$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9986c58-4c7a-450f-9355-1382b40eb86e/e9986c58-4c7a-450f-9355-1382b40eb86e.mft File: e9986c58-4c7a-450f-9355-1382b40eb86e.mft (raw, json) Hash identifier: c046irUiWz6HlQ6qF1TidBw+KA/oNDPnheJKX2eb4J8= Subject key identifier: A3:00:E7:3D:16:8D:46:71:F3:09:1E:19:31:0A:CA:52:27:50:B6:EF Authority key identifier: 93:39:46:E8:CC:9A:E5:5A:55:8B:D1:88:85:97:2B:D5:C8:E6:1D:22 Certificate issuer: /CN=e9986c58-4c7a-450f-9355-1382b40eb86e Certificate serial: 010D0C9F43285849CCDB18B614F76952B49A8700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9986c58-4c7a-450f-9355-1382b40eb86e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9986c58-4c7a-450f-9355-1382b40eb86e/e9986c58-4c7a-450f-9355-1382b40eb86e.mft Manifest number: 010D0C9F432858482FC5AA32D15BE98009271396 Signing time: Fri 09 May 2025 22:00:08 +0000 Manifest this update: Fri 09 May 2025 22:00:08 +0000 Manifest next update: Mon 12 May 2025 22:00:00 +0000 Files and hashes: 1: 07cdf4ff-3d86-3034-9063-bc02000bef1e.roa (hash: bravv1lLKTPMLkcgxZj+3hbx9OvCi5BSR65kucULQrM=) 2: e9986c58-4c7a-450f-9355-1382b40eb86e.crl (hash: cULncu0adztt3Ksxq70/XFhmdU5dDTPlnfR79Skip+Y=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9986c58-4c7a-450f-9355-1382b40eb86e/e9986c58-4c7a-450f-9355-1382b40eb86e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9986c58-4c7a-450f-9355-1382b40eb86e/e9986c58-4c7a-450f-9355-1382b40eb86e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9986c58-4c7a-450f-9355-1382b40eb86e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cc:db:18:b6:14:f7:69:52:b4:9a:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9986c58-4c7a-450f-9355-1382b40eb86e Validity Not Before: May 9 22:00:08 2025 GMT Not After : May 12 22:00:00 2025 GMT Subject: CN=820be345-38f1-40a1-aa92-7463331ab5e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:50:91:79:b9:81:5c:03:c2:87:27:b3:cd:8e: a9:33:30:df:a9:20:24:0f:7a:ec:37:6a:af:b3:82: b6:ae:44:bc:68:e2:65:83:7b:af:d0:b5:b0:85:fd: 48:a8:07:fe:d6:bb:42:16:98:89:b3:87:5a:f8:07: 8e:a6:e5:4a:78:3c:b9:58:3a:eb:cd:09:5f:4c:71: 94:92:94:7b:07:c3:74:fd:30:cc:d6:36:1b:04:e2: b0:2f:c4:42:34:21:58:4a:d9:1e:42:8a:bc:59:5d: 15:71:f8:96:7b:e0:c6:85:47:78:68:07:76:20:9b: bd:31:8f:92:1a:25:b1:3c:de:eb:51:de:0a:ed:7b: 93:f8:57:91:a9:c1:1f:a5:87:36:51:f8:73:5a:d0: 8b:e3:c4:78:9b:d1:7e:dd:1a:a1:30:59:3e:c1:b8: fc:ce:77:de:f8:9f:5f:ab:b2:c4:3e:53:d3:81:8a: cb:bc:c8:e2:37:1f:d3:84:6b:1c:4d:bf:37:a6:79: 44:76:54:13:44:a8:b6:78:5f:aa:a9:31:ce:3c:8b: b8:05:f9:f8:67:fe:55:df:0c:93:0d:53:23:de:29: ae:8b:68:70:b8:10:3e:eb:32:77:d5:b3:f6:3f:8d: cc:c2:dc:aa:48:f9:d2:03:d2:1b:22:86:c3:13:df: b8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:00:E7:3D:16:8D:46:71:F3:09:1E:19:31:0A:CA:52:27:50:B6:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9986c58-4c7a-450f-9355-1382b40eb86e/e9986c58-4c7a-450f-9355-1382b40eb86e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9986c58-4c7a-450f-9355-1382b40eb86e/e9986c58-4c7a-450f-9355-1382b40eb86e.crl