$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.mft File: d41a3f41-d9b3-4528-8251-900156f4efac.mft (raw, json) Hash identifier: V21qk7zCdg/R2TGTOMoq0KcsBY/LFYWny62US6YKQEQ= Subject key identifier: 76:0F:4E:70:6A:26:80:DF:50:1C:E4:50:31:D4:C2:1F:E0:B9:5F:0B Authority key identifier: 39:E5:33:99:84:FC:E9:9C:F0:38:96:9B:D1:90:CA:AC:83:7E:E0:82 Certificate issuer: /CN=d41a3f41-d9b3-4528-8251-900156f4efac Certificate serial: 010D0C9F43285849B39D1DF651633438FC16B680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.mft Manifest number: 010D0C9F4328584073A82680C01A455C314DB696 Signing time: Wed 30 Apr 2025 21:00:03 +0000 Manifest this update: Wed 30 Apr 2025 21:00:03 +0000 Manifest next update: Sat 03 May 2025 21:00:00 +0000 Files and hashes: 1: 0ca9fb71-4d54-3d33-9805-4e6585f71430.roa (hash: noAx4tW+OWs8/+tdFwJXUOzrKKlDBgVd7pFOMwdOEFs=) 2: 3efa69b9-398a-37d0-8e4a-c8c81a9e5641.roa (hash: ymq+zLECmBLqyGVuO1fFy+pwJSdsEXae+IZp1eKgCvI=) 3: 5ad9b93f-bf15-3f1d-9d8d-e047c82bae8b.roa (hash: 5LzSdbDgmemS0N3BmmhIE5Ef6UqvIwSNxpsmXU9ZGnw=) 4: ba9d0725-8105-3694-a248-996f447b3fc8.roa (hash: RR65BCr4FSNE1PlymWF7bTvH4zZgu0GPydHxGFt5jcE=) 5: d41a3f41-d9b3-4528-8251-900156f4efac.crl (hash: i9brriLGsayuad7pyl365JR2IkIEN10M8bVt3Y/k0jQ=) 6: ecc1db62-c0dc-36d1-a903-9bd84f7ec7ac.roa (hash: spbmigNM4rVExLxMuosKD/kJW3hXcmZ80wiev8l3dC0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b3:9d:1d:f6:51:63:34:38:fc:16:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d41a3f41-d9b3-4528-8251-900156f4efac Validity Not Before: Apr 30 21:00:03 2025 GMT Not After : May 3 21:00:00 2025 GMT Subject: CN=719346ab-bb7d-4780-bc43-eabcb7987289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:75:34:4b:eb:38:ea:2d:c9:a5:87:3b:c0:81: 2a:e1:72:13:c8:45:cc:79:cb:3d:83:4d:a8:6f:c2: 4b:86:b0:07:14:96:f7:4d:67:0e:30:e6:5e:a3:ef: fe:8a:65:12:1c:ec:c3:12:06:64:83:e1:a5:b9:cf: c1:70:18:cd:6c:fe:6f:db:0c:92:d5:af:a7:bf:8e: 01:e4:52:a9:9a:92:16:48:ae:c8:f1:b2:96:cc:75: 8f:77:f5:8d:8c:aa:9d:6a:03:67:96:0c:bc:2a:ae: 03:67:3c:98:f3:b8:89:90:46:90:3e:9c:cf:61:47: 77:73:41:92:c5:8f:9f:1a:bc:2a:2d:4e:4d:53:78: 0d:9a:b5:54:33:18:42:62:99:3d:4c:72:4a:ca:7d: f8:fe:bd:e9:0b:53:5a:5e:2c:ec:2f:fe:a1:45:52: fd:18:aa:3d:94:b7:86:98:73:4f:e4:81:ec:97:b0: 16:b5:7f:88:a9:01:0e:b0:15:19:f1:33:e9:91:31: 2b:1d:af:da:49:06:78:17:9f:7b:48:de:57:b6:4a: f0:f8:10:cf:4b:59:43:b6:37:b7:6c:1c:ae:4e:78: 08:a2:db:5c:2f:81:4e:73:2f:55:60:19:36:df:46: e1:f6:3f:ed:33:11:d6:ae:9a:b7:84:39:a5:39:2a: 99:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:0F:4E:70:6A:26:80:DF:50:1C:E4:50:31:D4:C2:1F:E0:B9:5F:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.crl