$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705/bbe97a67-0973-4bfa-934d-628e0334b705.mft File: bbe97a67-0973-4bfa-934d-628e0334b705.mft (raw, json) Hash identifier: cxsTzF5svBYndztVApL7mwy0cd2zb8oJ1WHNDiEm0m8= Subject key identifier: FC:20:68:B1:3C:F6:9A:86:82:51:6A:8F:85:4D:14:F9:6A:91:71:0E Authority key identifier: 85:D7:28:E1:02:6D:6C:2D:08:41:45:CA:19:40:EB:08:F7:21:B3:EE Certificate issuer: /CN=bbe97a67-0973-4bfa-934d-628e0334b705 Certificate serial: 010D0C9F432858496D1F67DE3A811558C8167600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705/bbe97a67-0973-4bfa-934d-628e0334b705.mft Manifest number: 010D0C9F432858488DC8AA46D73A71D122842991 Signing time: Sat 05 Apr 2025 15:00:07 +0000 Manifest this update: Sat 05 Apr 2025 15:00:07 +0000 Manifest next update: Tue 08 Apr 2025 15:00:00 +0000 Files and hashes: 1: 36900df0-0c64-38e9-a32b-d2bf819186c9.roa (hash: mFXN8EtPBmZxmmqzXiSj28woKcIBcBy4xRzAQG7LCrU=) 2: bbe97a67-0973-4bfa-934d-628e0334b705.crl (hash: XGstcUHN3Lcis/gv5DaDI2kszb93PFz0rSVzbvp61pY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705/bbe97a67-0973-4bfa-934d-628e0334b705.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705/bbe97a67-0973-4bfa-934d-628e0334b705.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6d:1f:67:de:3a:81:15:58:c8:16:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbe97a67-0973-4bfa-934d-628e0334b705 Validity Not Before: Apr 5 15:00:07 2025 GMT Not After : Apr 8 15:00:00 2025 GMT Subject: CN=4d840c62-c7d9-43ab-8e89-88114b6fa5b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7e:44:46:7b:c5:34:fc:ec:ac:b4:d5:00:9d: 71:fa:a2:38:0d:d4:c9:d5:ea:7c:d2:df:a6:9a:1b: 7d:80:81:f6:3a:9e:7a:df:c8:19:49:6d:b5:77:aa: b0:f0:51:18:91:b7:ef:5c:31:03:4e:d3:37:3a:42: 87:eb:e0:8a:a7:c6:a3:eb:0a:03:72:c2:b8:27:bd: 0b:68:0f:0d:51:07:8c:37:ea:10:4e:2b:2a:42:8e: 99:02:a7:a5:2d:03:2f:99:14:4a:f1:d0:0d:df:4f: a0:d1:2e:80:bf:41:d4:b1:48:74:4f:ff:67:85:8c: da:1a:02:b3:62:29:02:3e:d3:40:90:61:f7:80:5f: 08:a8:db:c6:cf:cf:e3:04:ac:4c:83:a7:26:b1:c4: af:24:61:dc:69:97:ed:d0:2e:4c:d3:bc:c2:ae:bb: 62:f8:f3:0a:1c:bb:cc:36:40:48:01:07:4e:9f:e4: 16:c2:d9:44:74:9a:18:c4:57:8e:87:5e:1c:09:c4: c0:0b:73:50:e3:db:6e:1a:23:5e:a2:3b:5d:1c:35: 96:ff:ed:65:62:71:b6:b5:37:d1:bd:55:bb:81:23: bd:dd:79:1d:a4:8e:95:a7:25:af:3a:38:8f:d7:46: af:03:41:8c:9a:5c:9e:38:07:ac:65:fb:0d:6e:4f: 8b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:20:68:B1:3C:F6:9A:86:82:51:6A:8F:85:4D:14:F9:6A:91:71:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705/bbe97a67-0973-4bfa-934d-628e0334b705.