$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.mft File: a856eb04-e27d-4da2-8c39-a38263828e38.mft (raw, json) Hash identifier: vfdcS/McK5j9ZTGXqsLHEGiKy8wwKEa9C80X5xBkS+M= Subject key identifier: 34:E3:15:26:25:C1:0A:B7:09:CF:5F:22:AD:06:6A:AC:17:30:A8:EB Authority key identifier: 7A:DD:97:21:BB:C0:9A:10:69:15:FB:59:5D:D0:69:D7:A9:9A:79:A0 Certificate issuer: /CN=a856eb04-e27d-4da2-8c39-a38263828e38 Certificate serial: 010D0C9F43285849CF87F5966ECF7AB30AC0C690 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.mft Manifest number: 010D0C9F432858482F910EBCA643DC9360F49318 Signing time: Sat 10 May 2025 21:00:03 +0000 Manifest this update: Sat 10 May 2025 21:00:03 +0000 Manifest next update: Mon 12 May 2025 21:00:00 +0000 Files and hashes: 1: 82be32f8-6a7c-3ac5-9559-807dea4ec27d.roa (hash: 0UvMCis5s26DQ2onNtPs8HiQvXF+WGfsJTzF94RZAb8=) 2: a856eb04-e27d-4da2-8c39-a38263828e38.crl (hash: 6JP4EILL1IMc3ZuYcadu51sC1seRkO0iOAiZkHky7iY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cf:87:f5:96:6e:cf:7a:b3:0a:c0:c6:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a856eb04-e27d-4da2-8c39-a38263828e38 Validity Not Before: May 10 21:00:03 2025 GMT Not After : May 12 21:00:00 2025 GMT Subject: CN=b022eb43-b11c-4a6d-becc-0e07bf8d7b20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ab:cf:65:37:b5:de:c4:b5:d6:da:ce:9d:79: 63:5c:59:f7:ac:4f:f8:cf:6b:68:c4:20:5a:d3:69: 31:48:39:16:30:e8:3a:d5:1b:b7:7e:14:b7:1d:02: 7c:d0:6c:21:60:b7:01:f2:e2:7f:7c:e0:d8:cd:43: 08:a5:ab:c8:98:4f:c2:e4:a4:de:4c:34:43:fb:96: 5a:91:8b:b6:d9:62:ec:2b:bf:22:19:b5:21:85:42: f7:23:af:6e:a0:26:47:42:38:45:24:e3:21:97:04: 8a:d4:8f:d8:ca:89:5d:d7:67:f9:cd:65:20:ad:72: 1d:e3:ee:e9:f1:9a:4b:39:ad:2b:af:ad:79:16:8a: a5:a5:06:30:21:88:8f:b9:1f:c7:09:d1:85:a9:79: d3:cf:23:f0:1a:0b:ae:7e:95:0a:cb:be:6a:73:e5: 91:ba:75:68:38:de:cd:42:10:7f:05:e7:a7:fb:f6: 25:25:e1:54:70:0b:5d:4d:91:5d:f9:94:77:c2:ad: 50:37:fb:ab:f1:cf:2c:45:16:ee:eb:9a:49:9f:ab: 2a:bd:12:54:63:15:0d:ab:ad:8a:66:f0:f1:fd:f4: 9b:74:6b:65:13:a4:3a:1f:6d:40:11:90:fc:bd:45: 40:b8:2e:73:cd:ea:8b:cd:75:59:da:45:9f:2a:24: 49:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:E3:15:26:25:C1:0A:B7:09:CF:5F:22:AD:06:6A:AC:17:30:A8:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.crl X509v3 Authority Key Identifier: keyid:7A:DD:97:21:BB:C0:9A:10:69:15:FB:59:5D:D0:69:D7:A9:9A:79:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:ae:dc:c1:b3:80:e5:85:57:6a:56:8c:95:d6:48:95:51:04: