$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bad79acc-a971-4c08-8e88-3594dae2715a/bad79acc-a971-4c08-8e88-3594dae2715a.mft File: bad79acc-a971-4c08-8e88-3594dae2715a.mft (raw, json) Hash identifier: X0tDGSGq76WnjeAz4sDjk7mKtdYC6dX/EUY09mEEQII= Subject key identifier: 52:56:99:36:63:75:9D:73:A9:0C:8C:80:CD:E5:5B:46:D5:51:69:5B Authority key identifier: 3D:58:09:D6:0C:EB:72:3D:A4:60:C6:A7:3B:FB:E6:F6:81:08:D5:D7 Certificate issuer: /CN=bad79acc-a971-4c08-8e88-3594dae2715a Certificate serial: 010D0C9F432858496789FD0BB92D85DACF144080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bad79acc-a971-4c08-8e88-3594dae2715a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bad79acc-a971-4c08-8e88-3594dae2715a/bad79acc-a971-4c08-8e88-3594dae2715a.mft Manifest number: 010D0C9F432858435CFDDDFE44FECCD4FCCBF8B7 Signing time: Thu 03 Apr 2025 15:00:03 +0000 Manifest this update: Thu 03 Apr 2025 15:00:03 +0000 Manifest next update: Sun 06 Apr 2025 15:00:00 +0000 Files and hashes: 1: 9e56f5a3-e24b-359e-be4b-ae75c0ce7cbd.roa (hash: YcQgS0yBTEWfG5w0nOtdFB7NuE0E9xjsOxZ9IeioEg8=) 2: bad79acc-a971-4c08-8e88-3594dae2715a.crl (hash: JJdsKHirqShERzSs+oCarVZqT/rOrvXrGR+BrsTcLVY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bad79acc-a971-4c08-8e88-3594dae2715a/bad79acc-a971-4c08-8e88-3594dae2715a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bad79acc-a971-4c08-8e88-3594dae2715a/bad79acc-a971-4c08-8e88-3594dae2715a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bad79acc-a971-4c08-8e88-3594dae2715a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:89:fd:0b:b9:2d:85:da:cf:14:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bad79acc-a971-4c08-8e88-3594dae2715a Validity Not Before: Apr 3 15:00:03 2025 GMT Not After : Apr 6 15:00:00 2025 GMT Subject: CN=f0daed91-c1a3-4d7a-9958-8d3787f32aee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7d:4c:d7:f7:c5:40:2e:b5:b5:4b:e6:1f:4c: 51:c5:24:83:93:9e:83:ea:8a:41:df:bd:e4:06:9d: fa:c5:50:d0:5f:d6:82:c0:f7:e8:0d:9e:a8:98:4d: ae:9c:a5:83:58:db:a3:f7:46:a1:a9:59:b8:b8:fb: 43:08:32:59:9d:71:82:77:a4:b6:9b:78:e7:7b:4d: 9f:2d:90:49:15:5b:50:5c:5e:d4:82:40:ef:ec:39: 8c:c1:11:17:63:3b:41:d2:c5:88:9f:30:68:64:41: 37:77:2f:79:3f:9d:20:54:28:b9:c2:9a:77:99:2f: b8:d3:9a:c3:60:41:7b:33:24:ac:e7:23:cb:4b:39: 95:11:0e:7f:d4:c8:40:75:99:d5:23:75:a4:0f:88: ea:2c:33:34:53:32:54:c4:45:8e:b7:18:18:ba:1d: d1:64:63:bd:bf:2b:dc:83:51:2a:79:77:57:bb:eb: d9:4f:b8:6f:f1:b2:95:2c:ef:28:89:c8:70:71:6b: 7c:85:0e:fa:2d:e2:d9:dd:e1:9b:c1:bd:f2:78:21: 85:98:62:38:e8:18:b3:5a:f8:fd:5f:ca:ce:64:7c: a5:95:ae:83:f6:1f:d9:28:41:49:03:b9:d3:f9:e8: 18:b6:b1:03:eb:74:47:44:4a:16:6c:3f:67:07:8e: 99:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:56:99:36:63:75:9D:73:A9:0C:8C:80:CD:E5:5B:46:D5:51:69:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bad79acc-a971-4c08-8e88-3594dae2715a/bad79acc-a971-4c08-8e88-3594dae2715a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bad79acc-a971-4c08-8e88-3594dae2715a/bad79acc-a971-4c08-8e88-3594dae2715a.crl