$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.mft File: 604a49f2-58d6-4709-bdaf-e7181b613801.mft (raw, json) Hash identifier: 2ZLU2ct3kHxSx+NwyI78sda/5qDv6lof5edRgEGovMk= Subject key identifier: 73:77:B7:19:25:84:4C:DB:49:E3:4D:67:96:AA:F6:A7:79:8B:A1:A7 Authority key identifier: 85:78:22:95:76:5B:FF:E6:81:20:3B:83:B0:3F:AC:B1:74:74:47:7C Certificate issuer: /CN=604a49f2-58d6-4709-bdaf-e7181b613801 Certificate serial: 010D0C9F43285849B57F91B320DAB27AD7134100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.mft Manifest number: 010D0C9F4328584073A84B40EFAB577973049008 Signing time: Thu 01 May 2025 13:12:07 +0000 Manifest this update: Thu 01 May 2025 13:12:07 +0000 Manifest next update: Sun 04 May 2025 09:00:00 +0000 Files and hashes: 1: 0ec50588-0bd7-30b6-a0b6-9e7a8f3e386d.roa (hash: 9bShtOv+2hHXpZ/5kNE8JAs4yYYDmgR/arqw7mSlXHw=) 2: 101ecc3e-4162-3505-9f0d-feddd84a1fef.roa (hash: Xheo2mIgYuf9FCnuF4imQ6uMV5azzUtSzVe6O9LoiVk=) 3: 23d825fa-abf4-3f5c-a138-dea5c5c747f7.roa (hash: VtPW7kPwWsSv/jZSDbn6kv/MDWxHFQ5J5H2QX6JUAXg=) 4: 604a49f2-58d6-4709-bdaf-e7181b613801.crl (hash: sNsSJdiKAfgrOFaVuQY5PyGPmv1L6VEIBTF4vPE2jX8=) 5: c56c342d-12d7-376f-9120-568a7b965d35.roa (hash: mz1qmP01xWi63mlk0vQicXS64zjUOIXoiOzPBtDUcxs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 May 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7f:91:b3:20:da:b2:7a:d7:13:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=604a49f2-58d6-4709-bdaf-e7181b613801 Validity Not Before: May 1 13:12:07 2025 GMT Not After : May 4 09:00:00 2025 GMT Subject: CN=4ad63f11-55f7-493d-8ec1-fab9a580adb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b2:89:97:ff:c6:56:e0:35:dc:a8:8c:76:34: cd:ff:fb:15:ca:18:bd:90:ef:c5:2d:93:3a:7f:90: 28:e4:65:e5:6e:ad:2a:b0:5a:91:82:85:64:61:97: 86:03:ff:8e:cf:92:92:ec:45:f6:2a:5a:2b:4c:81: 33:a0:0b:38:46:57:01:e6:8d:cc:33:86:79:89:5e: 0c:5e:8b:63:fe:77:1b:d9:3b:fd:56:f6:32:a3:4e: a6:20:33:36:1f:70:b5:6d:56:59:bd:0d:78:e6:ba: a4:83:4c:99:90:c4:2c:42:0d:e0:6e:fa:8a:ed:b6: 30:48:cd:c5:36:56:04:a1:a6:61:16:e5:78:58:b5: 1f:ef:56:07:c4:ff:62:b7:45:b1:6f:7c:aa:ee:5e: 28:e2:2f:dc:12:10:74:e9:4f:26:e4:4e:fc:98:25: ed:df:4f:58:da:23:3d:98:f7:fe:3d:87:45:b7:c0: 99:39:05:df:4a:cc:1c:1e:3e:8e:0c:83:ce:c3:e0: ab:da:13:d1:59:10:bb:74:0d:6d:97:18:5d:4f:20: f3:00:bd:7b:b0:d9:15:f0:4d:7b:fa:12:ba:d9:f9: 88:27:31:ac:0a:fd:bf:a5:5f:f5:c0:07:bb:2b:20: 82:7d:ba:11:cd:fd:03:58:91:ac:31:ae:db:17:5d: 7b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:77:B7:19:25:84:4C:DB:49:E3:4D:67:96:AA:F6:A7:79:8B:A1:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.crl X509v3 