$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.mft File: f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.mft (raw, json) Hash identifier: AO1N+loe/EknOCNucwBtkSfpBCrKhcLFkBFoO0AtoOY= Subject key identifier: 85:79:3E:1F:F2:2F:4B:A2:5A:78:AF:5B:21:AE:C6:71:64:0C:E6:2B Authority key identifier: 9E:CD:96:39:7A:17:63:72:CF:A0:47:47:1E:35:13:B8:73:76:16:E2 Certificate issuer: /CN=f7a32cdf-af4a-47d5-86dc-e9cdcf68c259 Certificate serial: 010D0C9F43285849B096DF107F9CACD0C9326860 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.mft Manifest number: 010D0C9F4328584537FD646E20F66C3527524731 Signing time: Tue 29 Apr 2025 19:00:02 +0000 Manifest this update: Tue 29 Apr 2025 19:00:02 +0000 Manifest next update: Fri 02 May 2025 19:00:00 +0000 Files and hashes: 1: 18f2854e-3606-3853-ad11-93ff0870b62d.roa (hash: 4wpvpxVTdaLfPfiRpcbyOF86GFqYaiUxX6PAYoZwz7U=) 2: 9fa98f84-5902-38d4-b16f-becadb732860.roa (hash: 2jILNZ067vt76mYHNzVWu03RoTni9bUQDU+C+mMAB0I=) 3: c71d851d-85d3-3172-9960-2bfd64241ff0.roa (hash: 8wSRcC76SHCyohutJkrFA9i0255UFF4FzBn9ncFaClk=) 4: f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.crl (hash: zcbtcKodrU9e2C2PhXEqN+Ij57W7S0zDpH/KR/1MP3I=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b0:96:df:10:7f:9c:ac:d0:c9:32:68:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7a32cdf-af4a-47d5-86dc-e9cdcf68c259 Validity Not Before: Apr 29 19:00:02 2025 GMT Not After : May 2 19:00:00 2025 GMT Subject: CN=d5c80312-a360-4c4a-8afb-f70d5e5063cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:03:9c:ef:a6:0d:c8:b2:54:51:fb:46:6f:11: ad:2b:f8:c3:59:51:bb:24:47:ce:7f:32:d8:2b:9f: a8:73:a6:35:4f:b0:24:d6:93:32:11:83:13:29:f9: fc:c2:df:27:bd:e5:6b:ec:70:cb:19:80:b1:f5:72: 25:39:be:9f:02:f2:9d:e3:2d:0e:86:5b:1f:f5:37: 28:ee:e5:64:e5:19:69:06:ba:f4:ab:f8:45:ea:ab: 8d:97:8f:b2:23:23:e5:82:6f:c8:df:58:48:b8:36: cd:ce:19:cb:e6:c7:2c:89:94:69:cc:44:db:56:50: 9f:ce:0f:98:77:cc:ab:7f:13:3c:15:3b:60:d5:1a: 73:d2:d2:d0:c6:a2:f0:8f:d1:11:55:72:9b:04:41: f5:54:69:5a:80:46:20:63:10:4d:ae:ee:4a:be:b5: a7:d8:87:ad:cb:31:19:9d:43:ce:e4:06:61:25:44: 4d:b0:fc:9d:8e:38:15:8c:66:76:8b:dc:b9:6e:d9: 59:2c:91:26:3d:86:86:4f:0b:9d:62:84:db:cf:c8: b7:ad:7b:4f:c4:c0:e2:9c:65:75:a5:eb:e9:50:fb: 09:ea:cc:1d:df:b5:05:3d:a0:48:68:ad:22:3a:ee: 31:e9:63:59:52:fa:11:7a:58:80:ab:12:52:59:fd: 18:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:79:3E:1F:F2:2F:4B:A2:5A:78:AF:5B:21:AE:C6:71:64:0C:E6:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.crl X509v3 Authority Key Identifier: keyid:9E:CD:96:39:7A:17:63:72:CF:A0:47:47:1E:35:13:B8:73:76:16:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:57:11:66:19:3b:d7:d0:b4:12:b9:00:45:bc:7c:04:3b:ef: 1a:b8:88:5f:44:61:4c:94:d9:39:e5:a9:a7:ea:55:59:0b:ad: a8:78:6e:02:41:ce:ff:c5:e0:a9:91:d8:3a:3e:62:af:e2:f8: c9:9d:46:ef:4c:ca:ba:7c:df:80:cf:fd:4f:13:56:cf:02:d1: 11:01:a0:2b:24:d3:23:d9:6d:c9:81:1c:69:5e:81:8d:29:e3: fb:90:47:4b:74:ac:ec:42:94:7c:d9:46:48:4e:c5:93:22:fe: 84:b2:a8:50:57:66:e7:0b:af:d2:9e:b0:a9:a3:37:c7:8c:a5: 17:40:b4:27:0c:fa:80:af:73:a2:98:74:49:77:b8:00:78:7d: 39:52:2f:6f:74:33:bc:67:a6:be:6f:b9:c6:81:98:cc:da:b6: 3f:db:d0:aa:20:af:64:4b:83:88:b4:00:61:fa:4c:6f:bf:21: 08:00:53:1b:13:e2:e8:c3:df:88:5c:39:32:ed:db:61:62:8a: ea:dc:7b:dc:ed:fb:ad:78:80:15:04:c4:8a:af:bf:94:f5:64: 2a:bd:91:86:5f:8b:35:14:6d:3a:44:01:5b:22:a2:e8:d2:84: 10:2e:02:a5:e1:eb:63:51:d0:13:db:67:48:c7:d0:b1:5d:2f: ba:1b:6a:ad -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmwlt8Qf5ys0MkyaGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjdhMzJjZGYtYWY0YS00N2Q1LTg2ZGMtZTljZGNmNjhj MjU5MB4XDTI1MDQyOTE5MDAwMloXDTI1MDUwMjE5MDAwMFowLzEtMCsGA1UEAxMk ZDVjODAzMTItYTM2MC00YzRhLThhZmItZjcwZDVlNTA2M2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQOc76YNyLJUUftGbxGtK/jDWVG7JEfOfzLY K5+oc6Y1T7Ak1pMyEYMTKfn8wt8nveVr7HDLGYCx9XIlOb6fAvKd4y0Ohlsf9Tco 7uVk5RlpBrr0q/hF6quNl4+yIyPlgm/I31hIuDbNzhnL5scsiZRpzETbVlCfzg+Y d8yrfxM8FTtg1Rpz0tLQxqLwj9ERVXKbBEH1VGlagEYgYxBNru5KvrWn2IetyzEZ nUPO5AZhJURNsPydjjgVjGZ2i9y5btlZLJEmPYaGTwudYoTbz8i3rXtPxMDinGV1 pevpUPsJ6swd37UFPaBIaK0iOu4x6WNZUvoReliAqxJSWf0YKwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIV5Ph/yL0uiWnivWyGuxnFkDOYrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mN2Ez MmNkZi1hZjRhLTQ3ZDUtODZkYy1lOWNkY2Y2OGMyNTkvZjdhMzJjZGYtYWY0YS00 N2Q1LTg2ZGMtZTljZGNmNjhjMjU5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZjdhMzJjZGYtYWY0YS00N2Q1LTg2 ZGMtZTljZGNmNjhjMjU5L2Y3YTMyY2RmLWFmNGEtNDdkNS04NmRjLWU5Y2RjZjY4 YzI1OS5jcmwwHwYDVR0jBBgwFoAUns2WOXoXY3LPoEdHHjUTuHN2FuIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mN2EzMmNkZi1hZjRhLTQ3ZDUtODZkYy1lOWNk Y2Y2OGMyNTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCYVxFmGTvX0LQSuQBFvHwE O+8auIhfRGFMlNk55amn6lVZC62oeG4CQc7/xeCpkdg6PmKv4vjJnUbvTMq6fN+A z/1PE1bPAtERAaArJNMj2W3JgRxpXoGNKeP7kEdLdKzsQpR82UZITsWTIv6EsqhQ V2bnC6/SnrCpozfHjKUXQLQnDPqAr3OimHRJd7gAeH05Ui9vdDO8Z6a+b7nGgZjM 2rY/29CqIK9kS4OItABh+kxvvyEIAFMbE+Low9+IXDky7dthYorq3Hvc7futeIAV BMSKr7+U9WQqvZGGX4s1FG06RAFbIqLo0oQQLgKl4etjUdAT22dIx9CxXS+6G2qt -----END CERTIFICATE-----Generated at Wed Apr 30 04:25:28 2025 by rpki-client