$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.mft File: 33d1a6b4-9003-4c1d-9a48-0270be4af50a.mft (raw, json) Hash identifier: ydz5vIgtT63JOb6dP/6wHh1WGY4QT65rPhx5dn1rUHs= Subject key identifier: DF:A9:5C:8A:F4:58:95:D2:DA:EF:75:EA:F8:6E:63:95:4E:BF:DF:8C Authority key identifier: 2D:C3:B9:F7:14:B8:6D:B2:A5:60:A6:D9:47:0E:A0:83:36:05:45:C2 Certificate issuer: /CN=33d1a6b4-9003-4c1d-9a48-0270be4af50a Certificate serial: 010D0C9F43285849C639B9D615BAC46D4397F402 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.mft Manifest number: 010D0C9F432858499C71461369702FC777490D90 Signing time: Wed 07 May 2025 13:00:07 +0000 Manifest this update: Wed 07 May 2025 13:00:07 +0000 Manifest next update: Fri 09 May 2025 13:00:00 +0000 Files and hashes: 1: 33d1a6b4-9003-4c1d-9a48-0270be4af50a.crl (hash: WvNzHSMt0itujpDGsz+PxomZaiC9SQALlwlZNSvmQWk=) 2: e5509d98-c8ea-38e0-88a8-99be28cd2866.roa (hash: PfGqQEk8hbLX1GdeH4WofEsiPjt9sX7RKU9t3NwcVLc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c6:39:b9:d6:15:ba:c4:6d:43:97:f4:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33d1a6b4-9003-4c1d-9a48-0270be4af50a Validity Not Before: May 7 13:00:07 2025 GMT Not After : May 9 13:00:00 2025 GMT Subject: CN=6002d92d-0af6-4cec-a1f8-499a50b14fd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:de:ee:6e:f8:3f:0f:72:fe:a4:10:35:89:0f: bf:a1:20:12:6a:08:32:a2:3d:2d:d5:0a:c4:27:8a: eb:76:1e:47:80:a5:30:60:7c:94:c0:39:27:0c:40: aa:21:c4:25:09:82:31:8d:b8:31:75:78:56:2b:62: 0a:01:3e:7e:5e:63:df:ce:5c:78:80:51:8c:a3:31: 4f:a0:f9:5a:1d:3c:a9:1e:1f:a9:c1:db:59:0d:9c: fc:0d:34:dd:cc:92:a2:b3:99:d8:ea:d2:40:1c:4a: 15:3e:d2:b6:91:e4:af:48:c3:3f:1e:eb:0a:32:19: 07:1f:af:58:60:1a:2a:ab:01:af:b3:e6:fb:51:b1: 13:78:2f:f8:bd:44:f7:4c:9c:30:a8:4c:80:c1:a9: 62:96:32:de:ed:d5:5c:e4:85:e3:cb:26:38:91:16: 4d:00:78:5f:53:bb:0f:59:6d:7c:85:eb:f0:a2:04: f1:36:0c:e5:13:58:1b:6e:ce:1f:f5:21:2a:29:47: f1:a8:29:08:65:9c:c2:4c:71:ac:5a:ab:f9:53:16: 12:3f:76:27:11:a3:6d:24:ec:4a:15:3b:bc:e0:90: 66:b3:c1:b0:27:7f:8d:e4:66:b2:bd:32:47:c4:ee: 64:8a:ff:26:ef:b4:87:5b:74:99:c7:a6:a3:79:8b: 96:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A9:5C:8A:F4:58:95:D2:DA:EF:75:EA:F8:6E:63:95:4E:BF:DF:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.crl X509v3 Authority Key Identifier: keyid:2D:C3:B9:F7:14:B8:6D:B2:A5:60:A6:D9:47:0E:A0:83:36:05:45:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:3e:b4:b6:9d:4a:f6:b8:60:5e:df:fa:11:29:b9:96:08:81: 