$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95ea91c-a6f4-43c9-b23b-311a7690adcd/e95ea91c-a6f4-43c9-b23b-311a7690adcd.mft File: e95ea91c-a6f4-43c9-b23b-311a7690adcd.mft (raw, json) Hash identifier: NTq95vXTxgRHcaNW0ZKjF8PWSt236pE7sdkLrdjdR5c= Subject key identifier: B1:4C:54:10:FA:97:22:C1:88:0E:2A:19:7C:72:02:E1:67:85:3D:56 Authority key identifier: F5:DC:3F:9F:C9:67:C8:89:2C:52:AC:64:FF:8B:E2:8A:EA:E5:F6:E0 Certificate issuer: /CN=e95ea91c-a6f4-43c9-b23b-311a7690adcd Certificate serial: 010D0C9F43285849D5B2381CE4BA025725955E70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95ea91c-a6f4-43c9-b23b-311a7690adcd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95ea91c-a6f4-43c9-b23b-311a7690adcd/e95ea91c-a6f4-43c9-b23b-311a7690adcd.mft Manifest number: 010D0C9F432858495AF6F3FD4F87A3B80FBE672F Signing time: Tue 13 May 2025 02:00:03 +0000 Manifest this update: Tue 13 May 2025 02:00:03 +0000 Manifest next update: Fri 16 May 2025 02:00:00 +0000 Files and hashes: 1: b32a29af-6dde-3812-9c9d-78649a1c461a.roa (hash: /6cOPKAeo4eEYqiZcindIjAh2fxt2IThTtk4kbfAwD8=) 2: e95ea91c-a6f4-43c9-b23b-311a7690adcd.crl (hash: 1FtZK+GhFJs0tDsR9YnxRtpkLNWCQzcA5XQI5QP6GXA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95ea91c-a6f4-43c9-b23b-311a7690adcd/e95ea91c-a6f4-43c9-b23b-311a7690adcd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95ea91c-a6f4-43c9-b23b-311a7690adcd/e95ea91c-a6f4-43c9-b23b-311a7690adcd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95ea91c-a6f4-43c9-b23b-311a7690adcd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:b2:38:1c:e4:ba:02:57:25:95:5e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e95ea91c-a6f4-43c9-b23b-311a7690adcd Validity Not Before: May 13 02:00:03 2025 GMT Not After : May 16 02:00:00 2025 GMT Subject: CN=fe4143f9-2ab4-4d6c-a3a6-6f4523e8ea09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:40:f2:e5:b1:fa:aa:87:92:ab:82:13:50:dc: 20:ac:06:b4:e5:18:76:46:e4:87:53:f4:03:5b:a4: 06:30:07:3c:45:6b:36:1a:77:a2:09:87:89:8d:fe: c2:16:e8:45:e7:ef:3c:33:9c:49:19:fe:68:00:33: 7d:48:b2:37:93:1a:17:fd:71:9d:92:3e:9c:25:52: f9:3c:37:ba:b4:3b:c5:64:27:e4:e5:6b:48:17:e5: a1:05:a7:1e:72:b1:14:30:b0:b6:7c:54:3c:f6:ea: 53:bf:c9:6b:32:ce:e4:25:37:45:5b:1a:73:f2:67: ce:39:d8:a3:00:83:0c:42:c1:22:67:6e:6b:b6:9d: d1:05:53:38:9d:ca:9f:c5:fa:f5:4c:02:5f:2f:ce: 36:0a:70:7f:41:36:a6:2a:3b:40:a9:21:27:d5:f1: 69:63:4e:4e:f8:07:0a:3f:e0:ab:33:35:9f:ae:2c: e4:10:b8:b7:29:d9:4f:61:19:69:d2:4b:df:69:29: 6a:7d:f9:74:a7:7c:15:de:a7:59:9e:cd:40:e9:ef: d4:2d:60:cf:65:59:17:38:84:dc:4b:62:ca:4c:b4: 60:d3:d5:06:73:ee:14:52:88:42:5c:22:e7:18:c3: f8:12:3b:e1:d0:7c:46:1e:f2:7f:e7:6e:88:a4:2b: b4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:4C:54:10:FA:97:22:C1:88:0E:2A:19:7C:72:02:E1:67:85:3D:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95ea91c-a6f4-43c9-b23b-311a7690adcd/e95ea91c-a6f4-43c9-b23b-311a7690adcd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95ea91c-a6f4-43c9-b23b-311a7690adcd/e95ea91c-a6f4-43c9-b23b-311a7690adcd.crl