$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.mft File: 6f37bf68-67e7-4e67-a093-c88a3d7fe04d.mft (raw, json) Hash identifier: 5SHLm9ehbxYHyohJLaFwHU2bd2S3bHGti9pCKZbCGZc= Subject key identifier: EE:9B:3C:EE:C0:52:AA:0D:CC:35:3B:68:4A:C9:E7:C3:40:61:9E:18 Authority key identifier: 28:4F:CF:92:96:C8:B0:BE:A6:99:D3:7F:06:B3:7E:9A:39:EA:8B:B1 Certificate issuer: /CN=6f37bf68-67e7-4e67-a093-c88a3d7fe04d Certificate serial: 010D0C9F43285849CC9F8AEBC06EBFCA10F1BD00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.mft Manifest number: 010D0C9F43285849A00867738FD0A29AF1298CD1 Signing time: Fri 09 May 2025 20:00:07 +0000 Manifest this update: Fri 09 May 2025 20:00:07 +0000 Manifest next update: Mon 12 May 2025 20:00:00 +0000 Files and hashes: 1: 6f37bf68-67e7-4e67-a093-c88a3d7fe04d.crl (hash: TxhdISPYXdcyhoW4MzRvHbc4dsYbwTw6eKOLRkys3v4=) 2: c2b426c5-dca6-31b3-9447-31604cedf87b.roa (hash: j9UMJ24tNmLKSP6Xl+AlN5o7W2xkZwblWoazs7UanOg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cc:9f:8a:eb:c0:6e:bf:ca:10:f1:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f37bf68-67e7-4e67-a093-c88a3d7fe04d Validity Not Before: May 9 20:00:07 2025 GMT Not After : May 12 20:00:00 2025 GMT Subject: CN=5489c47e-cf24-4d41-b975-0e4cae2a2a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:97:93:a6:f2:ea:d1:dc:81:33:0a:79:8d:da: e7:ff:c4:37:3d:1a:73:00:b9:16:58:db:0c:f4:47: 72:ef:48:23:25:ea:7f:f2:c9:e6:f2:4a:3f:f6:8a: cc:0d:ab:9c:dd:03:23:0c:17:3c:eb:08:1e:81:61: 8f:55:09:26:6c:e1:e0:2c:58:4f:43:8e:f9:ec:cf: 6f:9d:9f:1e:e2:bb:a1:c2:71:78:ff:69:16:c5:cf: e2:2b:95:9f:67:88:52:55:29:35:4a:f4:a9:56:f1: bd:91:af:da:bc:fd:fa:87:72:c6:13:f0:98:19:28: 10:96:ba:07:4c:b2:57:bf:29:fb:03:49:c7:a2:0b: 06:3a:15:46:f6:c3:1d:ec:cf:e5:2a:62:dc:71:f3: 83:53:20:fe:4d:ab:bd:03:8c:1c:47:40:50:8b:d0: 2d:82:6a:e2:38:84:05:e9:ae:30:69:34:44:f8:3e: 50:58:1e:73:12:fa:64:03:fe:cb:58:8c:fd:29:d2: 80:c2:ca:39:48:aa:c4:d8:d6:45:88:d2:fe:25:28: 14:5a:be:0c:ed:be:e6:8c:2b:54:f1:a0:7e:d6:9b: 1e:9d:0d:d2:be:54:ec:c7:6f:33:b7:cd:a7:c3:66: 66:5f:96:26:98:27:88:61:5a:a7:11:5b:9f:48:c0: 66:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:9B:3C:EE:C0:52:AA:0D:CC:35:3B:68:4A:C9:E7:C3:40:61:9E:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.crl X509v3 Authority Key Identifier: keyid:28:4F:CF:92:96:C8:B0:BE:A6:99:D3:7F:06:B3:7E:9A:39:EA:8B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:b1:d3:3d:83:df:1a:8f:a8:e1:b3:96:1c:61:d7:3b:f0:f1: e0:5a:e8:c1:5a:c6:43:60:b5:6f:1d:78:f7:cb:12:c2:00:0b: 37:2a:20:24:88:02:19:94:04:f7:22:5f:01:ee:14:40:30:8a: c6:9f:70:e0:f0:05:f9:1e:32:b5:f5:b1:2f:c5:e5:02:3e:da: ec:1a:11:10:75:7b:dc:a1:b0:3c:77:f2:93:8c:77:ef:db:7e: 16:cd:40:2e:99:0c:a0:3e:b4:60:95:4b:c1:9c:31:ac:0c:53: db:a8:60:4d:48:3f:31:cb:fe:4f:02:9e:ca:86:55:20:84:3c: 5a:f0:22:1c:b9:b4:b4:d5:50:7e:b5:2c:d1:22:f5:43:08:66: 8e:25:11:be:89:b5:e4:df:24:2b:56:40:3d:67:dc:49:0c:98: 63:72:d4:da:44:ef:6d:07:e0:07:91:3b:0d:ad:85:ea:78:19: 22:a8:9d:da:79:04:85:c3:18:01:10:66:c7:bc:7e:bb:9c:a4: e8:b8:b2:18:36:a0:c7:5b:9e:7e:75:60:0e:cc:d8:8d:7e:fd: d3:e2:fb:52:f2:1b:aa:95:a1:d3:ed:d8:ea:c7:01:66:c5:fb: 1d:06:9d:95:f1:ae:0d:2c:76:df:8e:4b:c9:d1:96:60:32:a0: 5c:a9:2f:ab -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnMn4rrwG6/yhDxvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmYzN2JmNjgtNjdlNy00ZTY3LWEwOTMtYzg4YTNkN2Zl MDRkMB4XDTI1MDUwOTIwMDAwN1oXDTI1MDUxMjIwMDAwMFowLzEtMCsGA1UEAxMk NTQ4OWM0N2UtY2YyNC00ZDQxLWI5NzUtMGU0Y2FlMmEyYTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5eTpvLq0dyBMwp5jdrn/8Q3PRpzALkWWNsM 9Edy70gjJep/8snm8ko/9orMDauc3QMjDBc86wgegWGPVQkmbOHgLFhPQ4757M9v nZ8e4ruhwnF4/2kWxc/iK5WfZ4hSVSk1SvSpVvG9ka/avP36h3LGE/CYGSgQlroH TLJXvyn7A0nHogsGOhVG9sMd7M/lKmLccfODUyD+Tau9A4wcR0BQi9AtgmriOIQF 6a4waTRE+D5QWB5zEvpkA/7LWIz9KdKAwso5SKrE2NZFiNL+JSgUWr4M7b7mjCtU 8aB+1psenQ3SvlTsx28zt82nw2ZmX5YmmCeIYVqnEVufSMBmswIDAQABo4IDbjCC A2owHQYDVR0OBBYEFO6bPO7AUqoNzDU7aErJ58NAYZ4YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82ZjM3 YmY2OC02N2U3LTRlNjctYTA5My1jODhhM2Q3ZmUwNGQvNmYzN2JmNjgtNjdlNy00 ZTY3LWEwOTMtYzg4YTNkN2ZlMDRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNmYzN2JmNjgtNjdlNy00ZTY3LWEw OTMtYzg4YTNkN2ZlMDRkLzZmMzdiZjY4LTY3ZTctNGU2Ny1hMDkzLWM4OGEzZDdm ZTA0ZC5jcmwwHwYDVR0jBBgwFoAUKE/PkpbIsL6mmdN/BrN+mjnqi7EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82ZjM3YmY2OC02N2U3LTRlNjctYTA5My1jODhh M2Q3ZmUwNGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBfsdM9g98aj6jhs5YcYdc7 8PHgWujBWsZDYLVvHXj3yxLCAAs3KiAkiAIZlAT3Il8B7hRAMIrGn3Dg8AX5HjK1 9bEvxeUCPtrsGhEQdXvcobA8d/KTjHfv234WzUAumQygPrRglUvBnDGsDFPbqGBN SD8xy/5PAp7KhlUghDxa8CIcubS01VB+tSzRIvVDCGaOJRG+ibXk3yQrVkA9Z9xJ DJhjctTaRO9tB+AHkTsNrYXqeBkiqJ3aeQSFwxgBEGbHvH67nKTouLIYNqDHW55+ dWAOzNiNfv3T4vtS8huqlaHT7djqxwFmxfsdBp2V8a4NLHbfjkvJ0ZZgMqBcqS+r -----END CERTIFICATE-----Generated at Sat May 10 08:19:28 2025 by rpki-client