$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft File: 28591b95-39d7-4e54-90f3-1339338b842c.mft (raw, json) Hash identifier: r7TarBOBd7LtsZ3oqd5YyTcgWiz4AM+ef1XCC+cOdCE= Subject key identifier: 47:D3:57:CA:69:A8:33:0A:97:60:DE:09:B6:F4:A8:AE:37:86:46:E6 Authority key identifier: FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A Certificate issuer: /CN=28591b95-39d7-4e54-90f3-1339338b842c Certificate serial: 010D0C9F43285849B21A08ECA8DB25F57A778580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft Manifest number: 010D0C9F4328584073A84793D8858966B57162FD Signing time: Wed 30 Apr 2025 08:00:07 +0000 Manifest this update: Wed 30 Apr 2025 08:00:07 +0000 Manifest next update: Fri 02 May 2025 08:00:00 +0000 Files and hashes: 1: 139652f7-af23-334e-a7f9-9e08d724d62f.roa (hash: 6mCtWOrCU7yZSu63p0bi1qdHEPoLLVdEdbp3Yr/l8Zg=) 2: 27626520-245c-33fb-bb99-5dc7d0821da1.roa (hash: YUUsUgxukIJu0+btURfRRwCfb7mZJjDs1IMNbXcN20g=) 3: 28591b95-39d7-4e54-90f3-1339338b842c.crl (hash: jTYb480By4dMZb8qbZey6HytuF5aGsMd3iDfwB1ylY8=) 4: 486cf596-6ac5-320c-b437-e9c1fdb89e8b.roa (hash: BOGeH27lln6FLRP7FyUt/A//9mK5qUZiwGSWq8H+ZXA=) 5: a6469a75-3af9-39ef-ae2f-0b913de50d29.roa (hash: UAypTPiSJ/VIxblHpw8jSIDGuDmipFw7skTw9L7DVCc=) 6: dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa (hash: xD7rWjf84+aZk6zf/llql+XmyZXFND3bh6FN8lSYjQA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b2:1a:08:ec:a8:db:25:f5:7a:77:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28591b95-39d7-4e54-90f3-1339338b842c Validity Not Before: Apr 30 08:00:07 2025 GMT Not After : May 2 08:00:00 2025 GMT Subject: CN=3ad03296-02bc-4735-b155-f6f5216ca9aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:69:6e:1e:21:ec:98:f4:34:2b:f1:95:56:d6: fe:4a:c6:85:76:c2:41:e4:26:0b:53:b0:0c:03:28: eb:f8:c3:69:84:a2:ac:6b:ca:34:ad:be:da:f0:c5: 59:8a:6a:ee:07:2e:c3:1a:2b:d9:b7:09:d7:6c:f2: 93:3a:0f:c8:80:ac:98:83:44:ff:18:4a:40:0f:50: 03:34:08:1c:c4:8e:c5:0a:f9:22:c8:20:48:9d:74: ca:64:98:36:4c:13:33:ab:2a:b5:0a:54:2d:8d:26: 86:2a:b9:bf:1a:5e:9a:ab:bf:6c:62:5b:9b:ea:59: 90:71:5a:c1:8b:4a:0f:7e:9a:a9:02:4a:84:3e:47: 6c:93:d1:c2:cf:9a:72:4b:fb:e1:1e:cb:3f:22:61: 30:2e:0d:4b:80:a3:69:48:7b:a2:0e:f0:a7:d2:3e: f3:b6:4a:5a:e5:b0:71:a1:99:ac:6a:cd:06:12:e2: 33:21:65:5e:02:af:13:a9:84:ea:41:a7:0e:ab:08: f7:ca:72:a5:3b:b9:79:e7:9d:b0:07:33:d5:6d:2b: 09:2a:36:95:cb:68:43:96:77:a9:1f:e1:b1:f5:6c: 87:e1:e9:4d:4b:08:1b:aa:d6:78:8b:0a:70:b1:f9: 21:8c:8a:ff:82:5e:6f:7f:f8:99:e4:e1:e0:fd:3d: 49:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D3:57:CA:69:A8:33:0A:97:60:DE:09:B6:F4:A8:AE:37:86:46:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl