$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft File: de111c10-2de5-41fa-a9e4-1e49a0479199.mft (raw, json) Hash identifier: faXxTdUwg+AgwH2PDqz9+MBFU6L50dB78g1yX2tD4eU= Subject key identifier: CA:37:C6:74:2D:C6:BA:A5:34:D3:81:A7:37:AA:6B:00:27:8C:93:2D Authority key identifier: 23:7F:B2:23:8D:10:59:B6:C8:AF:3F:38:4B:94:7A:7C:CA:92:69:BF Certificate issuer: /CN=de111c10-2de5-41fa-a9e4-1e49a0479199 Certificate serial: 010D0C9F43285849C9B70BAF9291B50B5235F680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft Manifest number: 010D0C9F43285840C7A133CC5EFAFBE0119B760F Signing time: Thu 08 May 2025 19:00:03 +0000 Manifest this update: Thu 08 May 2025 19:00:03 +0000 Manifest next update: Sun 11 May 2025 19:00:00 +0000 Files and hashes: 1: de111c10-2de5-41fa-a9e4-1e49a0479199.crl (hash: Qbr7mUfzg2u/+8Q1iFi21Z4OOFYaTMDxahE03J7eAHI=) 2: f9eeb661-56ce-3c62-b28c-11e037b120b4.roa (hash: K2anfdcaKCprEqhdb29Eh8BvD2IKZAXTVr+NJzBEB1Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:b7:0b:af:92:91:b5:0b:52:35:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de111c10-2de5-41fa-a9e4-1e49a0479199 Validity Not Before: May 8 19:00:03 2025 GMT Not After : May 11 19:00:00 2025 GMT Subject: CN=63744063-640b-47c0-b334-9e054019e8e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:20:ea:7f:86:d8:dc:62:82:78:13:e6:0b:2c: 92:80:d1:03:cf:9f:11:06:31:60:06:ff:b5:67:58: e4:18:e7:07:df:a4:f2:f1:33:ec:84:51:db:46:c3: 1d:f1:30:08:af:5f:fb:12:29:92:cd:76:42:46:85: 6c:7f:3e:33:29:9f:47:11:d6:c7:d0:95:96:7c:2e: b2:93:41:51:35:15:68:2b:60:ad:25:af:9d:e6:bb: ce:9b:35:e1:2e:76:97:7c:61:9c:84:5a:7d:74:bd: 12:a1:04:56:6a:58:8e:7e:b3:76:4a:bc:ad:a9:fb: c5:91:55:23:27:f1:b7:66:40:42:72:0d:9a:3b:2d: e8:c5:a7:a9:ed:96:4f:25:fd:60:81:9d:04:11:58: 43:71:44:32:52:84:01:bd:5d:da:60:80:3a:9a:ae: 30:52:86:dd:b0:3a:df:8c:7a:41:3c:41:d9:56:7d: a9:71:7e:0a:81:95:23:cf:2c:6e:6e:86:86:3b:ba: cc:4b:15:e8:d5:e8:4e:10:18:29:4e:28:39:bd:70: 06:aa:7a:69:7a:6b:61:c3:8f:28:1c:1e:fa:78:cb: 51:9a:86:f7:7b:b9:02:6e:46:f9:53:7c:c1:90:3c: 06:55:46:cd:a1:3f:c5:dc:ad:c4:3b:7f:7e:ee:21: 36:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:37:C6:74:2D:C6:BA:A5:34:D3:81:A7:37:AA:6B:00:27:8C:93:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.crl X509v3 Authority Key Identifier: keyid:23:7F:B2:23:8D:10:59:B6:C8:AF:3F:38:4B:94:7A:7C:CA:92:69:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:b9:4c:87:08:b1:b9:fb:f0:5f:7d:b6:0c:e6:91:d4:50:a3: d9:fe:80:b2:2f:f2:e7:78:26:11:ac:46:86:6d:4b:2b:81:73: 07:4d:16:93:c2:17:f5:36:e9:71:fa:c1:0d:78:2c:18:58:7c: 06:14:c8:c4:6c:41:5d:57:d9:67:59:a4:d5:3c:15:a2:3e:c2: 6b:08:83:f5:ca:5c:5f:03:ec:96:b1:26:99:97:ab:76:67:77: fe:42:47:d3:0d:2f:f4:c0:d4:2c:16:f3:b5:c1:35:52:69:f3: f7:1b:9f:28:61:5a:39:18:ae:8d:c0:55:2f:3b:bb:ef:6b:4a: 67:0e:88:42:0c:ae:58:c2:0c:f8:a1:7d:fa:d4:9d:50:b2:3f: a6:18:7a:90:24:00:49:04:d0:6e:e1:e0:88:94:06:4c:e6:be: 5c:43:fa:a1:2b:02:fa:62:ba:6d:84:00:4d:e3:65:bc:4d:31: 60:bb:d0:79:22:48:81:e3:c0:99:89:cb:d6:e6:15:54:8f:1f: 4f:75:0c:0d:e4:13:0f:a7:3c:a4:00:9c:e4:38:fc:bf:3d:ef: 2f:6a:c0:d3:2a:42:ca:4f:90:c3:89:a1:fb:52:95:f5:11:f0: 78:eb:6f:78:cd:ca:cc:7a:3c:3f:e9:1e:84:3d:f5:d5:f1:d7: 65:77:2b:8e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnJtwuvkpG1C1I19oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUxMTFjMTAtMmRlNS00MWZhLWE5ZTQtMWU0OWEwNDc5 MTk5MB4XDTI1MDUwODE5MDAwM1oXDTI1MDUxMTE5MDAwMFowLzEtMCsGA1UEAxMk NjM3NDQwNjMtNjQwYi00N2MwLWIzMzQtOWUwNTQwMTllOGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSDqf4bY3GKCeBPmCyySgNEDz58RBjFgBv+1 Z1jkGOcH36Ty8TPshFHbRsMd8TAIr1/7EimSzXZCRoVsfz4zKZ9HEdbH0JWWfC6y k0FRNRVoK2CtJa+d5rvOmzXhLnaXfGGchFp9dL0SoQRWaliOfrN2SrytqfvFkVUj J/G3ZkBCcg2aOy3oxaep7ZZPJf1ggZ0EEVhDcUQyUoQBvV3aYIA6mq4wUobdsDrf jHpBPEHZVn2pcX4KgZUjzyxuboaGO7rMSxXo1ehOEBgpTig5vXAGqnppemthw48o HB76eMtRmob3e7kCbkb5U3zBkDwGVUbNoT/F3K3EO39+7iE2bQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMo3xnQtxrqlNNOBpzeqawAnjJMtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZTEx MWMxMC0yZGU1LTQxZmEtYTllNC0xZTQ5YTA0NzkxOTkvZGUxMTFjMTAtMmRlNS00 MWZhLWE5ZTQtMWU0OWEwNDc5MTk5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGUxMTFjMTAtMmRlNS00MWZhLWE5 ZTQtMWU0OWEwNDc5MTk5L2RlMTExYzEwLTJkZTUtNDFmYS1hOWU0LTFlNDlhMDQ3 OTE5OS5jcmwwHwYDVR0jBBgwFoAUI3+yI40QWbbIrz84S5R6fMqSab8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZTExMWMxMC0yZGU1LTQxZmEtYTllNC0xZTQ5 YTA0NzkxOTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAYuUyHCLG5+/BffbYM5pHU UKPZ/oCyL/LneCYRrEaGbUsrgXMHTRaTwhf1Nulx+sENeCwYWHwGFMjEbEFdV9ln WaTVPBWiPsJrCIP1ylxfA+yWsSaZl6t2Z3f+QkfTDS/0wNQsFvO1wTVSafP3G58o YVo5GK6NwFUvO7vva0pnDohCDK5Ywgz4oX361J1Qsj+mGHqQJABJBNBu4eCIlAZM 5r5cQ/qhKwL6YrpthABN42W8TTFgu9B5IkiB48CZicvW5hVUjx9PdQwN5BMPpzyk AJzkOPy/Pe8vasDTKkLKT5DDiaH7UpX1EfB46294zcrMejw/6R6EPfXV8ddldyuO -----END CERTIFICATE-----Generated at Thu May 8 23:31:16 2025 by rpki-client