$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c/9ffa2885-cbaa-44e8-babb-180936652b5c.mft File: 9ffa2885-cbaa-44e8-babb-180936652b5c.mft (raw, json) Hash identifier: PaCnB2QVk3OUKFhf5pvBdAGoyyJwnYVFSk1Opoo0kOc= Subject key identifier: 62:43:09:93:75:B5:99:B2:D0:9A:B3:6F:13:02:2B:6A:9B:94:A4:65 Authority key identifier: 1B:4F:10:EB:F9:FE:83:F4:AB:C9:86:D0:8E:57:63:BD:71:C6:0D:E9 Certificate issuer: /CN=9ffa2885-cbaa-44e8-babb-180936652b5c Certificate serial: 010D0C9F43285849C70A2B4B5191F4E88DD86040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c/9ffa2885-cbaa-44e8-babb-180936652b5c.mft Manifest number: 010D0C9F432858487DA65FABD0C4C10191808078 Signing time: Wed 07 May 2025 20:00:07 +0000 Manifest this update: Wed 07 May 2025 20:00:07 +0000 Manifest next update: Sat 10 May 2025 20:00:00 +0000 Files and hashes: 1: 59de2d00-0639-3e99-91c7-22b2c69b6a0f.roa (hash: H92QcXAcDAhThXDBEfLIvZwSAlVPhyRB8wBXOVV7dWY=) 2: 9ffa2885-cbaa-44e8-babb-180936652b5c.crl (hash: afRII/rqmTy9hhAlTOvBdqGGMs7EEafsxYftcZNjqic=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c/9ffa2885-cbaa-44e8-babb-180936652b5c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c/9ffa2885-cbaa-44e8-babb-180936652b5c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c7:0a:2b:4b:51:91:f4:e8:8d:d8:60:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ffa2885-cbaa-44e8-babb-180936652b5c Validity Not Before: May 7 20:00:07 2025 GMT Not After : May 10 20:00:00 2025 GMT Subject: CN=d703fe88-4952-43a1-a19f-b918fe7cf806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9a:b6:63:32:f5:64:1b:bd:4b:78:c4:22:78: 2a:1e:72:cb:44:b3:55:a7:3d:dc:e2:e8:f5:4f:e2: 60:de:a1:44:c9:c7:55:60:e7:d1:b9:1b:c1:f4:ca: 9f:7c:51:0b:51:98:73:1e:40:dc:cd:bc:1c:3d:4d: 87:57:7b:5d:b6:57:4e:25:5b:e7:88:4f:bb:2c:2a: ef:cd:cb:91:83:a6:1b:5c:e3:d9:f7:31:e9:6d:f8: 46:af:55:b3:6e:ed:c6:02:19:0d:b6:8f:6f:91:57: 41:cc:42:ee:e4:41:00:5f:b5:3f:a7:bc:06:33:6a: ad:99:f7:9a:53:0e:02:ab:b9:6e:bd:cc:54:5d:50: d6:4c:06:a1:7c:57:f5:db:8a:65:a9:f0:aa:4d:02: a1:94:db:c8:7a:2c:d3:b0:79:b8:e5:32:8f:d8:2b: 1f:26:78:2e:82:de:21:d2:d9:b5:a6:98:6f:df:1c: 1e:ac:4c:19:d6:93:92:f4:bb:a5:f8:4e:92:a4:29: 1d:b9:1d:cf:f8:ac:45:0f:07:dd:7c:f2:32:65:f4: c6:10:a3:4f:bf:8d:af:fe:93:39:8f:2c:8d:c4:60: 3a:82:4f:ef:cf:f0:75:9e:bf:01:59:36:85:40:24: 71:c5:f6:3c:42:01:bf:01:4d:6a:d9:23:0c:c5:9f: d2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:43:09:93:75:B5:99:B2:D0:9A:B3:6F:13:02:2B:6A:9B:94:A4:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c/9ffa2885-cbaa-44e8-babb-180936652b5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c/9ffa2885-cbaa-44e8-babb-180936652b5c.crl