$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft File: 3b72c968-d673-4a7a-bfec-4071a7be5317.mft (raw, json) Hash identifier: EJ1Tf1vnW8bqH2U1xcqMjCPPCvMDDERBPH4XrtBPdFc= Subject key identifier: 16:32:98:D4:F0:E7:E2:7B:E9:5F:60:86:C5:46:ED:F1:F6:36:22:BC Authority key identifier: D4:D0:6C:E1:8F:F9:73:1D:53:22:23:6D:36:3F:38:F6:81:03:B5:6F Certificate issuer: /CN=3b72c968-d673-4a7a-bfec-4071a7be5317 Certificate serial: 010D0C9F43285849AD72DACF5999F30F86AFEF58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft Manifest number: 010D0C9F4328584073A81BDF619690B6FD17C6AC Signing time: Mon 28 Apr 2025 16:00:03 +0000 Manifest this update: Mon 28 Apr 2025 16:00:03 +0000 Manifest next update: Thu 01 May 2025 16:00:00 +0000 Files and hashes: 1: 0fb6d382-f0fb-39bb-a947-10e2bb7ff6d0.roa (hash: UmO8gX7hBehEB/MRcVvYxjOGL4iBMYMPmDka5vHYUgo=) 2: 3b72c968-d673-4a7a-bfec-4071a7be5317.crl (hash: 7aQqyg144x/rQ7tavyB9NqFaXLzevp8h+Tm3U37frQs=) 3: 3df446ef-8f84-35ef-9354-563bf5792560.roa (hash: 0c6rgbIyS9QCBZYP4wTwzgIvZXmrhO7G5s8lx474tBM=) 4: 828c35a4-d70a-329b-afc8-43f0c6744f3e.roa (hash: m4F0Oxcc9c3ol7e6cmRzKSnmrMN9NuVK4AVjm8C3uR0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:72:da:cf:59:99:f3:0f:86:af:ef:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b72c968-d673-4a7a-bfec-4071a7be5317 Validity Not Before: Apr 28 16:00:03 2025 GMT Not After : May 1 16:00:00 2025 GMT Subject: CN=e944a6aa-071b-45ad-aa89-1dd9f52db453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:46:bb:fa:21:9f:6f:dd:5e:04:eb:8c:81:15: 77:b0:d7:67:f7:e3:0c:48:96:c0:c2:6d:15:64:1b: 35:83:1c:53:1a:34:51:64:ff:c3:2b:13:c4:0f:4e: 27:30:07:74:3e:94:0b:32:f4:b2:4d:8d:d0:e0:33: 00:cd:ed:22:89:80:4c:23:da:46:d9:70:41:88:89: 3d:2b:9a:f0:fd:9e:04:28:15:ec:fd:6d:cf:e9:74: 78:45:3c:c0:cd:e2:ec:ec:e9:2d:30:08:0f:24:70: 75:ec:95:e6:87:31:0a:a0:22:ce:38:fa:b9:14:36: 84:8a:67:4d:46:3e:f0:b7:03:fa:33:24:4b:74:06: 80:ff:b4:48:78:af:4e:fb:ff:09:75:40:d9:d4:47: 88:8d:57:fb:bb:08:90:3d:d8:f7:6b:d7:48:77:f2: a4:1f:05:1c:d6:00:c7:b0:f6:ae:df:b0:3e:d5:d9: 67:a9:28:40:6d:6a:dd:e9:0b:e1:42:34:5b:a6:b5: 1b:43:5b:2d:c3:4a:7b:e3:a9:51:8a:e3:99:e1:7d: 75:f4:72:d3:b3:5b:66:42:04:e2:a5:4e:71:68:0a: 8c:57:66:00:cc:1d:2e:13:fe:2a:cb:af:71:7f:fc: 74:37:36:a1:eb:01:8a:ef:aa:b8:95:bf:e6:57:14: fb:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:32:98:D4:F0:E7:E2:7B:E9:5F:60:86:C5:46:ED:F1:F6:36:22:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.crl X509v3 Authority Key Identifier: keyid:D4:D0:6C:E1:8F:F9:73:1D:53:22:23:6D:36:3F:38:F6:81:03:B5:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:2b:2d:60:be:f6:92:95:08:a5:cb:69:84:4e:8b:ae:b5:dc: a2:bc:fc:42:e1:53:90:b1:3a:34:48:fe:66:b0:fd:1a:36:6d: 3a:f8:7a:57:70:1f:89:2b:4d:b6:f5:e9:7f:cc:c5:68:53:80: 91:5e:06:cc:31:df:98:ee:aa:83:7a:fc:66:39:87:b9:19:b8: 13:7e:a5:0f:ee:d3:d6:3e:77:28:7b:30:61:f8:f4:b9:c7:f6: a8:9e:55:d8:a5:8b:7c:7b:e2:ec:b2:b8:d1:97:70:4e:4b:2d: 21:11:92:1d:e7:6e:dd:73:bd:bd:30:b9:b6:02:36:33:eb:5a: e5:13:87:4d:99:af:e1:fd:ae:45:42:cc:03:32:be:fe:5a:74: db:77:27:64:52:06:20:23:51:77:06:dc:82:3a:c3:ac:b7:a6: b9:b2:14:82:72:9c:d7:3a:2a:58:ad:22:fb:b1:29:e0:8b:e0: ac:8b:4f:a0:e7:85:19:59:18:cd:65:4d:0b:ef:8a:f1:64:d6: 6d:3c:b7:c0:4b:c7:f7:50:9b:18:3c:43:21:70:cb:30:ac:2f: 53:85:86:05:28:f5:57:98:9d:8f:dd:26:54:56:f6:57:a9:d6: 79:91:68:b7:b2:eb:18:95:f3:db:db:38:a2:89:86:8b:79:18: 06:ad:d3:c4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmtctrPWZnzD4av71gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I3MmM5NjgtZDY3My00YTdhLWJmZWMtNDA3MWE3YmU1 MzE3MB4XDTI1MDQyODE2MDAwM1oXDTI1MDUwMTE2MDAwMFowLzEtMCsGA1UEAxMk ZTk0NGE2YWEtMDcxYi00NWFkLWFhODktMWRkOWY1MmRiNDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUa7+iGfb91eBOuMgRV3sNdn9+MMSJbAwm0V ZBs1gxxTGjRRZP/DKxPED04nMAd0PpQLMvSyTY3Q4DMAze0iiYBMI9pG2XBBiIk9 K5rw/Z4EKBXs/W3P6XR4RTzAzeLs7OktMAgPJHB17JXmhzEKoCLOOPq5FDaEimdN Rj7wtwP6MyRLdAaA/7RIeK9O+/8JdUDZ1EeIjVf7uwiQPdj3a9dId/KkHwUc1gDH sPau37A+1dlnqShAbWrd6QvhQjRbprUbQ1stw0p746lRiuOZ4X119HLTs1tmQgTi pU5xaAqMV2YAzB0uE/4qy69xf/x0Nzah6wGK76q4lb/mVxT7VQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBYymNTw5+J76V9ghsVG7fH2NiK8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zYjcy Yzk2OC1kNjczLTRhN2EtYmZlYy00MDcxYTdiZTUzMTcvM2I3MmM5NjgtZDY3My00 YTdhLWJmZWMtNDA3MWE3YmU1MzE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2I3MmM5NjgtZDY3My00YTdhLWJm ZWMtNDA3MWE3YmU1MzE3LzNiNzJjOTY4LWQ2NzMtNGE3YS1iZmVjLTQwNzFhN2Jl NTMxNy5jcmwwHwYDVR0jBBgwFoAU1NBs4Y/5cx1TIiNtNj849oEDtW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zYjcyYzk2OC1kNjczLTRhN2EtYmZlYy00MDcx YTdiZTUzMTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAGKy1gvvaSlQily2mETouu tdyivPxC4VOQsTo0SP5msP0aNm06+HpXcB+JK0229el/zMVoU4CRXgbMMd+Y7qqD evxmOYe5GbgTfqUP7tPWPncoezBh+PS5x/aonlXYpYt8e+LssrjRl3BOSy0hEZId 527dc729MLm2AjYz61rlE4dNma/h/a5FQswDMr7+WnTbdydkUgYgI1F3BtyCOsOs t6a5shSCcpzXOipYrSL7sSngi+Csi0+g54UZWRjNZU0L74rxZNZtPLfAS8f3UJsY PEMhcMswrC9ThYYFKPVXmJ2P3SZUVvZXqdZ5kWi3susYlfPb2ziiiYaLeRgGrdPE -----END CERTIFICATE-----Generated at Tue Apr 29 08:32:44 2025 by rpki-client