$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.mft File: 2d88838e-541a-4661-8501-3c7d2eb5849d.mft (raw, json) Hash identifier: cyKglqLfJvmc5GjuuD7YRHZZIwCXP7eoWiFLn/5OE7I= Subject key identifier: CA:82:E5:BF:1E:09:23:F4:5B:CD:FF:E4:B6:86:C3:29:32:AA:64:41 Authority key identifier: 4E:9D:73:3B:F6:0F:5A:F6:9E:37:46:28:53:09:C4:7A:42:49:58:2E Certificate issuer: /CN=2d88838e-541a-4661-8501-3c7d2eb5849d Certificate serial: 010D0C9F43285849CC0AA8C026CDC8E07747B080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.mft Manifest number: 010D0C9F43285848B22C5EC19A391EA7020C1DE8 Signing time: Fri 09 May 2025 15:00:09 +0000 Manifest this update: Fri 09 May 2025 15:00:09 +0000 Manifest next update: Sun 11 May 2025 15:00:00 +0000 Files and hashes: 1: 2d88838e-541a-4661-8501-3c7d2eb5849d.crl (hash: QX0Om+6tma/PMfn9bycmNaOP4e7me10S/gZQEbMpy9U=) 2: 35dd38da-ef2c-3aa2-965d-09739043ca44.roa (hash: kgMIB20TYFk4sp0mjtbPVsxl5wOiTAVG/B7q6kHQIuo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cc:0a:a8:c0:26:cd:c8:e0:77:47:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d88838e-541a-4661-8501-3c7d2eb5849d Validity Not Before: May 9 15:00:09 2025 GMT Not After : May 11 15:00:00 2025 GMT Subject: CN=378bff03-2e8b-452a-bdaa-356e289f874a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:94:e2:30:86:5b:ff:34:35:e5:38:25:e6:ba: 02:21:e7:3a:83:35:3e:28:9b:6c:df:66:66:54:2e: 36:5d:f5:81:78:45:25:a6:2b:c9:58:f6:96:2f:81: b6:b8:10:92:03:eb:db:22:f0:a5:39:46:bb:b1:9f: e5:da:54:ab:df:05:aa:23:1a:df:40:b9:75:8d:38: 9c:79:f0:09:25:88:c3:55:bf:da:bd:8e:be:e5:4b: 5a:55:03:ae:09:ae:e0:cb:ae:7c:7a:c6:33:47:69: 40:5b:50:19:e5:e3:54:8e:59:fa:9b:f4:ad:32:62: d1:c0:b0:62:05:1f:c4:6c:74:11:29:e8:58:69:58: 7c:34:bc:74:73:61:bf:bd:85:b9:8e:89:83:51:b4: 64:86:ba:7e:fa:7a:6c:a0:24:81:d8:7f:0a:e5:2d: fa:f7:27:71:c3:7c:d3:cd:87:07:a9:0a:e0:f4:5a: e3:1b:de:13:7c:40:93:f6:54:65:c5:e8:ee:42:5b: cf:44:29:12:34:d2:0a:4c:85:ed:1d:ff:be:56:ff: 46:f3:de:bc:65:b2:0f:b3:34:d0:b7:aa:d2:42:ca: cb:bb:c7:e7:79:ca:be:f6:03:a2:53:53:8f:92:73: 34:e7:8a:e5:c3:25:63:38:a2:aa:e2:f1:e5:d2:ba: f0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:82:E5:BF:1E:09:23:F4:5B:CD:FF:E4:B6:86:C3:29:32:AA:64:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.crl X509v3 Authority Key Identifier: keyid:4E:9D:73:3B:F6:0F:5A:F6:9E:37:46:28:53:09:C4:7A:42:49:58:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:2a:c2:23:32:f6:a9:2e:bc:eb:10:3a:17:ad:9d:a3:a4:cb: 