$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft File: 2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft (raw, json) Hash identifier: /KPa3dYd7p244p0TF8WuFi9ZhKqIqAS+6Lkpnot0hJk= Subject key identifier: A1:47:DA:4A:1C:A5:A1:44:FE:0F:27:AA:3C:97:D4:CA:D9:74:31:E3 Authority key identifier: 2B:89:09:2B:FF:EC:8F:78:27:D8:87:D9:14:DA:8E:24:E7:4C:1C:62 Certificate issuer: /CN=2bc648c2-2f95-48f5-acb7-9e8a2f9123a7 Certificate serial: 010D0C9F43285849D6472859A8FCC38A70AE5900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft Manifest number: 010D0C9F432858496F11AC5DAA983393700605A5 Signing time: Tue 13 May 2025 07:00:07 +0000 Manifest this update: Tue 13 May 2025 07:00:07 +0000 Manifest next update: Thu 15 May 2025 07:00:00 +0000 Files and hashes: 1: 1e1be535-508c-330e-a6e2-85aa2a913569.roa (hash: +SOLk0RtR4b1jdX1nxR/dJqT780U4pQmldlvhmhHFSM=) 2: 2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl (hash: o/rSEXhIIC97J6HdE9ymBaZWFRMI64yMQtFks7TTOtk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d6:47:28:59:a8:fc:c3:8a:70:ae:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc648c2-2f95-48f5-acb7-9e8a2f9123a7 Validity Not Before: May 13 07:00:07 2025 GMT Not After : May 15 07:00:00 2025 GMT Subject: CN=3a83c875-8350-4537-9800-20f46ac7f20b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:70:f6:a3:9f:5a:b5:1a:f8:f1:e6:e1:3d:4c: 7a:aa:1f:b4:ff:33:bd:7a:45:07:95:c5:8a:83:26: 9e:e5:ee:1f:f8:b5:bc:43:90:48:42:8f:93:d5:7e: b1:75:3f:02:fc:5a:8b:1a:33:14:11:72:70:4b:6d: 31:35:07:6d:be:15:9a:c2:56:20:ea:45:12:96:4c: 7f:c7:86:aa:56:75:5c:05:10:5b:3a:77:f9:d8:58: ec:bb:81:a7:1e:01:30:c6:fe:c9:14:74:39:d0:fb: cb:50:17:b5:92:5b:13:70:48:c6:54:80:9f:02:e1: d3:2e:83:1a:00:51:11:c4:ea:88:9c:05:2f:7b:2a: c8:76:a7:f0:bc:62:26:ed:71:e1:4c:0d:c2:ca:e1: e5:b3:5e:f8:22:fb:6d:1f:10:23:b7:79:30:6b:5f: ab:46:88:0b:72:09:cf:9b:33:4e:79:31:77:92:13: 26:da:c4:48:59:7f:0e:e5:c4:6d:fc:6a:e3:0d:2a: 55:f3:f3:d7:31:21:f4:7a:f8:c8:8f:05:e2:2c:37: 96:12:a2:31:bb:7b:10:07:05:d8:44:f6:b3:85:8e: 57:86:7d:b7:a3:95:d6:5f:b0:46:32:7e:6c:a4:f8: 4e:b7:5e:15:ef:75:1a:c6:5a:12:82:27:ce:72:79: 1b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:47:DA:4A:1C:A5:A1:44:FE:0F:27:AA:3C:97:D4:CA:D9:74:31:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl X509v3 Authority Key Identifier: keyid:2B:89:09:2B:FF:EC:8F:78:27:D8:87:D9:14:DA:8E:24:E7:4C:1C:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:13:51:9a:2d:ce:a4:e7:92:a5:2f:85:ec:3b:b6:5b:32:40: 