$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0abdd34a-e7fe-45bf-9172-cf39d7745c17/0abdd34a-e7fe-45bf-9172-cf39d7745c17.mft File: 0abdd34a-e7fe-45bf-9172-cf39d7745c17.mft (raw, json) Hash identifier: W0xb9Fwm8L7deLzhkCXKC0FFEKj3qmB9aGkr0gyVNgE= Subject key identifier: 05:94:8E:61:2E:58:8B:36:CC:8A:6E:57:DD:6A:A4:D1:3E:6D:DE:A2 Authority key identifier: B9:7D:84:C1:09:8C:9E:FA:FB:23:81:CA:79:D4:FF:18:E1:EA:B7:72 Certificate issuer: /CN=0abdd34a-e7fe-45bf-9172-cf39d7745c17 Certificate serial: 010D0C9F43285849A5A7B21DD48851C20A2BAA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0abdd34a-e7fe-45bf-9172-cf39d7745c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0abdd34a-e7fe-45bf-9172-cf39d7745c17/0abdd34a-e7fe-45bf-9172-cf39d7745c17.mft Manifest number: 010D0C9F4328584482BF83357DC48DF3DE2A66AA Signing time: Fri 25 Apr 2025 21:00:03 +0000 Manifest this update: Fri 25 Apr 2025 21:00:03 +0000 Manifest next update: Sun 27 Apr 2025 21:00:00 +0000 Files and hashes: 1: 0abdd34a-e7fe-45bf-9172-cf39d7745c17.crl (hash: DDjy8hpgbPlE5RTusqS6yphUavUBgC/ynM0pLqEXR88=) 2: 19c0126a-bc9f-3db2-909e-81cb42a1e220.roa (hash: Q4BhqjUQzVOhljxum7FfhEtgMNJoFuhxGrHvZcpZnUE=) 3: 413e9f7d-2d3d-3845-aa41-861d68125bfb.roa (hash: 7v9Dvn8OXFguOf2RZOQegIgNqbTbZOqt2OsytRdzn/I=) 4: dd86006a-5f34-326e-86fa-71208d02c134.roa (hash: 8kMVgHE0QEgB5L8tXLGwnIw8k2q+8Cof5eeTcHw+ZYk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0abdd34a-e7fe-45bf-9172-cf39d7745c17/0abdd34a-e7fe-45bf-9172-cf39d7745c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0abdd34a-e7fe-45bf-9172-cf39d7745c17/0abdd34a-e7fe-45bf-9172-cf39d7745c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0abdd34a-e7fe-45bf-9172-cf39d7745c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a5:a7:b2:1d:d4:88:51:c2:0a:2b:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0abdd34a-e7fe-45bf-9172-cf39d7745c17 Validity Not Before: Apr 25 21:00:03 2025 GMT Not After : Apr 27 21:00:00 2025 GMT Subject: CN=3fd55e53-50fa-402a-be95-b972a52c777a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a7:68:ab:78:d1:70:08:65:2b:d1:8c:ef:cd: 81:72:b7:71:72:9b:9b:ac:dd:2f:f9:d7:07:d0:82: 6a:3b:66:cd:19:f3:0c:d9:e9:cd:6c:1a:91:97:3a: 8a:a9:15:07:a7:63:29:5f:75:6b:7c:55:7a:d5:bf: 75:77:f3:cd:ec:72:2c:ef:f7:ef:da:ea:bd:52:8b: 6f:d5:49:e5:bb:ef:35:41:83:8a:76:e2:b3:2b:34: 8e:21:6b:4d:ce:f3:fd:c5:a9:c9:6b:36:4c:90:f2: 21:7f:cf:92:bd:1b:70:25:23:84:8e:37:80:1e:dc: 01:67:31:25:d1:3d:89:99:6f:3c:7b:d2:51:c8:55: 05:07:2c:6e:7b:f0:0d:b0:6a:0d:cd:38:f3:e4:a0: a3:92:38:31:16:2a:b5:02:cf:1a:1d:c4:3b:15:11: 39:93:e8:f5:5a:4c:fd:c6:63:76:18:5f:50:c7:7e: be:a5:b0:d3:14:b5:ed:d3:dc:a0:c1:25:98:55:3a: cd:59:e1:76:52:3f:a4:d5:3b:2c:30:20:03:7f:60: 0b:ea:d2:f2:55:cf:0d:53:01:12:8f:10:ab:39:68: 25:1d:e6:f7:b0:41:86:b9:a0:ba:1e:90:63:b8:4f: e5:06:fd:04:a5:d5:06:13:8d:a9:7a:d2:b4:ae:0e: af:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:94:8E:61:2E:58:8B:36:CC:8A:6E:57:DD:6A:A4:D1:3E:6D:DE:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0abdd34a-e7fe-45bf-9172-cf39d7745c17/0abdd34a-e7fe-45bf-9172-cf39d7745c17.