$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e/42c666c1-a603-4b7f-a5b1-8292a815144e.mft File: 42c666c1-a603-4b7f-a5b1-8292a815144e.mft (raw, json) Hash identifier: 0W8g0/hh13/AvNy7ur9WsUfiCtGlpn+vGRYsomeUMCw= Subject key identifier: 8D:9E:DD:E3:7D:FF:DF:DE:7C:DD:0A:21:09:C1:11:6D:0E:DF:B4:7D Authority key identifier: 9E:1A:34:20:B0:66:4F:98:39:3A:33:EF:54:18:95:61:DE:AF:BB:70 Certificate issuer: /CN=42c666c1-a603-4b7f-a5b1-8292a815144e Certificate serial: 010D0C9F43285849C0FDA6377111EF7A419EEA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e/42c666c1-a603-4b7f-a5b1-8292a815144e.mft Manifest number: 010D0C9F4328584890AF1FF4945AFE1912081BB3 Signing time: Mon 05 May 2025 16:00:03 +0000 Manifest this update: Mon 05 May 2025 16:00:03 +0000 Manifest next update: Wed 07 May 2025 16:00:00 +0000 Files and hashes: 1: 2dc2063e-28dd-3936-aa61-b0d1e7a6065c.roa (hash: WY48/3ilXuqfS7R5NITBx9hMRn9DC+HcwpFDUSmLzaI=) 2: 42c666c1-a603-4b7f-a5b1-8292a815144e.crl (hash: rTrgPz3+UsHZiMIapLCvdju8eAlXjofNG5AGeC5pA4I=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e/42c666c1-a603-4b7f-a5b1-8292a815144e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e/42c666c1-a603-4b7f-a5b1-8292a815144e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:fd:a6:37:71:11:ef:7a:41:9e:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42c666c1-a603-4b7f-a5b1-8292a815144e Validity Not Before: May 5 16:00:03 2025 GMT Not After : May 7 16:00:00 2025 GMT Subject: CN=58a285c5-a8a9-4583-95ad-98a0d346a93f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:94:7f:21:f5:22:6a:4c:b5:21:6a:0c:93:53: d8:95:3b:b9:a8:ba:26:06:a7:70:35:13:c1:31:45: 7e:17:df:a4:4c:aa:c2:e2:04:24:56:81:0c:a7:97: f0:ab:90:62:59:f8:8d:b0:a9:11:40:4e:09:86:4e: 4d:56:df:c5:50:db:53:b5:19:fa:66:31:00:af:9d: 90:9a:06:ec:30:d2:d8:9b:72:e4:0d:c8:55:23:27: a7:5a:a4:81:31:40:1b:ec:77:c8:0c:d1:12:c7:05: db:f2:f2:0f:29:61:30:7a:ca:4d:e1:80:44:85:f0: d1:1b:ca:c9:74:1a:e8:c3:f5:86:8d:28:37:f2:a3: 00:c4:0f:d2:2f:25:0c:a8:93:ba:0f:df:30:ef:9c: 74:15:42:fd:b8:89:dd:d9:40:c5:ff:d2:19:a8:10: 03:c0:25:3f:6b:80:5e:1c:dd:3a:90:6a:95:f7:ce: c4:bd:0d:3b:ff:50:88:bc:40:11:7a:83:12:46:a1: 0d:7d:a6:cd:9e:bb:d8:9f:2e:df:d4:3a:a5:2a:65: 44:77:bc:84:52:d5:26:9b:d3:0c:1b:c2:43:80:d6: 37:dd:cb:0d:82:ce:9f:04:38:98:66:0a:82:7e:6e: 07:36:ae:f1:e6:ea:2a:93:87:84:6e:96:fb:f1:f9: 3a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:9E:DD:E3:7D:FF:DF:DE:7C:DD:0A:21:09:C1:11:6D:0E:DF:B4:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e/42c666c1-a603-4b7f-a5b1-8292a815144e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e/42c666c1-a603-4b7f-a5b1-8292a815144e.crl