$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.mft File: 1dd8d78a-02cb-46ee-acd1-464f03f3e12a.mft (raw, json) Hash identifier: s9p+QiomsVdMczEqXuxJf1TvFgk553tHf8eIdXrGycM= Subject key identifier: 71:E9:AE:EE:EC:00:5C:1E:8A:E3:98:EA:BF:64:50:83:76:16:E6:66 Authority key identifier: 36:48:5E:C5:9A:6B:CD:87:9A:78:DA:0B:5A:AE:B9:89:1B:98:14:61 Certificate issuer: /CN=1dd8d78a-02cb-46ee-acd1-464f03f3e12a Certificate serial: 010D0C9F43285849A6B3BDF8891BC7BDAAFAAB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.mft Manifest number: 010D0C9F4328584073A84273EC2FD8F2DEC3E7FA Signing time: Sat 26 Apr 2025 06:00:07 +0000 Manifest this update: Sat 26 Apr 2025 06:00:07 +0000 Manifest next update: Mon 28 Apr 2025 06:00:00 +0000 Files and hashes: 1: 14949f9b-6dc4-3f59-ac26-e099378e8cef.roa (hash: sF76Jzo2FqyDUBJp0lDNlJ/a8K7taPz/R95wXX73INc=) 2: 1ad57176-e900-3e39-94fa-b4e612a741a6.roa (hash: 2dAVYP8xNX/KKOSDHTDDrPR5f+3DRtPZeb8FRkIV9x0=) 3: 1dd8d78a-02cb-46ee-acd1-464f03f3e12a.crl (hash: zKlsBqaGwM3n8NCzUjTfqoNlZW68R9V85i5i0eLm0A8=) 4: c7b1674d-de58-3dcc-9f6e-7aa3cc103ff2.roa (hash: ee0JtV7FoxKL1yDrDdjNxnOeYrlxF5/rKx7TPz+IcvQ=) 5: f8368360-af83-3cf4-8c9b-cf3a40d43f65.roa (hash: UUvyOW3uAt/ydce0Y5lnpmriPa8jBhQgeBhG8fRMGd0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:b3:bd:f8:89:1b:c7:bd:aa:fa:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8d78a-02cb-46ee-acd1-464f03f3e12a Validity Not Before: Apr 26 06:00:07 2025 GMT Not After : Apr 28 06:00:00 2025 GMT Subject: CN=28edfa8b-4cfc-4768-b5c5-d3c9cd007f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1f:26:c8:ce:65:75:55:0f:9d:9f:60:84:01: f7:05:77:6a:51:0b:ad:03:8b:bf:a2:bb:d3:59:fb: 51:50:e7:6a:b4:6b:de:cb:ee:4c:23:cd:d2:3b:d3: a9:d1:9e:d0:a3:f9:d8:d5:de:19:7f:ee:0f:7a:55: 4f:56:50:86:76:2f:29:4f:aa:2b:79:a0:31:2a:3e: 79:69:fb:b3:ae:f4:c4:1c:44:8a:19:83:43:58:35: c5:fa:11:27:cb:41:23:d0:20:6a:7a:db:b1:3d:e1: 63:83:50:1a:0e:2f:dc:1f:fd:8b:bf:95:d7:f5:d8: 53:ea:ad:92:85:0d:48:b9:59:b5:f2:03:b6:68:22: 9e:95:e1:32:ca:da:25:20:f1:29:da:dd:7a:3d:ce: 93:18:47:6e:f5:be:66:69:7d:d3:9f:38:71:27:4f: 33:1c:1f:a0:43:6e:94:35:28:54:ad:65:2e:1e:85: 4c:ba:4b:db:b7:a1:91:5a:74:f6:69:73:ab:fc:2e: 0c:59:87:9c:07:02:9f:a2:d0:19:44:bd:60:85:6d: 35:5f:c7:cb:9b:3a:57:95:3a:e3:b7:44:78:34:d6: 84:b5:0f:ea:db:4a:5a:ce:bc:95:14:cd:14:26:23: f4:37:ce:26:14:53:67:b2:d4:f4:65:0e:ff:9d:93: ea:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E9:AE:EE:EC:00:5C:1E:8A:E3:98:EA:BF:64:50:83:76:16:E6:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.crl X509v3 Authority Key Identifier: keyid:36:48:5E:C5:9A:6B:CD:87:9A:78:DA:0B:5A:AE:B9:89:1B:98:14:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:2c:15:37:6c:da:81:4c:a3:a8:26:d0:93:3d:29:1f:cb:4d: 48:39:18:3e:16:17:3e:ff:2f:92:42:0b:af:d7:37:c1:51:0b: 21:cc:75:ed:cb:e6:1e:6c:32:86:b7:d1:59:2e:6e:30:88:97: 4a:a6:91:94:e2:b9:1e:e0:ef:c7:e8:9f:c8:4f:3e:57:ae:64: af:20:6f:9b:65:d6:70:44:69:02:10:ba:03:b4:1c:08:a5:0f: 5a:bc:ee:ad:ed:f8:64:07:9e:c8:b2:be:f9:f2:30:98:dc:d9: a1:d8:78:99:b8:28:82:1c:c2:74:5a:9b:b8:1c:e8:ae:99:f3: 90:d2:09:01:a8:d2:84:dc:b0:c5:8e:cd:2c:52:89:2e:b5:1d: 5e:37:72:16:72:a6:96:dc:0a:b7:f7:84:0b:ec:5a:4c:c7:6b: c4:7b:ae:9b:b1:e0:87:e3:d2:3e:37:db:d7:42:fc:6b:1d:f2: e9:3f:7d:60:aa:b0:ea:f9:da:b0:6c:a2:d7:a2:f6:91:d3:cd: ec:4e:62:94:eb:7c:f4:aa:40:ec:e8:5c:fe:c4:a3:15:7c:ca: ee:45:9c:1f:65:97:39:42:ae:f8:9d:d7:ef:62:a1:12:a0:fd: 68:5a:df:f6:59:db:c8:ff:dd:32:91:9d:09:4f:ab:9a:da:60: 9c:28:53:1d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmms734iRvHvar6qwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGQ3OGEtMDJjYi00NmVlLWFjZDEtNDY0ZjAzZjNl MTJhMB4XDTI1MDQyNjA2MDAwN1oXDTI1MDQyODA2MDAwMFowLzEtMCsGA1UEAxMk MjhlZGZhOGItNGNmYy00NzY4LWI1YzUtZDNjOWNkMDA3ZjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB8myM5ldVUPnZ9ghAH3BXdqUQutA4u/orvT WftRUOdqtGvey+5MI83SO9Op0Z7Qo/nY1d4Zf+4PelVPVlCGdi8pT6oreaAxKj55 afuzrvTEHESKGYNDWDXF+hEny0Ej0CBqetuxPeFjg1AaDi/cH/2Lv5XX9dhT6q2S hQ1IuVm18gO2aCKeleEyytolIPEp2t16Pc6TGEdu9b5maX3TnzhxJ08zHB+gQ26U NShUrWUuHoVMukvbt6GRWnT2aXOr/C4MWYecBwKfotAZRL1ghW01X8fLmzpXlTrj t0R4NNaEtQ/q20pazryVFM0UJiP0N84mFFNnstT0ZQ7/nZPqsQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHHpru7sAFweiuOY6r9kUIN2FuZmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZGQ4 ZDc4YS0wMmNiLTQ2ZWUtYWNkMS00NjRmMDNmM2UxMmEvMWRkOGQ3OGEtMDJjYi00 NmVlLWFjZDEtNDY0ZjAzZjNlMTJhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWRkOGQ3OGEtMDJjYi00NmVlLWFj ZDEtNDY0ZjAzZjNlMTJhLzFkZDhkNzhhLTAyY2ItNDZlZS1hY2QxLTQ2NGYwM2Yz ZTEyYS5jcmwwHwYDVR0jBBgwFoAUNkhexZprzYeaeNoLWq65iRuYFGEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZGQ4ZDc4YS0wMmNiLTQ2ZWUtYWNkMS00NjRm MDNmM2UxMmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBlLBU3bNqBTKOoJtCTPSkf y01IORg+Fhc+/y+SQguv1zfBUQshzHXty+YebDKGt9FZLm4wiJdKppGU4rke4O/H 6J/ITz5XrmSvIG+bZdZwRGkCELoDtBwIpQ9avO6t7fhkB57Isr758jCY3Nmh2HiZ uCiCHMJ0Wpu4HOiumfOQ0gkBqNKE3LDFjs0sUokutR1eN3IWcqaW3Aq394QL7FpM x2vEe66bseCH49I+N9vXQvxrHfLpP31gqrDq+dqwbKLXovaR083sTmKU63z0qkDs 6Fz+xKMVfMruRZwfZZc5Qq74ndfvYqESoP1oWt/2WdvI/90ykZ0JT6ua2mCcKFMd -----END CERTIFICATE-----Generated at Sat Apr 26 19:19:46 2025 by rpki-client