$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/1407f58d-27a8-42a5-b73e-1fe35081c6df.mft File: 1407f58d-27a8-42a5-b73e-1fe35081c6df.mft (raw, json) Hash identifier: DSm3XVgm5ZYxL1tQk47vOEuol4h06KMQM528itWdhWE= Subject key identifier: D2:38:59:24:97:A7:44:39:BC:B3:07:46:DD:6D:B6:3A:AC:58:7A:FB Authority key identifier: A9:71:C2:20:1B:80:74:2D:F5:7C:81:C8:82:0D:AA:AB:E0:FD:1B:20 Certificate issuer: /CN=1407f58d-27a8-42a5-b73e-1fe35081c6df Certificate serial: 010D0C9F43285849BD44C5D4C85CBD6832569DB6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/1407f58d-27a8-42a5-b73e-1fe35081c6df.mft Manifest number: 010D0C9F4328584073A848674151B6730DF04FD3 Signing time: Sun 04 May 2025 08:00:07 +0000 Manifest this update: Sun 04 May 2025 08:00:07 +0000 Manifest next update: Tue 06 May 2025 08:00:00 +0000 Files and hashes: 1: 1407f58d-27a8-42a5-b73e-1fe35081c6df.crl (hash: tyUMVPXQ443FAo/+co1VDvYZ8CegNGmm97ogcRiQDYI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/1407f58d-27a8-42a5-b73e-1fe35081c6df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/1407f58d-27a8-42a5-b73e-1fe35081c6df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:44:c5:d4:c8:5c:bd:68:32:56:9d:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1407f58d-27a8-42a5-b73e-1fe35081c6df Validity Not Before: May 4 08:00:07 2025 GMT Not After : May 6 08:00:00 2025 GMT Subject: CN=f7d036a8-a115-4598-b940-efa9d87a81d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:fb:b0:df:92:30:c7:06:02:65:98:7c:cd:99: 8f:b1:f3:ab:a8:30:ef:17:3d:d8:44:41:50:a6:d3: 8f:fe:00:c5:e8:7c:af:50:22:42:6c:7c:43:b4:f8: 30:42:42:3e:cf:37:fe:da:11:7d:e2:26:90:0a:5a: aa:de:b4:bb:b7:84:00:1a:d8:25:a8:1a:87:9b:a4: a5:59:3d:a0:17:68:d5:06:26:de:c4:ae:5b:c5:02: 92:46:18:1e:69:8a:99:62:bd:8f:bf:a6:49:d5:21: 81:ee:e8:3d:40:89:a2:bb:31:36:97:b6:26:ca:c3: 8a:38:53:c2:aa:11:d0:2c:7b:34:ad:fc:9b:21:93: c9:65:11:d5:59:84:5b:a1:cd:39:ff:78:89:fc:91: 4e:7c:52:0e:10:94:58:e7:68:ed:a2:e4:e3:f2:40: 8f:9b:19:46:33:9c:07:14:e4:3a:40:e3:87:0f:51: af:d5:9c:ec:71:c5:38:2c:2f:1f:e0:cf:1a:5d:29: b2:19:ae:b5:9f:77:db:80:bf:72:d6:e6:41:90:cc: 47:b4:c8:ee:24:fb:77:87:3d:3d:14:fa:70:a6:2a: 7d:12:ba:f4:36:9d:ce:25:c4:85:f0:da:11:1b:33: 64:c4:86:db:01:6c:ac:f0:d2:c5:6b:0e:3c:54:bd: 42:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:38:59:24:97:A7:44:39:BC:B3:07:46:DD:6D:B6:3A:AC:58:7A:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/1407f58d-27a8-42a5-b73e-1fe35081c6df.