$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.mft File: 2e69e55d-3baf-41e6-9e67-bbe5ed888be9.mft (raw, json) Hash identifier: SBJGjOGscBy/kpcagZ2d0qwdhrP2QATG3yzBaO00lzc= Subject key identifier: D0:21:4F:D4:E4:05:BE:13:43:8A:35:93:6F:68:FA:78:EC:8C:FC:AF Authority key identifier: B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B Certificate issuer: /CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9 Certificate serial: 010D0C9F43285849ABD2FEAA4C8F300925054980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.mft Manifest number: 010D0C9F4328584073A837989C436B4363A20D88 Signing time: Mon 28 Apr 2025 02:02:07 +0000 Manifest this update: Mon 28 Apr 2025 02:02:07 +0000 Manifest next update: Wed 30 Apr 2025 02:00:00 +0000 Files and hashes: 1: 2a1659dd-d59c-3990-9ca4-28f1c90ccdc9.roa (hash: idKPKmVRQ/TOSWSGT2PH1KiQc3/TgFHvObgqtJg5/1Q=) 2: 2e69e55d-3baf-41e6-9e67-bbe5ed888be9.crl (hash: jrglGmhM3fGo8wSIp1Wv/5h/vn31UrKd+V3qeSpxP4g=) 3: 5fa6e3d9-d618-3d95-9a11-af6760164377.roa (hash: D9mo2U64M3MMAqRbLb2P15cjG5ATaMiSTQiT9O5SXOg=) 4: 7ffc82e3-99fe-35ea-8f52-7dd9d98ed601.roa (hash: ZQmmlXVz5FX+T8aBdDwUjqDUrHgDWoqnt63JplBKRDE=) 5: cf7b1268-ef8f-34ed-9a98-703dd560e2ee.roa (hash: gXoqK1qR21hZXkdKYgJqYIJ5inc2EeYGn2vIBTKSOB8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:d2:fe:aa:4c:8f:30:09:25:05:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9 Validity Not Before: Apr 28 02:02:07 2025 GMT Not After : Apr 30 02:00:00 2025 GMT Subject: CN=2592644c-3e7a-4a17-8ba7-7ac2896756df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a0:ac:90:73:3b:33:2e:18:95:86:1a:a7:ea: 0c:8f:83:65:83:a5:a7:f9:a5:d2:92:20:6e:4e:1d: fb:76:de:4b:5e:0b:94:81:e3:71:3b:6e:b1:e4:93: b5:d3:b3:f7:30:4a:a6:67:3f:43:6b:86:d6:6d:62: 27:f7:0c:43:aa:63:0e:c9:5d:80:67:73:b9:fc:42: 44:30:af:a0:6f:fb:4a:8c:43:f6:12:af:6c:27:83: ca:03:e3:98:f2:49:a8:69:b5:a1:fe:8d:fb:6e:51: 47:38:29:f0:54:6e:f7:46:e1:04:ad:18:f6:62:66: 23:2b:50:88:06:14:90:37:13:cf:57:67:43:23:67: a2:76:2b:7a:bf:3f:f3:48:32:b3:4a:6a:37:da:2b: 2e:35:37:14:ab:b0:52:f3:78:d3:05:08:e1:cc:e9: 8e:09:14:74:29:b4:d2:e9:6b:d4:fb:50:31:f2:0f: f6:55:bf:eb:7e:c9:0c:c4:f2:dc:71:4b:16:bb:c9: 17:bc:dd:4d:73:29:b1:a9:73:d4:37:fc:26:b7:ff: a4:f9:0a:4e:7c:ab:1b:ab:e5:da:44:96:14:86:3f: f2:b4:bd:7c:f5:32:0b:ac:c7:ef:af:41:03:27:a2: f5:cb:cf:f5:54:42:8f:70:8c:30:e3:10:f3:88:a6: ab:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:21:4F:D4:E4:05:BE:13:43:8A:35:93:6F:68:FA:78:EC:8C:FC:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.crl X509v3 Authority Key