$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4f965035-760e-4232-a4c3-bc290fa7e325/4f965035-760e-4232-a4c3-bc290fa7e325.mft File: 4f965035-760e-4232-a4c3-bc290fa7e325.mft (raw, json) Hash identifier: EDMlhHxlMPBGBmFT3uvAspgNSZCvIDtnz4Pd3m9MWrU= Subject key identifier: 16:95:30:8A:6A:6C:74:C1:85:9C:4E:E7:D3:69:33:81:BE:43:1A:74 Authority key identifier: 4F:53:AA:A6:82:E5:67:D0:28:69:98:61:76:F7:6E:EB:DB:83:C1:53 Certificate issuer: /CN=4f965035-760e-4232-a4c3-bc290fa7e325 Certificate serial: 010D0C9F43285849C833F3FE1FD44A0E1C543280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4f965035-760e-4232-a4c3-bc290fa7e325.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4f965035-760e-4232-a4c3-bc290fa7e325/4f965035-760e-4232-a4c3-bc290fa7e325.mft Manifest number: 010D0C9F4328584073A842C657DC15C8DB6D07EA Signing time: Thu 08 May 2025 06:00:07 +0000 Manifest this update: Thu 08 May 2025 06:00:07 +0000 Manifest next update: Sat 10 May 2025 06:00:00 +0000 Files and hashes: 1: 4f965035-760e-4232-a4c3-bc290fa7e325.crl (hash: 5Tbesy0yM+LTXyXdUgqyLf4EIkEXHCQGWd2ph31yiws=) 2: eaa719a0-4402-367a-9fe6-f7ae25dc23ac.roa (hash: 6DeEPeqUTbGZtM++o+L2fugF4s+RMgPA9I1ztvHGQDo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4f965035-760e-4232-a4c3-bc290fa7e325/4f965035-760e-4232-a4c3-bc290fa7e325.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4f965035-760e-4232-a4c3-bc290fa7e325/4f965035-760e-4232-a4c3-bc290fa7e325.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4f965035-760e-4232-a4c3-bc290fa7e325.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c8:33:f3:fe:1f:d4:4a:0e:1c:54:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f965035-760e-4232-a4c3-bc290fa7e325 Validity Not Before: May 8 06:00:07 2025 GMT Not After : May 10 06:00:00 2025 GMT Subject: CN=803185f6-ebbf-48a4-8151-403d7c9df164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:79:ee:9c:9e:a4:97:c6:85:91:3a:ef:ed:0d: 09:b6:ca:1d:ae:50:b2:d8:77:4e:7a:f4:3e:aa:c0: af:42:bc:56:38:61:d8:8f:2e:b6:1a:47:60:f8:68: 61:ee:7b:f1:05:75:62:4c:d3:73:79:e7:45:d8:d9: de:34:31:d0:08:a5:05:9e:22:ec:c3:b8:d2:1a:26: 92:25:03:3c:ac:7a:8e:0f:17:62:10:a0:be:ff:ab: 6f:b2:18:63:ad:60:06:9e:64:95:04:8c:a6:ea:40: b1:47:4c:8b:be:69:c2:c9:88:0c:c3:fe:76:78:d1: 51:56:d4:9c:55:ae:d2:9d:ee:84:1c:95:bf:dc:fa: 68:3c:97:1a:6e:c2:5f:15:dd:24:5a:22:80:76:47: 1f:8f:98:34:56:f9:9c:bb:89:f2:e7:92:ef:fb:0d: a2:55:42:40:5b:1f:d8:d6:37:71:91:e0:ca:f0:ec: 5c:89:9e:09:75:36:74:8e:e5:f0:ef:0d:6f:dc:d4: 36:fb:3b:67:1c:29:09:09:67:28:13:b8:63:30:39: c3:52:57:bf:83:3a:7f:d6:4a:8e:74:23:d0:c6:b2: ba:db:f6:ca:10:a0:b1:9e:ed:c6:13:af:cb:05:8c: f4:4e:cd:f7:b2:8b:3f:20:0c:8b:4d:28:31:4f:6c: 0f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:95:30:8A:6A:6C:74:C1:85:9C:4E:E7:D3:69:33:81:BE:43:1A:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4f965035-760e-4232-a4c3-bc290fa7e325/4f965035-760e-4232-a4c3-bc290fa7e325.