$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7029ab5-98ff-451b-9d4f-e72d91a2c9a5/a7029ab5-98ff-451b-9d4f-e72d91a2c9a5.mft File: a7029ab5-98ff-451b-9d4f-e72d91a2c9a5.mft (raw, json) Hash identifier: +eT7wGefZ65ija4AetdfyzaU07Zr3cHJo/u5x8JkUr4= Subject key identifier: A0:14:5D:4E:EC:0C:C0:80:FF:81:C9:1E:6A:AD:35:5C:B8:F7:02:62 Authority key identifier: 54:1E:14:F2:02:7B:BB:C7:D9:1F:50:8D:11:AF:FE:F2:ED:1B:99:95 Certificate issuer: /CN=a7029ab5-98ff-451b-9d4f-e72d91a2c9a5 Certificate serial: 010D0C9F43285849D2ACF91D54759EA83C36F780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7029ab5-98ff-451b-9d4f-e72d91a2c9a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7029ab5-98ff-451b-9d4f-e72d91a2c9a5/a7029ab5-98ff-451b-9d4f-e72d91a2c9a5.mft Manifest number: 010D0C9F432858497C29B42EB6ED7CE92EEB7EA0 Signing time: Mon 12 May 2025 00:02:03 +0000 Manifest this update: Mon 12 May 2025 00:02:03 +0000 Manifest next update: Wed 14 May 2025 00:00:00 +0000 Files and hashes: 1: 9077d754-78a8-3f34-80a1-bf1f2afdf719.roa (hash: PvWgZnCYPpGIKGxaMLIHqW7J4s+zQ0BgOPY2gDhG/lE=) 2: a7029ab5-98ff-451b-9d4f-e72d91a2c9a5.crl (hash: ykJ0CegmDqBioUoTU0nN2w2DuKtXyoNk6Uh/WflEPKk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7029ab5-98ff-451b-9d4f-e72d91a2c9a5/a7029ab5-98ff-451b-9d4f-e72d91a2c9a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7029ab5-98ff-451b-9d4f-e72d91a2c9a5/a7029ab5-98ff-451b-9d4f-e72d91a2c9a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7029ab5-98ff-451b-9d4f-e72d91a2c9a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d2:ac:f9:1d:54:75:9e:a8:3c:36:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7029ab5-98ff-451b-9d4f-e72d91a2c9a5 Validity Not Before: May 12 00:02:03 2025 GMT Not After : May 14 00:00:00 2025 GMT Subject: CN=279b7d29-17c1-49fe-bfbd-c7782894858b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:53:aa:a2:d1:21:c8:2b:d6:b2:99:67:ae:93: a6:01:21:16:f4:ef:11:46:86:da:e2:b4:6f:cc:9e: dd:cc:54:f7:2e:34:ef:a2:76:34:e9:52:56:de:97: 1f:9d:ee:14:ae:3a:92:5b:99:4a:4c:ef:d1:58:6f: d7:42:4b:8e:3e:b1:09:4a:53:24:aa:65:02:df:00: 71:ce:c0:7e:a0:39:77:18:9a:c0:85:34:fb:0a:36: 7b:80:ca:6a:34:78:f2:7b:ba:0e:1b:f0:75:4d:12: 12:50:c3:5f:76:10:8a:63:4a:ba:64:f8:f2:ba:96: 08:ed:e3:02:f8:6a:bf:b7:8b:99:09:46:d1:c5:6b: 97:0e:d8:1e:e0:f3:9a:ed:8c:dc:ab:4f:83:6b:de: 27:92:b1:e8:4f:08:24:d1:04:05:f6:ed:84:1e:49: 00:f3:5b:60:b1:f8:d8:9b:62:32:51:4b:0e:b2:85: 18:67:ae:7a:eb:3d:5b:fa:40:eb:dc:94:6c:f8:c9: 4f:41:f6:49:00:f1:7f:dd:3f:80:1a:49:96:80:41: d6:4e:7a:6d:8d:32:70:79:55:ba:21:66:12:cf:cb: 42:f3:1d:92:a1:86:04:0e:18:e9:c5:44:3d:73:76: c4:c8:10:2b:56:29:50:46:c6:b5:30:5a:db:07:26: bb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:14:5D:4E:EC:0C:C0:80:FF:81:C9:1E:6A:AD:35:5C:B8:F7:02:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7029ab5-98ff-451b-9d4f-e72d91a2c9a5/a7029ab5-98ff-451b-9d4f-e72d91a2c9a5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7029ab5-98ff-451b-9d4f-e72d91a2c9a5/a7029ab5-98ff-451b-9d4f-e72d91a2c9a5.crl