$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.mft File: 1ff04835-864a-40da-a12f-dcad0faabb8c.mft (raw, json) Hash identifier: pvwCfNg36uy1SRN7kMjlPRiMsfyu7OzmfHmbHwVxq/g= Subject key identifier: 3C:72:77:BE:D8:F5:6B:50:CC:74:37:D6:D5:62:11:F6:29:4A:39:1D Authority key identifier: 73:0F:EE:54:BC:72:D1:CE:2A:9C:34:7D:C7:BF:20:56:F4:F2:9B:84 Certificate issuer: /CN=1ff04835-864a-40da-a12f-dcad0faabb8c Certificate serial: 010D0C9F43285849CE7BFDB67C068959E898A780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.mft Manifest number: 010D0C9F432858499C42A1E525F529435CBAF213 Signing time: Sat 10 May 2025 12:00:07 +0000 Manifest this update: Sat 10 May 2025 12:00:07 +0000 Manifest next update: Tue 13 May 2025 12:00:00 +0000 Files and hashes: 1: 1ff04835-864a-40da-a12f-dcad0faabb8c.crl (hash: MVSpvAtzk08nIiZ11CDu9NMO/QVCE7QRObfzM659g5E=) 2: c778b757-0391-3c4a-869f-5f03f34425a6.roa (hash: q0ApjzK1tRq+UzuJZJjbG1dMl6oX1tnGYgnD7u/HgGo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:7b:fd:b6:7c:06:89:59:e8:98:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff04835-864a-40da-a12f-dcad0faabb8c Validity Not Before: May 10 12:00:07 2025 GMT Not After : May 13 12:00:00 2025 GMT Subject: CN=e3cd1216-0203-45ae-8af4-4ea40f6d46a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f8:3f:0a:c1:e6:6f:e6:ac:09:83:f6:c9:e5: 8b:9d:5a:36:80:fb:56:86:01:a5:5e:b7:68:18:e8: 9d:0e:53:7d:a1:bd:dc:44:0f:56:f8:48:a0:82:4e: 58:03:b9:ff:ca:8b:e7:e9:ec:bf:a6:f2:80:43:b1: f5:bd:09:2a:80:e6:b1:56:93:f0:ce:db:f8:35:64: 37:64:0f:d8:3d:49:88:27:e9:4a:f8:ad:02:62:2d: e5:60:00:65:cb:3b:aa:91:d0:7e:5d:54:89:b9:00: 70:49:63:78:17:78:9a:b4:a7:df:29:5f:ca:15:89: 04:e2:24:1c:ae:bb:c7:cb:77:9d:b0:28:5d:9b:cc: 22:05:a7:35:f8:56:20:67:76:63:59:6c:39:0e:06: 72:3d:71:a8:26:28:11:d9:b5:86:c4:11:0e:f7:e7: 95:20:76:c3:51:59:c6:86:71:c4:1c:d0:b3:d3:09: 9d:04:7a:10:a4:c7:e4:46:b5:5c:a4:f4:5d:ef:9b: 9e:eb:60:73:08:55:69:7a:31:24:4a:5e:cd:4b:79: 2c:c2:88:aa:2d:b0:5f:bb:4e:5e:78:99:e0:e0:df: 23:ef:0b:ad:72:53:9b:93:6f:9d:fb:76:95:4c:3a: e1:dd:d9:d4:ee:f1:e2:5b:06:e0:73:ee:5e:24:19: b4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:72:77:BE:D8:F5:6B:50:CC:74:37:D6:D5:62:11:F6:29:4A:39:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.crl X509v3 Authority Key Identifier: keyid:73:0F:EE:54:BC:72:D1:CE:2A:9C:34:7D:C7:BF:20:56:F4:F2:9B:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:8e:c1:3e:a5:a4:61:6f:75:f6:ac:90:82:28:49:cb:3b:de: 