X509v3 Authority Key Identifier: keyid:FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:b1:e8:6e:8b:9b:b0:2b:d3:a6:12:e8:c3:ec:d0:3f:16:16: 15:24:89:75:e7:f2:90:9c:76:01:d5:36:99:92:90:72:a2:d9: 51:93:0d:1f:cb:94:73:43:0c:ad:ad:40:8b:16:d0:7d:83:52: 2f:c8:44:9b:8f:c9:43:94:ec:0b:d2:78:4f:ef:ba:67:50:28: 56:7b:5a:d6:84:d1:30:01:64:b3:92:df:d8:8f:3c:70:02:a6: ce:33:f5:f5:f0:df:cc:c0:64:60:f3:80:09:97:02:28:a6:bf: 55:1a:89:df:e5:23:3d:ff:21:27:81:1c:50:8a:cb:80:b4:20: 47:dd:55:ba:d4:69:f8:99:aa:21:e9:a7:02:a3:2d:62:3e:25: 11:ac:e1:07:07:0f:37:01:05:88:1e:3b:71:44:a7:41:5f:f2: ac:57:b4:0a:a6:ff:8d:22:e2:f9:5d:8d:17:0e:07:00:31:f2: 66:2e:62:8b:df:da:6b:bf:bb:0d:a8:55:9d:53:b7:94:94:c2: 48:16:c1:91:98:c8:81:3c:0b:e0:9e:17:a5:c5:b1:8e:e0:9a: fb:b2:6b:0f:f3:24:0a:7a:47:53:35:2c:7e:47:db:9c:47:35: 31:3a:a0:52:42:1f:84:e9:09:f0:70:65:ff:d1:61:ed:f9:04: 0b:2b:8d:41 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmyGgjsqNsl9Xp3hYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg1OTFiOTUtMzlkNy00ZTU0LTkwZjMtMTMzOTMzOGI4 NDJjMB4XDTI1MDQzMDA4MDAwN1oXDTI1MDUwMjA4MDAwMFowLzEtMCsGA1UEAxMk M2FkMDMyOTYtMDJiYy00NzM1LWIxNTUtZjZmNTIxNmNhOWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGluHiHsmPQ0K/GVVtb+SsaFdsJB5CYLU7AM Ayjr+MNphKKsa8o0rb7a8MVZimruBy7DGivZtwnXbPKTOg/IgKyYg0T/GEpAD1AD NAgcxI7FCvkiyCBInXTKZJg2TBMzqyq1ClQtjSaGKrm/Gl6aq79sYlub6lmQcVrB i0oPfpqpAkqEPkdsk9HCz5pyS/vhHss/ImEwLg1LgKNpSHuiDvCn0j7ztkpa5bBx oZmsas0GEuIzIWVeAq8TqYTqQacOqwj3ynKlO7l5552wBzPVbSsJKjaVy2hDlnep H+Gx9WyH4elNSwgbqtZ4iwpwsfkhjIr/gl5vf/iZ5OHg/T1JVwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEfTV8ppqDMKl2DeCbb0qK43hkbmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5 MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5MzM4Yjg0MmMvMjg1OTFiOTUtMzlkNy00 ZTU0LTkwZjMtMTMzOTMzOGI4NDJjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg1OTFiOTUtMzlkNy00ZTU0LTkw ZjMtMTMzOTMzOGI4NDJjLzI4NTkxYjk1LTM5ZDctNGU1NC05MGYzLTEzMzkzMzhi ODQyYy5jcmwwHwYDVR0jBBgwFoAU/hD3fjltydQ3zw/RR1+y/RTGxWowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5 MzM4Yjg0MmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAZsehui5uwK9OmEujD7NA/ FhYVJIl15/KQnHYB1TaZkpByotlRkw0fy5RzQwytrUCLFtB9g1IvyESbj8lDlOwL 0nhP77pnUChWe1rWhNEwAWSzkt/YjzxwAqbOM/X18N/MwGRg84AJlwIopr9VGonf 5SM9/yEngRxQisuAtCBH3VW61Gn4maoh6acCoy1iPiURrOEHBw83AQWIHjtxRKdB X/KsV7QKpv+NIuL5XY0XDgcAMfJmLmKL39prv7sNqFWdU7eUlMJIFsGRmMiBPAvg nhelxbGO4Jr7smsP8yQKekdTNSx+R9ucRzUxOqBSQh+E6QnwcGX/0WHt+QQLK41B -----END CERTIFICATE-----Generated at Wed Apr 30 14:33:35 2025 by rpki-client