Identifier: keyid:B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:1b:93:f1:46:3b:de:93:95:a2:36:e6:f0:be:da:c8:c5:98: 00:8f:ea:07:fe:df:ce:3e:c0:48:fa:4a:07:5b:3a:0d:c7:c1: 18:be:d8:6f:80:d0:91:37:df:0f:a1:a0:2d:c3:1c:2a:68:5c: ef:02:38:50:52:2f:b6:9a:d0:07:0c:b3:f2:4c:f2:8f:67:f8: dd:30:94:9b:f7:ee:89:8e:00:e8:f0:65:89:61:e7:61:06:04: f6:20:59:da:4f:58:0b:a5:a7:09:e2:bf:51:d3:58:b1:00:dd: 10:e3:21:9d:37:16:d4:b7:a1:fa:1f:0c:1a:f0:7d:f0:73:55: 45:1f:b5:53:08:a3:bd:13:92:48:9d:76:bc:56:6f:be:a9:75: bf:34:34:15:f2:9a:86:06:5e:ec:45:41:29:5f:63:5d:7d:18: 09:c9:89:12:a9:b3:49:e1:3b:08:3d:d1:dd:ce:85:35:7a:83: 7d:62:43:01:9c:42:8f:0a:b1:fc:be:e0:48:42:f0:77:f7:54: f6:db:fc:66:97:9a:6e:ef:ae:48:ea:a0:c7:fe:c1:7d:77:08: e8:57:6c:61:59:3f:8e:7c:52:42:20:13:40:95:ff:55:fd:6c: 24:03:97:e3:e9:b1:54:f4:a4:08:c2:90:c6:9e:01:37:45:7c: f8:a6:92:55 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmr0v6qTI8wCSUFSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU2OWU1NWQtM2JhZi00MWU2LTllNjctYmJlNWVkODg4 YmU5MB4XDTI1MDQyODAyMDIwN1oXDTI1MDQzMDAyMDAwMFowLzEtMCsGA1UEAxMk MjU5MjY0NGMtM2U3YS00YTE3LThiYTctN2FjMjg5Njc1NmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6CskHM7My4YlYYap+oMj4Nlg6Wn+aXSkiBu Th37dt5LXguUgeNxO26x5JO107P3MEqmZz9Da4bWbWIn9wxDqmMOyV2AZ3O5/EJE MK+gb/tKjEP2Eq9sJ4PKA+OY8kmoabWh/o37blFHOCnwVG73RuEErRj2YmYjK1CI BhSQNxPPV2dDI2eidit6vz/zSDKzSmo32isuNTcUq7BS83jTBQjhzOmOCRR0KbTS 6WvU+1Ax8g/2Vb/rfskMxPLccUsWu8kXvN1NcymxqXPUN/wmt/+k+QpOfKsbq+Xa RJYUhj/ytL189TILrMfvr0EDJ6L1y8/1VEKPcIww4xDziKarfQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNAhT9TkBb4TQ4o1k29o+njsjPyvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yZTY5 ZTU1ZC0zYmFmLTQxZTYtOWU2Ny1iYmU1ZWQ4ODhiZTkvMmU2OWU1NWQtM2JhZi00 MWU2LTllNjctYmJlNWVkODg4YmU5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmU2OWU1NWQtM2JhZi00MWU2LTll NjctYmJlNWVkODg4YmU5LzJlNjllNTVkLTNiYWYtNDFlNi05ZTY3LWJiZTVlZDg4 OGJlOS5jcmwwHwYDVR0jBBgwFoAUuOVt8qT8p5onhZVWGclu3DiFdDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yZTY5ZTU1ZC0zYmFmLTQxZTYtOWU2Ny1iYmU1 ZWQ4ODhiZTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA+G5PxRjvek5WiNubwvtrI xZgAj+oH/t/OPsBI+koHWzoNx8EYvthvgNCRN98PoaAtwxwqaFzvAjhQUi+2mtAH DLPyTPKPZ/jdMJSb9+6JjgDo8GWJYedhBgT2IFnaT1gLpacJ4r9R01ixAN0Q4yGd NxbUt6H6Hwwa8H3wc1VFH7VTCKO9E5JInXa8Vm++qXW/NDQV8pqGBl7sRUEpX2Nd fRgJyYkSqbNJ4TsIPdHdzoU1eoN9YkMBnEKPCrH8vuBIQvB391T22/xml5pu765I 6qDH/sF9dwjoV2xhWT+OfFJCIBNAlf9V/WwkA5fj6bFU9KQIwpDGngE3RXz4ppJV -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:40 2025 by rpki-client