$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.mft File: 70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.mft (raw, json) Hash identifier: vd6JuV7WEFhGaTUeQ+Mv5Ei5vg+j2VYJgNKVU3NaWS4= Subject key identifier: 3E:72:B0:95:15:FB:AF:53:83:86:0F:9C:AD:DD:0F:7D:E1:42:94:9C Authority key identifier: A9:DF:6F:56:4F:12:7B:EC:EC:ED:56:9C:DF:9C:D4:43:88:55:F4:E0 Certificate issuer: /CN=70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9 Certificate serial: 010D0C9F43285849A854A50FF0AEB66180D13FA8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.mft Manifest number: 010D0C9F43285847291AD335A423E9975CDE91EC Signing time: Sat 26 Apr 2025 20:00:08 +0000 Manifest this update: Sat 26 Apr 2025 20:00:08 +0000 Manifest next update: Mon 28 Apr 2025 20:00:00 +0000 Files and hashes: 1: 1a114236-52d5-3a92-8dfa-95ffbe9bc232.roa (hash: mf7XjBncRBHeNgby1/MQAVwbuN0XbE8T+uVF/suQ1vE=) 2: 4f3e3026-6108-30d1-8cc9-5890c84a38ef.roa (hash: R5+ROWFtafgyhUcbH2Ie3RK37SqvI8KInaf355AWpsA=) 3: 5b22688f-decd-3057-8e30-eee2b25c918d.roa (hash: v5NGl21+OC+a1eVzamZSa6QQy+1xpIcNsf9KXWVnWSo=) 4: 70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.crl (hash: ZNPQxO1hmcl5nQOpPC9hCPML2MklBivlXWDDCqw2E8M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:54:a5:0f:f0:ae:b6:61:80:d1:3f:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9 Validity Not Before: Apr 26 20:00:08 2025 GMT Not After : Apr 28 20:00:00 2025 GMT Subject: CN=de299c2b-e568-4da7-9128-6f37db23ee6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ad:6d:18:33:61:f2:af:87:19:d9:36:59:30: e6:13:a5:d8:ce:cc:cb:64:d4:7d:e8:ae:f3:77:3a: de:5c:a1:3c:e1:36:e7:2a:a0:9b:14:85:ae:c3:98: af:71:8a:b9:a8:54:30:b8:b7:2e:82:39:9a:fb:4a: fc:4b:45:69:69:7d:94:81:e6:c4:e1:c8:ad:94:09: 8e:92:0e:cc:76:e1:10:e6:ee:a7:45:49:48:2e:03: 9e:13:bd:4b:f1:d2:72:0b:cf:37:ee:b0:ed:7a:ef: 1b:36:38:26:77:86:89:41:b5:e9:16:a7:3e:b0:65: 20:d0:80:d5:b4:7f:39:64:19:68:4b:8d:59:61:60: d0:4f:99:e1:ee:f1:67:28:4e:bf:b9:91:42:30:42: 62:16:bf:d3:49:e2:18:8c:ab:7f:0c:08:c9:b1:93: 30:87:67:95:33:9a:4d:3a:c0:6d:3f:f0:61:ee:4c: da:63:b7:13:a3:0e:16:5b:47:f0:c0:71:04:0d:a6: f0:cc:a0:13:df:4c:0b:d6:78:6d:db:3d:70:c8:e1: c3:b5:20:ba:5b:4a:c0:bf:b0:34:10:22:10:58:51: 51:57:cb:a0:41:7f:82:a7:24:2f:35:39:fc:25:9e: de:8f:7d:3a:de:68:ae:89:24:45:3c:3e:b8:bf:ce: 45:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:72:B0:95:15:FB:AF:53:83:86:0F:9C:AD:DD:0F:7D:E1:42:94:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.crl X509v3 Authority Key Identifier: