$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68875259-2927-45e7-be12-9528b42e0e51/68875259-2927-45e7-be12-9528b42e0e51.mft File: 68875259-2927-45e7-be12-9528b42e0e51.mft (raw, json) Hash identifier: rvL0bieRe804LgwOgzcqiTwPCgzW4Lq7UqqN+6QcgoE= Subject key identifier: F8:8B:29:B7:71:5E:F0:57:EC:32:18:D5:E5:08:53:CB:3B:5B:3F:68 Authority key identifier: 9F:DF:D2:47:04:17:22:BF:C7:BC:08:88:92:96:83:12:FF:22:CF:FB Certificate issuer: /CN=68875259-2927-45e7-be12-9528b42e0e51 Certificate serial: 010D0C9F43285849D7179C7AFF805CD2A0FC8620 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68875259-2927-45e7-be12-9528b42e0e51.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68875259-2927-45e7-be12-9528b42e0e51/68875259-2927-45e7-be12-9528b42e0e51.mft Manifest number: 010D0C9F432858499F48DD655B9D761880EDBE1B Signing time: Tue 13 May 2025 14:00:07 +0000 Manifest this update: Tue 13 May 2025 14:00:07 +0000 Manifest next update: Fri 16 May 2025 14:00:00 +0000 Files and hashes: 1: 68875259-2927-45e7-be12-9528b42e0e51.crl (hash: FytylP0xCxLbFVbf7wpkeL6N81llWOuJ4iVwsLbmLRo=) 2: de1d90ab-35e1-3a3d-b75d-2ac61f5966f1.roa (hash: LU1yhr8HQ+lfPN6h71dMw+D2RY0je9PBT1/rddtxQUQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68875259-2927-45e7-be12-9528b42e0e51/68875259-2927-45e7-be12-9528b42e0e51.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68875259-2927-45e7-be12-9528b42e0e51/68875259-2927-45e7-be12-9528b42e0e51.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68875259-2927-45e7-be12-9528b42e0e51.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d7:17:9c:7a:ff:80:5c:d2:a0:fc:86:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68875259-2927-45e7-be12-9528b42e0e51 Validity Not Before: May 13 14:00:07 2025 GMT Not After : May 16 14:00:00 2025 GMT Subject: CN=38d31e59-249e-44f0-ae39-82366630cf7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:21:ff:07:d2:25:6f:24:fa:24:42:e1:c4:3d: 91:c9:c3:3c:33:50:07:fc:75:00:22:3e:ae:53:f8: 42:51:3a:34:08:4e:3d:d3:06:6f:97:a8:c8:02:3a: 02:e0:f7:2e:f4:87:82:f5:d3:73:22:80:25:16:d1: 0a:a8:85:3b:82:2e:ae:93:b2:0b:52:17:c6:67:af: 7e:4f:6e:ae:e4:6b:0e:f3:d4:a4:7d:af:1f:fa:f8: 82:12:13:cb:1e:69:be:a9:f0:98:eb:0c:a5:e7:6a: 4b:cd:ed:bc:d7:00:50:43:73:05:30:6e:ce:79:f8: c9:0d:62:d9:63:6e:85:9f:8d:70:38:d6:0f:aa:38: 00:53:29:72:7b:45:b0:31:22:1f:92:aa:69:61:ae: d1:8b:d3:bb:ad:6a:16:02:27:77:6c:03:30:b2:9f: 64:b1:54:ce:36:51:d1:02:7e:87:87:f0:d9:b4:4d: a6:d5:c5:fe:96:4f:0a:5b:f2:40:e0:28:5c:34:d2: bd:9d:1f:a1:05:27:b3:97:ca:2a:42:34:c1:8d:2a: c6:66:f7:c8:3b:a2:18:b7:77:36:a3:f0:a0:b3:f9: 5c:3b:4f:c7:70:aa:19:c2:45:82:e3:a8:95:50:21: 06:a9:b6:84:26:b0:26:84:20:3d:58:e1:42:f6:ca: f5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:8B:29:B7:71:5E:F0:57:EC:32:18:D5:E5:08:53:CB:3B:5B:3F:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68875259-2927-45e7-be12-9528b42e0e51/68875259-2927-45e7-be12-9528b42e0e51.