48:8a:e7:b3:fb:72:67:e9:38:87:0e:d0:dd:c6:ac:e1:76:85: 7a:01:62:7a:d6:f0:94:8f:97:6a:4e:f4:3d:bd:94:aa:61:44: 4d:09:fa:7c:37:0c:41:f9:39:fa:d8:db:73:ab:e9:b2:89:79: 27:33:2c:04:09:53:3a:84:e2:34:79:a6:40:89:3a:1d:8e:c7: cb:03:8e:d3:15:cc:76:8d:b7:ff:b4:93:20:78:91:23:bb:d9: 0b:71:de:b9:49:73:24:cd:d0:21:ee:06:2f:9f:a8:6c:18:6e: a1:aa:ef:8e:23:d3:1c:a2:97:4f:1a:97:13:c2:d7:05:ad:52: 3e:23:40:26:69:9b:73:8f:75:cf:cb:c7:66:bd:ea:3e:79:b7: e7:a7:a5:d1:58:74:2d:99:f6:65:0c:12:e1:d8:f8:0b:35:21: 4b:16:b1:51:79:78:1e:3e:ff:ad:6b:18:09:a8:0f:ff:c7:da: d2:88:01:40:6a:58:f9:4b:87:c6:eb:9e:b7:73:99:a8:d8:e3: c0:b6:51:b2:76:89:e4:fd:c3:4e:64:2f:1e:8e:6e:3a:bd:ee: 09:0d:fd:5d:83:e0:16:39:05:16:f3:96:db:f1:69:37:5e:15: c9:bd:a8:24 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnOe/22fAaJWeiYp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmMDQ4MzUtODY0YS00MGRhLWExMmYtZGNhZDBmYWFi YjhjMB4XDTI1MDUxMDEyMDAwN1oXDTI1MDUxMzEyMDAwMFowLzEtMCsGA1UEAxMk ZTNjZDEyMTYtMDIwMy00NWFlLThhZjQtNGVhNDBmNmQ0NmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/g/CsHmb+asCYP2yeWLnVo2gPtWhgGlXrdo GOidDlN9ob3cRA9W+Eiggk5YA7n/yovn6ey/pvKAQ7H1vQkqgOaxVpPwztv4NWQ3 ZA/YPUmIJ+lK+K0CYi3lYABlyzuqkdB+XVSJuQBwSWN4F3iatKffKV/KFYkE4iQc rrvHy3edsChdm8wiBac1+FYgZ3ZjWWw5DgZyPXGoJigR2bWGxBEO9+eVIHbDUVnG hnHEHNCz0wmdBHoQpMfkRrVcpPRd75ue62BzCFVpejEkSl7NS3kswoiqLbBfu05e eJng4N8j7wutclObk2+d+3aVTDrh3dnU7vHiWwbgc+5eJBm0hwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDxyd77Y9WtQzHQ31tViEfYpSjkdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xZmYw NDgzNS04NjRhLTQwZGEtYTEyZi1kY2FkMGZhYWJiOGMvMWZmMDQ4MzUtODY0YS00 MGRhLWExMmYtZGNhZDBmYWFiYjhjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWZmMDQ4MzUtODY0YS00MGRhLWEx MmYtZGNhZDBmYWFiYjhjLzFmZjA0ODM1LTg2NGEtNDBkYS1hMTJmLWRjYWQwZmFh YmI4Yy5jcmwwHwYDVR0jBBgwFoAUcw/uVLxy0c4qnDR9x78gVvTym4QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xZmYwNDgzNS04NjRhLTQwZGEtYTEyZi1kY2Fk MGZhYWJiOGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCSjsE+paRhb3X2rJCCKEnL O95Iiuez+3Jn6TiHDtDdxqzhdoV6AWJ61vCUj5dqTvQ9vZSqYURNCfp8NwxB+Tn6 2Ntzq+myiXknMywECVM6hOI0eaZAiTodjsfLA47TFcx2jbf/tJMgeJEju9kLcd65 SXMkzdAh7gYvn6hsGG6hqu+OI9McopdPGpcTwtcFrVI+I0AmaZtzj3XPy8dmveo+ ebfnp6XRWHQtmfZlDBLh2PgLNSFLFrFReXgePv+taxgJqA//x9rSiAFAalj5S4fG 6563c5mo2OPAtlGydonk/cNOZC8ejm46ve4JDf1dg+AWOQUW85bb8Wk3XhXJvagk -----END CERTIFICATE-----Generated at Sun May 11 07:36:49 2025 by rpki-client