$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/0dc43efe-e9d9-42d7-9b51-d08600e413fa.mft File: 0dc43efe-e9d9-42d7-9b51-d08600e413fa.mft (raw, json) Hash identifier: ypkjnUuV2qjOd/A3pUwNRIahJioAK4T2AKI+SN25XJg= Subject key identifier: E4:99:67:33:1C:45:C8:4E:12:2A:63:C9:17:3E:0D:CC:41:54:6A:14 Authority key identifier: 31:B3:44:BB:3A:5E:1E:07:49:A0:AC:60:18:D5:52:DF:81:D3:F6:BE Certificate issuer: /CN=0dc43efe-e9d9-42d7-9b51-d08600e413fa Certificate serial: 010D0C9F43285849AB3D1C0C9D39627AB56C8170 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/0dc43efe-e9d9-42d7-9b51-d08600e413fa.mft Manifest number: 010D0C9F4328584073A8262CB43B622B17686963 Signing time: Sun 27 Apr 2025 21:00:07 +0000 Manifest this update: Sun 27 Apr 2025 21:00:07 +0000 Manifest next update: Tue 29 Apr 2025 21:00:00 +0000 Files and hashes: 1: 0dc43efe-e9d9-42d7-9b51-d08600e413fa.crl (hash: GXe6QfmLh63uuSqgpivTlzypvadwor0ZkmIEdRT/B+Y=) 2: 602b30db-e212-3808-abef-978ff1e5a2e5.roa (hash: Y+M5YkKznlFRquOI/20fBsHJkUShLn6Lm1gJUyCd62c=) 3: 6700284b-4b85-318a-8bb1-21ca06ce50e1.roa (hash: Xs9Ss4bj2ryHKVLqZZEXLFXfkUTTop2aPy5emmjvnmQ=) 4: 730e6a0c-a4cc-3ed1-bfcb-eb43b653fd7c.roa (hash: g7yfEamwlS4tNr+L3IRIb/x1Qu8YlbED82I6FCjxNy8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/0dc43efe-e9d9-42d7-9b51-d08600e413fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/0dc43efe-e9d9-42d7-9b51-d08600e413fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:3d:1c:0c:9d:39:62:7a:b5:6c:81:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dc43efe-e9d9-42d7-9b51-d08600e413fa Validity Not Before: Apr 27 21:00:07 2025 GMT Not After : Apr 29 21:00:00 2025 GMT Subject: CN=4c2fab9d-2c41-43fc-9bf3-54d3bd92e7b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:49:4b:ff:17:c6:1b:85:05:78:33:d9:4c:d2: 91:40:a4:8b:35:f7:40:56:65:17:4a:55:a9:39:99: 08:d1:fd:f3:6c:6c:1b:57:e1:a2:95:44:f4:52:fe: 62:2e:16:8f:6a:c9:7a:2a:be:3a:69:30:aa:20:0a: e1:dd:28:9e:7a:f1:e7:57:73:8b:fd:19:04:fd:46: a7:da:41:5b:e5:6f:0b:70:53:9b:e3:4d:02:86:6d: a1:24:8f:a5:a6:08:45:fc:ed:17:42:3b:5a:8c:08: 24:de:c0:4f:ac:51:69:e4:c8:39:e5:d4:98:4c:f1: 4f:dc:af:c2:32:4e:ff:dc:0e:55:51:42:a2:10:10: 8e:97:fc:6e:b0:88:8b:e9:aa:40:1b:8f:26:94:19: f4:2a:da:31:de:3f:df:2f:81:aa:ac:cc:7c:d0:b2: 9f:9c:7e:84:5d:47:e5:2e:92:b0:75:95:ab:d4:d0: 0b:e3:3d:16:a7:6c:af:b7:1c:3a:1a:1b:1e:ac:a0: f5:6f:f5:67:aa:73:38:cf:ba:4e:d3:55:41:bf:6a: 30:72:fe:ab:0f:62:d7:db:40:20:06:8a:d0:ff:3b: 55:9a:c8:1b:78:18:33:14:64:03:16:ff:19:cc:a2: 6f:36:c1:6c:e6:69:73:b0:ca:4c:ef:25:75:e3:77: e7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:99:67:33:1C:45:C8:4E:12:2A:63:C9:17:3E:0D:CC:41:54:6A:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/0dc43efe-e9d9-42d7-9b51-d08600e413fa.