$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/0679e601-ff38-42c1-9b52-0b5bad96b962.mft File: 0679e601-ff38-42c1-9b52-0b5bad96b962.mft (raw, json) Hash identifier: sI3itxbnUa97eouvRTXnSij1EZDVNM5Ztko1cYmNpn4= Subject key identifier: 63:E0:0E:B8:6A:9B:03:A2:63:11:D1:FA:26:53:F0:FF:12:17:CA:99 Authority key identifier: FC:E6:46:FD:25:DD:20:4C:DC:40:81:53:67:B2:73:B1:B1:5A:1C:91 Certificate issuer: /CN=0679e601-ff38-42c1-9b52-0b5bad96b962 Certificate serial: 010D0C9F43285849AE434FA7EE5A3AF44028D540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/0679e601-ff38-42c1-9b52-0b5bad96b962.mft Manifest number: 010D0C9F4328584073A8301539D94C3473411714 Signing time: Mon 28 Apr 2025 23:00:03 +0000 Manifest this update: Mon 28 Apr 2025 23:00:03 +0000 Manifest next update: Thu 01 May 2025 23:00:00 +0000 Files and hashes: 1: 0679e601-ff38-42c1-9b52-0b5bad96b962.crl (hash: 0DrCgA222RcAbuSWmq7kUfVkxUe7KwBXgEV7mYAeSQE=) 2: 15db4c7f-a0e2-3d65-b833-2756ea3409a4.roa (hash: vhiO13KvQ71w/v7+Mv4jnH1EiweMX+66Fw8lhTrq4DI=) 3: 85a56263-c29e-38d5-839b-4858defa29b7.roa (hash: 7dORcOSdQQm21X39UWWclopg5zGnJZOwXelfC3hpO24=) 4: b8971932-6684-3b08-bdaa-aa9c6fb84f19.roa (hash: JhViJTKS6Bug9Wn7ZfnHQH/OTIPc0FYttMoezNW1R1c=) 5: cbb8c0d7-e501-3e80-a9f5-0edf48a72fb5.roa (hash: boRnA9S9smpP7SMxokOuVdohsbcgoKBj2P/EKaMDtAc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/0679e601-ff38-42c1-9b52-0b5bad96b962.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/0679e601-ff38-42c1-9b52-0b5bad96b962.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ae:43:4f:a7:ee:5a:3a:f4:40:28:d5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0679e601-ff38-42c1-9b52-0b5bad96b962 Validity Not Before: Apr 28 23:00:03 2025 GMT Not After : May 1 23:00:00 2025 GMT Subject: CN=f1944a59-51eb-43d3-a19a-561da8fa2183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:94:da:d6:5b:90:b8:c5:07:03:ce:37:5e:0c: 46:a5:ca:90:9d:bd:f3:51:be:24:5a:38:8a:51:83: c7:a6:c6:1a:04:5b:27:7f:b1:f3:1f:17:6e:2c:5a: 9f:34:2f:53:9d:29:66:01:88:37:1c:a2:9c:ad:bd: a7:bf:d4:00:74:76:8e:3c:9e:53:46:cd:20:82:c9: d9:64:32:49:dd:ca:80:4e:bf:74:87:c0:fe:e4:5f: ec:cf:ae:39:c0:76:3f:53:ad:5f:be:83:64:c0:3a: f3:71:47:2c:a6:f3:58:9b:4e:5e:91:8c:9b:87:bd: 41:eb:be:7b:c2:57:6e:11:e2:6a:c8:95:17:f8:d0: d4:c9:92:a5:96:9f:6c:e5:e6:a4:40:88:3c:98:ee: ac:4d:50:f3:f4:f3:f3:a4:5b:c0:25:c6:e9:3f:ea: f5:47:92:e4:b5:ff:51:84:f1:fb:af:eb:ae:a3:36: b8:2a:8a:ad:48:9d:0f:f6:3f:76:06:0c:36:cb:fe: 89:9d:2e:a4:e4:ce:97:84:8b:72:0e:16:8a:65:02: 4c:d2:e1:74:b7:da:8d:bb:54:88:5a:b5:59:f3:b7: b6:85:b2:b7:de:0d:9e:0d:f1:58:e5:af:4d:c2:e0: 86:51:f5:5c:27:ad:1d:e6:f1:bf:a8:aa:97:e9:d7: 8a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E0:0E:B8:6A:9B:03:A2:63:11:D1:FA:26:53:F0:FF:12:17:CA:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/0679e601-ff38-42c1-9b52-0b5bad96b962.