$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.mft File: a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.mft (raw, json) Hash identifier: Ah3LxInITRtlbIC3QYH394bn3BbE8jvNFEtaaFQd5C4= Subject key identifier: 5B:8A:DA:0F:B3:95:C9:DE:46:9B:AD:3F:78:14:10:75:E1:CD:8F:05 Authority key identifier: 0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B Certificate issuer: /CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd Certificate serial: 010D0C9F43285849A7DD896DB02D61147E9F4980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.mft Manifest number: 010D0C9F4328584235203CC0B3C07DD77727F06B Signing time: Sat 26 Apr 2025 16:00:07 +0000 Manifest this update: Sat 26 Apr 2025 16:00:07 +0000 Manifest next update: Mon 28 Apr 2025 16:00:00 +0000 Files and hashes: 1: 0ba38926-bad3-374f-8c49-9231dc94f5e6.roa (hash: yOKzzESdA0BF8Re4y8vRTdna3UGY/DOil9hBthVOmyE=) 2: 1f36c010-0da8-3095-9972-d65efcd1e1f1.roa (hash: nDar4YVPTIdVuvEkPaZVGvR59KscD65O7dQA9dPCcFU=) 3: 2afe2567-cab2-360c-8f03-dbb24ef04992.roa (hash: 9f/j06QKGsMAptvupsUe6S+WpCJX2SEF42km7K+6r54=) 4: 3a019076-b464-3583-90a4-8ee571e8d49f.roa (hash: cEvrHc7esJ8xSOdx4iHgSxjxm5eNfHBVWExL37jpKjk=) 5: 4d5e8188-243c-3e1d-8dd9-99991af6feec.roa (hash: pjXtjPqPsB6Fhn5TljkSElUcdgQTROQpKD4HG8lNihE=) 6: a1c7a418-62b9-3ee9-a73e-dabcc7a4645e.roa (hash: wHgwp96N4PV/BFPq2iXzZmR5xIL9J+a1sLkIaclXERQ=) 7: a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl (hash: EmuJtXYjyOPkBdGKk9wAlWtn+Z1lzE2o80xLpj3tr8s=) 8: a759a366-45ed-3c18-90f5-a5e5c535bbe5.roa (hash: yTBS/T/UQevQGZr++mchvJx1Mn4bb25eZFhI7YhI6Q8=) 9: c9f55b10-d847-3053-8482-6552dbbdb29b.roa (hash: zF4qGXUBWrBCeWU0y8FnUq3XQGKr6XoGwqSFayLZIGs=) 10: dbccd6ac-04fa-3813-bcb5-b1effa5f1ef0.roa (hash: AZpPjL7R/PqPt1iAFkudX7IsbosyQ3g6vbfOsXqZ+Qw=) 11: ec24fabd-de17-3231-b198-70f75562becc.roa (hash: 9aNv3Bay9YPrGFoHkmEY3DILSsIl2SYJkEqbaxk08Ak=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:dd:89:6d:b0:2d:61:14:7e:9f:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd Validity Not Before: Apr 26 16:00:07 2025 GMT Not After : Apr 28 16:00:00 2025 GMT Subject: CN=26616df9-9bcc-461c-8225-84edd5db2d1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8a:7b:8f:dc:ba:9b:91:df:2a:84:11:32:f1: 65:ac:ad:86:bd:84:fb:ac:c2:bd:b7:bd:e9:6f:b0: 03:21:f3:bb:85:73:f2:ac:f9:04:41:f3:e8:de:0c: 21:06:4c:38:fd:61:a8:3b:48:5c:ae:c8:d5:5f:22: 21:44:a2:81:7b:b8:89:37:10:6f:c5:b0:d1:2a:0f: c0:0a:98:c5:2f:43:15:78:36:f5:15:ef:be:6c:e9: 16:4a:e2:91:ab:ba:ab:a9:c8:a6:ab:8d:7c:3f:84: c5:8f:3e:7e:59:18:c4:67:a8:45:0c:38:f5:5a:92: 52:0e:83:d4:e2:20:6f:13:6d:c2:1d:0a:38:d8:76: 3e:5a:8e:99:ed:f2:40:22:bb:1c:26:72:4a:db:4d: ad:72:4c:5c:56:2a:29:90:ea:76:26:8e:8f:47:d2: 53:4e:97:f4:93:67:f8:c4:ac:63:11:1a:63:f9:bb: 37:87:a9:79:43:d2:1c:94:59:1f:62:79:c1:3c:d3: 9e:ca:55:b7:02:2a:77:6d:6e:d4:9b:62:45:ee:85: 