$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft File: 3a86f711-5e97-4a68-9b21-940a312b854a.mft (raw, json) Hash identifier: 8V7ulgHd8TtDPJXrgeyCtQZ5xi+WPuJL/f1YKAqLdqM= Subject key identifier: 04:80:B8:2B:00:8A:B2:84:04:0F:82:C4:B7:F7:16:3F:7B:82:03:3D Authority key identifier: D3:F6:F7:C7:D5:CB:2F:40:EA:DE:48:27:9A:35:C5:AA:11:11:F8:55 Certificate issuer: /CN=3a86f711-5e97-4a68-9b21-940a312b854a Certificate serial: 010D0C9F43285849D4115E0BEBEFC5747F4004B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft Manifest number: 010D0C9F4328584988B6CEF62A3C901C9E4B5FC5 Signing time: Mon 12 May 2025 12:00:07 +0000 Manifest this update: Mon 12 May 2025 12:00:07 +0000 Manifest next update: Wed 14 May 2025 12:00:00 +0000 Files and hashes: 1: 341487ac-a3e5-383d-bb5e-c10826c39192.roa (hash: HnHuSukrJeUg0RxaKhsKvUcH0awxWXLzfnu/EJ5QZnY=) 2: 3a86f711-5e97-4a68-9b21-940a312b854a.crl (hash: rLyoP/YGtNXClyqD3Ve/k+Z649/QDIh5SL6udvX8e/c=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:11:5e:0b:eb:ef:c5:74:7f:40:04:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a86f711-5e97-4a68-9b21-940a312b854a Validity Not Before: May 12 12:00:07 2025 GMT Not After : May 14 12:00:00 2025 GMT Subject: CN=2d0f9b6b-dde9-4649-9c7e-4711dc29ea05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d4:0b:66:0d:fc:28:38:ff:de:b5:c2:91:60: 09:4a:2d:3d:aa:21:2e:ce:54:85:c4:b7:bf:da:70: 66:a1:f7:24:92:e1:98:c7:c9:5f:8b:1a:6b:3c:63: ba:5e:d3:24:30:d5:0e:c8:10:19:d7:df:10:4d:4d: cc:c0:80:a5:a2:b4:61:3f:c2:f7:6e:d0:a6:d6:9b: 6b:1f:24:33:7f:95:22:d5:08:fe:7f:87:22:c6:14: e1:48:81:16:71:cc:61:d9:7f:3d:3e:3e:61:d6:55: 3a:1f:12:f4:5f:20:70:40:2e:e4:07:ac:ed:1f:14: 65:f5:6d:41:f8:f2:98:1f:28:6f:e8:bb:49:0f:4e: 42:9b:55:46:0a:06:e8:ca:73:a0:e9:9d:22:e9:d3: 9d:65:91:66:38:3e:8c:95:28:1e:79:47:8e:53:78: 91:bc:9c:28:97:88:80:0b:bf:7e:18:d9:6d:8b:f1: 0d:d1:bb:d4:ea:31:32:20:04:b4:90:26:ff:87:5e: 9f:8e:a1:ea:b5:bf:f5:ed:a2:1b:98:19:dd:9e:14: ca:31:7b:81:67:6e:e8:76:27:62:89:da:6b:77:9a: b2:35:28:8f:94:f1:5d:f7:2e:55:b3:9d:44:fa:85: f2:b9:96:16:31:14:79:8f:47:69:bc:fa:c4:7a:e8: 81:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:80:B8:2B:00:8A:B2:84:04:0F:82:C4:B7:F7:16:3F:7B:82:03:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.crl X509v3 Authority Key Identifier: keyid:D3:F6:F7:C7:D5:CB:2F:40:EA:DE:48:27:9A:35:C5:AA:11:11:F8:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:91:77:21:a8:a6:ae:4f:58:d1:34:86:0e:38:4c:3c:81:5e: 