$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/581a8b49-a06e-4497-972f-fd8792bfe9dd.mft File: 581a8b49-a06e-4497-972f-fd8792bfe9dd.mft (raw, json) Hash identifier: zbFN33aiH/n1QJ+cEma3/aHoKRmnUlp9RSZtfEdGqWY= Subject key identifier: 7E:44:08:57:51:4C:48:13:68:27:80:C1:40:2A:C8:21:71:8B:1E:FF Authority key identifier: 70:5F:04:3F:F0:07:01:E7:30:D4:3C:E7:1B:F9:84:EB:62:53:4A:46 Certificate issuer: /CN=581a8b49-a06e-4497-972f-fd8792bfe9dd Certificate serial: 010D0C9F43285849A70D13D98DF337CCAF075980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/581a8b49-a06e-4497-972f-fd8792bfe9dd.mft Manifest number: 010D0C9F4328584073A84969DC27396999B67DE2 Signing time: Sat 26 Apr 2025 09:00:07 +0000 Manifest this update: Sat 26 Apr 2025 09:00:07 +0000 Manifest next update: Mon 28 Apr 2025 09:00:00 +0000 Files and hashes: 1: 0c3f5430-239f-317b-b59b-582d1725d1e6.roa (hash: i4PzcxlSuqnuqX3b8ksWS7YcgvXTxgunTIqtBiGfxXE=) 2: 350a606d-940e-30c5-834b-195460eb8f61.roa (hash: K+/gQ+i8jNrXG8k7tWuQjd46xzkv4DxNaQN4K1G0lKA=) 3: 567679c0-162f-3c85-87b9-979c57a46579.roa (hash: fo7tN+vfoF9AD/cO6pPQcLy5c/pjD8mCIFsawXx8JKw=) 4: 581a8b49-a06e-4497-972f-fd8792bfe9dd.crl (hash: Zu8Jloy778m6Dkqy3smgTgOJ9stSFgVoI5CcTGtQZsw=) 5: 6284af02-d42e-3b40-8748-6bee172ebf9c.roa (hash: lYoW29CUa4Uh3l/T8t+C88TIRXaZso2Z2yetnFbtsTM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/581a8b49-a06e-4497-972f-fd8792bfe9dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/581a8b49-a06e-4497-972f-fd8792bfe9dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:0d:13:d9:8d:f3:37:cc:af:07:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=581a8b49-a06e-4497-972f-fd8792bfe9dd Validity Not Before: Apr 26 09:00:07 2025 GMT Not After : Apr 28 09:00:00 2025 GMT Subject: CN=523fef22-af39-47b0-9b74-ccdbd6f7087d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b5:37:c8:c9:74:11:68:cc:67:64:82:51:c7: 29:82:86:1e:45:2f:a6:65:85:08:ab:67:81:b9:ca: 86:e6:fb:7a:c6:64:01:cf:27:b1:e9:89:9c:7f:37: 0b:1e:58:0d:63:d8:fe:9c:65:5b:e3:d2:e2:03:fa: d8:71:77:a8:57:a8:c2:20:f8:d4:22:31:75:39:1b: b1:82:da:5e:7b:6e:b2:1d:d7:b7:f5:e8:72:bf:35: 89:94:d0:32:fb:8a:f9:33:65:78:41:9c:18:06:1c: 7d:ad:2e:a1:4f:4a:a5:c2:cc:d0:d2:f2:f5:9c:5a: 53:be:f7:bf:54:fc:77:86:a6:a8:d9:40:bf:fa:dd: e1:ce:9b:70:57:fb:43:c3:ed:d3:e3:30:26:25:73: 0f:3c:e4:34:b0:a9:a6:f5:a1:6a:04:40:03:6b:4c: 83:3c:58:3a:e7:c7:74:65:ff:4a:fc:db:00:a2:1a: 05:bf:ec:a2:6d:6b:38:f4:ff:54:d3:03:f2:93:a8: e4:53:cc:70:92:88:6b:56:99:3f:41:a3:98:61:d2: 88:df:af:a1:b2:a7:b2:ae:4f:af:28:0d:07:66:6f: f6:ab:17:94:a1:75:2d:2e:8e:68:e2:ae:06:7b:fd: 5e:d7:97:51:13:fb:8a:d6:92:94:e1:e2:8f:2e:12: 