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/1407f58d-27a8-42a5-b73e-1fe35081c6df.crl X509v3 Authority Key Identifier: keyid:A9:71:C2:20:1B:80:74:2D:F5:7C:81:C8:82:0D:AA:AB:E0:FD:1B:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:87:5e:2f:e6:03:69:97:14:3e:ad:e3:1e:8b:5f:1e:59:09: 60:f8:d5:ef:ed:08:7d:0e:81:52:37:a1:a2:97:c0:91:02:bd: b1:0f:36:37:00:12:1e:6b:8c:8f:ae:97:2d:19:65:4c:7d:87: 58:0c:16:d9:78:26:b2:c9:25:ee:ce:7a:1c:f8:bc:ea:ad:24: 06:cd:d8:1a:da:84:24:b9:c9:5f:21:be:1b:e1:45:2b:97:b4: 17:08:8b:4a:95:d3:c2:72:be:96:12:fd:d4:02:2e:ba:47:3c: 1e:ed:f7:b3:9d:69:68:46:83:7a:f5:64:11:b7:4c:6a:4d:53: 68:46:65:9b:90:51:e9:cb:26:02:58:a6:0b:16:cb:ee:c8:37: e2:ee:40:38:fb:7b:49:b0:07:7a:5a:11:bd:23:19:7d:37:e4: bf:cf:85:e1:ea:7e:02:31:4d:4e:61:43:e5:47:09:c3:fa:2e: 2f:8d:94:99:7f:52:a0:e5:0d:c2:79:88:8c:2c:4c:6d:87:77: d1:d6:44:41:42:14:2f:86:ff:98:9e:10:7e:eb:ac:86:22:cb: a8:89:11:b4:9f:2a:27:52:d7:46:1b:48:19:0c:a5:bf:f7:c2: 00:5c:a2:3d:8f:ea:55:92:cc:1d:5b:a6:54:39:de:d0:62:e4: 2a:2e:87:98 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEm9RMXUyFy9aDJWnbYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQwN2Y1OGQtMjdhOC00MmE1LWI3M2UtMWZlMzUwODFj NmRmMB4XDTI1MDUwNDA4MDAwN1oXDTI1MDUwNjA4MDAwMFowLzEtMCsGA1UEAxMk ZjdkMDM2YTgtYTExNS00NTk4LWI5NDAtZWZhOWQ4N2E4MWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Puw35IwxwYCZZh8zZmPsfOrqDDvFz3YREFQ ptOP/gDF6HyvUCJCbHxDtPgwQkI+zzf+2hF94iaQClqq3rS7t4QAGtglqBqHm6Sl WT2gF2jVBibexK5bxQKSRhgeaYqZYr2Pv6ZJ1SGB7ug9QImiuzE2l7YmysOKOFPC qhHQLHs0rfybIZPJZRHVWYRboc05/3iJ/JFOfFIOEJRY52jtouTj8kCPmxlGM5wH FOQ6QOOHD1Gv1ZzsccU4LC8f4M8aXSmyGa61n3fbgL9y1uZBkMxHtMjuJPt3hz09 FPpwpip9Err0Np3OJcSF8NoRGzNkxIbbAWys8NLFaw48VL1C3QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNI4WSSXp0Q5vLMHRt1ttjqsWHr7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNDA3 ZjU4ZC0yN2E4LTQyYTUtYjczZS0xZmUzNTA4MWM2ZGYvMTQwN2Y1OGQtMjdhOC00 MmE1LWI3M2UtMWZlMzUwODFjNmRmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTQwN2Y1OGQtMjdhOC00MmE1LWI3 M2UtMWZlMzUwODFjNmRmLzE0MDdmNThkLTI3YTgtNDJhNS1iNzNlLTFmZTM1MDgx YzZkZi5jcmwwHwYDVR0jBBgwFoAUqXHCIBuAdC31fIHIgg2qq+D9GyAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNDA3ZjU4ZC0yN2E4LTQyYTUtYjczZS0xZmUz NTA4MWM2ZGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAsh14v5gNplxQ+reMei18e WQlg+NXv7Qh9DoFSN6Gil8CRAr2xDzY3ABIea4yPrpctGWVMfYdYDBbZeCayySXu znoc+LzqrSQGzdga2oQkuclfIb4b4UUrl7QXCItKldPCcr6WEv3UAi66Rzwe7fez nWloRoN69WQRt0xqTVNoRmWbkFHpyyYCWKYLFsvuyDfi7kA4+3tJsAd6WhG9Ixl9 N+S/z4Xh6n4CMU1OYUPlRwnD+i4vjZSZf1Kg5Q3CeYiMLExth3fR1kRBQhQvhv+Y nhB+66yGIsuoiRG0nyonUtdGG0gZDKW/98IAXKI9j+pVkswdW6ZUOd7QYuQqLoeY -----END CERTIFICATE-----Generated at Sun May 4 20:30:17 2025 by rpki-client