5b:28:5c:e5:f4:4a:81:39:f2:28:5a:ed:49:49:f5:3d:45:84: 41:4e:55:86:4e:02:37:68:fc:39:af:7c:f2:49:5c:24:47:2c: 0c:d4:0c:68:47:a6:a3:31:f1:1e:09:b9:80:38:5e:5e:3d:2e: e1:65:61:66:30:f9:9a:43:0f:63:12:da:5b:a7:bc:aa:b2:45: 04:05:92:a9:e2:57:15:1f:76:62:d9:2e:98:e7:94:12:77:18: 82:ec:7b:46:d4:1b:8f:29:70:65:3d:ea:f6:7b:e5:97:22:d0: e4:3f:64:d7:5a:d6:be:ad:a6:1b:5f:20:81:ca:52:dc:69:65: 8f:9b:13:05:1c:d6:2b:34:12:d8:a6:b5:28:a5:7c:d4:7a:43: 00:96:1d:be:64:d9:cd:44:a5:31:08:18:6c:cc:11:35:15:89: 6a:64:12:c3:89:93:5e:57:20:40:f0:aa:b5:e8:ba:1d:6c:39: 13:42:99:df:38:7a:78:ca:e7:4b:91:95:7e:04:e2:64:9d:c1: 56:de:6e:b7:d5:1c:9d:34:e0:99:3f:10:5c:14:d7:f4:b2:a3: 73:f0:d5:ec:e2:01:3d:6d:44:47:a9:e1:6d:20:64:c3:06:21: 34:a5:ea:ad -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnWRyhZqPzDinCuWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjQ4YzItMmY5NS00OGY1LWFjYjctOWU4YTJmOTEy M2E3MB4XDTI1MDUxMzA3MDAwN1oXDTI1MDUxNTA3MDAwMFowLzEtMCsGA1UEAxMk M2E4M2M4NzUtODM1MC00NTM3LTk4MDAtMjBmNDZhYzdmMjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXD2o59atRr48ebhPUx6qh+0/zO9ekUHlcWK gyae5e4f+LW8Q5BIQo+T1X6xdT8C/FqLGjMUEXJwS20xNQdtvhWawlYg6kUSlkx/ x4aqVnVcBRBbOnf52Fjsu4GnHgEwxv7JFHQ50PvLUBe1klsTcEjGVICfAuHTLoMa AFERxOqInAUveyrIdqfwvGIm7XHhTA3CyuHls174IvttHxAjt3kwa1+rRogLcgnP mzNOeTF3khMm2sRIWX8O5cRt/GrjDSpV8/PXMSH0evjIjwXiLDeWEqIxu3sQBwXY RPazhY5Xhn23o5XWX7BGMn5spPhOt14V73UaxloSgifOcnkb2QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKFH2kocpaFE/g8nqjyX1MrZdDHjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yYmM2 NDhjMi0yZjk1LTQ4ZjUtYWNiNy05ZThhMmY5MTIzYTcvMmJjNjQ4YzItMmY5NS00 OGY1LWFjYjctOWU4YTJmOTEyM2E3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmJjNjQ4YzItMmY5NS00OGY1LWFj YjctOWU4YTJmOTEyM2E3LzJiYzY0OGMyLTJmOTUtNDhmNS1hY2I3LTllOGEyZjkx MjNhNy5jcmwwHwYDVR0jBBgwFoAUK4kJK//sj3gn2IfZFNqOJOdMHGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yYmM2NDhjMi0yZjk1LTQ4ZjUtYWNiNy05ZThh MmY5MTIzYTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBQE1GaLc6k55KlL4XsO7Zb MkBbKFzl9EqBOfIoWu1JSfU9RYRBTlWGTgI3aPw5r3zySVwkRywM1AxoR6ajMfEe CbmAOF5ePS7hZWFmMPmaQw9jEtpbp7yqskUEBZKp4lcVH3Zi2S6Y55QSdxiC7HtG 1BuPKXBlPer2e+WXItDkP2TXWta+raYbXyCBylLcaWWPmxMFHNYrNBLYprUopXzU ekMAlh2+ZNnNRKUxCBhszBE1FYlqZBLDiZNeVyBA8Kq16LodbDkTQpnfOHp4yudL kZV+BOJkncFW3m631RydNOCZPxBcFNf0sqNz8NXs4gE9bURHqeFtIGTDBiE0peqt -----END CERTIFICATE-----Generated at Tue May 13 16:27:04 2025 by rpki-client