$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.mft File: bf10fe75-981f-4a3c-b77a-28e235bed9f1.mft (raw, json) Hash identifier: 9EGT2gdTO41aEollRhWaIpkCSBT9tVhyG+x10Y1dVUY= Subject key identifier: 45:6E:5A:33:C0:81:D6:CB:3A:B1:67:38:98:54:A5:4B:60:3A:13:71 Authority key identifier: 11:5E:01:9C:4C:7D:98:BB:75:92:64:5B:8D:DB:0B:38:BE:11:77:B7 Certificate issuer: /CN=bf10fe75-981f-4a3c-b77a-28e235bed9f1 Certificate serial: 010D0C9F43285849750946C636D16E5B184F3160 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.mft Manifest number: 010D0C9F4328584073A8508522A5167F0D71024D Signing time: Tue 08 Apr 2025 11:02:03 +0000 Manifest this update: Tue 08 Apr 2025 11:02:03 +0000 Manifest next update: Thu 10 Apr 2025 11:00:00 +0000 Files and hashes: 1: 4a34cd9f-1e66-36b9-ae43-e7a939ef4cb5.roa (hash: RPT8SPhpoQ/6XfZm6RMVKoF5vyVROVHn0AmMiySljgE=) 2: bf10fe75-981f-4a3c-b77a-28e235bed9f1.crl (hash: kdVejq4Udo1ulB8IqnzDxSUajCKhZwj6S97Uk+YzNiM=) 3: f2ad73f3-0f80-3cc2-9399-881a9101068b.roa (hash: HwTqDercRb3EEwdz4/Evn/wI1quYtvvagTwIKl8ByOA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:09:46:c6:36:d1:6e:5b:18:4f:31:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf10fe75-981f-4a3c-b77a-28e235bed9f1 Validity Not Before: Apr 8 11:02:03 2025 GMT Not After : Apr 10 11:00:00 2025 GMT Subject: CN=bc2c3d34-b245-4f6f-b80c-ba1b34b7745a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:96:59:e7:06:55:4d:0a:79:11:d1:f3:ee:9e: ca:70:28:e9:ed:ce:d6:c6:85:b6:ee:53:ef:67:95: 55:5a:d9:6f:05:6d:dc:7f:cb:73:34:e0:42:8d:1a: 0a:bc:9f:8f:76:4d:4b:d2:dc:14:9b:c5:23:2d:83: 73:e5:4b:71:f0:cb:a3:7b:13:e5:ef:c3:54:42:43: 17:7d:7d:56:48:c6:2b:19:f5:b5:4f:45:96:38:48: c5:6b:fd:d9:16:4d:87:d0:45:91:c3:70:4f:0e:71: 86:a1:a6:72:c4:59:e3:23:37:24:ee:7a:99:16:b2: 69:8f:81:32:92:11:ff:50:68:0d:b8:90:6e:38:03: e0:ef:1d:70:ed:0a:7e:f8:ce:31:39:d9:06:b5:74: 17:17:b4:58:69:67:ea:b5:d7:33:c3:28:2b:75:dd: 5f:b7:0e:2c:51:10:b0:e4:33:7f:36:47:a6:1b:32: 57:3c:ac:d9:50:62:a6:f7:ba:a8:6c:17:76:85:32: bc:a3:c4:96:9a:f1:db:69:fc:fb:95:0a:e6:f5:65: b0:bc:38:6f:8f:0a:36:d1:28:9d:a6:21:2e:6b:08: 6a:f2:98:06:66:63:53:2b:f4:3f:0a:df:00:86:23: 54:c0:fb:53:39:b7:0f:2e:7c:ed:d9:76:55:8b:06: 3b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:6E:5A:33:C0:81:D6:CB:3A:B1:67:38:98:54:A5:4B:60:3A:13:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.crl X509v3 Authority Key Identifier: keyid:11:5E:01:9C:4C:7D:98:BB:75:92:64:5B:8D:DB:0B:38:BE:11:77:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:24:c6:58:16:04:50:91:83:c1:6c:1e:3a:87:89:a4:2e:74: