$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705/bbe97a67-0973-4bfa-934d-628e0334b705.mft File: bbe97a67-0973-4bfa-934d-628e0334b705.mft (raw, json) Hash identifier: u5NShIyrzAQ8lTiC5GVUJYeiLsLDzenPAk93K4ViIbU= Subject key identifier: 09:15:F6:82:9A:0A:95:FB:EB:CD:C5:A1:C6:27:64:0F:07:D1:E3:64 Authority key identifier: 85:D7:28:E1:02:6D:6C:2D:08:41:45:CA:19:40:EB:08:F7:21:B3:EE Certificate issuer: /CN=bbe97a67-0973-4bfa-934d-628e0334b705 Certificate serial: 010D0C9F43285849C6754721A11C8F534E0E6880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705/bbe97a67-0973-4bfa-934d-628e0334b705.mft Manifest number: 010D0C9F432858488DC8AA46D73A71D1228429B3 Signing time: Wed 07 May 2025 15:00:07 +0000 Manifest this update: Wed 07 May 2025 15:00:07 +0000 Manifest next update: Sat 10 May 2025 15:00:00 +0000 Files and hashes: 1: 36900df0-0c64-38e9-a32b-d2bf819186c9.roa (hash: FWmAf+/2fuhw+9IVew0lBkEDLOUYTJp22Y58UfdM8uM=) 2: bbe97a67-0973-4bfa-934d-628e0334b705.crl (hash: 0yKWqL5+temKFcOMr5Cwx/cMy8XNXokLqdYpXSilJrM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705/bbe97a67-0973-4bfa-934d-628e0334b705.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705/bbe97a67-0973-4bfa-934d-628e0334b705.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c6:75:47:21:a1:1c:8f:53:4e:0e:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbe97a67-0973-4bfa-934d-628e0334b705 Validity Not Before: May 7 15:00:07 2025 GMT Not After : May 10 15:00:00 2025 GMT Subject: CN=b0039ca3-0a86-4aa2-bb67-f5d94d30f9d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:01:fa:37:09:a7:60:9d:fd:64:68:a1:1a:75: 6e:7a:ab:59:10:6d:4d:5b:c6:26:8b:4e:2a:d2:fb: 5d:a0:18:43:47:99:bd:7d:5b:f5:07:7a:23:5a:33: b6:14:eb:1a:b7:a6:d7:a8:03:98:b0:cf:37:c3:4a: 08:6c:71:ab:77:a5:e5:70:59:c0:c9:93:cb:56:d3: cb:01:f2:67:cb:69:bc:7f:8c:a2:3d:de:e7:4c:2f: 7a:e1:f8:c2:60:a1:37:99:16:f1:06:13:5f:f4:ce: 79:da:f6:35:9f:d5:03:b1:95:75:1f:16:8c:77:b7: f7:3d:6d:88:af:40:4b:7b:e8:b8:4c:fe:d1:ab:77: ea:b1:9c:19:7d:aa:06:7b:1d:8f:1b:d6:ca:23:44: cf:99:3d:f4:79:71:50:ef:eb:6e:d8:67:8d:1b:99: 08:dd:1a:97:c8:e0:09:fe:11:1f:55:d0:2b:8d:97: 0e:94:d7:1d:ac:c8:2d:42:74:41:ac:a4:ea:84:f3: 62:f0:69:43:e3:8d:b9:37:5f:b5:c2:0f:9c:e4:10: 5f:fe:29:fd:e2:72:22:89:f1:81:ea:bf:16:a0:ff: ac:26:98:37:2b:9c:75:2a:72:75:97:46:19:53:38: ae:df:29:77:9a:84:e5:89:53:d1:51:6e:f3:3a:df: db:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:15:F6:82:9A:0A:95:FB:EB:CD:C5:A1:C6:27:64:0F:07:D1:E3:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705/bbe97a67-0973-4bfa-934d-628e0334b705.