Authority Key Identifier: keyid:85:78:22:95:76:5B:FF:E6:81:20:3B:83:B0:3F:AC:B1:74:74:47:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:71:a1:b5:de:c1:cd:ef:18:1a:11:3a:bb:40:10:64:0e:77: 68:db:cf:5a:c9:ab:25:ac:46:52:33:6f:cf:d7:54:68:50:71: e3:59:ff:db:2c:35:8f:29:29:54:d9:0e:3c:80:cd:2d:39:ef: 0f:ab:4d:df:33:28:a0:b0:d9:c7:e5:99:cd:1d:fe:a9:be:ec: 63:75:2e:7b:bd:b8:65:84:cd:16:a4:86:5b:03:3a:92:4e:6c: dc:5f:a7:eb:cd:94:f5:34:bb:c8:7d:ae:e6:80:fb:f0:49:29: 6d:b2:c5:d1:f7:26:24:08:4a:b3:5d:6c:19:3c:8a:34:9b:f6: e1:02:3a:db:c2:74:ae:51:54:d3:5e:10:9c:c0:95:a8:4c:c7: 87:fe:8b:cd:94:dd:c7:59:1b:a3:47:c2:13:b6:84:46:41:79: 0c:62:f6:1b:00:3f:74:ed:f9:87:28:e3:25:7c:41:61:79:43: 72:b9:40:94:ca:a0:15:53:4b:a7:a1:55:f9:e8:52:21:c0:4b: 76:61:e2:98:76:15:26:16:c5:3b:f0:04:6a:ff:18:d8:f6:2d: 55:26:0d:d6:60:f5:8f:77:fc:73:fc:c3:b8:2d:74:ea:68:31: 69:bd:e0:29:3d:b0:67:75:78:7f:66:70:3c:1c:af:11:73:72: d9:de:d8:48 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEm1f5GzINqyetcTQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjA0YTQ5ZjItNThkNi00NzA5LWJkYWYtZTcxODFiNjEz ODAxMB4XDTI1MDUwMTEzMTIwN1oXDTI1MDUwNDA5MDAwMFowLzEtMCsGA1UEAxMk NGFkNjNmMTEtNTVmNy00OTNkLThlYzEtZmFiOWE1ODBhZGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLKJl//GVuA13KiMdjTN//sVyhi9kO/FLZM6 f5Ao5GXlbq0qsFqRgoVkYZeGA/+Oz5KS7EX2KlorTIEzoAs4RlcB5o3MM4Z5iV4M Xotj/ncb2Tv9VvYyo06mIDM2H3C1bVZZvQ145rqkg0yZkMQsQg3gbvqK7bYwSM3F NlYEoaZhFuV4WLUf71YHxP9it0Wxb3yq7l4o4i/cEhB06U8m5E78mCXt309Y2iM9 mPf+PYdFt8CZOQXfSswcHj6ODIPOw+Cr2hPRWRC7dA1tlxhdTyDzAL17sNkV8E17 +hK62fmIJzGsCv2/pV/1wAe7KyCCfboRzf0DWJGsMa7bF117vwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHN3txklhEzbSeNNZ5aq9qd5i6GnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MDRh NDlmMi01OGQ2LTQ3MDktYmRhZi1lNzE4MWI2MTM4MDEvNjA0YTQ5ZjItNThkNi00 NzA5LWJkYWYtZTcxODFiNjEzODAxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjA0YTQ5ZjItNThkNi00NzA5LWJk YWYtZTcxODFiNjEzODAxLzYwNGE0OWYyLTU4ZDYtNDcwOS1iZGFmLWU3MTgxYjYx MzgwMS5jcmwwHwYDVR0jBBgwFoAUhXgilXZb/+aBIDuDsD+ssXR0R3wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MDRhNDlmMi01OGQ2LTQ3MDktYmRhZi1lNzE4 MWI2MTM4MDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB3caG13sHN7xgaETq7QBBk Dndo289ayaslrEZSM2/P11RoUHHjWf/bLDWPKSlU2Q48gM0tOe8Pq03fMyigsNnH 5ZnNHf6pvuxjdS57vbhlhM0WpIZbAzqSTmzcX6frzZT1NLvIfa7mgPvwSSltssXR 9yYkCEqzXWwZPIo0m/bhAjrbwnSuUVTTXhCcwJWoTMeH/ovNlN3HWRujR8ITtoRG QXkMYvYbAD907fmHKOMlfEFheUNyuUCUyqAVU0unoVX56FIhwEt2YeKYdhUmFsU7 8ARq/xjY9i1VJg3WYPWPd/xz/MO4LXTqaDFpveApPbBndXh/ZnA8HK8Rc3LZ3thI -----END CERTIFICATE-----Generated at Fri May 2 01:15:28 2025 by rpki-client