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4f965035-760e-4232-a4c3-bc290fa7e325/4f965035-760e-4232-a4c3-bc290fa7e325.crl X509v3 Authority Key Identifier: keyid:4F:53:AA:A6:82:E5:67:D0:28:69:98:61:76:F7:6E:EB:DB:83:C1:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4f965035-760e-4232-a4c3-bc290fa7e325.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:ee:78:d4:c0:85:45:aa:cc:83:fb:a6:3e:ad:fa:c9:b8:3b: 5e:f3:03:43:31:61:64:94:8b:00:c3:e9:d1:2b:76:77:a6:96: 82:11:04:c9:16:a1:5a:09:6b:82:33:1b:6c:e1:16:71:16:27: 44:e1:2e:63:98:21:5d:65:a3:54:64:56:dc:a8:8f:ec:89:d7: ce:e1:3f:75:35:6c:97:13:e2:3e:be:44:28:23:4a:b7:15:dd: 12:4e:da:e4:a2:52:59:47:05:c6:10:1b:31:e3:45:66:ec:91: 41:22:7f:d8:63:1c:51:a1:88:46:42:63:ae:a8:aa:01:bd:33: 8b:e0:5f:f2:d8:33:ae:b4:8f:c8:3d:7c:02:78:73:19:85:a0: 36:79:6b:a3:73:c5:83:5e:0e:d7:af:f0:f0:e5:71:ea:5f:77: 90:a6:9b:83:2e:3b:1e:c3:94:21:32:3f:43:ba:93:c9:3b:69: 6f:d9:24:ac:59:c4:1e:3e:6a:58:2c:44:30:43:5c:9c:ed:35: 23:c5:d3:78:cd:47:22:9d:96:cd:cf:cb:04:0f:db:e3:53:b0: 46:a2:94:1c:3b:c9:3f:9a:86:97:73:f8:e2:c6:b5:e0:98:3f: e3:69:1e:0d:12:6d:25:9e:bc:54:53:4b:ca:23:4b:a8:05:47: 14:d1:7e:83 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnIM/P+H9RKDhxUMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY5NjUwMzUtNzYwZS00MjMyLWE0YzMtYmMyOTBmYTdl MzI1MB4XDTI1MDUwODA2MDAwN1oXDTI1MDUxMDA2MDAwMFowLzEtMCsGA1UEAxMk ODAzMTg1ZjYtZWJiZi00OGE0LTgxNTEtNDAzZDdjOWRmMTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHnunJ6kl8aFkTrv7Q0JtsodrlCy2HdOevQ+ qsCvQrxWOGHYjy62Gkdg+Ghh7nvxBXViTNNzeedF2NneNDHQCKUFniLsw7jSGiaS JQM8rHqODxdiEKC+/6tvshhjrWAGnmSVBIym6kCxR0yLvmnCyYgMw/52eNFRVtSc Va7Sne6EHJW/3PpoPJcabsJfFd0kWiKAdkcfj5g0Vvmcu4ny55Lv+w2iVUJAWx/Y 1jdxkeDK8OxciZ4JdTZ0juXw7w1v3NQ2+ztnHCkJCWcoE7hjMDnDUle/gzp/1kqO dCPQxrK62/bKEKCxnu3GE6/LBYz0Ts33sos/IAyLTSgxT2wPMwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBaVMIpqbHTBhZxO59NpM4G+Qxp0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80Zjk2 NTAzNS03NjBlLTQyMzItYTRjMy1iYzI5MGZhN2UzMjUvNGY5NjUwMzUtNzYwZS00 MjMyLWE0YzMtYmMyOTBmYTdlMzI1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGY5NjUwMzUtNzYwZS00MjMyLWE0 YzMtYmMyOTBmYTdlMzI1LzRmOTY1MDM1LTc2MGUtNDIzMi1hNGMzLWJjMjkwZmE3 ZTMyNS5jcmwwHwYDVR0jBBgwFoAUT1OqpoLlZ9AoaZhhdvdu69uDwVMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80Zjk2NTAzNS03NjBlLTQyMzItYTRjMy1iYzI5 MGZhN2UzMjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBG7njUwIVFqsyD+6Y+rfrJ uDte8wNDMWFklIsAw+nRK3Z3ppaCEQTJFqFaCWuCMxts4RZxFidE4S5jmCFdZaNU ZFbcqI/sidfO4T91NWyXE+I+vkQoI0q3Fd0STtrkolJZRwXGEBsx40Vm7JFBIn/Y YxxRoYhGQmOuqKoBvTOL4F/y2DOutI/IPXwCeHMZhaA2eWujc8WDXg7Xr/Dw5XHq X3eQppuDLjsew5QhMj9DupPJO2lv2SSsWcQePmpYLEQwQ1yc7TUjxdN4zUcinZbN z8sED9vjU7BGopQcO8k/moaXc/jixrXgmD/jaR4NEm0lnrxUU0vKI0uoBUcU0X6D -----END CERTIFICATE-----Generated at Thu May 8 10:05:43 2025 by rpki-client