X509v3 Authority Key Identifier: keyid:1B:4F:10:EB:F9:FE:83:F4:AB:C9:86:D0:8E:57:63:BD:71:C6:0D:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:ac:5b:ff:78:e9:4b:d4:d5:eb:45:db:d0:d0:10:17:6b:2e: fd:32:c5:57:02:7b:02:3e:9d:ed:11:fd:14:92:81:46:be:21: 73:c5:44:20:d0:31:34:2a:59:08:a3:28:2b:94:ef:33:8e:f2: 13:28:62:66:fd:68:f0:3a:88:8d:1d:9d:e4:81:73:ec:4f:22: 54:a9:cb:e7:4d:b6:07:77:d7:94:ca:05:65:76:23:c1:84:98: 38:e2:70:01:1c:3d:99:04:0a:36:e4:e4:91:77:ca:61:5b:6e: 67:ab:30:dc:a2:e7:5b:dc:8f:2d:7d:81:b3:05:4f:3e:52:ed: d4:e7:1c:53:72:c9:a1:2b:d5:c4:b3:5f:09:a8:57:00:2c:7a: 56:44:80:e5:cb:99:36:45:fe:41:e4:44:30:4b:17:91:dd:bc: 72:8f:f9:1a:f8:ae:27:d5:9f:f6:d3:f6:95:da:4e:14:eb:e5: dd:31:dd:52:4e:bb:45:8c:ff:3a:a0:c3:92:fb:12:d3:a2:33: 86:b7:65:30:28:31:c8:b9:22:3f:12:96:ab:eb:95:92:e5:69: e3:e8:d5:2c:29:5b:18:c8:d4:a2:be:16:52:ae:59:5a:4c:9e: 59:16:25:4c:e3:4b:26:b1:43:a6:67:64:12:91:2c:24:2f:db: 2a:61:2b:11 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnHCitLUZH06I3YYEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWZmYTI4ODUtY2JhYS00NGU4LWJhYmItMTgwOTM2NjUy YjVjMB4XDTI1MDUwNzIwMDAwN1oXDTI1MDUxMDIwMDAwMFowLzEtMCsGA1UEAxMk ZDcwM2ZlODgtNDk1Mi00M2ExLWExOWYtYjkxOGZlN2NmODA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZq2YzL1ZBu9S3jEIngqHnLLRLNVpz3c4uj1 T+Jg3qFEycdVYOfRuRvB9MqffFELUZhzHkDczbwcPU2HV3tdtldOJVvniE+7LCrv zcuRg6YbXOPZ9zHpbfhGr1Wzbu3GAhkNto9vkVdBzELu5EEAX7U/p7wGM2qtmfea Uw4Cq7luvcxUXVDWTAahfFf124plqfCqTQKhlNvIeizTsHm45TKP2CsfJngugt4h 0tm1pphv3xwerEwZ1pOS9Lul+E6SpCkduR3P+KxFDwfdfPIyZfTGEKNPv42v/pM5 jyyNxGA6gk/vz/B1nr8BWTaFQCRxxfY8QgG/AU1q2SMMxZ/StwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGJDCZN1tZmy0JqzbxMCK2qblKRlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85ZmZh Mjg4NS1jYmFhLTQ0ZTgtYmFiYi0xODA5MzY2NTJiNWMvOWZmYTI4ODUtY2JhYS00 NGU4LWJhYmItMTgwOTM2NjUyYjVjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWZmYTI4ODUtY2JhYS00NGU4LWJh YmItMTgwOTM2NjUyYjVjLzlmZmEyODg1LWNiYWEtNDRlOC1iYWJiLTE4MDkzNjY1 MmI1Yy5jcmwwHwYDVR0jBBgwFoAUG08Q6/n+g/SryYbQjldjvXHGDekwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85ZmZhMjg4NS1jYmFhLTQ0ZTgtYmFiYi0xODA5 MzY2NTJiNWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCGrFv/eOlL1NXrRdvQ0BAX ay79MsVXAnsCPp3tEf0UkoFGviFzxUQg0DE0KlkIoygrlO8zjvITKGJm/WjwOoiN HZ3kgXPsTyJUqcvnTbYHd9eUygVldiPBhJg44nABHD2ZBAo25OSRd8phW25nqzDc oudb3I8tfYGzBU8+Uu3U5xxTcsmhK9XEs18JqFcALHpWRIDly5k2Rf5B5EQwSxeR 3bxyj/ka+K4n1Z/20/aV2k4U6+XdMd1STrtFjP86oMOS+xLTojOGt2UwKDHIuSI/ Epar65WS5Wnj6NUsKVsYyNSivhZSrllaTJ5ZFiVM40smsUOmZ2QSkSwkL9sqYSsR -----END CERTIFICATE-----Generated at Wed May 7 22:06:46 2025 by rpki-client