$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft File: 23c12684-32d1-4215-8c13-2912d85e2080.mft (raw, json) Hash identifier: F51MyRN7w7ZYg73IwZ3hDHWRoMdgKWShBM/R40np7tc= Subject key identifier: E1:A9:4F:D8:A4:82:52:30:B0:0C:45:52:10:3B:20:EA:F2:ED:2B:84 Authority key identifier: B9:0B:AE:23:6D:B0:71:8E:BF:6E:FE:73:4D:BC:28:A4:EC:F0:C2:7F Certificate issuer: /CN=23c12684-32d1-4215-8c13-2912d85e2080 Certificate serial: 010D0C9F43285849D44CE39F795AE38282BFED30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft Manifest number: 010D0C9F432858496FD72A74B2C272C9F5FAB305 Signing time: Mon 12 May 2025 14:00:03 +0000 Manifest this update: Mon 12 May 2025 14:00:03 +0000 Manifest next update: Thu 15 May 2025 14:00:00 +0000 Files and hashes: 1: 23c12684-32d1-4215-8c13-2912d85e2080.crl (hash: sJyLWcida0fkdHrVoYvw++8Om4vddhAvaBv2ySC3GWY=) 2: 8f690edc-6f21-33ed-b758-ed68d6ea1ce5.roa (hash: gi+oQijMRlRIwZLMhoB99/cdPpg19IkpJUgdkFMOrC8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:4c:e3:9f:79:5a:e3:82:82:bf:ed:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23c12684-32d1-4215-8c13-2912d85e2080 Validity Not Before: May 12 14:00:03 2025 GMT Not After : May 15 14:00:00 2025 GMT Subject: CN=9f4968e5-809c-45a4-a625-a98fa2000dfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e7:c3:f3:e0:8b:2b:f9:49:ab:57:84:4b:e5: c5:2e:d0:d9:21:44:ce:6c:45:0b:ba:3a:e9:26:4b: a5:84:eb:2f:e0:d7:30:2d:84:dd:57:d7:bd:0a:c0: 78:af:ec:b1:da:ee:de:0a:2c:75:7b:42:e8:52:0f: 1b:c7:3d:37:39:31:ff:a9:6b:97:bc:0d:23:a5:3e: 1a:14:8a:a0:d1:58:46:b8:5b:52:af:ab:1e:ab:77: 47:85:3c:79:1e:02:1a:a2:b7:cd:aa:fe:ed:c3:fd: f3:96:01:fc:8a:dd:f3:9b:4e:6e:f0:14:6a:76:0d: a3:7b:04:41:4d:f2:07:b9:4b:6c:b6:bb:71:66:af: c0:07:87:b0:8e:03:ab:33:bf:38:ae:50:4e:52:2b: b3:fa:8c:be:3c:df:9e:bc:fa:01:9c:c8:8b:0c:40: 99:39:ff:95:46:7f:ae:18:69:ec:26:5d:2c:76:12: 38:d9:78:ca:54:08:ac:51:ee:5f:8d:10:31:dd:30: a3:db:47:d3:15:24:86:3c:a6:74:15:bd:69:6d:0a: 97:f3:a2:17:2f:de:5e:06:7f:c0:28:09:3e:e9:48: 46:af:62:12:79:5e:32:a7:20:92:9c:a7:15:21:bf: d7:e2:18:01:2f:f4:78:ad:a3:b9:80:bc:35:f7:e0: b7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A9:4F:D8:A4:82:52:30:B0:0C:45:52:10:3B:20:EA:F2:ED:2B:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.crl X509v3 Authority Key Identifier: keyid:B9:0B:AE:23:6D:B0:71:8E:BF:6E:FE:73:4D:BC:28:A4:EC:F0:C2:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:45:aa:8b:b7:db:6b:e7:13:93:bc:58:22:77:ab:5f:a6:c8: 