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0abdd34a-e7fe-45bf-9172-cf39d7745c17/0abdd34a-e7fe-45bf-9172-cf39d7745c17.crl X509v3 Authority Key Identifier: keyid:B9:7D:84:C1:09:8C:9E:FA:FB:23:81:CA:79:D4:FF:18:E1:EA:B7:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0abdd34a-e7fe-45bf-9172-cf39d7745c17.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:a8:94:b8:23:54:88:87:42:97:7e:e2:f9:0b:14:f3:f7:ec: 2f:f8:27:7e:75:93:82:e3:10:f9:e6:c0:ec:ca:fe:db:5e:0a: f7:c3:17:f0:ce:a6:4f:cd:63:46:bd:71:1a:21:28:0d:b2:74: 9c:cb:7d:c6:22:6f:71:82:1a:c1:b5:e0:55:cc:32:a7:07:52: f3:79:17:fe:9c:2f:a3:e7:a8:17:59:24:2a:e9:39:ba:91:56: be:aa:77:18:2f:09:99:44:51:ae:a1:39:68:b7:ec:6f:63:3e: 69:7a:20:9d:3b:73:ee:32:e1:2a:51:9f:e4:76:cf:db:4d:59: 57:ca:02:94:55:65:69:d9:0a:fa:e5:d4:53:ac:c7:69:c9:72: d9:61:dc:51:0f:c0:32:a4:e7:83:b0:f6:0f:3c:cb:a9:dc:f0: c9:16:41:96:f0:be:4b:a8:fa:0f:a0:6e:5e:d5:a9:db:85:eb: 09:42:4f:46:11:c9:9c:4c:ca:79:50:a6:5b:ef:24:d6:32:4b: 36:0b:9d:73:f7:27:b8:1f:ad:64:c4:73:7b:1f:bf:a3:03:f8: ff:5c:ae:af:c9:e6:4d:7a:9f:a0:7a:c7:af:6d:5d:fd:c8:99: eb:d3:8e:09:ee:70:19:38:7d:ef:62:a0:0a:f0:83:10:d5:82: a3:eb:cd:30 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmlp7Id1IhRwgorqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiZGQzNGEtZTdmZS00NWJmLTkxNzItY2YzOWQ3NzQ1 YzE3MB4XDTI1MDQyNTIxMDAwM1oXDTI1MDQyNzIxMDAwMFowLzEtMCsGA1UEAxMk M2ZkNTVlNTMtNTBmYS00MDJhLWJlOTUtYjk3MmE1MmM3NzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6doq3jRcAhlK9GM782BcrdxcpubrN0v+dcH 0IJqO2bNGfMM2enNbBqRlzqKqRUHp2MpX3VrfFV61b91d/PN7HIs7/fv2uq9Uotv 1Unlu+81QYOKduKzKzSOIWtNzvP9xanJazZMkPIhf8+SvRtwJSOEjjeAHtwBZzEl 0T2JmW88e9JRyFUFByxue/ANsGoNzTjz5KCjkjgxFiq1As8aHcQ7FRE5k+j1Wkz9 xmN2GF9Qx36+pbDTFLXt09ygwSWYVTrNWeF2Uj+k1TssMCADf2AL6tLyVc8NUwES jxCrOWglHeb3sEGGuaC6HpBjuE/lBv0EpdUGE42petK0rg6v3QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAWUjmEuWIs2zIpuV91qpNE+bd6iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wYWJk ZDM0YS1lN2ZlLTQ1YmYtOTE3Mi1jZjM5ZDc3NDVjMTcvMGFiZGQzNGEtZTdmZS00 NWJmLTkxNzItY2YzOWQ3NzQ1YzE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMGFiZGQzNGEtZTdmZS00NWJmLTkx NzItY2YzOWQ3NzQ1YzE3LzBhYmRkMzRhLWU3ZmUtNDViZi05MTcyLWNmMzlkNzc0 NWMxNy5jcmwwHwYDVR0jBBgwFoAUuX2EwQmMnvr7I4HKedT/GOHqt3IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8wYWJkZDM0YS1lN2ZlLTQ1YmYtOTE3Mi1jZjM5 ZDc3NDVjMTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAVqJS4I1SIh0KXfuL5CxTz 9+wv+Cd+dZOC4xD55sDsyv7bXgr3wxfwzqZPzWNGvXEaISgNsnScy33GIm9xghrB teBVzDKnB1LzeRf+nC+j56gXWSQq6Tm6kVa+qncYLwmZRFGuoTlot+xvYz5peiCd O3PuMuEqUZ/kds/bTVlXygKUVWVp2Qr65dRTrMdpyXLZYdxRD8AypOeDsPYPPMup 3PDJFkGW8L5LqPoPoG5e1anbhesJQk9GEcmcTMp5UKZb7yTWMks2C51z9ye4H61k xHN7H7+jA/j/XK6vyeZNep+gesevbV39yJnr044J7nAZOH3vYqAK8IMQ1YKj680w -----END CERTIFICATE-----Generated at Sat Apr 26 17:59:24 2025 by rpki-client