$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fd804af-5006-4871-96a7-e7dfad97b8b5/1fd804af-5006-4871-96a7-e7dfad97b8b5.mft File: 1fd804af-5006-4871-96a7-e7dfad97b8b5.mft (raw, json) Hash identifier: WEskpOHDk4gSSQ1g5JJVhONNe8nYfStOF+C+5TiDY4o= Subject key identifier: 10:28:79:11:BA:2C:46:CD:90:BA:61:16:42:C4:22:52:26:E3:B7:54 Authority key identifier: 74:42:CC:9A:F1:F8:C4:94:2B:73:A0:6E:1C:2F:77:D6:E8:30:BD:3D Certificate issuer: /CN=1fd804af-5006-4871-96a7-e7dfad97b8b5 Certificate serial: 010D0C9F43285849D770EAD2B8BA52BFECEADF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fd804af-5006-4871-96a7-e7dfad97b8b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fd804af-5006-4871-96a7-e7dfad97b8b5/1fd804af-5006-4871-96a7-e7dfad97b8b5.mft Manifest number: 010D0C9F43285849B32DFBADFD857E94CA78E12D Signing time: Tue 13 May 2025 17:00:03 +0000 Manifest this update: Tue 13 May 2025 17:00:03 +0000 Manifest next update: Thu 15 May 2025 17:00:00 +0000 Files and hashes: 1: 1fd804af-5006-4871-96a7-e7dfad97b8b5.crl (hash: Nfpu9E+KVL8fhhTXWkTliLbI2g5KYn/Ip1Xt9jIMyts=) 2: d9c4f499-8dfb-3fe9-8f2e-6ac7436f62dc.roa (hash: xNljlfnqZaPXY28ZtT6IZtoBBXtDkwCnFlR3zu0db4M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fd804af-5006-4871-96a7-e7dfad97b8b5/1fd804af-5006-4871-96a7-e7dfad97b8b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fd804af-5006-4871-96a7-e7dfad97b8b5/1fd804af-5006-4871-96a7-e7dfad97b8b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fd804af-5006-4871-96a7-e7dfad97b8b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d7:70:ea:d2:b8:ba:52:bf:ec:ea:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fd804af-5006-4871-96a7-e7dfad97b8b5 Validity Not Before: May 13 17:00:03 2025 GMT Not After : May 15 17:00:00 2025 GMT Subject: CN=0d846cce-0d43-4bc4-bdef-831fa6e71145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c5:e1:af:04:94:af:9d:12:17:85:42:c5:20: 62:7e:b3:5e:0e:ce:7f:e6:c2:d0:8e:49:0d:2d:b4: 11:57:f6:b9:f5:c2:4e:95:e3:81:38:a3:ce:44:94: 84:b3:79:30:83:29:c2:20:ea:96:3d:49:44:37:91: cb:87:b7:bd:92:46:51:a6:1d:7b:db:36:17:79:51: 37:c4:d6:f2:22:71:ec:a5:6e:6d:df:11:bd:08:49: 5a:a6:df:83:4e:80:85:e7:48:24:f3:55:a8:e4:23: f1:a7:7c:1d:5e:87:37:25:5a:40:f5:da:85:8c:31: 08:15:f0:df:7f:91:fe:23:20:7f:0b:dc:63:cc:e7: 81:19:27:8c:55:23:c8:5b:19:f8:a0:36:3f:4a:34: b0:ff:bf:e9:7a:3a:70:7b:bd:b8:e0:ae:4a:91:10: 68:99:19:f2:62:f2:a2:c6:5c:0f:a8:0c:9a:74:6f: 0c:0c:0a:43:25:44:1e:ff:59:b8:12:c2:66:d5:d3: 22:2b:ab:4b:1f:7a:51:23:c5:22:5e:fe:9a:b4:2c: 6e:47:9c:b1:17:c3:46:c7:7a:4e:a7:f6:dd:4c:bb: b9:bf:72:ea:7e:0e:19:2d:f2:a7:85:8f:05:3f:8c: 50:5d:e3:7e:8f:18:2d:74:78:ec:04:75:54:5b:3e: 8e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:28:79:11:BA:2C:46:CD:90:BA:61:16:42:C4:22:52:26:E3:B7:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fd804af-5006-4871-96a7-e7dfad97b8b5/1fd804af-5006-4871-96a7-e7dfad97b8b5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fd804af-5006-4871-96a7-e7dfad97b8b5/1fd804af-5006-4871-96a7-e7dfad97b8b5.crl