$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/31cdafa2-3aa9-4253-a242-08ace2acaef2.mft File: 31cdafa2-3aa9-4253-a242-08ace2acaef2.mft (raw, json) Hash identifier: HrWRl07EVY1/xU0TtXAIkyAF6YPm6p1u7OR8hwrSPfE= Subject key identifier: 3D:F4:A1:28:6C:19:F4:41:15:59:28:EC:C9:62:9E:7D:A2:73:AF:22 Authority key identifier: 61:12:27:D5:7B:B1:66:AC:C6:7D:1D:A8:85:1A:3D:97:FF:5C:F9:34 Certificate issuer: /CN=31cdafa2-3aa9-4253-a242-08ace2acaef2 Certificate serial: 010D0C9F43285849CCDB192AA8E639000BF51D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/31cdafa2-3aa9-4253-a242-08ace2acaef2.mft Manifest number: 010D0C9F432858495208F5F6345BD61A59A55E67 Signing time: Fri 09 May 2025 22:00:08 +0000 Manifest this update: Fri 09 May 2025 22:00:08 +0000 Manifest next update: Mon 12 May 2025 22:00:00 +0000 Files and hashes: 1: 31cdafa2-3aa9-4253-a242-08ace2acaef2.crl (hash: 8X/3uymeaVPvokYQhJ5jQXAxCUjhla9TmmAxrJQfWdM=) 2: 35bd10f7-b896-334e-a49e-eaf93d09cd8b.roa (hash: TEcACTmp+a7rRk342jtP/4aZ2D7O7PidPNcbqAA1d7c=) 3: 69fd3a40-069d-3203-a642-1c25de344467.roa (hash: eLEsthvmPtv/gvqEVSOQok+e/eliHcA6VT+S4LdCGzo=) 4: 7054621e-1dac-3c1f-8da2-e05571e13452.roa (hash: elNpICqeFeY1fL2kvgw6z4OYxWoKSnvTAlw4eBjyzio=) 5: df571e00-0021-324a-8fb9-5cf4efc237d7.roa (hash: uYNOA+ftYOwIbvIby9Bmh0SC2AES0t0qyvFUxc2jua0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/31cdafa2-3aa9-4253-a242-08ace2acaef2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/31cdafa2-3aa9-4253-a242-08ace2acaef2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cc:db:19:2a:a8:e6:39:00:0b:f5:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31cdafa2-3aa9-4253-a242-08ace2acaef2 Validity Not Before: May 9 22:00:08 2025 GMT Not After : May 12 22:00:00 2025 GMT Subject: CN=63b33963-b0d7-4845-b5a3-3e75707155e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:11:71:c9:72:b3:4e:25:d4:f0:32:01:44:0f: b6:d6:fb:ed:e1:a4:de:33:99:cb:f2:88:3c:6f:3b: 26:fd:24:58:c2:8c:88:7c:c4:5d:73:9e:d5:bd:39: 6c:c2:d3:83:bb:93:24:5a:32:49:1b:21:26:3b:fe: fb:e6:47:06:44:e6:20:0d:bd:4b:9c:e6:a4:82:5e: 01:22:4c:dc:59:84:ab:c4:c6:da:35:02:5f:fb:94: d7:e5:62:61:39:e9:98:ce:ed:c2:40:63:e2:1b:f9: af:7a:01:d1:31:7e:a1:17:a1:6a:11:bd:b7:41:ea: 2e:71:60:ac:d6:eb:58:98:c6:85:50:40:e0:d3:4f: 31:3e:7d:04:19:d0:b4:8b:42:5f:b1:d0:49:37:7a: d8:5b:f0:b7:f5:b1:36:16:5f:80:fa:e3:cb:00:aa: 63:3e:eb:ef:41:01:d4:09:d6:08:3e:dd:5d:9d:62: 8e:4a:44:7d:3a:a9:23:30:d0:92:d2:46:38:d0:47: a5:63:ca:aa:3d:ce:8b:9c:3f:e4:51:62:2c:99:64: a7:0f:d2:0f:3d:79:06:08:54:4b:cc:bf:24:0c:9a: 93:f9:33:a5:f1:2a:98:fa:cc:d5:12:39:b1:5e:f7: 1b:4c:a1:df:d8:d7:12:11:a4:39:30:ec:08:ba:ee: f7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:F4:A1:28:6C:19:F4:41:15:59:28:EC:C9:62:9E:7D:A2:73:AF:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/31cdafa2-3aa9-4253-a242-08ace2acaef2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/31cdafa2-3aa9-4253-a242-08ace2acaef2.crl X509v3 Authority Key Identifier: keyid:61:12:27:D5:7B:B1:66:AC:C6:7D:1D:A8:85:1A:3D:97:FF:5C:F9:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:66:77:6b:85:0b:87:42:6e:86:f2:c0:86:d6:83:3a:dd:3d: e4:1e:28:1e:8b:33:5b:3f:2c:c3:d6:9c:27:e9:cf:41:dc:f5: 90:a0:22:01:47:af:b6:db:b8:df:0c:a7:dc:12:f8:ba:80:e6: bd:97:b2:04:85:21:9d:1b:33:cc:a1:e3:ad:63:19:15:3a:32: 0d:c0:78:f7:f5:b7:d4:73:bc:9f:55:82:24:39:f5:06:7f:04: dd:27:b3:42:de:15:fa:92:dd:44:06:13:56:5d:4d:c7:63:92: a6:aa:94:ca:a1:59:84:4b:08:dc:ba:0b:a1:22:c8:9b:b3:31: fb:50:42:d2:03:d8:52:db:70:cb:5c:5e:3e:7b:e5:c1:53:83: c2:67:ca:fa:a9:5a:eb:7e:02:7c:d5:03:a6:9d:51:9f:a2:b2: 98:1b:ed:57:70:9c:8d:01:9e:52:2f:f0:b2:29:53:73:33:05: 22:64:81:91:f3:e7:f5:b6:3a:67:ad:41:80:68:bc:fb:0b:af: 44:cf:46:e1:7d:ab:2d:b7:14:9b:4a:3d:75:67:a8:5e:53:86: 34:dd:f1:7c:de:e7:2a:a9:ee:3e:10:59:7f:33:29:a9:29:5c: 45:6a:4a:43:f8:9b:bb:5c:71:23:cc:a2:fb:1f:69:36:44:97: be:0c:c8:6f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnM2xkqqOY5AAv1HYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzFjZGFmYTItM2FhOS00MjUzLWEyNDItMDhhY2UyYWNh ZWYyMB4XDTI1MDUwOTIyMDAwOFoXDTI1MDUxMjIyMDAwMFowLzEtMCsGA1UEAxMk NjNiMzM5NjMtYjBkNy00ODQ1LWI1YTMtM2U3NTcwNzE1NWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BFxyXKzTiXU8DIBRA+21vvt4aTeM5nL8og8 bzsm/SRYwoyIfMRdc57VvTlswtODu5MkWjJJGyEmO/775kcGROYgDb1LnOakgl4B IkzcWYSrxMbaNQJf+5TX5WJhOemYzu3CQGPiG/mvegHRMX6hF6FqEb23QeoucWCs 1utYmMaFUEDg008xPn0EGdC0i0JfsdBJN3rYW/C39bE2Fl+A+uPLAKpjPuvvQQHU CdYIPt1dnWKOSkR9OqkjMNCS0kY40EelY8qqPc6LnD/kUWIsmWSnD9IPPXkGCFRL zL8kDJqT+TOl8SqY+szVEjmxXvcbTKHf2NcSEaQ5MOwIuu73WQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFD30oShsGfRBFVko7Mlinn2ic68iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMWNk YWZhMi0zYWE5LTQyNTMtYTI0Mi0wOGFjZTJhY2FlZjIvMzFjZGFmYTItM2FhOS00 MjUzLWEyNDItMDhhY2UyYWNhZWYyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzFjZGFmYTItM2FhOS00MjUzLWEy NDItMDhhY2UyYWNhZWYyLzMxY2RhZmEyLTNhYTktNDI1My1hMjQyLTA4YWNlMmFj YWVmMi5jcmwwHwYDVR0jBBgwFoAUYRIn1XuxZqzGfR2ohRo9l/9c+TQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMWNkYWZhMi0zYWE5LTQyNTMtYTI0Mi0wOGFj ZTJhY2FlZjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA2ZndrhQuHQm6G8sCG1oM6 3T3kHigeizNbPyzD1pwn6c9B3PWQoCIBR6+227jfDKfcEvi6gOa9l7IEhSGdGzPM oeOtYxkVOjINwHj39bfUc7yfVYIkOfUGfwTdJ7NC3hX6kt1EBhNWXU3HY5KmqpTK oVmESwjcuguhIsibszH7UELSA9hS23DLXF4+e+XBU4PCZ8r6qVrrfgJ81QOmnVGf orKYG+1XcJyNAZ5SL/CyKVNzMwUiZIGR8+f1tjpnrUGAaLz7C69Ez0bhfasttxSb Sj11Z6heU4Y03fF83ucqqe4+EFl/MympKVxFakpD+Ju7XHEjzKL7H2k2RJe+DMhv -----END CERTIFICATE-----Generated at Fri May 9 23:47:46 2025 by rpki-client