X509v3 Authority Key Identifier: keyid:9E:1A:34:20:B0:66:4F:98:39:3A:33:EF:54:18:95:61:DE:AF:BB:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:ac:80:6d:7d:8d:34:78:1a:4c:35:79:94:4f:3d:18:da:7a: a7:3d:03:d3:03:11:7f:9f:69:8f:21:55:53:69:45:cb:b2:3f: e4:22:bf:fc:24:16:67:22:9a:5f:fd:ee:91:57:e2:98:28:57: cd:6f:9f:bb:52:a6:08:bb:1a:4d:93:d1:bf:dd:7e:d0:2f:81: 28:b1:44:84:84:d1:bd:4d:8e:32:cb:ef:a0:91:00:c0:7c:6e: 21:4a:a9:b4:2f:76:48:12:aa:12:27:93:07:76:f4:3b:fc:7c: a1:48:a0:b7:ec:9f:85:fc:4a:aa:af:8e:23:97:76:e2:fd:2c: 16:e8:bc:da:91:e9:0f:7b:5f:07:91:8e:5b:ff:c9:0c:7c:9b: 2f:6a:8f:b6:e2:5c:da:bc:49:df:f0:8d:6a:06:5f:d8:4f:1d: 69:25:67:1e:e3:14:b5:b7:75:04:e8:b0:64:ef:da:7f:67:c0: ec:1a:a1:8b:6c:65:7d:68:10:6b:e5:04:23:5d:d7:2b:bf:1e: 61:a3:e1:e5:3b:97:52:a8:a4:38:05:cd:23:05:6a:04:3e:66: 08:bf:89:39:cf:55:2a:b1:22:2f:3d:63:d3:45:8a:b4:ca:01: d1:93:40:ce:cf:d1:a6:4f:40:4d:ba:04:da:91:7c:88:ac:91: 67:8f:b2:79 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnA/aY3cRHvekGe6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDJjNjY2YzEtYTYwMy00YjdmLWE1YjEtODI5MmE4MTUx NDRlMB4XDTI1MDUwNTE2MDAwM1oXDTI1MDUwNzE2MDAwMFowLzEtMCsGA1UEAxMk NThhMjg1YzUtYThhOS00NTgzLTk1YWQtOThhMGQzNDZhOTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25R/IfUiaky1IWoMk1PYlTu5qLomBqdwNRPB MUV+F9+kTKrC4gQkVoEMp5fwq5BiWfiNsKkRQE4Jhk5NVt/FUNtTtRn6ZjEAr52Q mgbsMNLYm3LkDchVIyenWqSBMUAb7HfIDNESxwXb8vIPKWEwespN4YBEhfDRG8rJ dBrow/WGjSg38qMAxA/SLyUMqJO6D98w75x0FUL9uInd2UDF/9IZqBADwCU/a4Be HN06kGqV987EvQ07/1CIvEAReoMSRqENfabNnrvYny7f1DqlKmVEd7yEUtUmm9MM G8JDgNY33csNgs6fBDiYZgqCfm4HNq7x5uoqk4eEbpb78fk64QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFI2e3eN9/9/efN0KIQnBEW0O37R9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80MmM2 NjZjMS1hNjAzLTRiN2YtYTViMS04MjkyYTgxNTE0NGUvNDJjNjY2YzEtYTYwMy00 YjdmLWE1YjEtODI5MmE4MTUxNDRlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNDJjNjY2YzEtYTYwMy00YjdmLWE1 YjEtODI5MmE4MTUxNDRlLzQyYzY2NmMxLWE2MDMtNGI3Zi1hNWIxLTgyOTJhODE1 MTQ0ZS5jcmwwHwYDVR0jBBgwFoAUnho0ILBmT5g5OjPvVBiVYd6vu3AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80MmM2NjZjMS1hNjAzLTRiN2YtYTViMS04Mjky YTgxNTE0NGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBLrIBtfY00eBpMNXmUTz0Y 2nqnPQPTAxF/n2mPIVVTaUXLsj/kIr/8JBZnIppf/e6RV+KYKFfNb5+7UqYIuxpN k9G/3X7QL4EosUSEhNG9TY4yy++gkQDAfG4hSqm0L3ZIEqoSJ5MHdvQ7/HyhSKC3 7J+F/Eqqr44jl3bi/SwW6LzakekPe18HkY5b/8kMfJsvao+24lzavEnf8I1qBl/Y Tx1pJWce4xS1t3UE6LBk79p/Z8DsGqGLbGV9aBBr5QQjXdcrvx5ho+HlO5dSqKQ4 Bc0jBWoEPmYIv4k5z1UqsSIvPWPTRYq0ygHRk0DOz9GmT0BNugTakXyIrJFnj7J5 -----END CERTIFICATE-----Generated at Tue May 6 13:07:14 2025 by rpki-client