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705/bbe97a67-0973-4bfa-934d-628e0334b705.crl X509v3 Authority Key Identifier: keyid:85:D7:28:E1:02:6D:6C:2D:08:41:45:CA:19:40:EB:08:F7:21:B3:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:87:28:25:59:93:49:8f:05:b8:62:d8:df:04:15:5a:ad:c4: 4b:f0:f6:a0:78:b4:d6:64:4d:f4:ec:f4:a9:2f:bf:ad:02:a5: c2:8a:5d:dc:f8:c2:56:2b:fa:e4:38:3b:20:41:88:e5:26:43: bc:ff:25:80:93:19:9f:88:e6:08:42:12:26:4d:f7:f9:88:51: a9:92:ba:2c:f5:e5:3e:ed:eb:11:7a:e7:18:6b:e2:bb:e3:33: 52:1b:ba:44:81:93:9c:a3:14:06:8d:72:f9:92:f1:9c:ee:6e: 9e:4d:78:c9:16:7d:1a:93:0b:ed:8b:ae:59:44:ea:a5:3f:1b: 52:5b:16:4c:42:0b:11:3e:dc:93:42:f2:09:2c:c5:a5:47:1c: ae:e4:d8:b1:ea:d6:66:8d:cf:cd:95:ca:34:46:40:ba:43:e7: c4:71:d5:6f:25:38:a5:30:3f:83:84:22:5e:95:55:6a:63:83: d9:3c:c0:8d:c9:de:81:1e:f7:af:5e:4e:c1:b5:35:73:31:23: f1:9d:8f:19:75:ac:32:cb:14:d2:4c:64:16:e2:ad:9f:48:7f: ab:9f:d9:3e:16:ef:9b:c5:d3:f4:e1:29:d7:ce:f9:e2:46:91: b4:51:23:b1:ca:ce:3f:01:c9:a2:2e:7b:f0:27:9b:db:8d:54: e2:7f:7f:5b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEltH2feOoEVWMgWdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmJlOTdhNjctMDk3My00YmZhLTkzNGQtNjI4ZTAzMzRi NzA1MB4XDTI1MDQwNTE1MDAwN1oXDTI1MDQwODE1MDAwMFowLzEtMCsGA1UEAxMk NGQ4NDBjNjItYzdkOS00M2FiLThlODktODgxMTRiNmZhNWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtn5ERnvFNPzsrLTVAJ1x+qI4DdTJ1ep80t+m mht9gIH2Op5638gZSW21d6qw8FEYkbfvXDEDTtM3OkKH6+CKp8aj6woDcsK4J70L aA8NUQeMN+oQTisqQo6ZAqelLQMvmRRK8dAN30+g0S6Av0HUsUh0T/9nhYzaGgKz YikCPtNAkGH3gF8IqNvGz8/jBKxMg6cmscSvJGHcaZft0C5M07zCrrti+PMKHLvM NkBIAQdOn+QWwtlEdJoYxFeOh14cCcTAC3NQ49tuGiNeojtdHDWW/+1lYnG2tTfR vVW7gSO93XkdpI6VpyWvOjiP10avA0GMmlyeOAesZfsNbk+L4wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPwgaLE89pqGglFqj4VNFPlqkXEOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iYmU5 N2E2Ny0wOTczLTRiZmEtOTM0ZC02MjhlMDMzNGI3MDUvYmJlOTdhNjctMDk3My00 YmZhLTkzNGQtNjI4ZTAzMzRiNzA1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYmJlOTdhNjctMDk3My00YmZhLTkz NGQtNjI4ZTAzMzRiNzA1L2JiZTk3YTY3LTA5NzMtNGJmYS05MzRkLTYyOGUwMzM0 YjcwNS5jcmwwHwYDVR0jBBgwFoAUhdco4QJtbC0IQUXKGUDrCPchs+4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iYmU5N2E2Ny0wOTczLTRiZmEtOTM0ZC02Mjhl MDMzNGI3MDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBmhyglWZNJjwW4YtjfBBVa rcRL8PageLTWZE307PSpL7+tAqXCil3c+MJWK/rkODsgQYjlJkO8/yWAkxmfiOYI QhImTff5iFGpkros9eU+7esReucYa+K74zNSG7pEgZOcoxQGjXL5kvGc7m6eTXjJ Fn0akwvti65ZROqlPxtSWxZMQgsRPtyTQvIJLMWlRxyu5Nix6tZmjc/Nlco0RkC6 Q+fEcdVvJTilMD+DhCJelVVqY4PZPMCNyd6BHvevXk7BtTVzMSPxnY8ZdawyyxTS TGQW4q2fSH+rn9k+Fu+bxdP04SnXzvniRpG0USOxys4/AcmiLnvwJ5vbjVTif39b -----END CERTIFICATE-----Generated at Sat Apr 5 22:31:00 2025 by rpki-client