15:5a:0c:78:b2:0b:1d:3b:5b:88:d1:80:2a:d4:04:93:ae:1a: 05:02:c7:74:5c:61:c0:fe:ea:48:d0:25:7d:d4:2e:60:76:e1: 0b:5e:9f:fe:d4:7e:d6:55:63:8d:39:6a:07:66:36:cb:ce:81: 8c:2a:10:fb:54:c8:09:cf:92:48:90:12:ce:1d:d8:4d:ef:51: 47:84:8e:12:3a:c4:7a:62:f0:9e:af:a2:99:44:7a:7f:4f:af: 2d:aa:2c:ef:d0:63:7e:32:07:a0:27:a6:c4:b8:0c:5a:f3:f7: 8c:30:85:9c:50:c9:78:01:74:95:03:25:ff:cf:4a:f7:2e:fc: 62:11:bc:64:c4:94:46:0f:98:b6:af:53:1d:5f:b3:fd:3b:99: 47:8e:d8:4f:a9:ea:c3:5a:12:a8:bb:29:dd:3b:d3:2d:ad:10: df:8f:bd:35:60:12:8b:ba:ac:33:9d:49:9a:80:fe:69:1a:8d: cd:c1:de:ab:c0:01:a0:a0:8d:5f:ee:83:5f:e7:cc:df:a9:51: 6a:7c:4e:de:bf:5e:0c:87:92:ae:c5:93:db:82:a0:71:f6:0d: 51:85:08:aa:91:1e:09:2d:a8:8d:c0:5a:2d:af:cb:d2:2e:2b: e6:fa:e7:55 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnUTOOfeVrjgoK/7TAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNjMTI2ODQtMzJkMS00MjE1LThjMTMtMjkxMmQ4NWUy MDgwMB4XDTI1MDUxMjE0MDAwM1oXDTI1MDUxNTE0MDAwMFowLzEtMCsGA1UEAxMk OWY0OTY4ZTUtODA5Yy00NWE0LWE2MjUtYTk4ZmEyMDAwZGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwefD8+CLK/lJq1eES+XFLtDZIUTObEULujrp JkulhOsv4NcwLYTdV9e9CsB4r+yx2u7eCix1e0LoUg8bxz03OTH/qWuXvA0jpT4a FIqg0VhGuFtSr6seq3dHhTx5HgIaorfNqv7tw/3zlgH8it3zm05u8BRqdg2jewRB TfIHuUtstrtxZq/AB4ewjgOrM784rlBOUiuz+oy+PN+evPoBnMiLDECZOf+VRn+u GGnsJl0sdhI42XjKVAisUe5fjRAx3TCj20fTFSSGPKZ0Fb1pbQqX86IXL95eBn/A KAk+6UhGr2ISeV4ypyCSnKcVIb/X4hgBL/R4raO5gLw19+C3pQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOGpT9ikglIwsAxFUhA7IOry7SuEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yM2Mx MjY4NC0zMmQxLTQyMTUtOGMxMy0yOTEyZDg1ZTIwODAvMjNjMTI2ODQtMzJkMS00 MjE1LThjMTMtMjkxMmQ4NWUyMDgwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjNjMTI2ODQtMzJkMS00MjE1LThj MTMtMjkxMmQ4NWUyMDgwLzIzYzEyNjg0LTMyZDEtNDIxNS04YzEzLTI5MTJkODVl MjA4MC5jcmwwHwYDVR0jBBgwFoAUuQuuI22wcY6/bv5zTbwopOzwwn8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yM2MxMjY4NC0zMmQxLTQyMTUtOGMxMy0yOTEy ZDg1ZTIwODAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAnRaqLt9tr5xOTvFgid6tf psgVWgx4sgsdO1uI0YAq1ASTrhoFAsd0XGHA/upI0CV91C5gduELXp/+1H7WVWON OWoHZjbLzoGMKhD7VMgJz5JIkBLOHdhN71FHhI4SOsR6YvCer6KZRHp/T68tqizv 0GN+MgegJ6bEuAxa8/eMMIWcUMl4AXSVAyX/z0r3LvxiEbxkxJRGD5i2r1MdX7P9 O5lHjthPqerDWhKouyndO9MtrRDfj701YBKLuqwznUmagP5pGo3Nwd6rwAGgoI1f 7oNf58zfqVFqfE7ev14Mh5KuxZPbgqBx9g1RhQiqkR4JLaiNwFotr8vSLivm+udV -----END CERTIFICATE-----Generated at Mon May 12 20:49:04 2025 by rpki-client