$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b.mft File: b89bdcb9-22f0-4629-8ed8-bb4a33f9102b.mft (raw, json) Hash identifier: n0hv4laZZQRJ0cYNeDGK5yzntIwmR0dCsP2ZjH9BsyI= Subject key identifier: 40:CA:48:51:7C:CA:09:63:84:CB:D0:36:24:A1:74:7E:F9:50:91:BC Authority key identifier: 5E:8F:D3:88:EC:13:87:CA:F5:B3:CC:E8:D3:CC:DF:BB:12:91:BB:E3 Certificate issuer: /CN=b89bdcb9-22f0-4629-8ed8-bb4a33f9102b Certificate serial: 010D0C9F43285849CC0AA869F4E02E74AD25DDC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b.mft Manifest number: 010D0C9F43285849001404E5C2EC96A0735DEFCA Signing time: Fri 09 May 2025 15:00:09 +0000 Manifest this update: Fri 09 May 2025 15:00:09 +0000 Manifest next update: Sun 11 May 2025 15:00:00 +0000 Files and hashes: 1: a4bf0231-e9e6-3cb6-a642-a1d9a3d1e1d0.roa (hash: dZMlIRGnYJzcNt1XxpKbqaZZISAfVzsnynlrnYrKI3c=) 2: b89bdcb9-22f0-4629-8ed8-bb4a33f9102b.crl (hash: 0D7Kjh6k6XY63lJY8dLoSQWD+ZV8Kdaqct2wr5+nF/I=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cc:0a:a8:69:f4:e0:2e:74:ad:25:dd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b89bdcb9-22f0-4629-8ed8-bb4a33f9102b Validity Not Before: May 9 15:00:09 2025 GMT Not After : May 11 15:00:00 2025 GMT Subject: CN=f3193c03-46da-4602-a739-4c02a0a2d962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a8:b4:13:03:c8:90:81:98:94:be:fd:af:e1: da:7e:af:c1:0b:01:5f:46:ba:a4:89:3d:a9:3d:24: c6:89:f1:9a:3c:c0:96:78:81:a9:6d:08:de:7d:32: 61:a3:be:02:46:03:d7:0b:39:91:6d:b0:97:a3:57: 1d:fd:e6:90:d9:f0:34:cb:95:80:65:a3:65:17:3e: 1c:a9:3d:f9:34:d3:2d:08:29:13:8e:f2:c5:eb:e4: 42:26:26:a8:ba:c2:a8:8c:86:61:4f:80:d0:bd:3e: 20:79:34:62:32:51:c0:61:23:8f:48:e4:f7:49:bf: 3f:8f:90:29:1a:77:40:59:ce:a8:2b:71:48:a0:dd: 9e:27:0a:4c:b2:32:e6:00:ff:62:9c:ed:d0:83:20: 6a:56:4d:95:5d:72:fb:52:54:83:4c:c2:81:fb:26: ee:f1:10:61:64:05:53:72:e5:33:33:62:9a:bf:86: a1:81:92:d0:ef:eb:95:d6:32:95:af:24:bf:2d:43: b9:69:1d:e9:2e:da:3b:67:1c:2d:ed:1f:3c:33:e0: 0f:4d:d4:a4:b2:47:0d:60:6c:f2:95:2e:84:52:9d: 10:a2:30:3f:a0:8b:99:cf:77:6b:7b:5d:a1:ea:f3: 91:f4:40:04:3d:17:16:de:f9:af:c6:ac:db:72:ee: 9c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:CA:48:51:7C:CA:09:63:84:CB:D0:36:24:A1:74:7E:F9:50:91:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b.crl X509v3 Authority Key Identifier: keyid:5E:8F:D3:88:EC:13:87:CA:F5:B3:CC:E8:D3:CC:DF:BB:12:91:BB:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:86:c5:78:32:81:0c:08:f8:ab:6c:3d:a7:15:23:a4:5f:7d: 