X509v3 Authority Key Identifier: keyid:F5:DC:3F:9F:C9:67:C8:89:2C:52:AC:64:FF:8B:E2:8A:EA:E5:F6:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95ea91c-a6f4-43c9-b23b-311a7690adcd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:71:77:d9:6a:ca:ea:15:60:a9:68:48:64:85:cf:6a:e2:a9: 2a:b7:31:a9:77:18:cb:4a:4f:b3:f0:20:1a:4b:18:50:2a:16: b9:c9:22:86:e2:c3:54:f0:3d:44:3b:97:64:3d:37:f4:e2:ef: f0:e5:9e:da:bf:5f:1b:ad:e5:4b:ea:ac:6b:3e:b9:a1:1d:de: 58:55:43:e3:a7:98:1b:a4:6e:17:a5:01:e3:d4:d3:04:08:08: 35:78:ee:7c:43:e7:44:74:f0:eb:9c:14:3f:02:72:58:33:96: d0:4b:58:87:d6:ad:37:9d:13:fc:84:e4:81:80:9e:27:a1:5a: 10:7b:e7:8e:58:dc:45:f2:0e:e4:14:b4:cd:23:92:3b:95:09: 63:44:fb:75:54:01:6d:3e:a1:1f:07:e7:f7:04:4b:aa:8f:20: dd:15:c9:59:49:ea:a0:9c:c7:13:f1:67:2c:ed:92:e7:1f:b6: 3b:50:97:7c:ec:29:09:ef:52:f6:50:2a:da:32:13:7c:d7:68: 94:0e:43:43:f0:4a:f9:c8:9e:37:1b:94:f7:9b:b4:06:55:a7: cf:5b:54:2e:71:28:ba:20:e2:84:39:8a:a5:44:12:a1:9f:de: 7b:ee:1f:f0:3d:fb:8f:6f:2a:97:6d:d5:71:02:31:30:dd:c2: 7a:d4:ec:2f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnVsjgc5LoCVyWVXnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk1ZWE5MWMtYTZmNC00M2M5LWIyM2ItMzExYTc2OTBh ZGNkMB4XDTI1MDUxMzAyMDAwM1oXDTI1MDUxNjAyMDAwMFowLzEtMCsGA1UEAxMk ZmU0MTQzZjktMmFiNC00ZDZjLWEzYTYtNmY0NTIzZThlYTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkDy5bH6qoeSq4ITUNwgrAa05Rh2RuSHU/QD W6QGMAc8RWs2GneiCYeJjf7CFuhF5+88M5xJGf5oADN9SLI3kxoX/XGdkj6cJVL5 PDe6tDvFZCfk5WtIF+WhBacecrEUMLC2fFQ89upTv8lrMs7kJTdFWxpz8mfOOdij AIMMQsEiZ25rtp3RBVM4ncqfxfr1TAJfL842CnB/QTamKjtAqSEn1fFpY05O+AcK P+CrMzWfrizkELi3KdlPYRlp0kvfaSlqffl0p3wV3qdZns1A6e/ULWDPZVkXOITc S2LKTLRg09UGc+4UUohCXCLnGMP4Ejvh0HxGHvJ/526IpCu0GQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLFMVBD6lyLBiA4qGXxyAuFnhT1WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lOTVl YTkxYy1hNmY0LTQzYzktYjIzYi0zMTFhNzY5MGFkY2QvZTk1ZWE5MWMtYTZmNC00 M2M5LWIyM2ItMzExYTc2OTBhZGNkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZTk1ZWE5MWMtYTZmNC00M2M5LWIy M2ItMzExYTc2OTBhZGNkL2U5NWVhOTFjLWE2ZjQtNDNjOS1iMjNiLTMxMWE3Njkw YWRjZC5jcmwwHwYDVR0jBBgwFoAU9dw/n8lnyIksUqxk/4viiurl9uAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9lOTVlYTkxYy1hNmY0LTQzYzktYjIzYi0zMTFh NzY5MGFkY2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAZcXfZasrqFWCpaEhkhc9q 4qkqtzGpdxjLSk+z8CAaSxhQKha5ySKG4sNU8D1EO5dkPTf04u/w5Z7av18breVL 6qxrPrmhHd5YVUPjp5gbpG4XpQHj1NMECAg1eO58Q+dEdPDrnBQ/AnJYM5bQS1iH 1q03nRP8hOSBgJ4noVoQe+eOWNxF8g7kFLTNI5I7lQljRPt1VAFtPqEfB+f3BEuq jyDdFclZSeqgnMcT8Wcs7ZLnH7Y7UJd87CkJ71L2UCraMhN812iUDkND8Er5yJ43 G5T3m7QGVafPW1QucSi6IOKEOYqlRBKhn9577h/wPfuPbyqXbdVxAjEw3cJ61Owv -----END CERTIFICATE-----Generated at Tue May 13 06:12:44 2025 by rpki-client