$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.mft File: aa34647f-3229-480c-9b05-3cf0b00fa173.mft (raw, json) Hash identifier: 5EqKB930yCV6EWhQXqRwpvbg5d8TJkHk6dZoQyzuljg= Subject key identifier: 27:B3:6A:26:F6:53:1F:1C:BB:01:83:ED:E7:7E:74:1A:B8:AE:84:C4 Authority key identifier: F6:64:CD:56:E5:2F:5C:B7:81:9C:2B:48:FB:1B:CD:5B:9C:C7:FA:A6 Certificate issuer: /CN=aa34647f-3229-480c-9b05-3cf0b00fa173 Certificate serial: 010D0C9F43285849D42F18BDD02F5F017C504D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.mft Manifest number: 010D0C9F43285849B8591A0A2626962C4503E88B Signing time: Mon 12 May 2025 13:00:03 +0000 Manifest this update: Mon 12 May 2025 13:00:03 +0000 Manifest next update: Thu 15 May 2025 13:00:00 +0000 Files and hashes: 1: aa34647f-3229-480c-9b05-3cf0b00fa173.crl (hash: acxwRAOKk1yHW/JqsW1vaKZ+vQoH588DP2gbkHavse4=) 2: eba3c881-4793-3d27-b8a0-c5d10a55657a.roa (hash: E0O/dgwQHdDhucMH4i1uNlCJzVMgUlixd1LUXQJApUw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:18:bd:d0:2f:5f:01:7c:50:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa34647f-3229-480c-9b05-3cf0b00fa173 Validity Not Before: May 12 13:00:03 2025 GMT Not After : May 15 13:00:00 2025 GMT Subject: CN=661f9932-8128-4723-b868-d0426c4c8ac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1e:48:0e:c2:df:dd:d7:74:43:52:16:15:5d: e0:77:18:e5:95:ea:52:c6:f4:f3:cf:8f:69:fb:4c: cb:3e:df:7f:9e:11:59:33:26:45:b3:fd:03:5d:03: 68:ae:98:fe:c7:6c:ac:fa:1e:ab:fe:00:9c:0a:e7: a0:94:76:a1:c2:cc:d0:13:46:b5:1f:15:1a:33:b7: 24:c3:46:62:fa:f7:40:75:0e:d0:a0:da:76:bf:1f: 84:a7:3f:39:ec:bd:ff:e4:e7:67:ca:48:98:1a:31: 24:04:41:dc:a9:c7:5b:50:62:05:8b:4f:8e:c7:60: e9:7c:95:19:8e:d0:44:bf:f1:90:a6:8c:45:22:e0: 68:1a:cb:31:5a:a6:47:7e:a1:97:5e:2e:15:ca:a9: 20:0a:21:67:4a:70:9f:b4:05:c2:6a:05:aa:3f:8f: 90:29:d2:69:58:9f:5b:c8:50:a0:75:aa:6f:27:c5: 44:a3:ad:b5:03:96:5f:45:60:1c:81:bb:4b:1c:91: be:0f:ad:55:e4:f9:69:f2:10:f7:cd:ee:8d:48:fd: 66:6c:e1:66:7f:aa:c6:e1:d0:03:48:69:2f:fa:50: 9d:62:05:fe:d6:47:62:b2:df:88:fb:1c:6a:5c:34: 8d:71:bb:76:f8:e3:cf:f5:b1:bc:e9:66:cc:71:42: eb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:B3:6A:26:F6:53:1F:1C:BB:01:83:ED:E7:7E:74:1A:B8:AE:84:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.crl X509v3 Authority Key Identifier: keyid:F6:64:CD:56:E5:2F:5C:B7:81:9C:2B:48:FB:1B:CD:5B:9C:C7:FA:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:88:25:cc:a1:b9:f4:a9:e3:12:89:92:52:2d:18:af:f4:40: 