X509v3 Authority Key Identifier: keyid:93:39:46:E8:CC:9A:E5:5A:55:8B:D1:88:85:97:2B:D5:C8:E6:1D:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9986c58-4c7a-450f-9355-1382b40eb86e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:5e:7f:d1:99:d8:8e:ac:9c:70:60:62:de:0a:13:1a:3b:79: 12:19:39:cb:fb:1e:89:e0:d3:d2:07:6e:18:df:0d:4e:13:c9: 40:9f:45:36:ea:1b:db:3a:51:4f:0c:7e:d9:91:c7:94:51:ee: 8b:cc:6c:5e:41:fd:09:43:08:54:d2:4d:75:68:72:3e:58:b0: d0:ad:79:f4:0f:53:9d:33:a4:9f:2e:e5:3b:4d:ec:7c:47:99: a9:8e:68:ca:4b:c8:2d:31:22:09:13:14:75:f2:66:ed:89:b0: 01:d2:0c:5a:5f:67:ee:a0:d6:b9:ac:72:cd:5a:6d:6d:94:8e: 11:20:04:ab:8a:71:53:6e:bd:cd:62:b6:ec:d3:07:86:5c:57: 68:79:8e:9c:e6:1b:6b:7e:c0:3c:01:f5:d4:db:fd:36:16:5b: 3a:70:f3:e7:5f:2f:6a:fe:b7:09:a8:73:36:66:28:e5:dd:c7: 28:fd:c5:62:60:bd:61:83:08:01:16:86:54:e7:9f:38:7f:3f: 8f:23:3b:2f:93:df:a4:93:98:e8:6a:54:1c:35:7e:3f:a2:3e: 0f:a7:cd:35:c7:4b:4e:60:06:47:b2:69:9f:a2:d9:99:09:6c: 68:47:3c:2b:40:40:eb:2c:38:57:07:e4:2b:26:d5:08:30:d7: 1c:fa:31:32 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnM2xi2FPdpUrSahwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk5ODZjNTgtNGM3YS00NTBmLTkzNTUtMTM4MmI0MGVi ODZlMB4XDTI1MDUwOTIyMDAwOFoXDTI1MDUxMjIyMDAwMFowLzEtMCsGA1UEAxMk ODIwYmUzNDUtMzhmMS00MGExLWFhOTItNzQ2MzMzMWFiNWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1CRebmBXAPChyezzY6pMzDfqSAkD3rsN2qv s4K2rkS8aOJlg3uv0LWwhf1IqAf+1rtCFpiJs4da+AeOpuVKeDy5WDrrzQlfTHGU kpR7B8N0/TDM1jYbBOKwL8RCNCFYStkeQoq8WV0VcfiWe+DGhUd4aAd2IJu9MY+S GiWxPN7rUd4K7XuT+FeRqcEfpYc2UfhzWtCL48R4m9F+3RqhMFk+wbj8znfe+J9f q7LEPlPTgYrLvMjiNx/ThGscTb83pnlEdlQTRKi2eF+qqTHOPIu4Bfn4Z/5V3wyT DVMj3imui2hwuBA+6zJ31bP2P43MwtyqSPnSA9IbIobDE9+4JwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKMA5z0WjUZx8wkeGTEKylInULbvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOTk4 NmM1OC00YzdhLTQ1MGYtOTM1NS0xMzgyYjQwZWI4NmUvZTk5ODZjNTgtNGM3YS00 NTBmLTkzNTUtMTM4MmI0MGViODZlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTk5ODZjNTgtNGM3YS00NTBmLTkz NTUtMTM4MmI0MGViODZlL2U5OTg2YzU4LTRjN2EtNDUwZi05MzU1LTEzODJiNDBl Yjg2ZS5jcmwwHwYDVR0jBBgwFoAUkzlG6Mya5VpVi9GIhZcr1cjmHSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOTk4NmM1OC00YzdhLTQ1MGYtOTM1NS0xMzgy YjQwZWI4NmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAfXn/RmdiOrJxwYGLeChMa O3kSGTnL+x6J4NPSB24Y3w1OE8lAn0U26hvbOlFPDH7ZkceUUe6LzGxeQf0JQwhU 0k11aHI+WLDQrXn0D1OdM6SfLuU7Tex8R5mpjmjKS8gtMSIJExR18mbtibAB0gxa X2fuoNa5rHLNWm1tlI4RIASrinFTbr3NYrbs0weGXFdoeY6c5htrfsA8AfXU2/02 Fls6cPPnXy9q/rcJqHM2Zijl3cco/cViYL1hgwgBFoZU5584fz+PIzsvk9+kk5jo alQcNX4/oj4Pp801x0tOYAZHsmmfotmZCWxoRzwrQEDrLDhXB+QrJtUIMNcc+jEy -----END CERTIFICATE-----Generated at Sat May 10 10:44:11 2025 by rpki-client