$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152/12797d33-d775-45fc-9d2a-a3e7bbe51152.mft File: 12797d33-d775-45fc-9d2a-a3e7bbe51152.mft (raw, json) Hash identifier: d/1bkppBeU5VpxyLu4tpBYtrfrj20yIBED/Kv/JpIfk= Subject key identifier: 31:4A:45:BC:65:49:82:89:82:7F:D4:B5:16:61:61:92:C9:08:37:5B Authority key identifier: 9E:FA:EF:7E:45:43:9E:B6:9C:B0:84:8E:C2:07:C7:A4:26:5B:71:81 Certificate issuer: /CN=12797d33-d775-45fc-9d2a-a3e7bbe51152 Certificate serial: 010D0C9F43285849ACDE00DD50957248A9E32780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152/12797d33-d775-45fc-9d2a-a3e7bbe51152.mft Manifest number: 010D0C9F4328584073A84F6DF615383F4872A771 Signing time: Mon 28 Apr 2025 11:00:07 +0000 Manifest this update: Mon 28 Apr 2025 11:00:07 +0000 Manifest next update: Wed 30 Apr 2025 11:00:00 +0000 Files and hashes: 1: 12797d33-d775-45fc-9d2a-a3e7bbe51152.crl (hash: 1IASmJynSfxHrfPZxZgxMje0uw4ECyAaK3l9O0zWRF4=) 2: 4ea5dc75-2190-35f3-bd26-725aff932395.roa (hash: cXgHR99Vd/JF+S6LdG+FuhItmXZTTRG7nn3fEAxcK1M=) 3: 5d993454-0791-3f69-942d-d641d50ae8c7.roa (hash: t/P+rGf3OKUM5TiqPXqKNIgh7OD21HGbEnjOVQoM1qY=) 4: f09c3f26-10f7-3b2f-b86c-9b92161da077.roa (hash: D1JgLvqMazWBikw+ztWRvLs+pNsVxlC2xR8Q77eUu30=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152/12797d33-d775-45fc-9d2a-a3e7bbe51152.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152/12797d33-d775-45fc-9d2a-a3e7bbe51152.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ac:de:00:dd:50:95:72:48:a9:e3:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12797d33-d775-45fc-9d2a-a3e7bbe51152 Validity Not Before: Apr 28 11:00:07 2025 GMT Not After : Apr 30 11:00:00 2025 GMT Subject: CN=107b4227-d31a-425c-b102-31470745f125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:08:09:d2:f2:4c:f2:e4:00:5c:48:2b:b3:42: 7b:fb:c0:93:09:a4:b8:a9:2a:ff:64:ef:85:81:a7: a3:7a:eb:58:6c:a4:e9:80:9f:d2:87:55:7a:e5:1c: e5:fb:8c:07:e4:cd:d5:21:4a:cb:d7:ac:f5:5a:aa: 67:b6:e6:4a:38:2d:02:9d:d0:3d:4f:f7:d0:cc:b2: 4b:c1:f7:f2:ba:d9:07:0f:3b:e3:9c:cc:40:d8:84: 6c:6a:ed:ab:06:a7:ac:c1:53:87:f7:55:d0:d1:23: 9b:91:3e:b3:54:e6:74:7e:32:62:c7:f7:89:62:3f: 64:6f:c6:f3:45:0d:7a:84:cf:63:04:c1:63:7d:6e: c3:ae:dd:4e:4f:7c:2d:a9:35:9b:77:da:69:77:74: f6:19:18:41:2a:17:4d:f7:e2:b4:5b:47:3b:73:48: e6:cc:a2:38:91:57:e5:34:28:3c:7f:80:0b:39:8b: 88:9a:f1:bb:df:c4:98:e5:5f:49:ed:43:7d:69:2a: 53:b9:b7:43:9c:f7:6c:6b:fd:89:1d:b0:11:01:82: f5:f9:f1:4c:0b:16:3e:7c:62:7f:06:67:2d:4c:b4: 78:d9:29:e6:fa:7a:84:31:8e:af:38:90:be:a2:04: b6:b9:7b:4c:d5:b2:0c:46:bb:31:ed:10:20:9f:35: 1a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:4A:45:BC:65:49:82:89:82:7F:D4:B5:16:61:61:92:C9:08:37:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152/12797d33-d775-45fc-9d2a-a3e7bbe51152.