X509v3 Authority Key Identifier: keyid:3D:58:09:D6:0C:EB:72:3D:A4:60:C6:A7:3B:FB:E6:F6:81:08:D5:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bad79acc-a971-4c08-8e88-3594dae2715a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:8d:72:09:95:78:c1:04:86:5d:77:16:f1:bb:90:95:c7:9d: 02:af:ff:d0:37:1d:e4:c8:e5:de:30:cd:5a:ba:bc:e2:7e:55: 05:83:33:ad:69:1a:af:02:8c:ca:32:bf:a1:b8:c4:76:87:11: a8:92:c1:0d:98:e5:02:f1:c7:61:da:d6:58:c4:37:9e:04:70: 68:38:11:1e:78:5a:16:bb:36:dd:ee:c7:04:92:90:21:01:85: c1:a8:f0:48:20:b8:56:0f:02:e9:07:fb:92:1c:52:df:29:f1: df:6e:d3:b9:7f:27:e7:07:08:85:6b:70:6b:07:17:0e:88:7a: 52:ea:4f:34:6a:4a:68:0c:2f:d8:23:f3:f0:4a:b4:7e:12:9c: 26:3b:9b:1a:ef:04:06:0d:cf:6c:4f:6b:3a:1e:43:a5:17:4a: dd:b7:57:53:a8:3e:e2:78:3a:a0:2d:e8:b0:11:79:3e:c8:69: db:48:2c:31:d7:14:41:0f:30:39:8c:d3:44:bd:eb:80:d8:10: 59:33:b8:0d:00:74:f1:c2:f9:84:ab:ac:bd:d1:cf:ec:0a:28: bf:92:f2:8b:f7:ac:f5:2f:05:81:c8:4a:72:5e:45:66:9d:12: d5:5b:b9:54:9c:e4:26:2a:88:2b:c0:f2:7e:4a:ec:dd:46:bc: 0b:bc:55:35 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWElnif0LuS2F2s8UQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFkNzlhY2MtYTk3MS00YzA4LThlODgtMzU5NGRhZTI3 MTVhMB4XDTI1MDQwMzE1MDAwM1oXDTI1MDQwNjE1MDAwMFowLzEtMCsGA1UEAxMk ZjBkYWVkOTEtYzFhMy00ZDdhLTk5NTgtOGQzNzg3ZjMyYWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk31M1/fFQC61tUvmH0xRxSSDk56D6opB373k Bp36xVDQX9aCwPfoDZ6omE2unKWDWNuj90ahqVm4uPtDCDJZnXGCd6S2m3jne02f LZBJFVtQXF7UgkDv7DmMwREXYztB0sWInzBoZEE3dy95P50gVCi5wpp3mS+405rD YEF7MySs5yPLSzmVEQ5/1MhAdZnVI3WkD4jqLDM0UzJUxEWOtxgYuh3RZGO9vyvc g1EqeXdXu+vZT7hv8bKVLO8oichwcWt8hQ76LeLZ3eGbwb3yeCGFmGI46BizWvj9 X8rOZHylla6D9h/ZKEFJA7nT+egYtrED63RHREoWbD9nB46ZHQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFJWmTZjdZ1zqQyMgM3lW0bVUWlbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iYWQ3 OWFjYy1hOTcxLTRjMDgtOGU4OC0zNTk0ZGFlMjcxNWEvYmFkNzlhY2MtYTk3MS00 YzA4LThlODgtMzU5NGRhZTI3MTVhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmFkNzlhY2MtYTk3MS00YzA4LThl ODgtMzU5NGRhZTI3MTVhL2JhZDc5YWNjLWE5NzEtNGMwOC04ZTg4LTM1OTRkYWUy NzE1YS5jcmwwHwYDVR0jBBgwFoAUPVgJ1gzrcj2kYManO/vm9oEI1dcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iYWQ3OWFjYy1hOTcxLTRjMDgtOGU4OC0zNTk0 ZGFlMjcxNWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB7jXIJlXjBBIZddxbxu5CV x50Cr//QNx3kyOXeMM1aurziflUFgzOtaRqvAozKMr+huMR2hxGoksENmOUC8cdh 2tZYxDeeBHBoOBEeeFoWuzbd7scEkpAhAYXBqPBIILhWDwLpB/uSHFLfKfHfbtO5 fyfnBwiFa3BrBxcOiHpS6k80akpoDC/YI/PwSrR+EpwmO5sa7wQGDc9sT2s6HkOl F0rdt1dTqD7ieDqgLeiwEXk+yGnbSCwx1xRBDzA5jNNEveuA2BBZM7gNAHTxwvmE q6y90c/sCii/kvKL96z1LwWByEpyXkVmnRLVW7lUnOQmKogrwPJ+SuzdRrwLvFU1 -----END CERTIFICATE-----Generated at Thu Apr 3 22:29:43 2025 by rpki-client