$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bfec383-87a2-4429-93ae-a407c690a4e0/4bfec383-87a2-4429-93ae-a407c690a4e0.mft File: 4bfec383-87a2-4429-93ae-a407c690a4e0.mft (raw, json) Hash identifier: q1gj2DrEoK/qirZD0yH4uvv/HxPRIViVV4wE3BftPys= Subject key identifier: AD:F1:1E:07:5F:43:79:44:E0:CA:85:D2:A5:85:34:1A:12:83:59:C2 Authority key identifier: 9F:38:BB:E8:12:C7:D9:D4:67:88:8C:A1:33:9D:77:7C:DD:1F:20:20 Certificate issuer: /CN=4bfec383-87a2-4429-93ae-a407c690a4e0 Certificate serial: 010D0C9F4328584A1E65C9F14A7A0C3AD5D517C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bfec383-87a2-4429-93ae-a407c690a4e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bfec383-87a2-4429-93ae-a407c690a4e0/4bfec383-87a2-4429-93ae-a407c690a4e0.mft Manifest number: 010D0C9F4328584073A83875C8D861E24EA26601 Signing time: Sun 08 Jun 2025 03:00:03 +0000 Manifest this update: Sun 08 Jun 2025 03:00:03 +0000 Manifest next update: Wed 11 Jun 2025 03:00:00 +0000 Files and hashes: 1: 4bfec383-87a2-4429-93ae-a407c690a4e0.crl (hash: Jcf0fOvxMkQnLklsuKUO/hTKZAP+G5b0BaOlSYVRWwM=) 2: a820aa84-3b7e-3422-a459-12296d3fef75.roa (hash: RktmLEDn8WjLnWRDBKCDi0nZV/tGon8WAYtwYG10SHw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bfec383-87a2-4429-93ae-a407c690a4e0/4bfec383-87a2-4429-93ae-a407c690a4e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bfec383-87a2-4429-93ae-a407c690a4e0/4bfec383-87a2-4429-93ae-a407c690a4e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bfec383-87a2-4429-93ae-a407c690a4e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1e:65:c9:f1:4a:7a:0c:3a:d5:d5:17:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bfec383-87a2-4429-93ae-a407c690a4e0 Validity Not Before: Jun 8 03:00:03 2025 GMT Not After : Jun 11 03:00:00 2025 GMT Subject: CN=3fca49c2-3023-42db-92e7-62e257fed4b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:20:66:e8:90:28:85:52:b0:3e:d7:b9:23:77: 8f:95:53:b2:3e:3d:1e:a1:ea:c2:75:c8:16:4d:55: e7:c3:84:76:3a:d0:fa:43:99:e5:d9:ad:09:3b:48: cf:f0:88:dd:01:c1:14:b2:73:d8:2d:5e:20:f2:67: 9c:80:19:7e:59:b3:d4:bc:8b:61:3e:f8:31:56:b4: 5d:c4:ff:b8:14:da:0f:48:8f:d5:ed:81:87:5f:77: 70:93:03:cc:77:6d:a2:56:93:07:4d:92:af:86:6e: 9f:c6:98:60:e2:ca:fe:b6:05:65:0b:d7:8a:ab:88: 49:e4:a0:3f:5d:1b:b6:fc:54:99:a4:ad:7d:e9:5c: c2:ae:8d:44:8b:bb:0b:5c:62:06:82:c5:bb:4f:2c: fc:19:db:fc:75:dd:64:74:04:22:80:62:2c:f9:72: c7:8a:a4:b3:13:89:b3:b0:d0:9f:1d:67:93:f8:b4: f1:71:fc:9a:5b:40:67:cc:5c:0f:5f:99:3e:ab:15: a5:5b:c4:a9:42:c0:12:82:38:34:73:d0:07:c1:96: 9d:92:93:16:a5:a4:57:31:0a:08:43:25:27:42:20: 4e:14:5e:95:70:41:a5:2c:0d:37:d2:da:d5:ed:da: 96:e8:86:85:1b:84:00:40:ca:32:68:82:98:5c:5c: 71:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:F1:1E:07:5F:43:79:44:E0:CA:85:D2:A5:85:34:1A:12:83:59:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bfec383-87a2-4429-93ae-a407c690a4e0/4bfec383-87a2-4429-93ae-a407c690a4e0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bfec383-87a2-4429-93ae-a407c690a4e0/4bfec383-87a2-4429-93ae-a407c690a4e0.crl