$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft File: 33c78d60-34eb-4fed-8e25-925b95a30c8e.mft (raw, json) Hash identifier: OPGC3bL0aFo25u5q+TbxdTrS2LqBOP7NSdutgXBhC1A= Subject key identifier: B2:45:F0:E7:74:95:40:C1:1C:DF:21:7F:67:AE:05:46:66:BD:35:E6 Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 Certificate issuer: /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Certificate serial: 010D0C9F43285849AA8A662FB5E5B52C58F65000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft Manifest number: 010D0C9F432858467B5CA7EDE1E555E584764150 Signing time: Sun 27 Apr 2025 15:00:03 +0000 Manifest this update: Sun 27 Apr 2025 15:00:03 +0000 Manifest next update: Wed 30 Apr 2025 15:00:00 +0000 Files and hashes: 1: 33c78d60-34eb-4fed-8e25-925b95a30c8e.crl (hash: MviLJuThZyeA9GiVQg2WQZ5weRml/U29XOYy51riIxY=) 2: 6c7472b0-6d12-33be-a9f9-85e26dc54729.roa (hash: fu6VgqyRmMjc35nRSUr3jBQHOHUbE04yk3+Zt4YeuwQ=) 3: 9f72c271-f1f1-38c0-b9d4-ae2deadaf80c.roa (hash: LsXzZUQg4iJ3d7tXoh9rxy+JNedcg+61yYF2xVwl03s=) 4: af56c26b-429b-351b-b947-c8b53bdd868c.roa (hash: cnf7jvzqbQzrmwDxMHAn+xOVYuuirqcWTQjznae8huQ=) 5: b9fe9136-6711-31b6-a248-652d58c6a9e1.roa (hash: sHBL67/eQiPma6qjVGhiwJnld5zlLG12OEBAJfreogI=) 6: c47e0337-491b-3e57-a6f9-0040b1fabe11.roa (hash: f/p1Eiokq3OPsmP7oFC7Su2dJ/E2Uxn/kp/d9rFPDE4=) 7: d97ee865-1f02-3f65-9877-a6064187b157.roa (hash: nHPlrcbJPqXkXmazjid1yf5WMXx5XG4ZXPb9IP7N/kM=) 8: e604780b-4bf4-362f-9661-294a2090b35c.roa (hash: 5TV40LS2n5DrSWfO5TX9Cm6Pdaq8fAthfDI5XPbGTK8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:8a:66:2f:b5:e5:b5:2c:58:f6:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Validity Not Before: Apr 27 15:00:03 2025 GMT Not After : Apr 30 15:00:00 2025 GMT Subject: CN=d69b3b92-f98e-4e29-83da-64b3b9ccf0de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ac:b5:ee:f8:96:5b:51:ee:49:0f:a8:2e:7a: dc:0b:b1:fe:da:7d:1e:bd:ec:54:20:b1:fb:49:31: 77:00:47:03:34:57:e5:55:09:e3:3c:92:3d:4e:39: 9b:3c:4d:d2:8f:47:15:0c:0b:df:0d:f7:17:a0:a3: 57:b7:74:9e:c7:9c:03:38:86:d0:b3:f2:dc:39:e3: 2c:a7:8e:98:2f:9c:56:df:0c:92:73:93:07:5e:ab: 95:ca:bd:bf:fa:98:5b:ad:45:75:9b:fa:2d:98:c7: 93:bc:a7:20:86:9c:5b:53:06:00:57:24:a4:13:ac: d8:db:45:4b:9b:8b:4f:9c:97:2d:f7:75:61:6c:12: db:76:73:bf:f1:11:64:14:47:9e:12:97:72:ce:18: 18:e6:66:56:aa:cb:b2:70:32:19:5c:a0:85:a8:13: 0f:95:4d:da:37:91:b3:dc:0f:87:4c:f4:59:86:b6: ea:09:42:43:94:13:10:86:80:4b:01:3e:8d:65:e1: b2:73:42:28:f7:e2:52:1c:52:00:fa:bd:15:c7:ba: 00:ab:52:2a:bf:bb:d2:ae:f7:cc:0a:83:28:24:88: ca:52:92:44:47:51:67:b9:df:de:16:da:d6:fe:4f: 45:78:f1:c4:48:35:49:6f:2c:ed:4d:9f:c3:16:54: a6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:45:F0:E7:74:95:40:C1:1C:DF:21:7F:67:AE:05:46:66:BD:35:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl X509v3 Authority Key Identifier: keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:87:1e:d1:2c:a5:60:1b:56:ca:95:55:03:2b:b2:23:24:70: 27:cd:da:8b:fe:84:b2:1d:fb:14:fa:83:5a:2b:f4:33:29:af: 76:18:29:06:8f:e8:fa:1e:cf:53:48:17:2a:b5:e5:3c:1e:2c: bc:d4:9c:a3:f1:12:94:5f:79:12:47:3d:02:fe:a9:79:11:09: 39:44:cb:33:27:64:8c:0b:ed:fa:b1:61:79:e7:0c:c0:d6:5e: 22:f2:0c:f2:db:75:14:72:85:47:15:d0:b6:84:67:17:a3:38: 22:48:e0:28:2a:a9:93:d0:ff:c0:8f:75:79:4b:6d:c2:9d:75: ef:a9:19:3b:c8:59:08:2f:a4:ce:70:02:32:3a:10:2e:57:f5: 5e:1d:97:83:4e:7e:a9:a2:3b:c8:48:fd:f3:b2:11:c3:12:99: 6b:aa:7a:8c:22:97:d8:41:5b:1d:73:d7:f1:aa:ed:1b:2b:74: 98:aa:9b:a3:db:16:07:86:2d:15:db:2c:5b:57:4d:fe:5a:fe: e4:29:02:57:a0:20:e7:f9:ce:43:ef:b8:f8:f9:23:80:4a:7c: dd:95:bb:b0:5b:c6:e1:bb:b0:80:e8:d5:d4:f8:17:8c:03:48: 7b:b0:74:a6:98:25:3a:a8:6b:f5:4f:a6:f8:52:6f:0a:20:2c: ef:a7:ac:14 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmqimYvteW1LFj2UAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNjNzhkNjAtMzRlYi00ZmVkLThlMjUtOTI1Yjk1YTMw YzhlMB4XDTI1MDQyNzE1MDAwM1oXDTI1MDQzMDE1MDAwMFowLzEtMCsGA1UEAxMk ZDY5YjNiOTItZjk4ZS00ZTI5LTgzZGEtNjRiM2I5Y2NmMGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6y17viWW1HuSQ+oLnrcC7H+2n0evexUILH7 STF3AEcDNFflVQnjPJI9TjmbPE3Sj0cVDAvfDfcXoKNXt3Sex5wDOIbQs/LcOeMs p46YL5xW3wySc5MHXquVyr2/+phbrUV1m/otmMeTvKcghpxbUwYAVySkE6zY20VL m4tPnJct93VhbBLbdnO/8RFkFEeeEpdyzhgY5mZWqsuycDIZXKCFqBMPlU3aN5Gz 3A+HTPRZhrbqCUJDlBMQhoBLAT6NZeGyc0Io9+JSHFIA+r0Vx7oAq1Iqv7vSrvfM CoMoJIjKUpJER1Fnud/eFtrW/k9FePHESDVJbyztTZ/DFlSmnwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLJF8Od0lUDBHN8hf2euBUZmvTXmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zM2M3 OGQ2MC0zNGViLTRmZWQtOGUyNS05MjViOTVhMzBjOGUvMzNjNzhkNjAtMzRlYi00 ZmVkLThlMjUtOTI1Yjk1YTMwYzhlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzNjNzhkNjAtMzRlYi00ZmVkLThl MjUtOTI1Yjk1YTMwYzhlLzMzYzc4ZDYwLTM0ZWItNGZlZC04ZTI1LTkyNWI5NWEz MGM4ZS5jcmwwHwYDVR0jBBgwFoAUX2UlsGmXIYLm4tORRne6XDPT4EEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zM2M3OGQ2MC0zNGViLTRmZWQtOGUyNS05MjVi OTVhMzBjOGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBzhx7RLKVgG1bKlVUDK7Ij JHAnzdqL/oSyHfsU+oNaK/QzKa92GCkGj+j6Hs9TSBcqteU8Hiy81Jyj8RKUX3kS Rz0C/ql5EQk5RMszJ2SMC+36sWF55wzA1l4i8gzy23UUcoVHFdC2hGcXozgiSOAo KqmT0P/Aj3V5S23CnXXvqRk7yFkIL6TOcAIyOhAuV/VeHZeDTn6pojvISP3zshHD EplrqnqMIpfYQVsdc9fxqu0bK3SYqpuj2xYHhi0V2yxbV03+Wv7kKQJXoCDn+c5D 77j4+SOASnzdlbuwW8bhu7CA6NXU+BeMA0h7sHSmmCU6qGv1T6b4Um8KICzvp6wU -----END CERTIFICATE-----Generated at Sun Apr 27 22:16:06 2025 by rpki-client