$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.mft File: 86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.mft (raw, json) Hash identifier: Zs8oaVdGIIHgHnT5s2cXIDJi+cv3pjig13YyYI7F9fM= Subject key identifier: 49:3A:97:4F:7F:10:23:4C:07:5D:9A:08:92:1A:F3:56:59:6F:C3:4D Authority key identifier: 3C:AB:4A:18:60:AF:91:D3:E6:3F:C9:E5:F3:FA:8A:06:82:25:C3:ED Certificate issuer: /CN=86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c Certificate serial: 010D0C9F4328584993A008F6ACCDFDDD50ACE180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.mft Manifest number: 010D0C9F432858496F552DCD0894BBF5A9254B6D Signing time: Sat 19 Apr 2025 10:00:03 +0000 Manifest this update: Sat 19 Apr 2025 10:00:03 +0000 Manifest next update: Mon 21 Apr 2025 10:00:00 +0000 Files and hashes: 1: 2670296f-b353-309c-ad96-a0e12b7068a5.roa (hash: W6aDSt6gyaO5pJNyLZ84JfkiDmrkW95nAmAD3NjsTBo=) 2: 86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.crl (hash: cN2iuKfcubWxh2Z6zS0vt93ExzOI5bHLnR6bMmjOhFI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:a0:08:f6:ac:cd:fd:dd:50:ac:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c Validity Not Before: Apr 19 10:00:03 2025 GMT Not After : Apr 21 10:00:00 2025 GMT Subject: CN=c0b0ea45-bac5-4178-a53c-624fe14684ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8b:86:e8:f8:7a:aa:be:a4:42:dd:02:3d:73: 04:03:e4:11:a5:1e:8b:6b:83:30:38:3c:24:07:cc: 05:d3:9a:30:15:6c:92:ec:f1:c6:73:36:70:9d:84: 34:62:f5:b8:44:f5:82:b7:f6:1a:51:ef:cc:9e:79: 3a:56:66:1b:5c:ba:b4:f5:5f:f8:54:67:63:d8:e0: e1:a5:10:64:3f:0f:65:89:b1:1e:ec:18:6e:3f:75: 81:48:d7:bd:5a:19:8c:c8:d1:7a:e0:9d:c5:cb:3c: ce:c4:a4:0f:f8:20:b8:86:d7:4a:6a:ff:97:e3:95: dd:61:27:7f:75:da:75:36:d7:dc:5d:a7:13:58:7e: 6e:4a:ad:04:8a:60:f0:92:a0:2d:80:21:d9:f5:26: 0a:8c:5e:59:5f:a6:3f:2e:e8:9f:c2:dc:b2:d6:f9: 19:26:0d:1d:8a:8d:5a:a6:70:ab:5d:6d:49:27:af: fb:6e:e9:08:c0:38:d6:22:0a:3e:53:de:83:82:d7: de:5e:8b:ad:e7:90:27:a1:7f:fb:21:4e:51:b8:6f: 6f:5b:d0:54:95:c1:3b:d1:0b:4c:92:ac:fe:53:bd: 7c:3c:46:af:68:54:00:7d:fa:0d:47:0b:b8:f6:29: 29:fe:ff:03:80:ad:9c:e5:12:f5:ff:95:a3:f3:00: 33:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:3A:97:4F:7F:10:23:4C:07:5D:9A:08:92:1A:F3:56:59:6F:C3:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.crl X509v3 Authority Key Identifier: keyid:3C:AB:4A:18:60:AF:91:D3:E6:3F:C9:E5:F3:FA:8A:06:82:25:C3:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:f4:25:a4:67:b5:ea:1e:ce:96:ba:c2:de:dc:8e:e0:f3:6b: f4:1e:3c:6d:bf:c3:f8:4c:1d:f7:49:18:f4:19:9c:8a:d9:b0: 96:4f:22:80:9b:35:e4:f4:42:5f:08:dd:97:c7:40:28:bd:e5: a6:6a:12:9b:1f:83:77:63:3a:03:1c:2b:de:ca:2d:72:8f:c8: 16:d4:60:68:ed:76:47:ce:b8:43:33:eb:a5:cb:a4:09:59:c3: 87:b0:ff:e0:62:c5:67:e0:fd:97:cf:e9:9f:20:aa:d0:d0:d9: 1d:9c:bb:5e:83:e6:9e:41:f4:9a:d0:df:85:eb:04:98:08:6f: d9:e0:4f:ec:8a:74:68:7f:97:6d:78:c9:05:a5:c1:0c:cb:89: ba:ab:92:46:8a:82:9d:49:6b:a7:9e:37:14:16:43:b0:fe:c6: 37:62:7f:db:7c:52:7f:ac:cc:57:36:b1:1e:78:da:72:42:76: 95:00:2f:ab:86:a1:23:4a:1e:ac:0c:a9:29:65:fc:82:c2:0d: b8:01:af:24:85:76:8b:2c:95:26:88:1f:ca:fb:6f:0d:86:43: 0c:52:4e:da:d5:a6:e8:87:ab:6b:25:25:2c:8c:4a:36:bc:bc: d2:26:13:46:47:82:9a:8f:2e:56:a7:aa:14:7c:25:0b:9c:58: 14:57:bd:1b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmToAj2rM393VCs4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZhYWY2ZTUtZjhhNy00N2Y1LWEzZmYtMWUxNGVlOTdj OTJjMB4XDTI1MDQxOTEwMDAwM1oXDTI1MDQyMTEwMDAwMFowLzEtMCsGA1UEAxMk YzBiMGVhNDUtYmFjNS00MTc4LWE1M2MtNjI0ZmUxNDY4NGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIuG6Ph6qr6kQt0CPXMEA+QRpR6La4MwODwk B8wF05owFWyS7PHGczZwnYQ0YvW4RPWCt/YaUe/Mnnk6VmYbXLq09V/4VGdj2ODh pRBkPw9libEe7BhuP3WBSNe9WhmMyNF64J3FyzzOxKQP+CC4htdKav+X45XdYSd/ ddp1NtfcXacTWH5uSq0EimDwkqAtgCHZ9SYKjF5ZX6Y/Luifwtyy1vkZJg0dio1a pnCrXW1JJ6/7bukIwDjWIgo+U96DgtfeXout55AnoX/7IU5RuG9vW9BUlcE70QtM kqz+U718PEavaFQAffoNRwu49ikp/v8DgK2c5RL1/5Wj8wAzLwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEk6l09/ECNMB12aCJIa81ZZb8NNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84NmFh ZjZlNS1mOGE3LTQ3ZjUtYTNmZi0xZTE0ZWU5N2M5MmMvODZhYWY2ZTUtZjhhNy00 N2Y1LWEzZmYtMWUxNGVlOTdjOTJjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvODZhYWY2ZTUtZjhhNy00N2Y1LWEz ZmYtMWUxNGVlOTdjOTJjLzg2YWFmNmU1LWY4YTctNDdmNS1hM2ZmLTFlMTRlZTk3 YzkyYy5jcmwwHwYDVR0jBBgwFoAUPKtKGGCvkdPmP8nl8/qKBoIlw+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84NmFhZjZlNS1mOGE3LTQ3ZjUtYTNmZi0xZTE0 ZWU5N2M5MmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAo9CWkZ7XqHs6WusLe3I7g 82v0Hjxtv8P4TB33SRj0GZyK2bCWTyKAmzXk9EJfCN2Xx0AoveWmahKbH4N3YzoD HCveyi1yj8gW1GBo7XZHzrhDM+uly6QJWcOHsP/gYsVn4P2Xz+mfIKrQ0NkdnLte g+aeQfSa0N+F6wSYCG/Z4E/sinRof5dteMkFpcEMy4m6q5JGioKdSWunnjcUFkOw /sY3Yn/bfFJ/rMxXNrEeeNpyQnaVAC+rhqEjSh6sDKkpZfyCwg24Aa8khXaLLJUm iB/K+28NhkMMUk7a1aboh6trJSUsjEo2vLzSJhNGR4Kajy5Wp6oUfCULnFgUV70b -----END CERTIFICATE-----Generated at Sat Apr 19 17:12:05 2025 by rpki-client