$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.mft File: 7f900e4e-5f0a-4b14-98c0-6647bff5e64e.mft (raw, json) Hash identifier: KwrsXj9vJfYqKOIJWR+GSBVVkHdGhUVhGmARm8X3mBA= Subject key identifier: AD:8F:80:D3:11:30:C0:9E:8A:54:95:1C:A9:B5:98:CA:75:11:1D:04 Authority key identifier: F3:E5:8A:D2:B8:EF:87:D7:3E:80:88:32:FE:7B:A3:A3:0B:F5:C4:A0 Certificate issuer: /CN=7f900e4e-5f0a-4b14-98c0-6647bff5e64e Certificate serial: 010D0C9F43285849A9D7C3D1E17F3C7E2B6DF480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.mft Manifest number: 010D0C9F4328584073A84C39376BC697A05F2EF7 Signing time: Sun 27 Apr 2025 09:00:07 +0000 Manifest this update: Sun 27 Apr 2025 09:00:07 +0000 Manifest next update: Wed 30 Apr 2025 09:00:00 +0000 Files and hashes: 1: 350e638e-f9b0-39e9-b359-52ea50ce6dd4.roa (hash: 3MPpTM+Ctf5htI4HkXve+cfSPhTcLNNRXVCaKG7d+aI=) 2: 693b043c-7dd0-3e66-9b30-96dc0a32abd1.roa (hash: chxH9JgNy8/u2dIMwC7BAj+x/+hmMf5Vn3xPk+ONp4U=) 3: 69c85a7e-5c7c-3cbc-8360-f4b315370081.roa (hash: 86J+KW/CetWgn1UAuxmrw037LYAd0X7zaOxR8r+XDEk=) 4: 7f900e4e-5f0a-4b14-98c0-6647bff5e64e.crl (hash: dDeOveTraH4gqQmRXJ9s3ug5YWO/vqaBaO11Id4T/AM=) 5: 900974d7-8989-307f-a8dd-f27fbe573f09.roa (hash: D28WxPx0DbSnGKOPeOxO/2tFB3XyiiAT7q1dstR9G2k=) 6: d3d52428-3366-3940-ba48-6c79fec227e0.roa (hash: XoNT6OeDS2d5cJxcoX2Imx4XbB4LMNRhT7CzbaqUm6o=) 7: e7103f53-8715-3d60-9b51-c7bb1d74637b.roa (hash: GjAiwuaf/Qz3g5riszTVMweKsa0FhCyHcQiajGD+Jd0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a9:d7:c3:d1:e1:7f:3c:7e:2b:6d:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f900e4e-5f0a-4b14-98c0-6647bff5e64e Validity Not Before: Apr 27 09:00:07 2025 GMT Not After : Apr 30 09:00:00 2025 GMT Subject: CN=5877e346-b388-47bd-afb1-9b291d6c40da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5f:6d:0d:0d:c6:a0:44:16:21:f2:63:b7:90: 26:eb:3f:2e:a7:a0:70:f9:66:9b:cc:08:df:73:8f: bd:7f:a8:45:ab:7e:1c:c2:fd:04:35:56:f4:79:0c: 3c:25:a6:ea:f0:c4:5c:f8:05:76:b7:03:df:d6:00: 2e:0b:3c:d7:06:8d:25:f8:53:f7:41:a7:fa:1d:0a: 2f:17:f3:48:b0:57:60:dd:9f:6d:f2:7a:d8:af:fc: f9:73:43:6f:c2:4c:21:00:af:5c:99:67:d4:5e:c0: b9:2c:0d:32:d9:db:a0:51:b4:00:ec:4e:66:e5:b6: 13:06:dd:f5:05:91:a5:95:7a:ac:0a:50:01:07:76: 79:72:e8:89:d4:1c:c6:e1:6e:1e:f0:ef:c9:a5:12: 8a:dd:df:57:11:b6:5e:bf:0f:71:d9:f7:33:f5:85: 16:88:03:b6:9f:0d:b1:99:fc:d9:0f:a2:21:4d:cd: 68:41:f8:2e:87:4c:0a:a6:cb:0e:e4:cb:9f:e1:bd: b8:95:9e:db:89:25:28:a7:3b:e8:e6:da:7d:9b:15: bc:97:ef:7d:95:56:ab:db:be:3e:81:cc:9d:4e:e3: e7:d7:01:d3:5f:f9:71:34:d0:7b:fa:5a:e7:89:44: a1:ed:88:3d:39:7f:a8:3d:68:b7:9f:f3:fa:20:d2: 63:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:8F:80:D3:11:30:C0:9E:8A:54:95:1C:A9:B5:98:CA:75:11:1D:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.crl