8c:b4:3c:9f:bd:09:39:5f:37:1a:5e:7d:a7:20:42:9d:c0:41: f4:b5:1c:a2:1c:1c:f4:0a:fa:aa:de:3b:bb:9e:b0:0b:db:cd: d7:8f:a5:d3:3f:c4:52:fe:a0:8c:c1:25:2c:75:20:1c:f7:51: 26:74:cc:ca:d3:e9:3a:54:e8:44:3b:8b:04:0f:1d:29:42:f9: e0:b9:9f:c6:f8:a4:27:0b:96:e7:9a:97:be:cf:6d:c7:19:09: 5b:c0:5f:db:20:1b:fc:0e:ef:91:4f:b2:18:c5:5c:db:4e:91: 96:fc:91:f1:61:dd:07:af:da:7a:fb:f1:a2:03:25:08:5b:8f: 22:53:6d:ed:05:d4:5b:b7:89:a8:eb:f6:17:d5:ec:0a:6c:e1: c3:4b:07:51:93:b9:b2:17:33:69:9a:88:d6:83:08:96:f9:46: 37:10:14:23:db:10:87:c4:e5:ba:8c:c3:79:02:b6:ba:52:a3: 32:7f:63:8e:c8:d9:e1:05:68:5b:77:f8:e7:93:a9:3f:81:ea: 17:0f:92:94:2e:1f:63:36:35:4c:75:c6:9e:44:6b:1e:e5:7a: a0:85:df:fa:d5:f9:16:57:43:e2:e2:64:39:b2:95:d2:4d:40: e2:c2:37:c9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnMCqhp9OAudK0l3cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg5YmRjYjktMjJmMC00NjI5LThlZDgtYmI0YTMzZjkx MDJiMB4XDTI1MDUwOTE1MDAwOVoXDTI1MDUxMTE1MDAwMFowLzEtMCsGA1UEAxMk ZjMxOTNjMDMtNDZkYS00NjAyLWE3MzktNGMwMmEwYTJkOTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ai0EwPIkIGYlL79r+Hafq/BCwFfRrqkiT2p PSTGifGaPMCWeIGpbQjefTJho74CRgPXCzmRbbCXo1cd/eaQ2fA0y5WAZaNlFz4c qT35NNMtCCkTjvLF6+RCJiaousKojIZhT4DQvT4geTRiMlHAYSOPSOT3Sb8/j5Ap GndAWc6oK3FIoN2eJwpMsjLmAP9inO3QgyBqVk2VXXL7UlSDTMKB+ybu8RBhZAVT cuUzM2Kav4ahgZLQ7+uV1jKVryS/LUO5aR3pLto7Zxwt7R88M+APTdSkskcNYGzy lS6EUp0QojA/oIuZz3dre12h6vOR9EAEPRcW3vmvxqzbcu6cPwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEDKSFF8ygljhMvQNiShdH75UJG8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iODli ZGNiOS0yMmYwLTQ2MjktOGVkOC1iYjRhMzNmOTEwMmIvYjg5YmRjYjktMjJmMC00 NjI5LThlZDgtYmI0YTMzZjkxMDJiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjg5YmRjYjktMjJmMC00NjI5LThl ZDgtYmI0YTMzZjkxMDJiL2I4OWJkY2I5LTIyZjAtNDYyOS04ZWQ4LWJiNGEzM2Y5 MTAyYi5jcmwwHwYDVR0jBBgwFoAUXo/TiOwTh8r1s8zo08zfuxKRu+MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iODliZGNiOS0yMmYwLTQ2MjktOGVkOC1iYjRh MzNmOTEwMmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBlhsV4MoEMCPirbD2nFSOk X32MtDyfvQk5XzcaXn2nIEKdwEH0tRyiHBz0Cvqq3ju7nrAL283Xj6XTP8RS/qCM wSUsdSAc91EmdMzK0+k6VOhEO4sEDx0pQvnguZ/G+KQnC5bnmpe+z23HGQlbwF/b IBv8Du+RT7IYxVzbTpGW/JHxYd0Hr9p6+/GiAyUIW48iU23tBdRbt4mo6/YX1ewK bOHDSwdRk7myFzNpmojWgwiW+UY3EBQj2xCHxOW6jMN5Ara6UqMyf2OOyNnhBWhb d/jnk6k/geoXD5KULh9jNjVMdcaeRGse5Xqghd/61fkWV0Pi4mQ5spXSTUDiwjfJ -----END CERTIFICATE-----Generated at Sat May 10 10:07:33 2025 by rpki-client