X509v3 Authority Key Identifier: keyid:9F:38:BB:E8:12:C7:D9:D4:67:88:8C:A1:33:9D:77:7C:DD:1F:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bfec383-87a2-4429-93ae-a407c690a4e0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:3e:bb:18:86:12:d8:05:1d:48:01:26:8e:8e:0c:8a:3e:f5: 38:08:fc:4a:fe:c5:9c:75:58:15:a0:f7:d1:d0:d2:4e:f2:7b: d2:67:26:77:a3:4a:61:0b:09:26:aa:5b:92:44:08:3b:90:4b: cd:fc:8e:4d:fa:7d:61:31:c3:09:f0:b6:f8:01:ad:03:cd:f0: 55:e3:91:87:d2:7b:2a:0e:7c:88:83:63:d5:fa:62:13:5f:e9: 59:a4:3a:b6:0a:58:a4:7e:37:84:23:cd:e0:3c:7e:3f:0b:4e: f5:60:6d:a5:22:74:74:51:41:e3:6e:83:53:c6:bd:5f:75:8b: a4:0f:f7:f8:94:53:f1:ba:57:48:7e:24:89:60:e2:47:52:ac: e8:31:42:bf:92:70:59:18:a8:e1:6a:25:0f:c7:d8:7f:c0:dc: 39:ae:de:f0:c3:e7:c6:25:3d:80:fe:75:82:07:b9:25:9c:d4: 68:76:73:37:63:9d:36:7d:db:57:a9:36:3c:e7:7b:34:e7:e1: f2:1d:2d:1d:26:be:9b:89:d3:a7:69:bb:ac:f7:e4:e7:b7:66: 0c:75:84:01:45:ef:fa:05:fd:2e:3e:53:93:10:fe:fb:62:d0: ac:cd:d1:5c:e3:d6:e5:06:05:5a:d8:0c:64:e3:78:fa:96:24: 6d:e9:87:48 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEoeZcnxSnoMOtXVF8gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJmZWMzODMtODdhMi00NDI5LTkzYWUtYTQwN2M2OTBh NGUwMB4XDTI1MDYwODAzMDAwM1oXDTI1MDYxMTAzMDAwMFowLzEtMCsGA1UEAxMk M2ZjYTQ5YzItMzAyMy00MmRiLTkyZTctNjJlMjU3ZmVkNGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyBm6JAohVKwPte5I3ePlVOyPj0eoerCdcgW TVXnw4R2OtD6Q5nl2a0JO0jP8IjdAcEUsnPYLV4g8mecgBl+WbPUvIthPvgxVrRd xP+4FNoPSI/V7YGHX3dwkwPMd22iVpMHTZKvhm6fxphg4sr+tgVlC9eKq4hJ5KA/ XRu2/FSZpK196VzCro1Ei7sLXGIGgsW7Tyz8Gdv8dd1kdAQigGIs+XLHiqSzE4mz sNCfHWeT+LTxcfyaW0BnzFwPX5k+qxWlW8SpQsASgjg0c9AHwZadkpMWpaRXMQoI QyUnQiBOFF6VcEGlLA030trV7dqW6IaFG4QAQMoyaIKYXFxx3QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFK3xHgdfQ3lE4MqF0qWFNBoSg1nCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80YmZl YzM4My04N2EyLTQ0MjktOTNhZS1hNDA3YzY5MGE0ZTAvNGJmZWMzODMtODdhMi00 NDI5LTkzYWUtYTQwN2M2OTBhNGUwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGJmZWMzODMtODdhMi00NDI5LTkz YWUtYTQwN2M2OTBhNGUwLzRiZmVjMzgzLTg3YTItNDQyOS05M2FlLWE0MDdjNjkw YTRlMC5jcmwwHwYDVR0jBBgwFoAUnzi76BLH2dRniIyhM513fN0fICAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80YmZlYzM4My04N2EyLTQ0MjktOTNhZS1hNDA3 YzY5MGE0ZTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBjPrsYhhLYBR1IASaOjgyK PvU4CPxK/sWcdVgVoPfR0NJO8nvSZyZ3o0phCwkmqluSRAg7kEvN/I5N+n1hMcMJ 8Lb4Aa0DzfBV45GH0nsqDnyIg2PV+mITX+lZpDq2ClikfjeEI83gPH4/C071YG2l InR0UUHjboNTxr1fdYukD/f4lFPxuldIfiSJYOJHUqzoMUK/knBZGKjhaiUPx9h/ wNw5rt7ww+fGJT2A/nWCB7klnNRodnM3Y502fdtXqTY853s05+HyHS0dJr6bidOn abus9+Tnt2YMdYQBRe/6Bf0uPlOTEP77YtCszdFc49blBgVa2Axk43j6liRt6YdI -----END CERTIFICATE-----Generated at Sun Jun 8 18:43:12 2025 by rpki-client