$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e/88ab2065-ec65-41b7-b24d-cd8d9c2c276e.mft File: 88ab2065-ec65-41b7-b24d-cd8d9c2c276e.mft (raw, json) Hash identifier: SND+je7mQrch6+8j6SwTI7UNWKZEVxb0YOmjCRo/GBo= Subject key identifier: 77:C4:73:E2:8B:E9:86:2D:AA:63:4E:4E:F1:3C:D9:1C:30:5D:53:1D Authority key identifier: 05:D0:66:4D:05:91:BD:A5:12:9D:86:DF:FE:36:8C:36:01:B9:62:1D Certificate issuer: /CN=88ab2065-ec65-41b7-b24d-cd8d9c2c276e Certificate serial: 010D0C9F43285849AF4F5A5EFB9681E956F21560 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e/88ab2065-ec65-41b7-b24d-cd8d9c2c276e.mft Manifest number: 010D0C9F4328584073A848D65E102F71C6A6C045 Signing time: Tue 29 Apr 2025 08:00:07 +0000 Manifest this update: Tue 29 Apr 2025 08:00:07 +0000 Manifest next update: Fri 02 May 2025 08:00:00 +0000 Files and hashes: 1: 22bea922-373a-3050-a929-ae142e552b24.roa (hash: qXCPsHWU6gNSDLNYv8LplLnzLtPPodFdxqemrLUrhtI=) 2: 53d55cec-431e-39b0-a81e-7d12af083f74.roa (hash: ane5AVmHYkjZXQTfAFtMAiKeNFnl6Y9385CZU+gCzhk=) 3: 62fc55f4-7214-34c6-823b-425446e00dde.roa (hash: VLDSKExM8Q5tCCSC2yzmtuqfCF94ZZfctRdOIlw7fZk=) 4: 88ab2065-ec65-41b7-b24d-cd8d9c2c276e.crl (hash: sEy3EAZeRmTMCPTLP7TdTSB7jep2ooxRE1KPDD2LVJ4=) 5: 9917936b-e626-353f-a546-27306749c69e.roa (hash: jmlGrR9BzDReYcE7ktkki5phjuDBP0cQXm1UyTv4tpU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e/88ab2065-ec65-41b7-b24d-cd8d9c2c276e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e/88ab2065-ec65-41b7-b24d-cd8d9c2c276e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:af:4f:5a:5e:fb:96:81:e9:56:f2:15:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88ab2065-ec65-41b7-b24d-cd8d9c2c276e Validity Not Before: Apr 29 08:00:07 2025 GMT Not After : May 2 08:00:00 2025 GMT Subject: CN=7e61d88e-a44f-4ff2-b48b-0147d006bcde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b0:2a:08:c5:76:2e:5f:4a:76:b8:3a:13:ec: 87:a6:1e:ab:39:10:08:15:a1:56:0e:ed:99:76:07: 06:70:8f:2b:77:2f:2c:0f:46:44:66:e2:9e:7f:f9: 84:e6:5d:a1:0f:34:58:59:a9:bb:ab:ca:7b:74:35: ca:e2:57:9c:3d:dd:fb:9a:0c:ed:3e:8e:2c:50:77: ca:be:9e:3b:94:de:d8:21:93:8e:0a:00:17:5c:29: 5c:c7:0e:55:d6:dd:97:9c:20:47:30:23:95:03:82: 10:da:90:44:15:82:d5:13:71:3e:b5:fd:1c:75:ae: 94:61:70:93:db:22:be:7c:6b:ae:71:d9:06:0a:1d: a3:ed:2f:3e:2c:11:f1:49:74:b8:9e:ef:59:ae:69: 24:35:ba:7d:e5:bc:e4:0c:34:d2:da:1a:8e:25:f1: 4f:2c:71:8f:8f:d8:c4:69:10:b2:34:41:73:c4:a7: 97:06:9c:91:6d:96:41:45:43:93:c6:f2:28:75:35: 15:b7:7e:3d:5a:ab:2a:2b:0f:fc:f4:e7:c9:68:45: ad:e2:6c:8f:42:88:a6:44:aa:19:d3:e8:88:00:f7: 77:27:0d:78:f5:f4:de:94:7a:2f:cd:4b:6c:74:19: bd:c4:d5:e7:bf:7c:72:29:13:0b:1f:14:7f:8f:3d: c5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:C4:73:E2:8B:E9:86:2D:AA:63:4E:4E:F1:3C:D9:1C:30:5D:53:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e/88ab2065-ec65-41b7-b24d-cd8d9c2c276e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e/88ab2065-ec65-41b7-b24d-cd8d9c2c276e.crl X509v3 Authority Key Identifier: keyid:05:D0:66:4D:05:91:BD:A5:12:9D:86:DF:FE:36:8C:36:01:B9:62:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:22:b9:94:0a:da:e1:4a:ee:c6:82:37:c1:60:dd:34:3f:25: 32:d4:1a:ec:86:1e:1a:a4:cc:aa:63:83:f8:99:e2:cd:ea:76: 44:0f:72:ea:27:6a:e7:c1:2b:6c:80:67:24:4b:d8:7b:c2:12: e2:f3:fb:9f:fe:f6:12:80:25:f5:0b:7b:b0:07:fc:0d:15:3d: 45:af:b9:56:fd:62:58:65:89:02:6f:62:69:89:78:3a:20:f1: 1c:6b:da:92:6b:f7:ec:ef:ef:89:5c:47:19:f0:55:3e:d8:c4: 9c:3a:c8:d3:6c:52:31:64:5b:0b:b9:c1:73:e4:f6:00:d7:fd: f3:15:53:8c:42:f7:33:0f:ba:89:b9:b0:ae:25:67:e6:f9:15: ac:8f:a0:0a:ab:6b:55:ee:10:4d:95:65:85:90:53:13:a5:7c: e5:c9:25:55:d2:f9:cb:ab:de:0f:48:39:88:0c:98:36:84:df: b7:da:51:67:c0:f8:6e:9c:73:83:d7:98:c3:57:71:a8:97:05: 89:b9:21:52:42:3e:0e:4e:c3:ce:ed:30:37:39:9a:b6:d2:17: 33:ca:2c:69:c0:01:4c:1c:fc:15:15:43:2f:34:1a:34:53:b3: 81:75:6d:41:79:3f:05:81:bc:54:18:c1:92:cc:d0:9a:89:bf: 74:e0:8e:58 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmvT1pe+5aB6VbyFWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhhYjIwNjUtZWM2NS00MWI3LWIyNGQtY2Q4ZDljMmMy NzZlMB4XDTI1MDQyOTA4MDAwN1oXDTI1MDUwMjA4MDAwMFowLzEtMCsGA1UEAxMk N2U2MWQ4OGUtYTQ0Zi00ZmYyLWI0OGItMDE0N2QwMDZiY2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrAqCMV2Ll9Kdrg6E+yHph6rORAIFaFWDu2Z dgcGcI8rdy8sD0ZEZuKef/mE5l2hDzRYWam7q8p7dDXK4lecPd37mgztPo4sUHfK vp47lN7YIZOOCgAXXClcxw5V1t2XnCBHMCOVA4IQ2pBEFYLVE3E+tf0cda6UYXCT 2yK+fGuucdkGCh2j7S8+LBHxSXS4nu9ZrmkkNbp95bzkDDTS2hqOJfFPLHGPj9jE aRCyNEFzxKeXBpyRbZZBRUOTxvIodTUVt349WqsqKw/89OfJaEWt4myPQoimRKoZ 0+iIAPd3Jw149fTelHovzUtsdBm9xNXnv3xyKRMLHxR/jz3FvwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHfEc+KL6YYtqmNOTvE82RwwXVMdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGFi MjA2NS1lYzY1LTQxYjctYjI0ZC1jZDhkOWMyYzI3NmUvODhhYjIwNjUtZWM2NS00 MWI3LWIyNGQtY2Q4ZDljMmMyNzZlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhhYjIwNjUtZWM2NS00MWI3LWIy NGQtY2Q4ZDljMmMyNzZlLzg4YWIyMDY1LWVjNjUtNDFiNy1iMjRkLWNkOGQ5YzJj Mjc2ZS5jcmwwHwYDVR0jBBgwFoAUBdBmTQWRvaUSnYbf/jaMNgG5Yh0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OGFiMjA2NS1lYzY1LTQxYjctYjI0ZC1jZDhk OWMyYzI3NmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA1IrmUCtrhSu7GgjfBYN00 PyUy1Brshh4apMyqY4P4meLN6nZED3LqJ2rnwStsgGckS9h7whLi8/uf/vYSgCX1 C3uwB/wNFT1Fr7lW/WJYZYkCb2JpiXg6IPEca9qSa/fs7++JXEcZ8FU+2MScOsjT bFIxZFsLucFz5PYA1/3zFVOMQvczD7qJubCuJWfm+RWsj6AKq2tV7hBNlWWFkFMT pXzlySVV0vnLq94PSDmIDJg2hN+32lFnwPhunHOD15jDV3GolwWJuSFSQj4OTsPO 7TA3OZq20hczyixpwAFMHPwVFUMvNBo0U7OBdW1BeT8FgbxUGMGSzNCaib904I5Y -----END CERTIFICATE-----Generated at Tue Apr 29 19:55:07 2025 by rpki-client