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/0dc43efe-e9d9-42d7-9b51-d08600e413fa.crl X509v3 Authority Key Identifier: keyid:31:B3:44:BB:3A:5E:1E:07:49:A0:AC:60:18:D5:52:DF:81:D3:F6:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:94:1e:ff:d2:39:3a:11:72:88:f4:d3:99:53:ec:31:53:8d: 78:ed:ef:f7:a2:91:ff:21:f9:5f:77:9d:cd:d1:79:6a:9e:87: bb:b8:c2:cc:06:3b:9f:0c:0a:84:c4:6e:06:3e:be:81:3c:a8: b1:a5:85:84:7a:f1:b3:bf:68:d2:38:0d:7a:8c:15:b5:11:a0: 86:a4:9e:d2:25:5e:99:7e:7a:34:c5:30:df:2a:dc:17:4c:04: 3e:f7:0f:82:c5:f3:17:7f:32:b3:c2:e8:e6:3a:89:da:88:e5: 25:ae:26:9f:6a:01:ef:c3:73:c5:3c:c4:58:e7:db:fc:e2:2d: df:df:d9:ea:50:a6:c9:60:37:12:72:f0:3d:f3:a9:ec:cb:9d: 08:4c:57:19:a3:27:23:9e:86:a1:a8:d2:9b:e4:99:6a:18:04: 76:06:8b:91:df:d3:2b:c4:b3:94:c5:c2:22:e9:51:82:5d:6c: 45:bf:1a:9d:96:82:46:ee:02:6d:0b:f9:86:a1:d9:e8:e3:9b: 9c:f2:c8:70:26:a8:dc:9d:6a:ed:a3:65:3b:99:e5:33:a0:30: 57:8a:e2:fa:49:b1:6e:25:c2:ab:12:9b:30:eb:b9:db:99:c8: 17:d9:1e:b8:6d:ce:ba:0c:73:30:6c:f8:83:95:c4:57:de:97: fe:bd:fa:9d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmrPRwMnTlierVsgXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRjNDNlZmUtZTlkOS00MmQ3LTliNTEtZDA4NjAwZTQx M2ZhMB4XDTI1MDQyNzIxMDAwN1oXDTI1MDQyOTIxMDAwMFowLzEtMCsGA1UEAxMk NGMyZmFiOWQtMmM0MS00M2ZjLTliZjMtNTRkM2JkOTJlN2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhElL/xfGG4UFeDPZTNKRQKSLNfdAVmUXSlWp OZkI0f3zbGwbV+GilUT0Uv5iLhaPasl6Kr46aTCqIArh3SieevHnV3OL/RkE/Uan 2kFb5W8LcFOb400Chm2hJI+lpghF/O0XQjtajAgk3sBPrFFp5Mg55dSYTPFP3K/C Mk7/3A5VUUKiEBCOl/xusIiL6apAG48mlBn0Ktox3j/fL4GqrMx80LKfnH6EXUfl LpKwdZWr1NAL4z0Wp2yvtxw6GhserKD1b/VnqnM4z7pO01VBv2owcv6rD2LX20Ag BorQ/ztVmsgbeBgzFGQDFv8ZzKJvNsFs5mlzsMpM7yV143fnBwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOSZZzMcRchOEipjyRc+DcxBVGoUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wZGM0 M2VmZS1lOWQ5LTQyZDctOWI1MS1kMDg2MDBlNDEzZmEvMGRjNDNlZmUtZTlkOS00 MmQ3LTliNTEtZDA4NjAwZTQxM2ZhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGRjNDNlZmUtZTlkOS00MmQ3LTli NTEtZDA4NjAwZTQxM2ZhLzBkYzQzZWZlLWU5ZDktNDJkNy05YjUxLWQwODYwMGU0 MTNmYS5jcmwwHwYDVR0jBBgwFoAUMbNEuzpeHgdJoKxgGNVS34HT9r4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wZGM0M2VmZS1lOWQ5LTQyZDctOWI1MS1kMDg2 MDBlNDEzZmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAelB7/0jk6EXKI9NOZU+wx U4147e/3opH/Iflfd53N0Xlqnoe7uMLMBjufDAqExG4GPr6BPKixpYWEevGzv2jS OA16jBW1EaCGpJ7SJV6Zfno0xTDfKtwXTAQ+9w+CxfMXfzKzwujmOonaiOUlriaf agHvw3PFPMRY59v84i3f39nqUKbJYDcScvA986nsy50ITFcZoycjnoahqNKb5Jlq GAR2BouR39MrxLOUxcIi6VGCXWxFvxqdloJG7gJtC/mGodno45uc8shwJqjcnWrt o2U7meUzoDBXiuL6SbFuJcKrEpsw67nbmcgX2R64bc66DHMwbPiDlcRX3pf+vfqd -----END CERTIFICATE-----Generated at Mon Apr 28 16:45:13 2025 by rpki-client