X509v3 Authority Key Identifier: keyid:74:42:CC:9A:F1:F8:C4:94:2B:73:A0:6E:1C:2F:77:D6:E8:30:BD:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fd804af-5006-4871-96a7-e7dfad97b8b5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:de:4a:82:e5:0a:c2:48:4c:0c:93:3d:77:56:57:7a:4c:c9: 9d:09:d2:de:70:52:ec:c8:74:82:13:39:34:2e:4f:64:fa:a5: 26:e7:86:9f:82:91:4f:1a:07:57:db:45:89:d4:1d:f0:c2:41: a6:c2:81:26:c7:05:17:32:fc:eb:77:19:80:4c:a7:ed:33:9a: 1c:b7:cb:c4:0c:a8:87:6d:97:e5:ed:02:46:7f:6b:5f:6c:1f: c6:e4:9e:bc:bd:66:ac:4c:1d:f4:71:c6:d9:89:5f:cd:29:47: 87:1c:6a:42:b1:53:86:ba:b7:04:0d:45:bf:32:3f:03:f1:04: c6:1e:83:32:a3:22:99:7d:b2:0e:5f:1b:a5:c0:53:2a:c7:27: 1e:d6:c9:47:34:c2:f0:42:fb:51:8a:dc:ef:48:e4:44:bb:71: 35:b4:63:4b:96:f0:05:14:71:a8:d6:c8:21:33:08:4c:7c:6e: 72:46:c8:de:0d:c9:2e:df:84:9f:90:4a:d3:dd:7e:8b:40:de: c1:fc:80:78:ed:b8:18:c2:88:61:8c:07:ba:76:8f:f7:5c:c3: 61:df:63:ec:97:b2:db:03:94:b0:b4:e3:6e:de:56:ed:32:5f: 5b:2d:02:04:d2:e7:23:0f:54:83:54:26:49:99:34:1b:3d:25: 7a:3f:94:85 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnXcOrSuLpSv+zq34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZkODA0YWYtNTAwNi00ODcxLTk2YTctZTdkZmFkOTdi OGI1MB4XDTI1MDUxMzE3MDAwM1oXDTI1MDUxNTE3MDAwMFowLzEtMCsGA1UEAxMk MGQ4NDZjY2UtMGQ0My00YmM0LWJkZWYtODMxZmE2ZTcxMTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8XhrwSUr50SF4VCxSBifrNeDs5/5sLQjkkN LbQRV/a59cJOleOBOKPORJSEs3kwgynCIOqWPUlEN5HLh7e9kkZRph172zYXeVE3 xNbyInHspW5t3xG9CElapt+DToCF50gk81Wo5CPxp3wdXoc3JVpA9dqFjDEIFfDf f5H+IyB/C9xjzOeBGSeMVSPIWxn4oDY/SjSw/7/pejpwe7244K5KkRBomRnyYvKi xlwPqAyadG8MDApDJUQe/1m4EsJm1dMiK6tLH3pRI8UiXv6atCxuR5yxF8NGx3pO p/bdTLu5v3Lqfg4ZLfKnhY8FP4xQXeN+jxgtdHjsBHVUWz6OVQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBAoeRG6LEbNkLphFkLEIlIm47dUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xZmQ4 MDRhZi01MDA2LTQ4NzEtOTZhNy1lN2RmYWQ5N2I4YjUvMWZkODA0YWYtNTAwNi00 ODcxLTk2YTctZTdkZmFkOTdiOGI1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWZkODA0YWYtNTAwNi00ODcxLTk2 YTctZTdkZmFkOTdiOGI1LzFmZDgwNGFmLTUwMDYtNDg3MS05NmE3LWU3ZGZhZDk3 YjhiNS5jcmwwHwYDVR0jBBgwFoAUdELMmvH4xJQrc6BuHC931ugwvT0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xZmQ4MDRhZi01MDA2LTQ4NzEtOTZhNy1lN2Rm YWQ5N2I4YjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBj3kqC5QrCSEwMkz13Vld6 TMmdCdLecFLsyHSCEzk0Lk9k+qUm54afgpFPGgdX20WJ1B3wwkGmwoEmxwUXMvzr dxmATKftM5oct8vEDKiHbZfl7QJGf2tfbB/G5J68vWasTB30ccbZiV/NKUeHHGpC sVOGurcEDUW/Mj8D8QTGHoMyoyKZfbIOXxulwFMqxyce1slHNMLwQvtRitzvSORE u3E1tGNLlvAFFHGo1sghMwhMfG5yRsjeDcku34SfkErT3X6LQN7B/IB47bgYwohh jAe6do/3XMNh32Psl7LbA5SwtONu3lbtMl9bLQIE0ucjD1SDVCZJmTQbPSV6P5SF -----END CERTIFICATE-----Generated at Tue May 13 19:08:01 2025 by rpki-client