$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.mft File: 4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.mft (raw, json) Hash identifier: xQ+vWBj7NiEobHoR+kKa2WER569huPOKBRZL/IqV5sI= Subject key identifier: 9B:93:46:48:39:31:57:1C:90:49:07:E3:B8:E3:D1:17:AC:CB:CD:EE Authority key identifier: 8B:18:D5:1E:6B:A2:D7:59:38:10:5B:CE:FB:79:DE:97:F9:62:91:7D Certificate issuer: /CN=4cfcba74-1157-44e6-a1e9-7f4d4d9218d9 Certificate serial: 010D0C9F43285849AA4ED6B5CA194032958A6470 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.mft Manifest number: 010D0C9F4328584073A85627225FC02B6AB5B084 Signing time: Sun 27 Apr 2025 13:00:03 +0000 Manifest this update: Sun 27 Apr 2025 13:00:03 +0000 Manifest next update: Wed 30 Apr 2025 13:00:00 +0000 Files and hashes: 1: 3c47eee4-6fed-3277-b5b3-e08e64dcae2f.roa (hash: SJCpsNOOfKJ9qSSkISbsKchdbiSKDbDSjxUQ0XSxBco=) 2: 4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.crl (hash: RALywzuBQfti/XLMW/SyCDKS7QQ5byWGQrWRJAyBCO0=) 3: 5580774b-9bb0-3081-887e-2c3fcd0e2d80.roa (hash: 2td/Xfqfa++gM41f/hwElJuiSzHDsqrDdIM/+PuD3LY=) 4: c1cc6f6b-bf4c-3f76-8b4d-aef14a0b50eb.roa (hash: /5iv+YUO5m2TY33uPlu7k+TbhQNIPn/wN6uJJxqfJac=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4e:d6:b5:ca:19:40:32:95:8a:64:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cfcba74-1157-44e6-a1e9-7f4d4d9218d9 Validity Not Before: Apr 27 13:00:03 2025 GMT Not After : Apr 30 13:00:00 2025 GMT Subject: CN=5d81ce91-fe17-46b9-93dd-d085df0cdfc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ab:6c:4f:73:3e:b8:7c:6d:11:0f:2a:9c:9d: 32:4a:ba:b7:6c:9d:7a:d4:da:27:44:4a:7f:06:72: b2:ba:c2:fc:dd:3c:8e:2c:60:6f:e2:9c:2c:71:fd: d7:27:61:42:90:0d:d7:18:eb:71:73:f6:38:49:0d: 52:8d:a9:21:1a:d3:06:66:5f:86:bc:24:81:a7:54: 91:3b:05:cf:05:8f:9d:ca:43:a1:96:25:8f:b1:6d: a8:a7:ee:95:7c:be:0b:f7:22:c8:48:c4:10:96:1e: a9:ea:ab:a9:c7:6f:e9:47:c8:fd:7a:80:4f:36:d1: 8a:c4:97:f4:99:f6:4a:15:b2:dd:a5:57:23:9b:b4: db:62:4d:d8:85:ff:81:b5:c2:72:31:e5:f8:fc:99: 32:1c:79:f5:a1:f9:d3:ed:95:b6:20:e7:04:f2:c1: c8:c2:37:84:93:41:96:d0:2a:68:cb:48:f8:65:0c: 7b:ba:c7:dc:1e:f8:66:42:6c:6a:48:f0:da:fe:24: 02:e1:5b:74:7c:5b:d0:58:0a:b5:e0:4c:a3:44:60: 37:70:60:5f:ba:a5:b2:b3:45:b1:8b:2d:a2:1d:d9: f8:79:70:85:9b:23:50:f6:0b:fa:e9:a1:9e:6d:73: 43:db:f4:c6:28:c3:e0:bb:fe:d2:32:80:ab:49:07: d2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:93:46:48:39:31:57:1C:90:49:07:E3:B8:E3:D1:17:AC:CB:CD:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.crl X509v3 Authority Key Identifier: keyid:8B:18:D5:1E:6B:A2:D7:59:38:10:5B:CE:FB:79:DE:97:F9:62:91:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:16:7b:57:cb:f5:ce:b4:ea:81:b3:a8:aa:39:fa:4d:68:3d: 54:fe:8d:54:fa:b5:4d:9e:78:a7:de:46:62:b3:dd:14:4a:dc: 05:c1:a6:9c:06:0e:fd:67:45:95:f0:2a:cf:80:7e:b3:6d:37: 13:af:bf:1d:26:fd:b4:44:cf:5f:3e:e7:06:de:45:4c:d9:89: fa:a9:bc:cb:61:ac:6d:58:57:81:56:18:11:39:78:fa:15:71: 4b:b4:35:54:73:80:8b:f2:00:fc:9e:26:d1:fa:48:dc:33:76: 86:30:c9:d0:13:54:6c:38:6e:5e:9b:b6:e3:09:63:6a:97:63: 45:1d:6b:d9:e9:4f:d2:ab:3f:a2:c8:21:a5:39:5d:9c:03:71: 1c:b0:e7:1c:44:bd:9c:95:3a:4a:69:88:a5:a0:79:e4:30:ff: 33:e7:1a:0d:ea:f2:44:42:59:2a:7c:6a:68:3e:c1:aa:13:4a: 44:16:90:03:72:e8:8a:2e:c8:da:c6:cb:89:15:fe:22:c7:b7: 74:05:6d:ee:45:3b:7a:89:25:d5:d3:ec:ca:85:2f:3a:8f:80: bf:89:0f:63:ce:73:51:8d:f0:48:36:a9:5d:4d:21:92:48:7e: fd:2d:66:31:69:d6:4b:f8:e7:1d:b7:da:64:74:65:2b:bc:6d: d0:c5:6f:2a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmqTta1yhlAMpWKZHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNmY2JhNzQtMTE1Ny00NGU2LWExZTktN2Y0ZDRkOTIx OGQ5MB4XDTI1MDQyNzEzMDAwM1oXDTI1MDQzMDEzMDAwMFowLzEtMCsGA1UEAxMk NWQ4MWNlOTEtZmUxNy00NmI5LTkzZGQtZDA4NWRmMGNkZmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtatsT3M+uHxtEQ8qnJ0ySrq3bJ161NonREp/ BnKyusL83TyOLGBv4pwscf3XJ2FCkA3XGOtxc/Y4SQ1SjakhGtMGZl+GvCSBp1SR OwXPBY+dykOhliWPsW2op+6VfL4L9yLISMQQlh6p6qupx2/pR8j9eoBPNtGKxJf0 mfZKFbLdpVcjm7TbYk3Yhf+BtcJyMeX4/JkyHHn1ofnT7ZW2IOcE8sHIwjeEk0GW 0Cpoy0j4ZQx7usfcHvhmQmxqSPDa/iQC4Vt0fFvQWAq14EyjRGA3cGBfuqWys0Wx iy2iHdn4eXCFmyNQ9gv66aGebXND2/TGKMPgu/7SMoCrSQfSkwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJuTRkg5MVcckEkH47jj0Resy83uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80Y2Zj YmE3NC0xMTU3LTQ0ZTYtYTFlOS03ZjRkNGQ5MjE4ZDkvNGNmY2JhNzQtMTE1Ny00 NGU2LWExZTktN2Y0ZDRkOTIxOGQ5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGNmY2JhNzQtMTE1Ny00NGU2LWEx ZTktN2Y0ZDRkOTIxOGQ5LzRjZmNiYTc0LTExNTctNDRlNi1hMWU5LTdmNGQ0ZDky MThkOS5jcmwwHwYDVR0jBBgwFoAUixjVHmui11k4EFvO+3nel/likX0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80Y2ZjYmE3NC0xMTU3LTQ0ZTYtYTFlOS03ZjRk NGQ5MjE4ZDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBKFntXy/XOtOqBs6iqOfpN aD1U/o1U+rVNnnin3kZis90UStwFwaacBg79Z0WV8CrPgH6zbTcTr78dJv20RM9f PucG3kVM2Yn6qbzLYaxtWFeBVhgROXj6FXFLtDVUc4CL8gD8nibR+kjcM3aGMMnQ E1RsOG5em7bjCWNql2NFHWvZ6U/Sqz+iyCGlOV2cA3EcsOccRL2clTpKaYiloHnk MP8z5xoN6vJEQlkqfGpoPsGqE0pEFpADcuiKLsjaxsuJFf4ix7d0BW3uRTt6iSXV 0+zKhS86j4C/iQ9jznNRjfBINqldTSGSSH79LWYxadZL+Ocdt9pkdGUrvG3QxW8q -----END CERTIFICATE-----Generated at Sun Apr 27 16:40:25 2025 by rpki-client