$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e0731c4-3d05-4440-8c74-77d5a579b356/4e0731c4-3d05-4440-8c74-77d5a579b356.mft File: 4e0731c4-3d05-4440-8c74-77d5a579b356.mft (raw, json) Hash identifier: MpdWulfETezITUGXrevMB3Krl1HeYivuCFhD/h/Qfmg= Subject key identifier: 2D:D6:CB:F0:41:6B:0D:21:27:05:08:3F:A5:41:28:E8:B7:8A:B2:2C Authority key identifier: 8E:69:9C:CA:03:CD:5E:B3:A7:3B:D9:37:A4:77:09:32:E8:53:59:26 Certificate issuer: /CN=4e0731c4-3d05-4440-8c74-77d5a579b356 Certificate serial: 010D0C9F43285849CE22A960A2586A79E1F56D60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e0731c4-3d05-4440-8c74-77d5a579b356.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e0731c4-3d05-4440-8c74-77d5a579b356/4e0731c4-3d05-4440-8c74-77d5a579b356.mft Manifest number: 010D0C9F432858499929861EAAF71E97058D2B13 Signing time: Sat 10 May 2025 09:00:07 +0000 Manifest this update: Sat 10 May 2025 09:00:07 +0000 Manifest next update: Mon 12 May 2025 09:00:00 +0000 Files and hashes: 1: 4e0731c4-3d05-4440-8c74-77d5a579b356.crl (hash: WdYk4qal1tfDgUpnrhPURcn9txYxNV87F/xT2q4dLEY=) 2: a383ea14-bf86-3b46-bdae-73dbe397ae8a.roa (hash: W0AE95HliZ/APzPqMohmGA4+fxq/+Hvkh/eVpYUX4UA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e0731c4-3d05-4440-8c74-77d5a579b356/4e0731c4-3d05-4440-8c74-77d5a579b356.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e0731c4-3d05-4440-8c74-77d5a579b356/4e0731c4-3d05-4440-8c74-77d5a579b356.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e0731c4-3d05-4440-8c74-77d5a579b356.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:22:a9:60:a2:58:6a:79:e1:f5:6d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e0731c4-3d05-4440-8c74-77d5a579b356 Validity Not Before: May 10 09:00:07 2025 GMT Not After : May 12 09:00:00 2025 GMT Subject: CN=8b04efd2-c79f-4471-baa0-b714264c09f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:26:2b:ca:40:bf:59:32:d3:5d:38:9c:91:40: 70:74:0e:52:55:1a:ae:96:8a:12:78:3d:9b:b8:ec: 1f:f7:70:f3:5e:c2:bf:53:2e:f7:47:fe:c7:bb:ae: c2:8c:6b:27:8d:03:22:2b:13:d1:9f:24:d2:29:ed: e9:0e:f0:90:22:75:a4:45:e3:a7:00:09:42:93:5e: a2:85:00:fc:77:65:43:df:a9:81:a9:90:eb:e3:ba: 42:e4:b8:07:f5:10:13:fc:bb:7f:c8:f8:f8:15:9f: 6c:aa:51:72:16:58:95:b9:52:6b:cc:f3:07:ad:fb: 9a:22:52:1c:b8:6d:2e:ab:4e:43:37:d7:ad:1c:cf: 85:0f:52:20:94:07:d4:58:9a:ab:21:57:89:2a:cf: 67:81:38:22:35:14:d7:49:82:5f:46:e3:a0:01:c2: 8c:57:c2:25:e9:26:31:7e:d9:d9:6a:20:ce:d4:86: 1e:2f:2b:06:fe:9d:ba:03:ff:2b:f5:64:e4:e5:2c: 16:6a:a6:f0:c4:67:df:ec:fa:c4:3f:21:2a:0c:e6: 18:55:5b:1e:95:7e:a6:f9:9b:5e:34:cb:d4:75:9b: 32:9d:bc:14:03:00:55:3e:df:3e:7f:70:f2:61:e0: c2:1c:31:81:0b:c0:bf:ef:6d:d4:a3:27:78:27:cf: 3c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D6:CB:F0:41:6B:0D:21:27:05:08:3F:A5:41:28:E8:B7:8A:B2:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e0731c4-3d05-4440-8c74-77d5a579b356/4e0731c4-3d05-4440-8c74-77d5a579b356.