$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.mft File: 5161da6e-b7c6-48c9-a8c0-935b5c591083.mft (raw, json) Hash identifier: 22lQKt8/umOhLdfYi+zSDOB6SlSWDMhSp9we5SvSmrU= Subject key identifier: 87:69:4A:FC:88:D7:7A:39:91:CD:DF:8C:84:4B:36:15:74:03:41:B8 Authority key identifier: 8B:50:F6:E6:66:35:AE:7A:90:FE:2B:07:D5:15:F7:CB:FA:39:35:03 Certificate issuer: /CN=5161da6e-b7c6-48c9-a8c0-935b5c591083 Certificate serial: 010D0C9F43285849A72AD19F167D06722EB29A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.mft Manifest number: 010D0C9F4328584073A84CAE453C3165B088441D Signing time: Sat 26 Apr 2025 10:00:03 +0000 Manifest this update: Sat 26 Apr 2025 10:00:03 +0000 Manifest next update: Mon 28 Apr 2025 10:00:00 +0000 Files and hashes: 1: 5161da6e-b7c6-48c9-a8c0-935b5c591083.crl (hash: QCQASF0vIKBGHLJza2d2nVIleUKRh4QsKdz6+mHP0Gc=) 2: ae285376-dfc4-32db-9a1c-cfac9e961d90.roa (hash: +NPgvszHo/w0AWYcv6WqKU/K27d51yIQ+x7ya483hv4=) 3: af0f2f5c-7f07-33be-bd01-a7960233392f.roa (hash: IBR4WM751JuTtNilJUcetANBrD6RPK4yURoQ231ieaU=) 4: c06b68a3-2e52-3ef4-a048-29fac226c21c.roa (hash: /8q7wGHBWdQQIBQkGqLRch+lmpEV52xpLinU4MO0OPI=) 5: d1f459e0-e649-32e0-847d-1f51c79740a5.roa (hash: 5OLdjucowecdef+hTQk+/2SdYxVF9HgH7PeHL3/ZWG4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:2a:d1:9f:16:7d:06:72:2e:b2:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5161da6e-b7c6-48c9-a8c0-935b5c591083 Validity Not Before: Apr 26 10:00:03 2025 GMT Not After : Apr 28 10:00:00 2025 GMT Subject: CN=487585b5-abb6-4c20-9c8d-836d5bd45804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3c:2b:51:43:fc:ec:00:7f:90:fb:42:71:09: 63:b1:79:5f:67:4b:87:23:5a:d2:08:9d:fb:84:5f: 62:fb:79:4c:23:b8:e5:ab:74:b8:98:e9:c1:fd:36: 1d:5e:76:a4:d9:66:11:c2:15:a3:8b:42:d7:b1:e7: 84:e4:28:ca:f4:2d:7b:79:d9:af:c1:dc:80:1c:2d: 0f:ac:1f:1b:ed:b8:3f:9c:36:16:7a:3d:ca:5f:32: 8c:a0:91:83:e4:21:fb:26:d4:ec:b4:1c:e8:28:d2: 7c:47:9c:6b:19:da:5b:03:51:bf:99:67:1f:17:d0: 68:6d:98:e0:b7:26:70:5d:7e:65:76:d7:86:85:99: 4a:da:be:17:6f:36:2c:b4:ca:39:fd:74:5c:77:d9: b6:8c:2d:fe:ca:26:c4:c3:df:6f:7b:42:e3:72:74: b0:e9:cf:70:a6:7c:0b:7d:11:f6:f6:27:20:7f:a2: d6:db:e9:c9:05:e8:f0:78:6d:83:27:0a:51:3c:13: af:15:98:1e:55:a6:47:d9:ce:1d:68:49:e3:fa:67: ea:a2:a2:d8:b0:d2:2d:27:af:ac:4c:a9:6c:fa:7a: 21:12:30:1c:c2:9e:c7:fd:31:07:db:db:3b:81:02: 5f:d0:61:f5:e5:0c:79:9a:48:5b:36:bb:1d:83:83: b4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:69:4A:FC:88:D7:7A:39:91:CD:DF:8C:84:4B:36:15:74:03:41:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.crl X509v3 Authority Key Identifier: keyid:8B:50:F6:E6:66:35:AE:7A:90:FE:2B:07:D5:15:F7:CB:FA:39:35:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:5a:04:84:34:d2:af:0e:8b:c9:2a:6a:fb:98:ab:b3:d3:05: 65:8a:da:fc:24:d8:32:6a:b7:90:cc:64:54:75:2a:11:f9:25: eb:5d:8f:79:25:07:e4:fe:b5:2a:f1:45:f0:02:12:a5:7a:99: f4:2c:74:a2:1b:e8:76:e6:d5:36:ab:9d:dd:ec:78:18:6b:5e: 31:f8:22:3c:da:9f:58:3d:80:d5:db:0f:58:1f:da:1f:da:6b: 9c:26:be:3f:f0:bd:bc:9a:cb:27:0a:51:32:66:d6:f0:5a:f0: 27:e9:91:94:b8:80:c7:a1:3d:cb:6c:77:03:fa:04:68:23:5d: 6f:fa:e4:c3:d5:18:4b:2a:81:e7:19:c7:ea:ae:ec:c6:5b:d2: db:aa:81:89:c1:d0:06:0f:d6:24:16:75:7e:3b:ee:9e:0e:23: de:c8:14:c9:68:78:9c:bc:ee:f6:f9:c1:44:96:d4:b8:71:c4: 80:c5:6a:28:21:0a:48:34:3c:ff:7b:1a:4b:cc:05:e9:c4:05: 01:73:18:9b:fa:c4:d4:cb:e9:6c:b8:f1:78:23:f2:a9:be:6a: 1d:f7:2a:35:4d:59:ad:18:9d:84:51:89:c8:b6:39:0e:40:1d: c2:59:7f:5c:45:48:21:9e:d0:f9:e1:4e:34:93:dd:bb:eb:52: 0b:34:0e:1f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmnKtGfFn0Gci6ymoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE2MWRhNmUtYjdjNi00OGM5LWE4YzAtOTM1YjVjNTkx MDgzMB4XDTI1MDQyNjEwMDAwM1oXDTI1MDQyODEwMDAwMFowLzEtMCsGA1UEAxMk NDg3NTg1YjUtYWJiNi00YzIwLTljOGQtODM2ZDViZDQ1ODA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzwrUUP87AB/kPtCcQljsXlfZ0uHI1rSCJ37 hF9i+3lMI7jlq3S4mOnB/TYdXnak2WYRwhWji0LXseeE5CjK9C17edmvwdyAHC0P rB8b7bg/nDYWej3KXzKMoJGD5CH7JtTstBzoKNJ8R5xrGdpbA1G/mWcfF9BobZjg tyZwXX5ldteGhZlK2r4XbzYstMo5/XRcd9m2jC3+yibEw99ve0LjcnSw6c9wpnwL fRH29icgf6LW2+nJBejweG2DJwpRPBOvFZgeVaZH2c4daEnj+mfqoqLYsNItJ6+s TKls+nohEjAcwp7H/TEH29s7gQJf0GH15Qx5mkhbNrsdg4O0ZQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIdpSvyI13o5kc3fjIRLNhV0A0G4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MTYx ZGE2ZS1iN2M2LTQ4YzktYThjMC05MzViNWM1OTEwODMvNTE2MWRhNmUtYjdjNi00 OGM5LWE4YzAtOTM1YjVjNTkxMDgzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTE2MWRhNmUtYjdjNi00OGM5LWE4 YzAtOTM1YjVjNTkxMDgzLzUxNjFkYTZlLWI3YzYtNDhjOS1hOGMwLTkzNWI1YzU5 MTA4My5jcmwwHwYDVR0jBBgwFoAUi1D25mY1rnqQ/isH1RX3y/o5NQMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MTYxZGE2ZS1iN2M2LTQ4YzktYThjMC05MzVi NWM1OTEwODMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAJWgSENNKvDovJKmr7mKuz 0wVlitr8JNgyareQzGRUdSoR+SXrXY95JQfk/rUq8UXwAhKlepn0LHSiG+h25tU2 q53d7HgYa14x+CI82p9YPYDV2w9YH9of2mucJr4/8L28mssnClEyZtbwWvAn6ZGU uIDHoT3LbHcD+gRoI11v+uTD1RhLKoHnGcfqruzGW9LbqoGJwdAGD9YkFnV+O+6e DiPeyBTJaHicvO72+cFEltS4ccSAxWooIQpINDz/expLzAXpxAUBcxib+sTUy+ls uPF4I/Kpvmod9yo1TVmtGJ2EUYnItjkOQB3CWX9cRUghntD54U40k92761ILNA4f -----END CERTIFICATE-----Generated at Sat Apr 26 19:55:27 2025 by rpki-client