04:a3:fa:bd:63:8b:f1:e8:e3:aa:da:38:5a:5c:c6:d9:a4:67: 6e:7c:35:2f:c3:b9:f9:13:13:b4:b6:44:1e:7f:d4:63:df:5c: 15:c0:8e:99:94:0a:38:0b:00:b1:8e:91:19:e8:26:54:47:c9: 8a:98:de:a2:cd:80:69:ab:0c:44:74:f2:90:db:68:1b:b1:84: eb:84:40:6f:1e:89:d0:3f:31:60:91:e7:19:e9:2f:41:3c:ea: 41:32:37:be:61:0b:45:09:f3:15:d2:19:cc:89:a3:de:83:ab: 88:83:93:a1:a9:4f:d1:1d:07:32:87:3e:e1:ea:51:b4:75:b6: 9e:d6:61:13:8b:f2:5b:92:7c:ed:d7:04:61:39:b1:61:9f:17: 8e:af:b4:b0:1c:39:32:75:1e:e3:4c:96:6d:7e:ba:2d:55:fe: 0c:aa:04:68:38:1b:29:9e:cc:b0:d4:e3:fd:30:63:4a:c2:56: cf:f8:dd:6e:5d:26:cc:a4:cf:19:3c:1f:36:05:8b:2e:8b:a5: 50:5e:1d:6c:aa:ae:b5:9f:b9:3a:aa:00:3d:ee:16:b3:e1:0e: 05:ba:0e:20:e1:bf:c5:e4:20:37:8b:e0:a4:1a:1f:01:27:22: e1:24:15:66 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnULxi90C9fAXxQTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzNDY0N2YtMzIyOS00ODBjLTliMDUtM2NmMGIwMGZh MTczMB4XDTI1MDUxMjEzMDAwM1oXDTI1MDUxNTEzMDAwMFowLzEtMCsGA1UEAxMk NjYxZjk5MzItODEyOC00NzIzLWI4NjgtZDA0MjZjNGM4YWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvh5IDsLf3dd0Q1IWFV3gdxjllepSxvTzz49p +0zLPt9/nhFZMyZFs/0DXQNorpj+x2ys+h6r/gCcCueglHahwszQE0a1HxUaM7ck w0Zi+vdAdQ7QoNp2vx+Epz857L3/5OdnykiYGjEkBEHcqcdbUGIFi0+Ox2DpfJUZ jtBEv/GQpoxFIuBoGssxWqZHfqGXXi4VyqkgCiFnSnCftAXCagWqP4+QKdJpWJ9b yFCgdapvJ8VEo621A5ZfRWAcgbtLHJG+D61V5Plp8hD3ze6NSP1mbOFmf6rG4dAD SGkv+lCdYgX+1kdist+I+xxqXDSNcbt2+OPP9bG86WbMcULrLQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCezaib2Ux8cuwGD7ed+dBq4roTEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hYTM0 NjQ3Zi0zMjI5LTQ4MGMtOWIwNS0zY2YwYjAwZmExNzMvYWEzNDY0N2YtMzIyOS00 ODBjLTliMDUtM2NmMGIwMGZhMTczLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWEzNDY0N2YtMzIyOS00ODBjLTli MDUtM2NmMGIwMGZhMTczL2FhMzQ2NDdmLTMyMjktNDgwYy05YjA1LTNjZjBiMDBm YTE3My5jcmwwHwYDVR0jBBgwFoAU9mTNVuUvXLeBnCtI+xvNW5zH+qYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hYTM0NjQ3Zi0zMjI5LTQ4MGMtOWIwNS0zY2Yw YjAwZmExNzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAViCXMobn0qeMSiZJSLRiv 9EAEo/q9Y4vx6OOq2jhaXMbZpGdufDUvw7n5ExO0tkQef9Rj31wVwI6ZlAo4CwCx jpEZ6CZUR8mKmN6izYBpqwxEdPKQ22gbsYTrhEBvHonQPzFgkecZ6S9BPOpBMje+ YQtFCfMV0hnMiaPeg6uIg5OhqU/RHQcyhz7h6lG0dbae1mETi/Jbknzt1wRhObFh nxeOr7SwHDkydR7jTJZtfrotVf4MqgRoOBspnsyw1OP9MGNKwlbP+N1uXSbMpM8Z PB82BYsui6VQXh1sqq61n7k6qgA97haz4Q4Fug4g4b/F5CA3i+CkGh8BJyLhJBVm -----END CERTIFICATE-----Generated at Mon May 12 20:52:49 2025 by rpki-client