X509v3 Authority Key Identifier: keyid:F3:E5:8A:D2:B8:EF:87:D7:3E:80:88:32:FE:7B:A3:A3:0B:F5:C4:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:24:e3:6b:13:3e:df:a2:a5:f1:6c:34:58:08:0d:92:63:ac: 31:0b:8d:6d:07:50:2e:3a:1d:90:fd:a5:fa:34:fc:23:d5:fe: 85:ff:d3:fa:fd:30:e7:de:48:74:5b:5a:49:0f:23:87:d9:83: da:79:20:22:bb:09:28:49:f3:33:84:78:86:71:cc:1f:80:03: b8:1b:9b:08:d6:b8:d9:ad:e2:27:f0:95:73:20:3a:33:50:5b: 59:f3:66:ee:d2:62:a9:3e:d9:84:77:05:66:cf:a4:21:a3:55: 50:9d:1e:98:33:d3:45:6b:a0:82:b9:01:61:8f:25:e8:92:59: 95:a3:45:2a:0c:6d:c7:65:0d:95:74:9b:89:bc:55:6f:52:b6: 75:48:56:b5:3d:c1:b7:4a:7b:b1:ff:03:77:1d:b2:46:d6:c1: 4f:a3:1d:bd:3f:b9:89:b6:62:54:97:2b:c0:6e:2b:d8:e3:70: 94:70:17:cb:2d:28:88:8f:1d:b8:01:55:e2:d9:e7:76:2d:f1: 60:b7:8d:6b:c2:27:b0:77:79:71:02:d6:53:1e:7d:e6:45:ce: a7:95:c5:64:8e:80:b6:ab:4d:c4:2d:2d:08:bb:b4:28:c7:bb: a4:65:d6:f9:59:52:24:54:dc:6a:65:01:2e:ff:bf:d8:35:9b: 2d:ae:de:e5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmp18PR4X88fitt9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Y5MDBlNGUtNWYwYS00YjE0LTk4YzAtNjY0N2JmZjVl NjRlMB4XDTI1MDQyNzA5MDAwN1oXDTI1MDQzMDA5MDAwMFowLzEtMCsGA1UEAxMk NTg3N2UzNDYtYjM4OC00N2JkLWFmYjEtOWIyOTFkNmM0MGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmF9tDQ3GoEQWIfJjt5Am6z8up6Bw+WabzAjf c4+9f6hFq34cwv0ENVb0eQw8Jabq8MRc+AV2twPf1gAuCzzXBo0l+FP3Qaf6HQov F/NIsFdg3Z9t8nrYr/z5c0NvwkwhAK9cmWfUXsC5LA0y2dugUbQA7E5m5bYTBt31 BZGllXqsClABB3Z5cuiJ1BzG4W4e8O/JpRKK3d9XEbZevw9x2fcz9YUWiAO2nw2x mfzZD6IhTc1oQfguh0wKpssO5Muf4b24lZ7biSUopzvo5tp9mxW8l+99lVar274+ gcydTuPn1wHTX/lxNNB7+lrniUSh7Yg9OX+oPWi3n/P6INJjeQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFK2PgNMRMMCeilSVHKm1mMp1ER0EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83Zjkw MGU0ZS01ZjBhLTRiMTQtOThjMC02NjQ3YmZmNWU2NGUvN2Y5MDBlNGUtNWYwYS00 YjE0LTk4YzAtNjY0N2JmZjVlNjRlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2Y5MDBlNGUtNWYwYS00YjE0LTk4 YzAtNjY0N2JmZjVlNjRlLzdmOTAwZTRlLTVmMGEtNGIxNC05OGMwLTY2NDdiZmY1 ZTY0ZS5jcmwwHwYDVR0jBBgwFoAU8+WK0rjvh9c+gIgy/nujowv1xKAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZjkwMGU0ZS01ZjBhLTRiMTQtOThjMC02NjQ3 YmZmNWU2NGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBPJONrEz7foqXxbDRYCA2S Y6wxC41tB1AuOh2Q/aX6NPwj1f6F/9P6/TDn3kh0W1pJDyOH2YPaeSAiuwkoSfMz hHiGccwfgAO4G5sI1rjZreIn8JVzIDozUFtZ82bu0mKpPtmEdwVmz6Qho1VQnR6Y M9NFa6CCuQFhjyXoklmVo0UqDG3HZQ2VdJuJvFVvUrZ1SFa1PcG3Snux/wN3HbJG 1sFPox29P7mJtmJUlyvAbivY43CUcBfLLSiIjx24AVXi2ed2LfFgt41rwiewd3lx AtZTHn3mRc6nlcVkjoC2q03ELS0Iu7Qox7ukZdb5WVIkVNxqZQEu/7/YNZstrt7l -----END CERTIFICATE-----Generated at Mon Apr 28 03:23:26 2025 by rpki-client