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/0679e601-ff38-42c1-9b52-0b5bad96b962.crl X509v3 Authority Key Identifier: keyid:FC:E6:46:FD:25:DD:20:4C:DC:40:81:53:67:B2:73:B1:B1:5A:1C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:78:82:97:09:e7:fd:2b:13:16:0d:17:3c:af:72:d4:89:8c: a5:20:d4:4b:84:39:85:fa:36:3f:8b:9d:c1:4d:12:d7:2e:b6: 12:c1:f4:34:0d:13:64:3a:64:08:5e:23:6e:86:7b:27:40:35: c1:94:cb:30:72:c2:9b:41:14:fa:46:06:5d:ee:e5:25:78:fb: 42:bd:4c:9a:35:d0:1d:9d:ca:fe:ca:1a:10:16:02:5f:ff:16: 96:d7:86:2e:79:bb:0c:ca:1f:5a:f1:b6:ae:18:41:d1:aa:4c: 3e:6e:bc:5a:64:3c:8a:63:83:0d:aa:17:5f:03:98:2b:a0:f6: a1:2f:aa:08:75:8d:2f:16:5b:3d:80:df:ef:78:e7:b3:92:ca: ef:ff:52:2f:86:cd:98:91:3a:61:69:ad:44:f4:40:94:0a:f3: 40:24:da:19:36:e8:2f:fd:17:b8:18:a6:71:a0:5a:92:50:11: 5f:24:f3:69:83:af:06:5d:b5:1e:6a:f7:0c:b2:b7:bf:a0:5b: 5f:d4:d4:ee:e4:a0:5b:c4:ae:60:d0:0f:79:c9:ac:9a:92:57: e0:bb:dd:6b:a4:b5:f1:68:40:3e:01:10:48:9b:3a:99:d0:dc: 65:b2:39:95:ad:15:17:69:55:a4:f9:ec:4a:d6:62:2d:82:7f: a1:60:96:9e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmuQ0+n7lo69EAo1UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY3OWU2MDEtZmYzOC00MmMxLTliNTItMGI1YmFkOTZi OTYyMB4XDTI1MDQyODIzMDAwM1oXDTI1MDUwMTIzMDAwMFowLzEtMCsGA1UEAxMk ZjE5NDRhNTktNTFlYi00M2QzLWExOWEtNTYxZGE4ZmEyMTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpTa1luQuMUHA843XgxGpcqQnb3zUb4kWjiK UYPHpsYaBFsnf7HzHxduLFqfNC9TnSlmAYg3HKKcrb2nv9QAdHaOPJ5TRs0ggsnZ ZDJJ3cqATr90h8D+5F/sz645wHY/U61fvoNkwDrzcUcspvNYm05ekYybh71B6757 wlduEeJqyJUX+NDUyZKllp9s5eakQIg8mO6sTVDz9PPzpFvAJcbpP+r1R5Lktf9R hPH7r+uuoza4KoqtSJ0P9j92Bgw2y/6JnS6k5M6XhItyDhaKZQJM0uF0t9qNu1SI WrVZ87e2hbK33g2eDfFY5a9NwuCGUfVcJ60d5vG/qKqX6deKeQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGPgDrhqmwOiYxHR+iZT8P8SF8qZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNjc5 ZTYwMS1mZjM4LTQyYzEtOWI1Mi0wYjViYWQ5NmI5NjIvMDY3OWU2MDEtZmYzOC00 MmMxLTliNTItMGI1YmFkOTZiOTYyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDY3OWU2MDEtZmYzOC00MmMxLTli NTItMGI1YmFkOTZiOTYyLzA2NzllNjAxLWZmMzgtNDJjMS05YjUyLTBiNWJhZDk2 Yjk2Mi5jcmwwHwYDVR0jBBgwFoAU/OZG/SXdIEzcQIFTZ7JzsbFaHJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wNjc5ZTYwMS1mZjM4LTQyYzEtOWI1Mi0wYjVi YWQ5NmI5NjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCdeIKXCef9KxMWDRc8r3LU iYylINRLhDmF+jY/i53BTRLXLrYSwfQ0DRNkOmQIXiNuhnsnQDXBlMswcsKbQRT6 RgZd7uUlePtCvUyaNdAdncr+yhoQFgJf/xaW14YuebsMyh9a8bauGEHRqkw+brxa ZDyKY4MNqhdfA5groPahL6oIdY0vFls9gN/veOezksrv/1Ivhs2YkTphaa1E9ECU CvNAJNoZNugv/Re4GKZxoFqSUBFfJPNpg68GXbUeavcMsre/oFtf1NTu5KBbxK5g 0A95yayaklfgu91rpLXxaEA+ARBImzqZ0NxlsjmVrRUXaVWk+exK1mItgn+hYJae -----END CERTIFICATE-----Generated at Tue Apr 29 07:54:02 2025 by rpki-client