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e0731c4-3d05-4440-8c74-77d5a579b356/4e0731c4-3d05-4440-8c74-77d5a579b356.crl X509v3 Authority Key Identifier: keyid:8E:69:9C:CA:03:CD:5E:B3:A7:3B:D9:37:A4:77:09:32:E8:53:59:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e0731c4-3d05-4440-8c74-77d5a579b356.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:ee:5b:59:ab:57:67:8f:d2:89:07:31:69:9f:fd:ac:17:ea: e5:9a:dc:9b:65:00:f9:7d:6c:11:e9:1b:44:dd:83:13:5c:d6: f8:ff:cc:36:c6:68:fa:a3:3b:3a:77:30:df:51:6d:67:74:80: 22:1d:a9:4d:7c:2f:91:a2:0c:d9:7f:5c:4b:8f:2a:a7:aa:f3: 9f:a5:5b:48:b3:eb:f2:0f:dd:43:4e:44:5e:c5:a9:1a:69:68: 37:81:0f:5b:34:be:b4:07:d3:dd:0c:13:86:6c:71:c9:0e:6a: b4:40:a4:69:dd:74:02:59:28:2f:9a:9c:3f:97:eb:17:4e:6f: c7:04:d8:66:22:6d:48:51:a0:87:e7:22:39:c2:a1:8c:8e:c4: 48:34:40:d2:6f:20:f1:09:82:19:b3:c5:12:31:9e:01:41:93: 70:0f:f9:2b:92:d8:bc:c6:49:e1:27:e7:09:7e:1f:dc:86:a2: 5e:e7:21:f1:8b:e1:01:48:2c:54:8e:79:5a:82:56:72:4d:43: 32:c1:b5:ad:26:c5:9a:47:60:ea:47:e5:2a:37:94:08:8c:b9: b0:aa:97:8c:fd:0d:5a:f8:1d:ee:53:c0:f0:11:16:23:5e:55: 59:5a:82:7f:f0:de:12:d7:12:25:19:52:89:d5:4d:5b:e7:b3: f9:71:20:02 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnOIqlgolhqeeH1bWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUwNzMxYzQtM2QwNS00NDQwLThjNzQtNzdkNWE1Nzli MzU2MB4XDTI1MDUxMDA5MDAwN1oXDTI1MDUxMjA5MDAwMFowLzEtMCsGA1UEAxMk OGIwNGVmZDItYzc5Zi00NDcxLWJhYTAtYjcxNDI2NGMwOWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyYrykC/WTLTXTickUBwdA5SVRqulooSeD2b uOwf93DzXsK/Uy73R/7Hu67CjGsnjQMiKxPRnyTSKe3pDvCQInWkReOnAAlCk16i hQD8d2VD36mBqZDr47pC5LgH9RAT/Lt/yPj4FZ9sqlFyFliVuVJrzPMHrfuaIlIc uG0uq05DN9etHM+FD1IglAfUWJqrIVeJKs9ngTgiNRTXSYJfRuOgAcKMV8Il6SYx ftnZaiDO1IYeLysG/p26A/8r9WTk5SwWaqbwxGff7PrEPyEqDOYYVVselX6m+Zte NMvUdZsynbwUAwBVPt8+f3DyYeDCHDGBC8C/723Uoyd4J888+QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFC3Wy/BBaw0hJwUIP6VBKOi3irIsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80ZTA3 MzFjNC0zZDA1LTQ0NDAtOGM3NC03N2Q1YTU3OWIzNTYvNGUwNzMxYzQtM2QwNS00 NDQwLThjNzQtNzdkNWE1NzliMzU2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNGUwNzMxYzQtM2QwNS00NDQwLThj NzQtNzdkNWE1NzliMzU2LzRlMDczMWM0LTNkMDUtNDQ0MC04Yzc0LTc3ZDVhNTc5 YjM1Ni5jcmwwHwYDVR0jBBgwFoAUjmmcygPNXrOnO9k3pHcJMuhTWSYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80ZTA3MzFjNC0zZDA1LTQ0NDAtOGM3NC03N2Q1 YTU3OWIzNTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAR7ltZq1dnj9KJBzFpn/2s F+rlmtybZQD5fWwR6RtE3YMTXNb4/8w2xmj6ozs6dzDfUW1ndIAiHalNfC+RogzZ f1xLjyqnqvOfpVtIs+vyD91DTkRexakaaWg3gQ9bNL60B9PdDBOGbHHJDmq0QKRp 3XQCWSgvmpw/l+sXTm/HBNhmIm1IUaCH5yI5wqGMjsRINEDSbyDxCYIZs8USMZ4B QZNwD/krkti8xknhJ+cJfh/chqJe5yHxi+EBSCxUjnlaglZyTUMywbWtJsWaR2Dq R+UqN5QIjLmwqpeM/Q1a+B3uU8DwERYjXlVZWoJ/8N4S1xIlGVKJ1U1b57P5cSAC -----END CERTIFICATE-----Generated at Sun May 11 06:50:11 2025 by rpki-client