13:26:5b:96:98:1d:62:77:08:e2:63:81:92:9f:25:79:8b:73: b5:07:ec:02:28:f3:49:0f:15:fc:0c:7c:30:54:2c:e1:26:28: cf:e4:48:9f:ae:28:32:db:1d:97:c2:79:5d:0e:91:63:33:de: 1f:9b:36:15:56:33:fa:de:ac:df:f7:8d:73:7a:28:d1:2f:dd: a2:33:39:5b:1e:1d:c7:14:0a:43:c9:72:26:c5:4e:c9:6d:eb: 59:1c:32:ca:3b:ca:9d:77:4e:30:88:ce:a4:57:0e:9b:aa:01: 89:f1:40:fc:f3:52:7f:a3:3c:52:00:f9:a2:9d:17:00:3f:99: 56:ec:b9:0b:47:7d:ea:e6:3f:97:5f:84:8b:c0:be:ac:02:bb: 0b:70:d9:76:ab:09:68:23:4c:d3:d7:68:6a:ee:8c:95:6a:2d: e9:f1:c1:9a:15:99:ca:74:e0:d5:cc:88:95:a2:54:90:85:4a: d8:e7:57:af:a9:ae:b7:b6:4f:93:6f:9f:18:29:c6:fc:ae:92: 62:81:86:04:9d:84:89:38:69:64:6b:4f:13:a3:b5:86:88:c7: b5:f6:63:a2:a7:65:6c:3d:a6:78:35:c1:9e:29:cf:df:fb:a9: 94:3d:8e:f1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnMCqjAJs3I4HdHsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ4ODgzOGUtNTQxYS00NjYxLTg1MDEtM2M3ZDJlYjU4 NDlkMB4XDTI1MDUwOTE1MDAwOVoXDTI1MDUxMTE1MDAwMFowLzEtMCsGA1UEAxMk Mzc4YmZmMDMtMmU4Yi00NTJhLWJkYWEtMzU2ZTI4OWY4NzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJTiMIZb/zQ15Tgl5roCIec6gzU+KJts32Zm VC42XfWBeEUlpivJWPaWL4G2uBCSA+vbIvClOUa7sZ/l2lSr3wWqIxrfQLl1jTic efAJJYjDVb/avY6+5UtaVQOuCa7gy658esYzR2lAW1AZ5eNUjln6m/StMmLRwLBi BR/EbHQRKehYaVh8NLx0c2G/vYW5jomDUbRkhrp++npsoCSB2H8K5S369ydxw3zT zYcHqQrg9FrjG94TfECT9lRlxejuQlvPRCkSNNIKTIXtHf++Vv9G8968ZbIPszTQ t6rSQsrLu8fnecq+9gOiU1OPknM054rlwyVjOKKq4vHl0rrwbwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMqC5b8eCSP0W83/5LaGwykyqmRBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZDg4 ODM4ZS01NDFhLTQ2NjEtODUwMS0zYzdkMmViNTg0OWQvMmQ4ODgzOGUtNTQxYS00 NjYxLTg1MDEtM2M3ZDJlYjU4NDlkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmQ4ODgzOGUtNTQxYS00NjYxLTg1 MDEtM2M3ZDJlYjU4NDlkLzJkODg4MzhlLTU0MWEtNDY2MS04NTAxLTNjN2QyZWI1 ODQ5ZC5jcmwwHwYDVR0jBBgwFoAUTp1zO/YPWvaeN0YoUwnEekJJWC4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZDg4ODM4ZS01NDFhLTQ2NjEtODUwMS0zYzdk MmViNTg0OWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA+KsIjMvapLrzrEDoXrZ2j pMsTJluWmB1idwjiY4GSnyV5i3O1B+wCKPNJDxX8DHwwVCzhJijP5Eifrigy2x2X wnldDpFjM94fmzYVVjP63qzf941zeijRL92iMzlbHh3HFApDyXImxU7JbetZHDLK O8qdd04wiM6kVw6bqgGJ8UD881J/ozxSAPminRcAP5lW7LkLR33q5j+XX4SLwL6s ArsLcNl2qwloI0zT12hq7oyVai3p8cGaFZnKdODVzIiVolSQhUrY51evqa63tk+T b58YKcb8rpJigYYEnYSJOGlka08To7WGiMe19mOip2VsPaZ4NcGeKc/f+6mUPY7x -----END CERTIFICATE-----Generated at Sat May 10 04:05:38 2025 by rpki-client