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705/bbe97a67-0973-4bfa-934d-628e0334b705.crl X509v3 Authority Key Identifier: keyid:85:D7:28:E1:02:6D:6C:2D:08:41:45:CA:19:40:EB:08:F7:21:B3:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:40:14:c0:f5:d6:1f:8e:65:87:6b:f8:8c:bd:2f:ea:57:7b: 0a:11:4c:62:43:2a:03:94:80:5a:92:6f:30:af:73:af:11:9f: 7e:72:48:8b:f2:6a:4f:aa:6f:df:36:49:a2:a1:7f:19:04:3e: 8a:7a:58:65:79:5f:6d:bd:2b:43:85:cb:fc:ed:a3:49:5f:cf: 19:43:b1:61:47:73:90:09:5e:b2:19:8a:ac:a9:20:b8:ce:7b: c4:70:a9:f1:c1:7a:b1:a5:81:5f:f3:87:d0:5c:51:ba:0b:4b: 1e:64:84:fc:0e:14:bd:ae:f8:3f:1f:52:ad:87:4c:ee:2d:91: 9a:51:55:ea:77:fe:be:29:dd:79:f7:1e:ff:95:c5:42:f1:39: 1e:ff:c5:a8:44:09:c8:ea:3f:93:60:cf:ed:7e:7e:92:ac:29: 63:34:1e:86:32:0c:87:3a:65:5e:84:ba:f1:a9:ab:45:5e:3a: 23:53:6b:21:b6:27:55:0c:15:36:84:1c:bd:ff:90:f2:f3:df: ba:01:12:25:9f:f3:da:33:17:e4:31:d0:3f:23:ed:b0:dd:ed: 71:ce:2d:5c:b4:a0:7b:18:f1:9f:fd:0f:b1:0b:1b:61:aa:dc: 19:7c:cf:12:d3:19:22:a5:e4:6d:af:ad:46:f2:67:d0:9e:68: 1b:a1:da:3d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnGdUchoRyPU04OaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmJlOTdhNjctMDk3My00YmZhLTkzNGQtNjI4ZTAzMzRi NzA1MB4XDTI1MDUwNzE1MDAwN1oXDTI1MDUxMDE1MDAwMFowLzEtMCsGA1UEAxMk YjAwMzljYTMtMGE4Ni00YWEyLWJiNjctZjVkOTRkMzBmOWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAH6NwmnYJ39ZGihGnVueqtZEG1NW8Ymi04q 0vtdoBhDR5m9fVv1B3ojWjO2FOsat6bXqAOYsM83w0oIbHGrd6XlcFnAyZPLVtPL AfJny2m8f4yiPd7nTC964fjCYKE3mRbxBhNf9M552vY1n9UDsZV1HxaMd7f3PW2I r0BLe+i4TP7Rq3fqsZwZfaoGex2PG9bKI0TPmT30eXFQ7+tu2GeNG5kI3RqXyOAJ /hEfVdArjZcOlNcdrMgtQnRBrKTqhPNi8GlD4425N1+1wg+c5BBf/in94nIiifGB 6r8WoP+sJpg3K5x1KnJ1l0YZUziu3yl3moTliVPRUW7zOt/bKQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAkV9oKaCpX7683FocYnZA8H0eNkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iYmU5 N2E2Ny0wOTczLTRiZmEtOTM0ZC02MjhlMDMzNGI3MDUvYmJlOTdhNjctMDk3My00 YmZhLTkzNGQtNjI4ZTAzMzRiNzA1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYmJlOTdhNjctMDk3My00YmZhLTkz NGQtNjI4ZTAzMzRiNzA1L2JiZTk3YTY3LTA5NzMtNGJmYS05MzRkLTYyOGUwMzM0 YjcwNS5jcmwwHwYDVR0jBBgwFoAUhdco4QJtbC0IQUXKGUDrCPchs+4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iYmU5N2E2Ny0wOTczLTRiZmEtOTM0ZC02Mjhl MDMzNGI3MDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAkQBTA9dYfjmWHa/iMvS/q V3sKEUxiQyoDlIBakm8wr3OvEZ9+ckiL8mpPqm/fNkmioX8ZBD6KelhleV9tvStD hcv87aNJX88ZQ7FhR3OQCV6yGYqsqSC4znvEcKnxwXqxpYFf84fQXFG6C0seZIT8 DhS9rvg/H1Kth0zuLZGaUVXqd/6+Kd159x7/lcVC8Tke/8WoRAnI6j+TYM/tfn6S rCljNB6GMgyHOmVehLrxqatFXjojU2shtidVDBU2hBy9/5Dy89+6ARIln/PaMxfk MdA/I+2w3e1xzi1ctKB7GPGf/Q+xCxthqtwZfM8S0xkipeRtr61G8mfQnmgbodo9 -----END CERTIFICATE-----Generated at Thu May 8 13:49:53 2025 by rpki-client