$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b47dccf7-419a-4049-85b8-a6ede6c8e00f/b47dccf7-419a-4049-85b8-a6ede6c8e00f.mft File: b47dccf7-419a-4049-85b8-a6ede6c8e00f.mft (raw, json) Hash identifier: Yk78hSsNpL4xM3QZODf4f+SgUC+yP1BvBUxz6MjfDkA= Subject key identifier: 3F:F5:42:12:E4:35:A2:5C:3B:4A:80:96:EF:7F:F8:2E:FB:9C:FB:93 Authority key identifier: F5:EC:E1:29:15:58:CC:35:76:97:A3:F9:04:74:3D:03:46:9E:E8:E1 Certificate issuer: /CN=b47dccf7-419a-4049-85b8-a6ede6c8e00f Certificate serial: 010D0C9F432858497E1B0CA811C7094171A7FE20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b47dccf7-419a-4049-85b8-a6ede6c8e00f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b47dccf7-419a-4049-85b8-a6ede6c8e00f/b47dccf7-419a-4049-85b8-a6ede6c8e00f.mft Manifest number: 010D0C9F4328584073A81ED5431DA75627DEB710 Signing time: Fri 11 Apr 2025 17:00:07 +0000 Manifest this update: Fri 11 Apr 2025 17:00:07 +0000 Manifest next update: Sun 13 Apr 2025 17:00:00 +0000 Files and hashes: 1: 16b385ec-598f-3ec3-9dac-1112734569f2.roa (hash: HmtNh7MoD42Ceg6RSiyrtvWdm/KgmqMdsql0aYlqhxY=) 2: b47dccf7-419a-4049-85b8-a6ede6c8e00f.crl (hash: 9BC6hQam+M0JrN6f+SjOu1LR7PC9txmI5jp7ZJkB2Hs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b47dccf7-419a-4049-85b8-a6ede6c8e00f/b47dccf7-419a-4049-85b8-a6ede6c8e00f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b47dccf7-419a-4049-85b8-a6ede6c8e00f/b47dccf7-419a-4049-85b8-a6ede6c8e00f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b47dccf7-419a-4049-85b8-a6ede6c8e00f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7e:1b:0c:a8:11:c7:09:41:71:a7:fe:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b47dccf7-419a-4049-85b8-a6ede6c8e00f Validity Not Before: Apr 11 17:00:07 2025 GMT Not After : Apr 13 17:00:00 2025 GMT Subject: CN=fa68b58a-371d-4333-af74-0631d616ffcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e9:ce:e5:a1:08:96:91:25:51:5b:4b:d9:7c: 07:7d:33:48:9a:d0:23:7d:ca:32:3f:4f:ca:32:87: ca:79:de:2b:b5:61:00:66:1f:4b:a8:7b:91:17:be: 94:a9:f5:84:1b:42:68:21:43:33:ad:bd:e0:f0:da: 6f:cc:c4:54:cd:48:ef:b7:6e:37:67:44:fa:f4:6e: 8f:fb:c3:f2:eb:7f:9e:22:a6:c2:89:9b:67:26:79: 4c:65:24:d4:82:49:37:1f:89:6a:6a:fd:58:d6:5b: 6f:95:99:ca:d9:e4:72:33:44:18:22:71:7e:83:6d: d0:36:49:bf:9c:f0:c7:63:c1:25:e6:d1:fb:f4:58: aa:b0:ac:d0:fe:17:a2:47:69:9b:fd:de:94:e1:23: 5e:b6:1a:31:34:72:10:ff:9c:cf:2b:ff:78:3f:af: 33:51:83:4f:b4:d8:b9:24:77:18:21:37:c9:a4:03: 8a:7e:8e:9d:be:1e:27:79:ae:b2:b7:af:bb:f8:11: 6d:46:c5:d7:f6:d8:e4:32:b8:d2:86:bd:25:80:b8: 31:81:98:94:98:fe:92:1b:de:f3:ef:54:eb:46:e7: d4:ab:76:56:2c:d6:cd:38:4f:49:2b:33:7c:80:0f: e6:e1:52:d0:89:28:38:16:e3:68:3d:40:0b:43:fd: 3d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F5:42:12:E4:35:A2:5C:3B:4A:80:96:EF:7F:F8:2E:FB:9C:FB:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b47dccf7-419a-4049-85b8-a6ede6c8e00f/b47dccf7-419a-4049-85b8-a6ede6c8e00f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b47dccf7-419a-4049-85b8-a6ede6c8e00f/b47dccf7-419a-4049-85b8-a6ede6c8e00f.crl