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68875259-2927-45e7-be12-9528b42e0e51/68875259-2927-45e7-be12-9528b42e0e51.crl X509v3 Authority Key Identifier: keyid:9F:DF:D2:47:04:17:22:BF:C7:BC:08:88:92:96:83:12:FF:22:CF:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68875259-2927-45e7-be12-9528b42e0e51.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:8d:c3:11:67:58:18:c5:38:4a:74:03:13:64:71:40:25:b3: 2e:96:a3:bd:9e:95:2d:17:9a:a1:be:0e:66:7a:7b:b4:16:34: 2e:5f:4e:f8:33:46:59:19:b1:16:ee:94:62:3a:7e:bb:8e:78: 3c:6a:54:55:d2:7e:6e:2d:f5:7a:f6:b6:fb:ea:0e:18:7c:ae: 47:a2:a2:ce:c5:74:9b:b8:58:a8:c3:e3:f4:fc:00:ad:e2:20: 8c:1a:d8:4e:20:9b:20:6c:1d:9d:72:3f:01:9b:69:89:3c:5d: 23:39:ec:7f:a4:40:5a:21:8e:cb:a7:d0:56:99:48:d7:3b:1b: 33:a7:2e:9f:03:d8:5f:47:2b:6e:e4:3c:2e:db:e4:48:88:37: 82:14:d4:0c:87:af:f7:33:2c:41:c7:11:f3:0f:08:d7:df:b6: de:25:c1:8d:c5:e5:5a:36:85:04:77:d0:e6:01:92:95:fb:d5: 49:36:b0:de:51:86:40:ef:c0:96:b6:17:91:12:24:06:2a:16: 21:ca:73:54:16:2c:bb:a6:71:3a:46:5c:4b:20:69:0d:74:60: ff:3a:25:14:41:6f:24:b2:04:2d:4f:a2:3e:05:41:33:f5:e6: b1:41:df:32:53:dc:ba:3f:41:f5:a7:fc:3d:57:e5:aa:7f:b9: 46:c1:ad:9f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnXF5x6/4Bc0qD8hiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg4NzUyNTktMjkyNy00NWU3LWJlMTItOTUyOGI0MmUw ZTUxMB4XDTI1MDUxMzE0MDAwN1oXDTI1MDUxNjE0MDAwMFowLzEtMCsGA1UEAxMk MzhkMzFlNTktMjQ5ZS00NGYwLWFlMzktODIzNjY2MzBjZjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviH/B9IlbyT6JELhxD2RycM8M1AH/HUAIj6u U/hCUTo0CE490wZvl6jIAjoC4Pcu9IeC9dNzIoAlFtEKqIU7gi6uk7ILUhfGZ69+ T26u5GsO89Skfa8f+viCEhPLHmm+qfCY6wyl52pLze281wBQQ3MFMG7OefjJDWLZ Y26Fn41wONYPqjgAUylye0WwMSIfkqppYa7Ri9O7rWoWAid3bAMwsp9ksVTONlHR An6Hh/DZtE2m1cX+lk8KW/JA4ChcNNK9nR+hBSezl8oqQjTBjSrGZvfIO6IYt3c2 o/Cgs/lcO0/HcKoZwkWC46iVUCEGqbaEJrAmhCA9WOFC9sr1VwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPiLKbdxXvBX7DIY1eUIU8s7Wz9oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82ODg3 NTI1OS0yOTI3LTQ1ZTctYmUxMi05NTI4YjQyZTBlNTEvNjg4NzUyNTktMjkyNy00 NWU3LWJlMTItOTUyOGI0MmUwZTUxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNjg4NzUyNTktMjkyNy00NWU3LWJl MTItOTUyOGI0MmUwZTUxLzY4ODc1MjU5LTI5MjctNDVlNy1iZTEyLTk1MjhiNDJl MGU1MS5jcmwwHwYDVR0jBBgwFoAUn9/SRwQXIr/HvAiIkpaDEv8iz/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82ODg3NTI1OS0yOTI3LTQ1ZTctYmUxMi05NTI4 YjQyZTBlNTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCNjcMRZ1gYxThKdAMTZHFA JbMulqO9npUtF5qhvg5menu0FjQuX074M0ZZGbEW7pRiOn67jng8alRV0n5uLfV6 9rb76g4YfK5HoqLOxXSbuFiow+P0/ACt4iCMGthOIJsgbB2dcj8Bm2mJPF0jOex/ pEBaIY7Lp9BWmUjXOxszpy6fA9hfRytu5Dwu2+RIiDeCFNQMh6/3MyxBxxHzDwjX 37beJcGNxeVaNoUEd9DmAZKV+9VJNrDeUYZA78CWtheREiQGKhYhynNUFiy7pnE6 RlxLIGkNdGD/OiUUQW8ksgQtT6I+BUEz9eaxQd8yU9y6P0H1p/w9V+Wqf7lGwa2f -----END CERTIFICATE-----Generated at Wed May 14 07:36:52 2025 by rpki-client