$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7/040ef740-8591-41e5-89d0-9b0266d3fcf7.mft File: 040ef740-8591-41e5-89d0-9b0266d3fcf7.mft (raw, json) Hash identifier: 1HGlYnqYoKuhejtUshRbVQr4Ozlh6Er615eagaiKRuM= Subject key identifier: 59:CA:D9:60:7F:91:41:25:10:16:49:8E:28:7E:BA:B6:7B:E6:CE:EB Authority key identifier: E6:D9:45:02:A4:9D:FB:12:D1:F5:3F:49:F1:59:65:E3:B4:7F:81:48 Certificate issuer: /CN=040ef740-8591-41e5-89d0-9b0266d3fcf7 Certificate serial: 010D0C9F43285849D4C4016DF313131E8B6C0A84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7/040ef740-8591-41e5-89d0-9b0266d3fcf7.mft Manifest number: 010D0C9F432858496AB1F62EA66086317C19CCA7 Signing time: Mon 12 May 2025 18:00:03 +0000 Manifest this update: Mon 12 May 2025 18:00:03 +0000 Manifest next update: Thu 15 May 2025 18:00:00 +0000 Files and hashes: 1: 040ef740-8591-41e5-89d0-9b0266d3fcf7.crl (hash: q0Dmulw1b1FbEyM6lyvYJtSyMg69DqkP6NepI483vMQ=) 2: a19ecb4c-1dbf-36e3-a18a-bdc35d125547.roa (hash: taltooYRtZLXAw/WdzW6gL/iOd4oL+RJwjJtNdHOJqc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7/040ef740-8591-41e5-89d0-9b0266d3fcf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7/040ef740-8591-41e5-89d0-9b0266d3fcf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:c4:01:6d:f3:13:13:1e:8b:6c:0a:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040ef740-8591-41e5-89d0-9b0266d3fcf7 Validity Not Before: May 12 18:00:03 2025 GMT Not After : May 15 18:00:00 2025 GMT Subject: CN=7586e1c8-3a0e-4938-aa23-4dea21209802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:32:88:4b:ad:3a:b4:e9:64:ab:fd:7a:8c:28: 68:99:5c:75:d5:89:14:15:b9:0c:ae:cc:3c:e4:f3: f2:af:97:e8:b7:f9:97:ca:10:03:05:df:b1:15:a5: 96:b2:b2:b3:c3:a4:0d:b8:1a:e5:5c:31:7a:82:96: ff:ba:18:cf:ac:ce:21:b7:78:c7:43:4e:46:d4:04: 02:f1:18:1a:2e:89:18:93:9e:b2:2a:16:cb:f6:0a: 2a:24:b8:fc:96:fd:f2:1b:0a:96:c8:a8:d3:87:8c: b3:96:20:5b:55:45:28:86:f7:be:17:6f:8d:90:ab: 4b:08:2d:36:11:7e:80:09:cb:22:bf:99:4a:31:53: 4a:44:c6:38:16:ed:ec:5f:1a:0c:66:4c:a2:c8:28: ab:9a:98:72:8c:f6:5a:3f:c8:e5:f3:51:f7:be:c2: d4:fe:d1:55:60:9f:0a:fd:44:fc:c8:09:20:23:44: 5e:f1:37:cf:2f:88:26:b2:a5:54:c3:eb:57:1f:90: 47:8b:1b:c2:c5:4e:6a:ca:b9:ca:2e:68:09:86:0e: 78:e4:3d:6a:a6:86:a9:8d:93:f5:dc:65:b0:ea:d8: f7:fa:2d:27:a3:36:3a:a7:e1:eb:8d:1b:84:3c:68: 69:c0:06:97:b2:5d:cc:5c:a8:7b:e7:72:77:5f:9b: c5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:CA:D9:60:7F:91:41:25:10:16:49:8E:28:7E:BA:B6:7B:E6:CE:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7/040ef740-8591-41e5-89d0-9b0266d3fcf7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7/040ef740-8591-41e5-89d0-9b0266d3fcf7.crl