X509v3 Authority Key Identifier: keyid:F5:EC:E1:29:15:58:CC:35:76:97:A3:F9:04:74:3D:03:46:9E:E8:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b47dccf7-419a-4049-85b8-a6ede6c8e00f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:89:c7:84:db:df:59:d8:5c:13:a3:81:48:cc:36:df:58:87: 9e:c6:26:7b:04:0b:30:76:59:8a:2b:2f:0e:5b:8c:4c:02:6e: ca:c7:aa:0e:4e:00:c0:89:97:00:1f:63:b7:36:94:77:01:65: 81:ad:2c:5c:a5:5e:ac:93:14:22:4f:d0:8b:9e:a7:db:7d:87: 06:41:1e:8e:ee:c5:4d:68:1d:07:0e:cd:b6:9d:e5:31:3a:dc: 97:8b:e0:45:86:4e:1f:08:43:0f:e0:87:ae:3a:b6:3a:b2:bf: 78:77:d1:84:6e:92:16:47:25:ea:d0:10:f4:31:9b:a6:54:de: 9c:7e:a1:51:9c:63:0c:2c:15:fd:98:ab:6e:91:60:40:c1:da: ec:ca:73:03:47:52:ea:88:57:e7:ce:a5:b7:ee:83:41:6c:a0: f6:77:4b:6c:2f:8c:70:87:df:64:f8:4d:22:89:fa:5d:a8:80: 0d:dd:bd:b5:7c:13:a3:24:67:16:fb:2f:3e:73:7e:5a:ef:d0: 8e:81:12:e2:e4:e0:bc:5c:48:53:cd:20:43:51:81:7e:49:d1: 44:71:3e:c0:24:1c:44:11:51:91:b7:ef:a4:57:4f:7b:4a:73: a6:23:64:fb:e3:05:a7:86:d0:db:90:be:89:59:0b:e2:d8:56: 0a:fc:fd:3a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl+GwyoEccJQXGn/iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQ3ZGNjZjctNDE5YS00MDQ5LTg1YjgtYTZlZGU2Yzhl MDBmMB4XDTI1MDQxMTE3MDAwN1oXDTI1MDQxMzE3MDAwMFowLzEtMCsGA1UEAxMk ZmE2OGI1OGEtMzcxZC00MzMzLWFmNzQtMDYzMWQ2MTZmZmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+nO5aEIlpElUVtL2XwHfTNImtAjfcoyP0/K MofKed4rtWEAZh9LqHuRF76UqfWEG0JoIUMzrb3g8NpvzMRUzUjvt243Z0T69G6P +8Py63+eIqbCiZtnJnlMZSTUgkk3H4lqav1Y1ltvlZnK2eRyM0QYInF+g23QNkm/ nPDHY8El5tH79FiqsKzQ/heiR2mb/d6U4SNethoxNHIQ/5zPK/94P68zUYNPtNi5 JHcYITfJpAOKfo6dvh4nea6yt6+7+BFtRsXX9tjkMrjShr0lgLgxgZiUmP6SG97z 71TrRufUq3ZWLNbNOE9JKzN8gA/m4VLQiSg4FuNoPUALQ/09MwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFD/1QhLkNaJcO0qAlu9/+C77nPuTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDdk Y2NmNy00MTlhLTQwNDktODViOC1hNmVkZTZjOGUwMGYvYjQ3ZGNjZjctNDE5YS00 MDQ5LTg1YjgtYTZlZGU2YzhlMDBmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQ3ZGNjZjctNDE5YS00MDQ5LTg1 YjgtYTZlZGU2YzhlMDBmL2I0N2RjY2Y3LTQxOWEtNDA0OS04NWI4LWE2ZWRlNmM4 ZTAwZi5jcmwwHwYDVR0jBBgwFoAU9ezhKRVYzDV2l6P5BHQ9A0ae6OEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDdkY2NmNy00MTlhLTQwNDktODViOC1hNmVk ZTZjOGUwMGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAeiceE299Z2FwTo4FIzDbf WIeexiZ7BAswdlmKKy8OW4xMAm7Kx6oOTgDAiZcAH2O3NpR3AWWBrSxcpV6skxQi T9CLnqfbfYcGQR6O7sVNaB0HDs22neUxOtyXi+BFhk4fCEMP4IeuOrY6sr94d9GE bpIWRyXq0BD0MZumVN6cfqFRnGMMLBX9mKtukWBAwdrsynMDR1LqiFfnzqW37oNB bKD2d0tsL4xwh99k+E0iifpdqIAN3b21fBOjJGcW+y8+c35a79COgRLi5OC8XEhT zSBDUYF+SdFEcT7AJBxEEVGRt++kV097SnOmI2T74wWnhtDbkL6JWQvi2FYK/P06 -----END CERTIFICATE-----Generated at Fri Apr 11 21:34:49 2025 by rpki-client