X509v3 Authority Key Identifier: keyid:39:E5:33:99:84:FC:E9:9C:F0:38:96:9B:D1:90:CA:AC:83:7E:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:e2:b7:3a:d0:27:fd:05:de:b4:82:b3:e5:56:d0:18:24:c5: 71:6a:6d:64:a1:38:99:7c:65:c1:9e:02:8a:22:1f:f6:22:25: a5:2c:bc:87:f7:98:6f:0a:f2:8b:e2:1c:30:29:dc:cc:8c:3c: 48:f3:d6:56:7b:75:57:fb:2d:3a:0f:10:57:fb:b3:2d:3c:ba: 05:ce:1d:e6:26:ce:29:7f:b1:e3:78:c5:8c:15:fd:d7:55:72: 0a:cc:bd:0c:29:5c:d3:c4:82:85:9c:a8:c9:94:c8:11:9d:dd: 03:69:32:f7:b5:f7:80:62:2f:b3:75:b0:9c:c9:46:63:e7:cd: 6c:2f:23:13:d7:ee:70:2a:d9:d0:95:4a:16:b4:12:8e:06:85: cf:7a:2f:a1:09:58:e3:7c:72:54:bf:70:58:bd:13:fd:f0:cd: c4:06:de:68:37:70:bc:4d:a1:ce:05:6a:8f:fb:5a:6c:98:24: 17:9b:3d:a1:4a:d0:83:71:c4:4d:f5:97:7d:a3:c7:91:74:da: d5:1a:b2:86:18:01:fb:68:54:2f:65:3d:e4:64:df:b7:fb:95: 43:96:49:55:01:c3:c1:e1:c5:2d:63:90:7c:25:ad:9c:a3:a9: b6:0e:ce:64:14:04:5e:f2:6c:30:68:2d:3e:bf:d7:3f:fe:d1: c4:71:84:48 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmznR32UWM0OPwWtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQxYTNmNDEtZDliMy00NTI4LTgyNTEtOTAwMTU2ZjRl ZmFjMB4XDTI1MDQzMDIxMDAwM1oXDTI1MDUwMzIxMDAwMFowLzEtMCsGA1UEAxMk NzE5MzQ2YWItYmI3ZC00NzgwLWJjNDMtZWFiY2I3OTg3Mjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3U0S+s46i3JpYc7wIEq4XITyEXMecs9g02o b8JLhrAHFJb3TWcOMOZeo+/+imUSHOzDEgZkg+Gluc/BcBjNbP5v2wyS1a+nv44B 5FKpmpIWSK7I8bKWzHWPd/WNjKqdagNnlgy8Kq4DZzyY87iJkEaQPpzPYUd3c0GS xY+fGrwqLU5NU3gNmrVUMxhCYpk9THJKyn34/r3pC1NaXizsL/6hRVL9GKo9lLeG mHNP5IHsl7AWtX+IqQEOsBUZ8TPpkTErHa/aSQZ4F597SN5Xtkrw+BDPS1lDtje3 bByuTngIottcL4FOcy9VYBk230bh9j/tMxHWrpq3hDmlOSqZ4wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHYPTnBqJoDfUBzkUDHUwh/guV8LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNDFh M2Y0MS1kOWIzLTQ1MjgtODI1MS05MDAxNTZmNGVmYWMvZDQxYTNmNDEtZDliMy00 NTI4LTgyNTEtOTAwMTU2ZjRlZmFjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDQxYTNmNDEtZDliMy00NTI4LTgy NTEtOTAwMTU2ZjRlZmFjL2Q0MWEzZjQxLWQ5YjMtNDUyOC04MjUxLTkwMDE1NmY0 ZWZhYy5jcmwwHwYDVR0jBBgwFoAUOeUzmYT86ZzwOJab0ZDKrIN+4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNDFhM2Y0MS1kOWIzLTQ1MjgtODI1MS05MDAx NTZmNGVmYWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCw4rc60Cf9Bd60grPlVtAY JMVxam1koTiZfGXBngKKIh/2IiWlLLyH95hvCvKL4hwwKdzMjDxI89ZWe3VX+y06 DxBX+7MtPLoFzh3mJs4pf7HjeMWMFf3XVXIKzL0MKVzTxIKFnKjJlMgRnd0DaTL3 tfeAYi+zdbCcyUZj581sLyMT1+5wKtnQlUoWtBKOBoXPei+hCVjjfHJUv3BYvRP9 8M3EBt5oN3C8TaHOBWqP+1psmCQXmz2hStCDccRN9Zd9o8eRdNrVGrKGGAH7aFQv ZT3kZN+3+5VDlklVAcPB4cUtY5B8Ja2co6m2Ds5kFARe8mwwaC0+v9c//tHEcYRI -----END CERTIFICATE-----Generated at Thu May 1 14:10:18 2025 by rpki-client