78:93:30:4d:05:9f:17:23:78:2a:2b:94:ad:d0:47:19:ed:f3: fe:9e:69:57:01:0d:37:74:e2:0e:40:55:23:85:22:2c:b5:44: b1:f7:42:12:f7:ef:93:f7:63:bf:56:7b:4e:c3:ab:da:ba:a4: 65:e5:a0:fc:ce:d1:0a:64:06:1e:0c:bc:7d:9c:eb:3a:3a:8a: cd:c7:ce:bd:17:ba:a3:52:02:40:e9:2c:7e:c8:32:82:86:ab: c2:25:d7:c0:94:22:0e:0b:83:8d:70:df:2e:99:6e:d2:f5:3c: db:45:a4:ae:c1:ea:68:20:38:02:70:9f:f2:94:2d:d3:cb:bd: b7:83:c6:e1:85:f5:60:a4:7b:8f:e6:38:f3:ce:67:f7:2a:a1: a8:28:22:50:c7:8f:4c:26:1e:12:fe:2e:ff:72:c1:f9:32:b4: af:d0:40:ae:4d:cd:4f:ed:54:d8:90:15:95:2f:db:6d:03:ec: 05:ae:89:8b:1b:ec:3a:ae:c2:02:22:c8:45:25:54:eb:51:f3: 46:e5:50:3a:ec:5f:9f:e1:5d:c7:b8:a8:85:b2:b3:65:33:6d: 97:aa:bc:d0:87:2b:3d:de:00:0e:c4:20:58:5f:1c:b8:a5:d1: c1:bb:3a:ae -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnUEV4L6+/FdH9ABLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E4NmY3MTEtNWU5Ny00YTY4LTliMjEtOTQwYTMxMmI4 NTRhMB4XDTI1MDUxMjEyMDAwN1oXDTI1MDUxNDEyMDAwMFowLzEtMCsGA1UEAxMk MmQwZjliNmItZGRlOS00NjQ5LTljN2UtNDcxMWRjMjllYTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNQLZg38KDj/3rXCkWAJSi09qiEuzlSFxLe/ 2nBmofckkuGYx8lfixprPGO6XtMkMNUOyBAZ198QTU3MwIClorRhP8L3btCm1ptr HyQzf5Ui1Qj+f4cixhThSIEWccxh2X89Pj5h1lU6HxL0XyBwQC7kB6ztHxRl9W1B +PKYHyhv6LtJD05Cm1VGCgboynOg6Z0i6dOdZZFmOD6MlSgeeUeOU3iRvJwol4iA C79+GNlti/EN0bvU6jEyIAS0kCb/h16fjqHqtb/17aIbmBndnhTKMXuBZ27odidi idprd5qyNSiPlPFd9y5Vs51E+oXyuZYWMRR5j0dpvPrEeuiBfQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFASAuCsAirKEBA+CxLf3Fj97ggM9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYTg2 ZjcxMS01ZTk3LTRhNjgtOWIyMS05NDBhMzEyYjg1NGEvM2E4NmY3MTEtNWU5Ny00 YTY4LTliMjEtOTQwYTMxMmI4NTRhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2E4NmY3MTEtNWU5Ny00YTY4LTli MjEtOTQwYTMxMmI4NTRhLzNhODZmNzExLTVlOTctNGE2OC05YjIxLTk0MGEzMTJi ODU0YS5jcmwwHwYDVR0jBBgwFoAU0/b3x9XLL0Dq3kgnmjXFqhER+FUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYTg2ZjcxMS01ZTk3LTRhNjgtOWIyMS05NDBh MzEyYjg1NGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBpkXchqKauT1jRNIYOOEw8 gV54kzBNBZ8XI3gqK5St0EcZ7fP+nmlXAQ03dOIOQFUjhSIstUSx90IS9++T92O/ VntOw6vauqRl5aD8ztEKZAYeDLx9nOs6OorNx869F7qjUgJA6Sx+yDKChqvCJdfA lCIOC4ONcN8umW7S9TzbRaSuwepoIDgCcJ/ylC3Ty723g8bhhfVgpHuP5jjzzmf3 KqGoKCJQx49MJh4S/i7/csH5MrSv0ECuTc1P7VTYkBWVL9ttA+wFromLG+w6rsIC IshFJVTrUfNG5VA67F+f4V3HuKiFsrNlM22XqrzQhys93gAOxCBYXxy4pdHBuzqu -----END CERTIFICATE-----Generated at Tue May 13 10:23:25 2025 by rpki-client