4b:9e:21:90:2b:32:96:71:8f:21:ce:19:97:58:13:e4:6f:ba: 6e:c9:e9:7d:b6:ca:c8:39:79:7f:b0:6c:5b:25:80:d0:ed:c9: b0:21:25:bc:06:25:f3:52:ed:62:dd:2e:1a:38:b5:4e:1c:9d: a9:4c:9a:e0:0c:ac:2a:7c:ac:56:9b:4d:4d:f2:9e:8b:78:1a: 2f:63:82:22:a7:8e:5f:5e:8f:b2:fa:41:0b:74:89:bb:26:6d: 3d:7c:8d:e1:37:a1:62:21:20:d4:21:cb:e0:0d:9d:08:56:8b: 67:bf:98:a6:6a:d3:80:c3:5c:a1:81:87:8b:58:20:e4:07:93: 3c:56:b2:47:df:58:c2:43:8d:31:1e:0a:73:70:82:d1:63:e7: 1a:0e:56:6b:48:89:0e:9e:42:4b:fd:ce:b9:6b:7d:c0:e4:b6: 73:71:9d:ff:62:8d:4c:5f:2d:08:63:d6:bc:3b:92:27:b9:c8: e3:01:29:7e:5d:89:bb:72:b2:98:0a:d8:76:f5:61:46:74:e3: 5c:8b:45:58:63:dc:4b:7d:69:4c:80:25:01:cf:de:63:83:89: 3b:0b:c3:06:ac:53:f6:b9:ac:67:ae:74:4b:f1:cd:25:a8:3e: ec:97:c9:53 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnGObnWFbrEbUOX9AIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNkMWE2YjQtOTAwMy00YzFkLTlhNDgtMDI3MGJlNGFm NTBhMB4XDTI1MDUwNzEzMDAwN1oXDTI1MDUwOTEzMDAwMFowLzEtMCsGA1UEAxMk NjAwMmQ5MmQtMGFmNi00Y2VjLWExZjgtNDk5YTUwYjE0ZmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi97ubvg/D3L+pBA1iQ+/oSASaggyoj0t1QrE J4rrdh5HgKUwYHyUwDknDECqIcQlCYIxjbgxdXhWK2IKAT5+XmPfzlx4gFGMozFP oPlaHTypHh+pwdtZDZz8DTTdzJKis5nY6tJAHEoVPtK2keSvSMM/HusKMhkHH69Y YBoqqwGvs+b7UbETeC/4vUT3TJwwqEyAwaliljLe7dVc5IXjyyY4kRZNAHhfU7sP WW18hevwogTxNgzlE1gbbs4f9SEqKUfxqCkIZZzCTHGsWqv5UxYSP3YnEaNtJOxK FTu84JBms8GwJ3+N5GayvTJHxO5kiv8m77SHW3SZx6ajeYuWQwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFN+pXIr0WJXS2u916vhuY5VOv9+MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zM2Qx YTZiNC05MDAzLTRjMWQtOWE0OC0wMjcwYmU0YWY1MGEvMzNkMWE2YjQtOTAwMy00 YzFkLTlhNDgtMDI3MGJlNGFmNTBhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzNkMWE2YjQtOTAwMy00YzFkLTlh NDgtMDI3MGJlNGFmNTBhLzMzZDFhNmI0LTkwMDMtNGMxZC05YTQ4LTAyNzBiZTRh ZjUwYS5jcmwwHwYDVR0jBBgwFoAULcO59xS4bbKlYKbZRw6ggzYFRcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zM2QxYTZiNC05MDAzLTRjMWQtOWE0OC0wMjcw YmU0YWY1MGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBSPrS2nUr2uGBe3/oRKbmW CIFLniGQKzKWcY8hzhmXWBPkb7puyel9tsrIOXl/sGxbJYDQ7cmwISW8BiXzUu1i 3S4aOLVOHJ2pTJrgDKwqfKxWm01N8p6LeBovY4Iip45fXo+y+kELdIm7Jm09fI3h N6FiISDUIcvgDZ0IVotnv5imatOAw1yhgYeLWCDkB5M8VrJH31jCQ40xHgpzcILR Y+caDlZrSIkOnkJL/c65a33A5LZzcZ3/Yo1MXy0IY9a8O5InucjjASl+XYm7crKY Cth29WFGdONci0VYY9xLfWlMgCUBz95jg4k7C8MGrFP2uaxnrnRL8c0lqD7sl8lT -----END CERTIFICATE-----Generated at Wed May 7 16:12:57 2025 by rpki-client