keyid:A9:DF:6F:56:4F:12:7B:EC:EC:ED:56:9C:DF:9C:D4:43:88:55:F4:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:88:7d:3d:2e:b1:7f:c2:78:48:bb:4e:d6:03:30:ea:3d:40: 12:59:3c:cc:a9:2b:38:f2:74:04:4c:4c:a2:a0:9c:c0:35:19: ae:76:91:a6:98:82:c4:fe:57:04:ad:4d:fe:eb:e8:f7:c0:19: 7d:c4:0e:be:51:92:91:da:10:b7:86:21:c6:ea:2e:80:58:af: 49:2b:0f:e3:7b:60:14:0e:ee:71:7e:2a:8f:fb:c6:d8:d5:2c: 76:c2:47:90:5a:0f:72:ec:05:71:eb:0f:07:99:45:e6:b1:97: 70:51:7c:8d:3d:0b:14:79:6d:58:ac:43:97:e2:01:a4:28:ed: 8b:df:a5:8f:6e:bd:a9:52:56:15:1a:07:8d:29:80:20:2a:09: a7:ae:60:0a:ad:77:a7:30:c8:ec:c5:34:c2:32:55:1f:0c:82: d4:2e:b2:a5:4f:a5:fd:1e:39:93:39:36:1a:f1:1d:43:ea:05: f1:83:79:a7:0d:4a:21:e4:21:43:77:e7:be:54:16:ca:d5:3e: 9a:e5:e8:2e:ea:e8:91:c9:1f:3d:e2:51:72:92:d3:6a:bc:92: 92:ca:83:e7:cf:2e:2c:f3:f4:85:5f:38:f8:13:8b:9a:85:54: 2e:f5:06:65:ba:96:0b:1a:64:13:84:c6:b0:32:09:0f:38:42: 32:be:e8:5d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmoVKUP8K62YYDRP6gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBiY2JkNjgtNDFkNi00YTVhLThkMjgtMWI5YTlhNGM1 ZWE5MB4XDTI1MDQyNjIwMDAwOFoXDTI1MDQyODIwMDAwMFowLzEtMCsGA1UEAxMk ZGUyOTljMmItZTU2OC00ZGE3LTkxMjgtNmYzN2RiMjNlZTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy61tGDNh8q+HGdk2WTDmE6XYzszLZNR96K7z dzreXKE84TbnKqCbFIWuw5ivcYq5qFQwuLcugjma+0r8S0VpaX2UgebE4citlAmO kg7MduEQ5u6nRUlILgOeE71L8dJyC8837rDteu8bNjgmd4aJQbXpFqc+sGUg0IDV tH85ZBloS41ZYWDQT5nh7vFnKE6/uZFCMEJiFr/TSeIYjKt/DAjJsZMwh2eVM5pN OsBtP/Bh7kzaY7cTow4WW0fwwHEEDabwzKAT30wL1nht2z1wyOHDtSC6W0rAv7A0 ECIQWFFRV8ugQX+CpyQvNTn8JZ7ej3063miuiSRFPD64v85FZQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFD5ysJUV+69Tg4YPnK3dD33hQpScMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83MGJj YmQ2OC00MWQ2LTRhNWEtOGQyOC0xYjlhOWE0YzVlYTkvNzBiY2JkNjgtNDFkNi00 YTVhLThkMjgtMWI5YTlhNGM1ZWE5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzBiY2JkNjgtNDFkNi00YTVhLThk MjgtMWI5YTlhNGM1ZWE5LzcwYmNiZDY4LTQxZDYtNGE1YS04ZDI4LTFiOWE5YTRj NWVhOS5jcmwwHwYDVR0jBBgwFoAUqd9vVk8Se+zs7Vac35zUQ4hV9OAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83MGJjYmQ2OC00MWQ2LTRhNWEtOGQyOC0xYjlh OWE0YzVlYTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCWiH09LrF/wnhIu07WAzDq PUASWTzMqSs48nQETEyioJzANRmudpGmmILE/lcErU3+6+j3wBl9xA6+UZKR2hC3 hiHG6i6AWK9JKw/je2AUDu5xfiqP+8bY1Sx2wkeQWg9y7AVx6w8HmUXmsZdwUXyN PQsUeW1YrEOX4gGkKO2L36WPbr2pUlYVGgeNKYAgKgmnrmAKrXenMMjsxTTCMlUf DILULrKlT6X9HjmTOTYa8R1D6gXxg3mnDUoh5CFDd+e+VBbK1T6a5egu6uiRyR89 4lFyktNqvJKSyoPnzy4s8/SFXzj4E4uahVQu9QZlupYLGmQThMawMgkPOEIyvuhd -----END CERTIFICATE-----Generated at Sun Apr 27 17:57:07 2025 by rpki-client