X509v3 Authority Key Identifier: keyid:54:1E:14:F2:02:7B:BB:C7:D9:1F:50:8D:11:AF:FE:F2:ED:1B:99:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7029ab5-98ff-451b-9d4f-e72d91a2c9a5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:aa:f7:bc:36:53:42:0a:53:66:98:ea:b0:6c:c0:15:76:75: 22:1b:5b:64:15:9e:38:3d:b2:bd:dd:3a:cd:bb:ff:eb:a3:3d: 86:f6:2f:f9:ba:4d:e2:f0:12:ec:73:bc:4a:0a:58:a0:c1:7e: d7:16:75:54:86:87:c3:e3:a5:f7:88:6d:3e:ee:76:a3:01:ec: 31:6d:e6:5b:57:49:b9:10:35:2f:c9:10:8a:96:46:e8:94:ff: 39:c1:c8:a2:11:2c:76:93:a3:71:45:d3:fb:e4:99:d4:18:96: e9:96:67:0f:59:cb:c3:35:19:04:38:b6:b7:87:c1:cc:35:35: 51:e7:cb:be:87:b2:dd:11:79:f1:91:19:43:14:11:f0:60:05: 99:a4:4a:73:92:e0:c6:50:a7:82:2e:55:2a:40:97:ba:e4:dd: ad:e4:e4:b0:62:c3:c3:0f:ed:e0:87:1e:45:71:2c:83:34:ce: 9c:d8:5a:36:09:26:d3:2f:d4:35:9f:62:e8:4d:55:eb:4a:7a: cd:ee:cd:91:1a:31:0e:fd:e6:da:d4:6f:e3:9c:0a:e7:0c:a7: 2b:bf:7c:be:43:ea:f5:0e:44:7b:85:24:e8:ca:c5:22:5f:6d: 3d:63:af:bc:f8:68:38:90:ca:1e:6d:94:07:c2:d4:06:58:47: 00:33:c8:df -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnSrPkdVHWeqDw294AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcwMjlhYjUtOThmZi00NTFiLTlkNGYtZTcyZDkxYTJj OWE1MB4XDTI1MDUxMjAwMDIwM1oXDTI1MDUxNDAwMDAwMFowLzEtMCsGA1UEAxMk Mjc5YjdkMjktMTdjMS00OWZlLWJmYmQtYzc3ODI4OTQ4NThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslOqotEhyCvWsplnrpOmASEW9O8RRoba4rRv zJ7dzFT3LjTvonY06VJW3pcfne4UrjqSW5lKTO/RWG/XQkuOPrEJSlMkqmUC3wBx zsB+oDl3GJrAhTT7CjZ7gMpqNHjye7oOG/B1TRISUMNfdhCKY0q6ZPjyupYI7eMC +Gq/t4uZCUbRxWuXDtge4POa7Yzcq0+Da94nkrHoTwgk0QQF9u2EHkkA81tgsfjY m2IyUUsOsoUYZ6566z1b+kDr3JRs+MlPQfZJAPF/3T+AGkmWgEHWTnptjTJweVW6 IWYSz8tC8x2SoYYEDhjpxUQ9c3bEyBArVilQRsa1MFrbBya7twIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKAUXU7sDMCA/4HJHmqtNVy49wJiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hNzAy OWFiNS05OGZmLTQ1MWItOWQ0Zi1lNzJkOTFhMmM5YTUvYTcwMjlhYjUtOThmZi00 NTFiLTlkNGYtZTcyZDkxYTJjOWE1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTcwMjlhYjUtOThmZi00NTFiLTlk NGYtZTcyZDkxYTJjOWE1L2E3MDI5YWI1LTk4ZmYtNDUxYi05ZDRmLWU3MmQ5MWEy YzlhNS5jcmwwHwYDVR0jBBgwFoAUVB4U8gJ7u8fZH1CNEa/+8u0bmZUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hNzAyOWFiNS05OGZmLTQ1MWItOWQ0Zi1lNzJk OTFhMmM5YTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQACqve8NlNCClNmmOqwbMAV dnUiG1tkFZ44PbK93TrNu//roz2G9i/5uk3i8BLsc7xKCligwX7XFnVUhofD46X3 iG0+7najAewxbeZbV0m5EDUvyRCKlkbolP85wciiESx2k6NxRdP75JnUGJbplmcP WcvDNRkEOLa3h8HMNTVR58u+h7LdEXnxkRlDFBHwYAWZpEpzkuDGUKeCLlUqQJe6 5N2t5OSwYsPDD+3ghx5FcSyDNM6c2Fo2CSbTL9Q1n2LoTVXrSnrN7s2RGjEO/eba 1G/jnArnDKcrv3y+Q+r1DkR7hSToysUiX209Y6+8+Gg4kMoebZQHwtQGWEcAM8jf -----END CERTIFICATE-----Generated at Mon May 12 20:02:05 2025 by rpki-client