$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/480e68d2-5883-4233-9f17-992a2ca71e2b.mft File: 480e68d2-5883-4233-9f17-992a2ca71e2b.mft (raw, json) Hash identifier: JlJqRDQpipuV86GwRB8wJiRlFwTH2I7u6ALoLL6nv84= Subject key identifier: D3:07:DB:80:76:AA:AB:55:CC:78:E3:6A:3C:86:29:4F:0E:D4:F2:DD Authority key identifier: 26:9B:1E:68:03:C3:09:69:E3:8A:E5:95:A7:3F:33:33:66:8A:5F:0C Certificate issuer: /CN=480e68d2-5883-4233-9f17-992a2ca71e2b Certificate serial: 010D0C9F43285849A9B9FAF5DBF93CD977B096B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/480e68d2-5883-4233-9f17-992a2ca71e2b.mft Manifest number: 010D0C9F4328584073A8477B732E9D58BFEAE916 Signing time: Sun 27 Apr 2025 08:00:07 +0000 Manifest this update: Sun 27 Apr 2025 08:00:07 +0000 Manifest next update: Wed 30 Apr 2025 08:00:00 +0000 Files and hashes: 1: 0a6f4ae0-6d63-386f-a433-6e442af05c5b.roa (hash: yDJbDRHBS9+PcRA2+ZcK4lwqD01f7P4itXuiZLlPYw0=) 2: 2c1c1bb6-2ab6-33ad-b7b1-ccc4cf4d0d78.roa (hash: R0RrLKFeY0/p2/PwhAbF3/B08BG1hF90w6uwnkdihJk=) 3: 480e68d2-5883-4233-9f17-992a2ca71e2b.crl (hash: tR13KjpfGSMynAFQAc/C2sij0tXhvf3S2ROsHtuOulw=) 4: 6e1d6edc-5115-3bb2-9391-33f0124d055c.roa (hash: A/wXjJxZUQdyC1u9l4EkfqFeQYTVoed/0zm1vmXrVaw=) 5: c92ece4f-c280-3664-a587-eec01b2d4cf3.roa (hash: mED+snkVc7NwtPXiWWordELFSzRHkgQdaoKAUk4Ufr4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/480e68d2-5883-4233-9f17-992a2ca71e2b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/480e68d2-5883-4233-9f17-992a2ca71e2b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a9:b9:fa:f5:db:f9:3c:d9:77:b0:96:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=480e68d2-5883-4233-9f17-992a2ca71e2b Validity Not Before: Apr 27 08:00:07 2025 GMT Not After : Apr 30 08:00:00 2025 GMT Subject: CN=e8e93694-a566-4dc6-9cf2-f744cfd94a10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b5:d4:55:a9:a5:2c:48:12:09:bd:17:5b:40: 48:3c:cf:89:b5:ad:7d:80:bd:36:15:12:3d:6f:ca: b1:dc:f1:ad:cd:cb:15:a4:74:bd:49:66:b4:fb:26: 83:99:e5:81:64:88:90:d6:2b:e7:d4:30:e7:c3:73: 89:85:46:d0:d2:7d:cd:3d:9f:71:82:49:f1:2d:19: 16:31:34:60:9e:af:9f:3e:17:43:d1:07:98:1a:c2: 61:04:0a:72:b4:99:26:0c:91:ff:0b:bc:77:3d:0e: 8d:2a:36:89:e7:33:a6:57:f8:61:06:1d:38:10:f7: 94:0b:8e:ca:3c:22:ef:2e:a7:7a:eb:6b:48:29:4f: 4c:64:2e:85:6b:27:06:48:0f:39:5b:da:27:4a:b2: 36:b2:2d:fb:99:51:da:5a:b8:27:5d:d5:c9:1f:d1: f3:9e:33:92:c9:1c:f7:c6:5b:54:5d:e0:76:51:8d: 4b:a9:27:46:d3:91:05:f0:cc:d6:d2:1f:51:bd:5b: 39:62:cd:4c:75:f1:30:03:ac:e1:0b:a5:ad:82:8a: 20:22:bd:0c:50:f6:78:32:96:6a:b8:83:95:7e:eb: f5:e5:8c:11:e6:e9:be:6e:fd:07:60:96:f0:97:77: b6:49:7a:b8:53:c6:cc:9a:f7:6f:ce:1c:32:8f:67: 47:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:07:DB:80:76:AA:AB:55:CC:78:E3:6A:3C:86:29:4F:0E:D4:F2:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/480e68d2-5883-4233-9f17-992a2ca71e2b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/480e68d2-5883-4233-9f17-992a2ca71e2b.crl X509v3 Authority Key Identifier: keyid:26:9B:1E:68:03:C3:09:69:E3:8A:E5:95:A7:3F:33:33:66:8A:5F:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:25:b1:76:75:25:20:30:cb:ce:cb:c2:a3:b3:18:7a:d0:00: 92:3c:29:54:87:a0:86:1e:80:81:44:3c:5b:aa:05:13:ba:5e: 44:35:c6:74:d8:41:30:54:87:a2:42:02:89:23:b4:cd:7f:0c: bf:35:1a:50:1b:67:8c:a7:35:6b:92:5c:fa:a6:25:f3:b0:e8: f3:06:04:a0:e1:48:40:63:1b:d7:b5:e5:45:78:c1:c8:03:bf: ba:74:ba:77:70:0a:71:9c:ab:a1:4d:cf:b7:90:73:24:7b:f2: 29:54:21:8d:50:3f:2a:a5:70:52:56:36:92:64:92:50:56:fb: ef:c2:32:c5:26:78:01:fd:4c:aa:33:05:f0:ce:a5:1e:f0:98: 05:16:a0:9e:54:c0:37:94:a2:24:33:c0:fc:39:08:76:27:84: 3f:89:c1:5c:fb:07:77:bf:0f:c7:e7:19:c0:66:2d:2a:59:98: 42:14:9b:e6:a9:5c:5b:61:8f:83:8e:24:5c:a5:80:98:99:5b: c6:b8:6a:8c:40:0f:40:ac:ba:1b:c1:bd:62:d0:c2:83:a8:cf: e8:a5:22:42:bc:d0:b3:55:eb:f5:b3:38:34:26:b0:89:06:b8: 3a:ef:02:23:3a:3f:69:47:ce:a0:9d:f5:94:a8:38:99:3a:f5: 06:18:3b:2a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmpufr12/k82XewlrgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDgwZTY4ZDItNTg4My00MjMzLTlmMTctOTkyYTJjYTcx ZTJiMB4XDTI1MDQyNzA4MDAwN1oXDTI1MDQzMDA4MDAwMFowLzEtMCsGA1UEAxMk ZThlOTM2OTQtYTU2Ni00ZGM2LTljZjItZjc0NGNmZDk0YTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLXUVamlLEgSCb0XW0BIPM+Jta19gL02FRI9 b8qx3PGtzcsVpHS9SWa0+yaDmeWBZIiQ1ivn1DDnw3OJhUbQ0n3NPZ9xgknxLRkW MTRgnq+fPhdD0QeYGsJhBApytJkmDJH/C7x3PQ6NKjaJ5zOmV/hhBh04EPeUC47K PCLvLqd662tIKU9MZC6FaycGSA85W9onSrI2si37mVHaWrgnXdXJH9HznjOSyRz3 xltUXeB2UY1LqSdG05EF8MzW0h9RvVs5Ys1MdfEwA6zhC6WtgoogIr0MUPZ4MpZq uIOVfuv15YwR5um+bv0HYJbwl3e2SXq4U8bMmvdvzhwyj2dHhQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNMH24B2qqtVzHjjajyGKU8O1PLdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ODBl NjhkMi01ODgzLTQyMzMtOWYxNy05OTJhMmNhNzFlMmIvNDgwZTY4ZDItNTg4My00 MjMzLTlmMTctOTkyYTJjYTcxZTJiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDgwZTY4ZDItNTg4My00MjMzLTlm MTctOTkyYTJjYTcxZTJiLzQ4MGU2OGQyLTU4ODMtNDIzMy05ZjE3LTk5MmEyY2E3 MWUyYi5jcmwwHwYDVR0jBBgwFoAUJpseaAPDCWnjiuWVpz8zM2aKXwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ODBlNjhkMi01ODgzLTQyMzMtOWYxNy05OTJh MmNhNzFlMmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC/JbF2dSUgMMvOy8Kjsxh6 0ACSPClUh6CGHoCBRDxbqgUTul5ENcZ02EEwVIeiQgKJI7TNfwy/NRpQG2eMpzVr klz6piXzsOjzBgSg4UhAYxvXteVFeMHIA7+6dLp3cApxnKuhTc+3kHMke/IpVCGN UD8qpXBSVjaSZJJQVvvvwjLFJngB/UyqMwXwzqUe8JgFFqCeVMA3lKIkM8D8OQh2 J4Q/icFc+wd3vw/H5xnAZi0qWZhCFJvmqVxbYY+DjiRcpYCYmVvGuGqMQA9ArLob wb1i0MKDqM/opSJCvNCzVev1szg0JrCJBrg67wIjOj9pR86gnfWUqDiZOvUGGDsq -----END CERTIFICATE-----Generated at Sun Apr 27 23:05:24 2025 by rpki-client