X509v3 Authority Key Identifier: keyid:E6:D9:45:02:A4:9D:FB:12:D1:F5:3F:49:F1:59:65:E3:B4:7F:81:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:59:68:c1:70:78:8f:59:3a:5e:d6:62:66:fa:45:75:10:65: 76:bd:af:fc:27:62:21:1e:33:17:20:10:01:06:7f:24:88:c7: e1:8e:22:8f:c7:f5:bd:01:dc:aa:15:df:8e:9d:a9:18:51:ff: 72:17:65:a1:ae:5d:c8:90:88:69:e0:bc:1d:e2:58:a7:9a:20: 5a:e3:35:70:8d:b0:2a:93:58:f6:eb:0e:ae:e4:d9:0d:08:1e: 14:89:a7:e3:c6:ea:79:1a:ac:2b:f0:73:4c:f7:59:82:d2:e0: 95:8c:b0:0c:73:c6:3c:5e:73:e1:97:51:df:50:1e:0f:73:f4: 46:08:fa:2d:24:34:d0:7c:14:dd:47:1d:f3:2f:0c:67:58:cf: 6e:03:56:d4:2f:f3:bf:27:62:f6:7f:26:c5:00:1a:ef:00:8a: d7:68:7c:d3:d5:1e:8e:b5:6c:65:e9:3f:b6:d2:6a:10:4e:db: 0b:40:45:f9:f2:67:c0:3c:67:8b:7c:ed:5d:bf:e6:90:7d:e0: 62:09:61:78:cb:fd:9a:1d:1d:fb:12:36:09:16:6a:a8:c9:e8: f2:4a:8f:2d:34:bb:5c:35:93:14:11:64:46:7f:ee:20:da:34: 63:71:53:65:e7:a0:86:55:bf:26:28:8d:20:95:f5:94:0d:b6: cf:d0:9a:34 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnUxAFt8xMTHotsCoQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQwZWY3NDAtODU5MS00MWU1LTg5ZDAtOWIwMjY2ZDNm Y2Y3MB4XDTI1MDUxMjE4MDAwM1oXDTI1MDUxNTE4MDAwMFowLzEtMCsGA1UEAxMk NzU4NmUxYzgtM2EwZS00OTM4LWFhMjMtNGRlYTIxMjA5ODAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTKIS606tOlkq/16jChomVx11YkUFbkMrsw8 5PPyr5fot/mXyhADBd+xFaWWsrKzw6QNuBrlXDF6gpb/uhjPrM4ht3jHQ05G1AQC 8RgaLokYk56yKhbL9goqJLj8lv3yGwqWyKjTh4yzliBbVUUohve+F2+NkKtLCC02 EX6ACcsiv5lKMVNKRMY4Fu3sXxoMZkyiyCirmphyjPZaP8jl81H3vsLU/tFVYJ8K /UT8yAkgI0Re8TfPL4gmsqVUw+tXH5BHixvCxU5qyrnKLmgJhg545D1qpoapjZP1 3GWw6tj3+i0nozY6p+HrjRuEPGhpwAaXsl3MXKh753J3X5vFgwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFnK2WB/kUElEBZJjih+urZ75s7rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wNDBl Zjc0MC04NTkxLTQxZTUtODlkMC05YjAyNjZkM2ZjZjcvMDQwZWY3NDAtODU5MS00 MWU1LTg5ZDAtOWIwMjY2ZDNmY2Y3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDQwZWY3NDAtODU5MS00MWU1LTg5 ZDAtOWIwMjY2ZDNmY2Y3LzA0MGVmNzQwLTg1OTEtNDFlNS04OWQwLTliMDI2NmQz ZmNmNy5jcmwwHwYDVR0jBBgwFoAU5tlFAqSd+xLR9T9J8Vll47R/gUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wNDBlZjc0MC04NTkxLTQxZTUtODlkMC05YjAy NjZkM2ZjZjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA+WWjBcHiPWTpe1mJm+kV1 EGV2va/8J2IhHjMXIBABBn8kiMfhjiKPx/W9AdyqFd+OnakYUf9yF2Whrl3IkIhp 4Lwd4linmiBa4zVwjbAqk1j26w6u5NkNCB4Uiafjxup5Gqwr8HNM91mC0uCVjLAM c8Y8XnPhl1HfUB4Pc/RGCPotJDTQfBTdRx3zLwxnWM9uA1bUL/O/J2L2fybFABrv AIrXaHzT1R6OtWxl6T+20moQTtsLQEX58mfAPGeLfO1dv+aQfeBiCWF4y/2aHR37 EjYJFmqoyejySo8tNLtcNZMUEWRGf+4g2jRjcVNl56CGVb8mKI0glfWUDbbP0Jo0 -----END CERTIFICATE-----Generated at Tue May 13 00:56:01 2025 by rpki-client