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152/12797d33-d775-45fc-9d2a-a3e7bbe51152.crl X509v3 Authority Key Identifier: keyid:9E:FA:EF:7E:45:43:9E:B6:9C:B0:84:8E:C2:07:C7:A4:26:5B:71:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:28:f9:66:b7:e8:6c:b0:c9:fe:55:b2:08:b3:29:46:3c:28: 3b:fa:78:20:a5:ff:79:5f:1d:6c:c0:64:35:5c:f5:01:6c:58: 2d:64:0c:2a:65:8b:0f:1f:e7:65:d3:6a:7b:05:fc:3f:f7:2b: d1:b5:5c:ec:b0:e5:df:4e:90:a4:05:84:19:be:9e:05:14:49: 36:46:30:12:df:49:af:e3:89:e0:2f:d4:18:81:79:38:09:0b: a8:61:f1:e0:6b:61:43:96:90:09:4a:41:69:27:ba:8b:43:fb: c5:0f:12:4b:33:e8:8e:a4:1d:eb:e6:fe:ab:64:9a:b8:d7:f4: 3d:2c:79:57:48:f8:3c:29:37:66:67:d3:b6:e2:61:61:40:f4: 01:59:29:36:33:3f:1b:a4:94:a6:c2:30:db:3f:c9:8a:cb:1c: f0:44:04:0f:c9:77:2b:8f:22:ab:bc:29:be:65:f5:c7:27:f7: 1d:42:2c:ff:c1:09:a6:ed:68:a7:a0:37:d9:2c:f4:dc:fa:6d: 2f:70:ec:02:b7:cb:a6:84:bb:8b:14:2c:31:4e:7a:ca:ea:19: af:c4:59:51:2e:8b:c6:e0:d4:5d:2f:07:13:48:65:48:e1:a3: bb:e2:71:3f:de:16:70:ba:34:fb:f7:a3:54:73:5c:29:d6:c7: df:4b:ee:39 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEms3gDdUJVySKnjJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI3OTdkMzMtZDc3NS00NWZjLTlkMmEtYTNlN2JiZTUx MTUyMB4XDTI1MDQyODExMDAwN1oXDTI1MDQzMDExMDAwMFowLzEtMCsGA1UEAxMk MTA3YjQyMjctZDMxYS00MjVjLWIxMDItMzE0NzA3NDVmMTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQgJ0vJM8uQAXEgrs0J7+8CTCaS4qSr/ZO+F gaejeutYbKTpgJ/Sh1V65Rzl+4wH5M3VIUrL16z1WqpntuZKOC0CndA9T/fQzLJL wffyutkHDzvjnMxA2IRsau2rBqeswVOH91XQ0SObkT6zVOZ0fjJix/eJYj9kb8bz RQ16hM9jBMFjfW7Drt1OT3wtqTWbd9ppd3T2GRhBKhdN9+K0W0c7c0jmzKI4kVfl NCg8f4ALOYuImvG738SY5V9J7UN9aSpTubdDnPdsa/2JHbARAYL1+fFMCxY+fGJ/ BmctTLR42Snm+nqEMY6vOJC+ogS2uXtM1bIMRrsx7RAgnzUaTwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDFKRbxlSYKJgn/UtRZhYZLJCDdbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMjc5 N2QzMy1kNzc1LTQ1ZmMtOWQyYS1hM2U3YmJlNTExNTIvMTI3OTdkMzMtZDc3NS00 NWZjLTlkMmEtYTNlN2JiZTUxMTUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTI3OTdkMzMtZDc3NS00NWZjLTlk MmEtYTNlN2JiZTUxMTUyLzEyNzk3ZDMzLWQ3NzUtNDVmYy05ZDJhLWEzZTdiYmU1 MTE1Mi5jcmwwHwYDVR0jBBgwFoAUnvrvfkVDnracsISOwgfHpCZbcYEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMjc5N2QzMy1kNzc1LTQ1ZmMtOWQyYS1hM2U3 YmJlNTExNTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCxKPlmt+hssMn+VbIIsylG PCg7+nggpf95Xx1swGQ1XPUBbFgtZAwqZYsPH+dl02p7Bfw/9yvRtVzssOXfTpCk BYQZvp4FFEk2RjAS30mv44ngL9QYgXk4CQuoYfHga2FDlpAJSkFpJ7qLQ/vFDxJL M+iOpB3r5v6rZJq41/Q9LHlXSPg8KTdmZ9O24mFhQPQBWSk2Mz8bpJSmwjDbP8mK yxzwRAQPyXcrjyKrvCm+ZfXHJ/cdQiz/wQmm7WinoDfZLPTc+m0vcOwCt8umhLuL FCwxTnrK6hmvxFlRLovG4NRdLwcTSGVI4aO74nE/3hZwujT796NUc1wp1sffS+45 -----END CERTIFICATE-----Generated at Mon Apr 28 15:26:31 2025 by rpki-client