ff:6d:ef:28:7a:4d:97:6a:d6:7e:7d:07:c9:f6:05:84:5f:f2: 03:a1:b7:6d:29:7f:78:af:65:f1:81:8a:dc:56:b7:49:b7:50: 7c:99:42:3a:d1:a3:5e:97:9d:6e:90:23:b5:8d:7d:da:83:f0: 68:77:3b:af:a5:c2:88:d9:ae:45:b9:ac:e0:eb:3f:aa:70:cb: 4b:f8:2f:c1:85:c9:78:79:5f:c7:61:a1:6f:ce:08:ed:6e:7f: 3a:43:2c:06:09:a9:2f:54:f7:fc:86:3b:b3:35:0f:0d:36:90: a6:11:5b:a4:7b:10:56:d8:9c:db:e6:10:57:e8:8b:65:63:16: 59:35:13:ba:49:68:21:d1:a2:53:16:00:50:2c:b9:8f:73:af: 96:dc:e8:89:e4:f7:51:f6:52:f6:c1:9d:17:3f:b0:ea:29:46: a8:5e:f9:9d:98:95:81:f5:8a:87:13:bd:df:03:b2:61:2f:ce: 04:57:36:f9:a7:c8:86:39:c1:5e:fc:f4:c8:4f:36:ab:99:20: 17:54:fc:7f:f9:6d:cc:89:e3:f4:b6:e9:a7:f5:71:da:3b:da: e3:87:cb:fc:52:29:6f:72:03:e6:68:4d:2b:6c:61:89:e8:84: cc:69:74:9b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl1CUbGNtFuWxhPMWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxMGZlNzUtOTgxZi00YTNjLWI3N2EtMjhlMjM1YmVk OWYxMB4XDTI1MDQwODExMDIwM1oXDTI1MDQxMDExMDAwMFowLzEtMCsGA1UEAxMk YmMyYzNkMzQtYjI0NS00ZjZmLWI4MGMtYmExYjM0Yjc3NDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65ZZ5wZVTQp5EdHz7p7KcCjp7c7WxoW27lPv Z5VVWtlvBW3cf8tzNOBCjRoKvJ+Pdk1L0twUm8UjLYNz5Utx8MujexPl78NUQkMX fX1WSMYrGfW1T0WWOEjFa/3ZFk2H0EWRw3BPDnGGoaZyxFnjIzck7nqZFrJpj4Ey khH/UGgNuJBuOAPg7x1w7Qp++M4xOdkGtXQXF7RYaWfqtdczwygrdd1ftw4sURCw 5DN/NkemGzJXPKzZUGKm97qobBd2hTK8o8SWmvHbafz7lQrm9WWwvDhvjwo20Sid piEuawhq8pgGZmNTK/Q/Ct8AhiNUwPtTObcPLnzt2XZViwY7OQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEVuWjPAgdbLOrFnOJhUpUtgOhNxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjEw ZmU3NS05ODFmLTRhM2MtYjc3YS0yOGUyMzViZWQ5ZjEvYmYxMGZlNzUtOTgxZi00 YTNjLWI3N2EtMjhlMjM1YmVkOWYxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmYxMGZlNzUtOTgxZi00YTNjLWI3 N2EtMjhlMjM1YmVkOWYxL2JmMTBmZTc1LTk4MWYtNGEzYy1iNzdhLTI4ZTIzNWJl ZDlmMS5jcmwwHwYDVR0jBBgwFoAUEV4BnEx9mLt1kmRbjdsLOL4Rd7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjEwZmU3NS05ODFmLTRhM2MtYjc3YS0yOGUy MzViZWQ5ZjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC3JMZYFgRQkYPBbB46h4mk LnT/be8oek2XatZ+fQfJ9gWEX/IDobdtKX94r2XxgYrcVrdJt1B8mUI60aNel51u kCO1jX3ag/BodzuvpcKI2a5Fuazg6z+qcMtL+C/Bhcl4eV/HYaFvzgjtbn86QywG CakvVPf8hjuzNQ8NNpCmEVukexBW2Jzb5hBX6ItlYxZZNRO6SWgh0aJTFgBQLLmP c6+W3OiJ5PdR9lL2wZ0XP7DqKUaoXvmdmJWB9YqHE73fA7JhL84EVzb5p8iGOcFe /PTITzarmSAXVPx/+W3MieP0tumn9XHaO9rjh8v8UilvcgPmaE0rbGGJ6ITMaXSb -----END CERTIFICATE-----Generated at Tue Apr 8 17:31:17 2025 by rpki-client