ba:29:35:a1:ec:c9:41:14:f3:d7:cd:7f:cc:c9:3d:da:24:17: 5b:f7:71:ab:1f:a2:a4:21:05:da:e1:7b:ad:3a:bd:42:63:e8: 02:0c:26:ce:74:6d:8e:b0:84:82:52:b0:83:d1:e6:34:99:29: 13:ea:c6:b4:53:70:21:2b:6c:16:19:f8:ea:d9:86:12:6d:64: 38:01:0f:18:fa:e1:a9:c8:a8:74:18:c4:7f:a4:15:3c:07:e0: db:22:30:97:9b:7c:10:b0:34:36:43:7e:7f:49:0c:95:b4:a7: 06:a0:7c:aa:ae:d9:a5:7c:40:ac:b4:0a:54:6d:23:e9:3e:79: 5b:b4:94:bd:ac:39:e2:8e:61:39:55:65:3a:e0:37:b0:82:4f: 03:e7:b2:26:f0:d1:4b:88:cc:51:50:79:df:db:d0:1f:51:53: 75:07:06:07:f4:eb:35:55:57:95:41:10:59:bc:d5:93:ae:7f: 07:ca:e8:b3:54:85:5a:30:c1:07:10:49:b9:ae:d2:a1:b8:c8: 59:2a:c2:e5:28:29:a9:31:cf:06:1f:d6:b2:1c:ad:4f:48:ad: 69:8d:3d:4d:f3:c3:ab:25:23:3b:5c:99:21:cb:78:09:29:74: 9e:71:a1:b0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnPh/WWbs96swrAxpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg1NmViMDQtZTI3ZC00ZGEyLThjMzktYTM4MjYzODI4 ZTM4MB4XDTI1MDUxMDIxMDAwM1oXDTI1MDUxMjIxMDAwMFowLzEtMCsGA1UEAxMk YjAyMmViNDMtYjExYy00YTZkLWJlY2MtMGUwN2JmOGQ3YjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoavPZTe13sS11trOnXljXFn3rE/4z2toxCBa 02kxSDkWMOg61Ru3fhS3HQJ80GwhYLcB8uJ/fODYzUMIpavImE/C5KTeTDRD+5Za kYu22WLsK78iGbUhhUL3I69uoCZHQjhFJOMhlwSK1I/Yyold12f5zWUgrXId4+7p 8ZpLOa0rr615FoqlpQYwIYiPuR/HCdGFqXnTzyPwGguufpUKy75qc+WRunVoON7N QhB/Been+/YlJeFUcAtdTZFd+ZR3wq1QN/ur8c8sRRbu65pJn6sqvRJUYxUNq62K ZvDx/fSbdGtlE6Q6H21AEZD8vUVAuC5zzeqLzXVZ2kWfKiRJcQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDTjFSYlwQq3Cc9fIq0GaqwXMKjrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hODU2 ZWIwNC1lMjdkLTRkYTItOGMzOS1hMzgyNjM4MjhlMzgvYTg1NmViMDQtZTI3ZC00 ZGEyLThjMzktYTM4MjYzODI4ZTM4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTg1NmViMDQtZTI3ZC00ZGEyLThj MzktYTM4MjYzODI4ZTM4L2E4NTZlYjA0LWUyN2QtNGRhMi04YzM5LWEzODI2Mzgy OGUzOC5jcmwwHwYDVR0jBBgwFoAUet2XIbvAmhBpFftZXdBp16maeaAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hODU2ZWIwNC1lMjdkLTRkYTItOGMzOS1hMzgy NjM4MjhlMzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAortzBs4DlhVdqVoyV1kiV UQS6KTWh7MlBFPPXzX/MyT3aJBdb93GrH6KkIQXa4XutOr1CY+gCDCbOdG2OsISC UrCD0eY0mSkT6sa0U3AhK2wWGfjq2YYSbWQ4AQ8Y+uGpyKh0GMR/pBU8B+DbIjCX m3wQsDQ2Q35/SQyVtKcGoHyqrtmlfECstApUbSPpPnlbtJS9rDnijmE5VWU64Dew gk8D57Im8NFLiMxRUHnf29AfUVN1BwYH9Os1VVeVQRBZvNWTrn8HyuizVIVaMMEH EEm5rtKhuMhZKsLlKCmpMc8GH9ayHK1PSK1pjT1N88OrJSM7XJkhy3gJKXSecaGw -----END CERTIFICATE-----Generated at Sun May 11 20:19:50 2025 by rpki-client