42:1f:37:b0:3f:27:a8:2c:57:e1:48: 03:f2:f1:71:40:31:b3:84:4e:7d:42:e2:ce:ba:df: cb:f2:dd:75:e6:51:7e:c4:dc:cc:21:62:df:80:57: c6:63:c0:f0:1e:f3:d3:d7:04:2c:46:c4:49:9d:05: 09:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:94:DE:45:2C:99:35:82:76:C5:06:BE:3D:22:06:3E:35:D6:F6:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.crl X509v3 Authority Key Identifier: keyid:3E:0C:D4:A2:7F:33:8F:7F:84:15:BB:CA:33:D1:2E:95:B9:EA:73:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:67:be:f0:29:71:f7:be:67:af:00:27:7f:d3:5f:07:d3:df: 80:62:cd:40:0f:ef:68:c2:f6:cf:73:23:27:5b:92:42:b0:29: 17:a1:65:cf:fa:5c:b8:68:42:e9:aa:82:9d:ba:5c:92:3f:85: 1d:80:13:78:87:27:be:46:f6:10:fb:eb:ec:11:41:d0:99:19: 82:d2:1a:cf:2c:5c:3f:be:e4:9b:38:05:ad:79:3b:c2:01:8b: ba:73:ec:a9:dd:cc:17:b1:38:d2:e5:d0:52:fa:87:49:0e:d4: 50:46:09:79:c9:22:37:7b:04:69:69:75:18:e5:7b:33:cd:f1: 6a:7c:95:71:0b:fa:d3:34:59:56:ea:fc:42:47:32:d7:9c:49: 18:2f:80:69:82:f8:6e:f6:0e:ce:73:d3:b5:01:e3:a7:a5:ed: ee:fe:d3:d9:2a:78:45:3c:fc:7f:7d:ee:9a:56:e4:41:92:b6: 96:6b:ee:d4:85:9e:a2:1c:f2:9a:b9:34:8b:87:de:85:17:32: 0c:ef:06:45:89:7b:97:89:f8:d0:5a:bf:db:f9:c2:06:71:96: dd:2e:91:6a:d7:2c:e2:7e:42:b3:4a:96:9e:d1:11:ad:93:b2: 31:8e:cd:1a:0e:a9:7b:e3:f5:d7:13:f5:c9:10:aa:dc:6f:f0: 19:a2:a6:a3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnR25G6qam70+xG4sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ3YTk0YTQtYWMzOS00MzgzLTkxZjMtMzg5MDcwMzUz YzZkMB4XDTI1MDUxMTE3MDAwN1oXDTI1MDUxMzE3MDAwMFowLzEtMCsGA1UEAxMk ZjYzMmQyMzctZTkyZC00Y2I1LThiOWMtZDc5MmMxZDQ4MWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApASGusQYUOAQlEEvb/oDE2PgZ6AQj4iBHyTl Sfn5/qbdEiMI4JUnIL2l0RhppfGCGO5KZxOrPeG71lB2za7feEUz6sAJr4qD8JEe 8ccnCVBGcDivkHmLpwTibiehgJCsx9B2nw8RnaBYc+Ozg3AYTlA2cLeWhOEkg/9B Yq5sWpwHJhW5TeeZKPOgrAhekfWbqkxB3jfk5c42hzoc9NmgitbmsNd7aZ2sM0GB 3+YGOJHbU9zqJXK1Anvn2OCnWNT7Y+U+BSohQh83sD8nqCxX4UgD8vFxQDGzhE59 QuLOut/L8t115lF+xNzMIWLfgFfGY8DwHvPT1wQsRsRJnQUJmQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPWU3kUsmTWCdsUGvj0iBj411va/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNDdh OTRhNC1hYzM5LTQzODMtOTFmMy0zODkwNzAzNTNjNmQvZDQ3YTk0YTQtYWMzOS00 MzgzLTkxZjMtMzg5MDcwMzUzYzZkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDQ3YTk0YTQtYWMzOS00MzgzLTkx ZjMtMzg5MDcwMzUzYzZkL2Q0N2E5NGE0LWFjMzktNDM4My05MWYzLTM4OTA3MDM1 M2M2ZC5jcmwwHwYDVR0jBBgwFoAUPgzUon8zj3+EFbvKM9Eulbnqc40wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kNDdhOTRhNC1hYzM5LTQzODMtOTFmMy0zODkw NzAzNTNjNmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBYZ77wKXH3vmevACd/018H 09+AYs1AD+9owvbPcyMnW5JCsCkXoWXP+ly4aELpqoKdulySP4UdgBN4hye+RvYQ ++vsEUHQmRmC0hrPLFw/vuSbOAWteTvCAYu6c+yp3cwXsTjS5dBS+odJDtRQRgl5 ySI3ewRpaXUY5XszzfFqfJVxC/rTNFlW6vxCRzLXnEkYL4Bpgvhu9g7Oc9O1AeOn pe3u/tPZKnhFPPx/fe6aVuRBkraWa+7UhZ6iHPKauTSLh96FFzIM7wZFiXuXifjQ Wr/b+cIGcZbdLpFq1yzifkKzSpae0RGtk7Ixjs0aDql74/XXE/XJEKrcb/AZoqaj -----END CERTIFICATE-----Generated at Mon May 12 10:19:41 2025 by rpki-client