87:3a:3b:3d:eb:ac:15:9c:48:8d:e6:dc:c3:d6:ff: 43:a1:70:83:a7:75:a3:6f:a4:1e:bc:9f:65:7f:55: f4:6e:7c:97:40:2f:5c:bc:59:c7:87:ea:e5:e4:24: 38:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:8A:DA:0F:B3:95:C9:DE:46:9B:AD:3F:78:14:10:75:E1:CD:8F:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl X509v3 Authority Key Identifier: keyid:0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:a9:77:e3:2c:ad:14:18:06:55:08:5f:bf:d8:af:9c:0a:7b: 88:97:76:1f:a0:5d:bf:96:81:13:ff:ad:6d:d2:d0:ea:c1:14: 7d:2b:b5:ed:3f:c4:e4:48:15:07:a0:47:9b:f0:41:f0:fa:b0: 99:d7:14:8b:bd:54:3c:3f:3a:19:31:a3:c7:2a:d1:dd:e4:4a: 08:74:f0:8a:ba:be:3c:c5:27:81:b8:eb:2c:7e:7c:8b:e4:c0: 96:d1:c9:ae:16:4d:47:8d:16:08:fd:00:11:49:46:e9:30:2f: 81:77:fb:e1:b2:69:6c:b4:9a:1e:0e:6c:f0:fe:c3:80:ae:21: e8:0e:21:20:60:30:76:8f:c6:a5:32:fd:15:71:30:c0:08:08: f3:b9:f9:00:30:49:8f:a4:4a:22:03:45:b5:25:99:08:30:89: 84:23:78:94:a9:2d:92:bf:e3:40:e2:f6:8f:16:a4:45:43:5c: 63:b5:ff:11:1f:de:be:fd:55:b0:61:ba:30:6a:d2:44:43:c9: b7:ce:cd:00:8d:de:52:d3:18:9b:2b:d4:e1:0e:d4:4a:b6:1f: 40:15:a4:4f:8c:ce:be:d6:1b:d1:63:81:d3:60:92:91:a5:c0: 0b:64:3e:c2:51:2c:8b:4a:76:f9:19:6b:2e:de:9a:9b:56:63: 9c:fb:ed:40 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmn3YltsC1hFH6fSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMwMmRjOWMtMTJlOS00YjY2LThjNmQtZTI5OTRhMjFh MWJkMB4XDTI1MDQyNjE2MDAwN1oXDTI1MDQyODE2MDAwMFowLzEtMCsGA1UEAxMk MjY2MTZkZjktOWJjYy00NjFjLTgyMjUtODRlZGQ1ZGIyZDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiop7j9y6m5HfKoQRMvFlrK2GvYT7rMK9t73p b7ADIfO7hXPyrPkEQfPo3gwhBkw4/WGoO0hcrsjVXyIhRKKBe7iJNxBvxbDRKg/A CpjFL0MVeDb1Fe++bOkWSuKRq7qrqcimq418P4TFjz5+WRjEZ6hFDDj1WpJSDoPU 4iBvE23CHQo42HY+Wo6Z7fJAIrscJnJK202tckxcViopkOp2Jo6PR9JTTpf0k2f4 xKxjERpj+bs3h6l5Q9IclFkfYnnBPNOeylW3Aip3bW7Um2JF7oWHOjs966wVnEiN 5tzD1v9DoXCDp3Wjb6QevJ9lf1X0bnyXQC9cvFnHh+rl5CQ4jQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFuK2g+zlcneRputP3gUEHXhzY8FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzAy ZGM5Yy0xMmU5LTRiNjYtOGM2ZC1lMjk5NGEyMWExYmQvYTMwMmRjOWMtMTJlOS00 YjY2LThjNmQtZTI5OTRhMjFhMWJkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTMwMmRjOWMtMTJlOS00YjY2LThj NmQtZTI5OTRhMjFhMWJkL2EzMDJkYzljLTEyZTktNGI2Ni04YzZkLWUyOTk0YTIx YTFiZC5jcmwwHwYDVR0jBBgwFoAUD9wvbjNkX+N70ljHXoRo2VwdIpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzAyZGM5Yy0xMmU5LTRiNjYtOGM2ZC1lMjk5 NGEyMWExYmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBBqXfjLK0UGAZVCF+/2K+c CnuIl3YfoF2/loET/61t0tDqwRR9K7XtP8TkSBUHoEeb8EHw+rCZ1xSLvVQ8PzoZ MaPHKtHd5EoIdPCKur48xSeBuOssfnyL5MCW0cmuFk1HjRYI/QARSUbpMC+Bd/vh smlstJoeDmzw/sOAriHoDiEgYDB2j8alMv0VcTDACAjzufkAMEmPpEoiA0W1JZkI MImEI3iUqS2Sv+NA4vaPFqRFQ1xjtf8RH96+/VWwYbowatJEQ8m3zs0Ajd5S0xib K9ThDtRKth9AFaRPjM6+1hvRY4HTYJKRpcALZD7CUSyLSnb5GWsu3pqbVmOc++1A -----END CERTIFICATE-----Generated at Sun Apr 27 15:34:25 2025 by rpki-client