$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.mft File: fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.mft (raw, json) Hash identifier: gdU1HIZONDjVoIDiKS+9UhoVbvklV0wvMh2fnlCF/v0= Subject key identifier: 85:99:45:C3:78:B7:F4:13:E4:AE:EE:61:96:89:BE:9D:77:CE:1D:98 Authority key identifier: B9:F5:A2:51:A2:3B:EA:C4:B0:0F:52:FC:86:69:BA:2E:34:51:E4:0B Certificate issuer: /CN=fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0 Certificate serial: 010D0C9F4328584978FCCDFE725A97334B3EC100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.mft Manifest number: 010D0C9F43285846E0A0D6078549047048D74473 Signing time: Wed 09 Apr 2025 21:00:07 +0000 Manifest this update: Wed 09 Apr 2025 21:00:07 +0000 Manifest next update: Sat 12 Apr 2025 21:00:00 +0000 Files and hashes: 1: f0e0821c-bbf3-34eb-8266-555f46c9c97e.roa (hash: q+k2QRJiPDazG/g0qs82jkJ2uu/NxMLG24K3VCBdp9s=) 2: fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.crl (hash: yQbsKTvWYJl450JWmRGgkKVxpvF6IzJVe3b/X0azbIE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:fc:cd:fe:72:5a:97:33:4b:3e:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0 Validity Not Before: Apr 9 21:00:07 2025 GMT Not After : Apr 12 21:00:00 2025 GMT Subject: CN=022de210-01c1-423a-a05b-1a0e70eba6fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:64:98:33:be:c5:2e:d4:fb:c4:55:89:f7:c3: 5a:03:8c:67:e4:56:c3:9a:7e:ce:32:ee:89:3a:28: 9c:58:0e:6c:f0:12:13:53:63:e1:47:a5:5b:bb:07: 3b:f0:6c:c7:5f:d7:38:82:33:0d:1f:71:e8:2f:39: 23:5b:5e:ad:c3:37:12:7a:f8:aa:94:b6:3a:d0:d5: e8:9e:1a:d1:80:bb:c1:92:9a:d7:18:33:43:58:ca: 45:51:f2:c8:47:4c:50:9c:73:48:d9:c8:86:13:6e: 91:30:8e:12:ce:4e:ec:ea:5d:9d:e8:b7:59:fe:1b: e2:c8:1c:9b:b8:0f:69:bc:10:71:ca:95:ed:19:15: f6:1a:0f:d0:db:4d:0c:48:30:3c:e5:43:b0:0d:28: a8:70:e0:49:2f:7f:6b:ba:b2:b4:9e:47:7b:ef:37: 6b:35:c2:9e:0d:f5:21:2e:27:32:dd:9c:95:e7:07: af:f5:53:d3:f0:83:1e:d9:0a:db:ec:c9:1b:04:dc: a2:7d:4f:94:89:b2:1c:09:c6:75:06:90:85:91:26: 47:82:ff:ff:9f:77:83:98:7b:20:9b:6c:eb:18:73: 5f:91:65:a5:88:28:2c:ef:88:8c:63:f5:e3:c8:43: f9:95:95:0c:3c:66:d6:78:ae:49:45:cb:51:1c:75: e0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:99:45:C3:78:B7:F4:13:E4:AE:EE:61:96:89:BE:9D:77:CE:1D:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.crl X509v3 Authority Key Identifier: keyid:B9:F5:A2:51:A2:3B:EA:C4:B0:0F:52:FC:86:69:BA:2E:34:51:E4:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:ab:26:8f:c1:4f:97:8d:b2:24:8f:5d:f3:61:a6:ce:e1:1c: f5:52:4e:c4:7f:d8:1f:cb:f4:e3:97:21:f3:43:41:18:75:27: cd:ab:22:29:c2:76:53:cf:bc:cf:79:b5:d6:ba:41:3e:0d:18: aa:d9:a7:4f:ad:3e:a5:37:0b:40:4f:ef:a3:e2:2d:78:9a:e9: d1:8f:a1:d8:6f:81:bd:e4:59:04:7a:06:cc:c8:6b:48:e3:08: 18:2f:5d:84:60:24:88:3a:de:69:01:35:8c:fc:59:d5:12:f0: 73:d2:3e:2f:c1:08:b2:6f:0c:7a:65:4b:87:9c:1c:98:7f:e4: bf:36:91:b5:a9:4a:3d:08:e3:ff:ea:0d:a2:5e:c0:a9:8d:9f: e8:4c:8e:aa:a4:e3:b2:d7:a1:49:fa:6a:c6:5e:f9:4d:20:61: 7c:a7:c3:1d:d3:02:74:8f:f8:dc:7c:5a:1e:44:e6:c9:5b:90: 78:0e:08:6d:d1:8e:12:00:5a:a4:22:b9:ae:6d:f0:fa:62:d1: b4:72:f3:91:a6:2a:92:d0:1d:f6:43:8e:74:f6:d0:08:bf:8e: c0:be:28:b1:5c:94:98:97:67:7d:96:7b:8b:3c:a7:db:ab:fa: 50:18:b6:c5:14:fe:6d:2a:52:7f:63:37:8e:04:31:9a:aa:b8: c1:50:75:9c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl4/M3+clqXM0s+wQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmUzZTEwNGUtZGFlZi00ZmRiLTlkNjUtYWExZWU2ZGM0 YmUwMB4XDTI1MDQwOTIxMDAwN1oXDTI1MDQxMjIxMDAwMFowLzEtMCsGA1UEAxMk MDIyZGUyMTAtMDFjMS00MjNhLWEwNWItMWEwZTcwZWJhNmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2SYM77FLtT7xFWJ98NaA4xn5FbDmn7OMu6J OiicWA5s8BITU2PhR6Vbuwc78GzHX9c4gjMNH3HoLzkjW16twzcSeviqlLY60NXo nhrRgLvBkprXGDNDWMpFUfLIR0xQnHNI2ciGE26RMI4Szk7s6l2d6LdZ/hviyByb uA9pvBBxypXtGRX2Gg/Q200MSDA85UOwDSiocOBJL39rurK0nkd77zdrNcKeDfUh Licy3ZyV5wev9VPT8IMe2Qrb7MkbBNyifU+UibIcCcZ1BpCFkSZHgv//n3eDmHsg m2zrGHNfkWWliCgs74iMY/XjyEP5lZUMPGbWeK5JRctRHHXgkwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIWZRcN4t/QT5K7uYZaJvp13zh2YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZTNl MTA0ZS1kYWVmLTRmZGItOWQ2NS1hYTFlZTZkYzRiZTAvZmUzZTEwNGUtZGFlZi00 ZmRiLTlkNjUtYWExZWU2ZGM0YmUwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmUzZTEwNGUtZGFlZi00ZmRiLTlk NjUtYWExZWU2ZGM0YmUwL2ZlM2UxMDRlLWRhZWYtNGZkYi05ZDY1LWFhMWVlNmRj NGJlMC5jcmwwHwYDVR0jBBgwFoAUufWiUaI76sSwD1L8hmm6LjRR5AswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZTNlMTA0ZS1kYWVmLTRmZGItOWQ2NS1hYTFl ZTZkYzRiZTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCSqyaPwU+XjbIkj13zYabO 4Rz1Uk7Ef9gfy/TjlyHzQ0EYdSfNqyIpwnZTz7zPebXWukE+DRiq2adPrT6lNwtA T++j4i14munRj6HYb4G95FkEegbMyGtI4wgYL12EYCSIOt5pATWM/FnVEvBz0j4v wQiybwx6ZUuHnByYf+S/NpG1qUo9COP/6g2iXsCpjZ/oTI6qpOOy16FJ+mrGXvlN IGF8p8Md0wJ0j/jcfFoeRObJW5B4Dght0Y4SAFqkIrmubfD6YtG0cvORpiqS0B32 Q4509tAIv47AviixXJSYl2d9lnuLPKfbq/pQGLbFFP5tKlJ/YzeOBDGaqrjBUHWc -----END CERTIFICATE-----Generated at Thu Apr 10 15:55:04 2025 by rpki-client