$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.mft File: 8322c61d-99cf-48fc-b867-b2c2cce4d324.mft (raw, json) Hash identifier: 4cnwyjExhQTG1nwHvFkFtTJQZY8HgsjYgvWV78wDwVg= Subject key identifier: 5C:ED:79:9F:C0:AB:5F:61:0B:B5:56:B3:88:55:ED:A6:2D:58:59:E4 Authority key identifier: 23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA Certificate issuer: /CN=8322c61d-99cf-48fc-b867-b2c2cce4d324 Certificate serial: 010D0C9F43285849ABB4389ABC78DF12C4E29900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.mft Manifest number: 010D0C9F4328584073A834B047174291E7698B09 Signing time: Mon 28 Apr 2025 01:00:07 +0000 Manifest this update: Mon 28 Apr 2025 01:00:07 +0000 Manifest next update: Wed 30 Apr 2025 01:00:00 +0000 Files and hashes: 1: 12121739-ba19-3a49-a1ce-88a3e9cad17f.roa (hash: COMZbA0VOU9okzYgVge8pqZXk5CvGbAz5NzHxUG1KRc=) 2: 34ce1e22-d80b-3394-974b-ed5e2ba8c51d.roa (hash: L+AbanZvrS53mqPBqAwqG5Mch8ZGjj3NkpjSOCo03fg=) 3: 36bdb9f6-a9aa-3c34-b7fc-b79ba39abbb5.roa (hash: rxSY4kmaxlOnnJusGcEUP9BxJwVLW8osKR3d9ZdlOuo=) 4: 3a41c66c-7e29-38fb-9f24-8df2f5fd953f.roa (hash: 7SDNmDIGq3sIxjbGc56Z52gIZd6A3jEDfOxBRhhdjJ8=) 5: 8322c61d-99cf-48fc-b867-b2c2cce4d324.crl (hash: 4/JGX9b/Ddp+UylK057QsXtzWcsHQNwfCKWlIc2R3Qk=) 6: dfe95880-e08c-3c88-ba0f-676ebf56bd93.roa (hash: JaqSYuxdAYTolN1RUkgS/6cbjgGDKkMq8Q60I5j1LWw=) 7: f51b59c2-dbdd-3e38-9a36-408bdbdd9594.roa (hash: Vs4SUNO6kcAKyuyIzfVGAYVOmKZOhMvOWNEjUjb8ByU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:38:9a:bc:78:df:12:c4:e2:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8322c61d-99cf-48fc-b867-b2c2cce4d324 Validity Not Before: Apr 28 01:00:07 2025 GMT Not After : Apr 30 01:00:00 2025 GMT Subject: CN=6286cddb-dcd2-4453-8d6e-1d02b3f1409a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a8:7d:5c:fd:b1:62:11:53:cb:1e:23:d3:0a: 13:ad:f3:7d:a1:49:e7:6c:7f:8d:12:89:d7:19:bd: e4:05:2f:cc:c2:8f:9b:bd:b7:b7:17:eb:04:2a:07: ed:7c:08:1f:5f:b5:80:3e:e4:b4:ac:31:9d:0f:e2: 8a:1f:56:25:17:78:77:31:2b:e5:32:1c:f0:61:68: 08:f6:25:5e:3d:72:62:83:8e:bb:64:b9:1e:ed:69: 12:9a:2e:37:e2:0c:17:18:bf:c0:76:b8:32:a9:8f: b3:d9:5d:23:c2:7c:5f:c2:62:e2:09:76:15:e7:bc: 04:0a:b2:66:d1:db:53:e2:ae:a0:6e:f4:86:29:8c: af:08:95:ba:bc:40:ac:21:72:5f:79:2e:5f:26:1d: 2d:16:14:49:61:9b:d7:51:4c:31:9c:8f:0f:40:08: 03:62:56:16:c4:91:4f:45:0c:b2:94:bc:ce:29:e2: eb:f1:54:ca:e5:fb:09:c4:62:f1:28:2e:0c:9f:a5: fa:bd:ef:d2:58:e0:db:f1:df:fa:d0:a5:77:c1:51: c7:2b:4d:ca:39:7f:ea:a4:c3:b4:22:77:86:e9:ae: a1:c5:a9:1e:a5:02:5a:83:ff:cb:3a:0b:2f:93:d6: b6:c3:e5:89:a8:6c:ee:f2:dd:2f:8d:41:a1:19:e9: 57:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:ED:79:9F:C0:AB:5F:61:0B:B5:56:B3:88:55:ED:A6:2D:58:59:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl X509v3 Authority Key Identifier: keyid:23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:5f:75:82:3c:a2:04:da:d5:b1:0d:68:d6:3a:78:9d:a7:09: 85:13:ed:55:5e:26:84:9a:78:b5:40:21:9d:13:f8:0a:10:33: eb:86:4d:10:fb:34:12:ec:1d:c6:95:ef:dd:30:35:4d:59:f7: 5c:7f:df:c6:52:a9:e4:6f:ad:43:f0:46:81:06:3d:74:e2:f9: 90:a0:33:a1:19:d7:95:5a:b0:7e:a2:a8:63:7f:de:b0:e9:73: ee:7e:07:6d:cc:dc:ce:ec:f4:2f:05:7d:0d:c0:8b:e0:4d:56: 57:be:e8:6e:aa:b3:ed:f2:6c:bb:a2:8e:48:f2:ca:c7:60:64: bc:54:f0:10:0e:c2:8b:82:94:2d:8d:aa:b0:d1:80:67:19:fb: a1:2e:d7:2b:df:55:00:a8:88:04:f4:83:c8:61:9c:12:1b:1b: 80:49:93:f6:71:45:0f:20:61:82:fb:f8:a8:c4:a0:a3:7c:38: bd:2d:bb:9e:22:7c:f2:83:a6:fc:93:86:f2:a3:28:72:e5:b7: c1:a6:65:2b:31:13:67:43:82:55:61:08:eb:1f:4c:21:cf:9f: cb:0a:64:35:8f:2e:a5:0e:f8:51:83:ee:1f:86:8b:0b:ac:2c: fb:93:0f:42:fe:4a:5d:8d:da:55:c9:55:55:92:26:32:0b:45: 8c:de:b4:6a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmrtDiavHjfEsTimQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMyMmM2MWQtOTljZi00OGZjLWI4NjctYjJjMmNjZTRk MzI0MB4XDTI1MDQyODAxMDAwN1oXDTI1MDQzMDAxMDAwMFowLzEtMCsGA1UEAxMk NjI4NmNkZGItZGNkMi00NDUzLThkNmUtMWQwMmIzZjE0MDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApah9XP2xYhFTyx4j0woTrfN9oUnnbH+NEonX Gb3kBS/Mwo+bvbe3F+sEKgftfAgfX7WAPuS0rDGdD+KKH1YlF3h3MSvlMhzwYWgI 9iVePXJig467ZLke7WkSmi434gwXGL/AdrgyqY+z2V0jwnxfwmLiCXYV57wECrJm 0dtT4q6gbvSGKYyvCJW6vECsIXJfeS5fJh0tFhRJYZvXUUwxnI8PQAgDYlYWxJFP RQyylLzOKeLr8VTK5fsJxGLxKC4Mn6X6ve/SWODb8d/60KV3wVHHK03KOX/qpMO0 IneG6a6hxakepQJag//LOgsvk9a2w+WJqGzu8t0vjUGhGelXAwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFzteZ/Aq19hC7VWs4hV7aYtWFnkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MzIy YzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMyY2NlNGQzMjQvODMyMmM2MWQtOTljZi00 OGZjLWI4NjctYjJjMmNjZTRkMzI0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODMyMmM2MWQtOTljZi00OGZjLWI4 NjctYjJjMmNjZTRkMzI0LzgzMjJjNjFkLTk5Y2YtNDhmYy1iODY3LWIyYzJjY2U0 ZDMyNC5jcmwwHwYDVR0jBBgwFoAUI+zNJQcutthFqfAEhrqRbZCPuPowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MzIyYzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMy Y2NlNGQzMjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQABX3WCPKIE2tWxDWjWOnid pwmFE+1VXiaEmni1QCGdE/gKEDPrhk0Q+zQS7B3Gle/dMDVNWfdcf9/GUqnkb61D 8EaBBj104vmQoDOhGdeVWrB+oqhjf96w6XPufgdtzNzO7PQvBX0NwIvgTVZXvuhu qrPt8my7oo5I8srHYGS8VPAQDsKLgpQtjaqw0YBnGfuhLtcr31UAqIgE9IPIYZwS GxuASZP2cUUPIGGC+/ioxKCjfDi9LbueInzyg6b8k4byoyhy5bfBpmUrMRNnQ4JV YQjrH0whz5/LCmQ1jy6lDvhRg+4fhosLrCz7kw9C/kpdjdpVyVVVkiYyC0WM3rRq -----END CERTIFICATE-----Generated at Mon Apr 28 12:33:45 2025 by rpki-client