1c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:44:08:57:51:4C:48:13:68:27:80:C1:40:2A:C8:21:71:8B:1E:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/581a8b49-a06e-4497-972f-fd8792bfe9dd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/581a8b49-a06e-4497-972f-fd8792bfe9dd.crl X509v3 Authority Key Identifier: keyid:70:5F:04:3F:F0:07:01:E7:30:D4:3C:E7:1B:F9:84:EB:62:53:4A:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:0c:c2:75:bf:9b:a9:7d:b4:95:ab:17:8b:b8:5f:fa:96:94: 71:e4:82:c0:0d:0b:0d:67:35:7c:cc:42:9f:bb:67:17:35:3d: 3a:4f:ea:1b:c9:6e:c0:99:a0:22:7a:6b:48:70:ee:52:55:db: a0:7a:2f:f1:04:f6:68:ea:65:0c:c6:d2:72:7c:ef:4c:62:13: 69:21:a4:39:12:fa:c3:b9:78:c6:27:84:d4:d5:9e:5d:db:68: 0f:9b:a3:6c:1c:58:cd:19:d9:5e:82:42:cf:65:e6:f3:53:e9: 50:7f:5f:c0:79:82:23:db:25:d9:3d:50:8c:bd:6a:7f:12:99: cd:17:a2:de:58:1d:09:86:ef:58:56:62:63:f5:ec:0b:cf:b7: 61:45:a1:0a:d0:a5:92:e8:47:4e:26:44:33:e1:23:9b:0f:c2: 6f:42:02:60:66:a9:ef:dc:49:f0:3a:db:95:98:4d:4b:ea:65: f8:b8:77:84:1d:c3:26:d3:4b:8e:c5:36:25:c2:ac:e7:41:6c: df:05:3c:21:b0:aa:f7:f3:78:d7:33:c3:65:8f:46:cc:f1:f8: 3f:36:65:9c:e5:2f:30:a8:39:b1:b5:28:78:c9:f9:a0:10:32: b4:03:af:05:33:03:4b:16:e7:d3:0a:79:7a:3d:1a:3d:d6:cc: fe:98:26:8a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmnDRPZjfM3zK8HWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTgxYThiNDktYTA2ZS00NDk3LTk3MmYtZmQ4NzkyYmZl OWRkMB4XDTI1MDQyNjA5MDAwN1oXDTI1MDQyODA5MDAwMFowLzEtMCsGA1UEAxMk NTIzZmVmMjItYWYzOS00N2IwLTliNzQtY2NkYmQ2ZjcwODdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbU3yMl0EWjMZ2SCUccpgoYeRS+mZYUIq2eB ucqG5vt6xmQBzyex6YmcfzcLHlgNY9j+nGVb49LiA/rYcXeoV6jCIPjUIjF1ORux gtpee26yHde39ehyvzWJlNAy+4r5M2V4QZwYBhx9rS6hT0qlwszQ0vL1nFpTvve/ VPx3hqao2UC/+t3hzptwV/tDw+3T4zAmJXMPPOQ0sKmm9aFqBEADa0yDPFg658d0 Zf9K/NsAohoFv+yibWs49P9U0wPyk6jkU8xwkohrVpk/QaOYYdKI36+hsqeyrk+v KA0HZm/2qxeUoXUtLo5o4q4Ge/1e15dRE/uK1pKU4eKPLhIcdQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFH5ECFdRTEgTaCeAwUAqyCFxix7/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ODFh OGI0OS1hMDZlLTQ0OTctOTcyZi1mZDg3OTJiZmU5ZGQvNTgxYThiNDktYTA2ZS00 NDk3LTk3MmYtZmQ4NzkyYmZlOWRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTgxYThiNDktYTA2ZS00NDk3LTk3 MmYtZmQ4NzkyYmZlOWRkLzU4MWE4YjQ5LWEwNmUtNDQ5Ny05NzJmLWZkODc5MmJm ZTlkZC5jcmwwHwYDVR0jBBgwFoAUcF8EP/AHAecw1DznG/mE62JTSkYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81ODFhOGI0OS1hMDZlLTQ0OTctOTcyZi1mZDg3 OTJiZmU5ZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCFDMJ1v5upfbSVqxeLuF/6 lpRx5ILADQsNZzV8zEKfu2cXNT06T+obyW7AmaAiemtIcO5SVdugei/xBPZo6mUM xtJyfO9MYhNpIaQ5EvrDuXjGJ4TU1Z5d22gPm6NsHFjNGdlegkLPZebzU+lQf1/A eYIj2yXZPVCMvWp/EpnNF6LeWB0Jhu9YVmJj9ewLz7dhRaEK0KWS6EdOJkQz4SOb D8JvQgJgZqnv3EnwOtuVmE1L6mX4uHeEHcMm00uOxTYlwqznQWzfBTwhsKr383jX M8Nlj0bM8fg/NmWc5S8wqDmxtSh4yfmgEDK0A68FMwNLFufTCnl6PRo91sz+mCaK -----END CERTIFICATE-----Generated at Sat Apr 26 18:00:57 2025 by rpki-client