$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56/ac260f04-d856-4e9f-9dcc-f16d93c3ab56.mft File: ac260f04-d856-4e9f-9dcc-f16d93c3ab56.mft (raw, json) Hash identifier: nWKomw1n1Rgff0qqt3Bk8pzopmXCOa3S4BWmVJyTTrk= Subject key identifier: 32:A9:47:03:F0:BD:01:A9:DC:91:13:02:22:E5:C5:32:BD:00:EC:71 Authority key identifier: EF:21:21:E4:9F:CD:F3:A0:53:A1:8C:0C:1F:BD:01:6B:99:6C:8B:9B Certificate issuer: /CN=ac260f04-d856-4e9f-9dcc-f16d93c3ab56 Certificate serial: 010D0C9F43285849A5E34346B2A9CEBF062FE680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56/ac260f04-d856-4e9f-9dcc-f16d93c3ab56.mft Manifest number: 010D0C9F4328584073A82F858FC2A6F70D11ED44 Signing time: Fri 25 Apr 2025 23:00:03 +0000 Manifest this update: Fri 25 Apr 2025 23:00:03 +0000 Manifest next update: Sun 27 Apr 2025 23:00:00 +0000 Files and hashes: 1: ac260f04-d856-4e9f-9dcc-f16d93c3ab56.crl (hash: kPHqEqWCEMOxPnpKyjfQcy3y/BZy3uSYCfpKvzxoxj4=) 2: b46460c6-16e8-3a48-8444-3a9c50536a3e.roa (hash: DckY1gzAtMEV+d01Qcs7KX/FBRdvsu45GWS+s4Kzhpo=) 3: cb06c18f-321b-3017-a621-94bd297303bd.roa (hash: 2C5yKT7j3RhnJIa+TghJ/cxoX/KdxbcBr7YBmXhx0gA=) 4: dceb4a7f-6a33-3d77-9d2b-b2b7e7fd739d.roa (hash: 1psNjIlQjn2sSsRHcAOrec5mEIivmtK+fBPOUklfDPM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56/ac260f04-d856-4e9f-9dcc-f16d93c3ab56.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56/ac260f04-d856-4e9f-9dcc-f16d93c3ab56.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a5:e3:43:46:b2:a9:ce:bf:06:2f:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac260f04-d856-4e9f-9dcc-f16d93c3ab56 Validity Not Before: Apr 25 23:00:03 2025 GMT Not After : Apr 27 23:00:00 2025 GMT Subject: CN=826fa48a-5959-4df4-91f7-52bb08f122f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7c:b8:b4:21:28:d6:a6:a1:d8:ac:26:c8:2d: 56:b3:07:fb:23:e7:dd:1c:7b:93:b4:3e:e8:25:e9: 78:62:90:9d:10:19:73:6c:68:5b:84:e6:6f:c1:59: 36:0a:d4:6b:bf:7e:e1:ee:16:a4:1d:fe:ec:88:99: ed:1a:cd:65:08:f8:83:cd:ed:d6:02:55:eb:bc:1b: 23:36:45:ff:49:05:4d:a0:61:11:9b:b7:a6:ef:68: 25:98:81:9b:97:8e:d7:4c:ec:44:a0:4f:6a:33:fb: c4:5c:9c:f3:48:83:86:cf:81:c6:bd:5f:ad:ce:78: 01:91:a2:78:00:d5:66:4d:b8:22:9e:74:20:fb:24: 33:97:e3:78:5d:27:dd:de:04:71:59:b0:76:b6:2b: a6:53:e2:99:6c:f2:bf:ea:02:cf:59:74:c1:6a:52: 39:3e:53:fd:e2:b5:a7:8d:64:f3:5b:2b:da:a3:22: 1e:dd:3b:28:e5:ab:4e:5c:a9:90:47:40:52:ab:72: ea:88:1f:ee:13:92:8c:c9:01:d7:1a:7f:3d:90:cd: 87:79:0b:71:bc:ff:13:df:20:f2:7f:5b:de:8a:39: 3d:49:18:6f:c6:f8:0a:65:d9:e1:f3:eb:97:5d:97: d4:73:fe:a8:42:18:f1:99:c7:4e:ee:a4:e3:5c:0d: 62:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A9:47:03:F0:BD:01:A9:DC:91:13:02:22:E5:C5:32:BD:00:EC:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56/ac260f04-d856-4e9f-9dcc-f16d93c3ab56.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56/ac260f04-d856-4e9f-9dcc-f16d93c3ab56.crl X509v3 Authority Key Identifier: keyid:EF:21:21:E4:9F:CD:F3:A0:53:A1:8C:0C:1F:BD:01:6B:99:6C:8B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:82:99:ba:d9:4e:5e:82:00:d2:7a:15:18:0f:66:3f:34:a4: fd:27:94:f2:da:87:f0:a6:62:9e:38:2f:ce:ae:26:af:b3:63: f5:70:52:71:1e:dd:f3:92:9a:90:f2:ab:a2:67:9d:4f:fa:90: 7e:90:96:2f:bf:4f:04:2e:6e:a4:9d:f7:98:c5:a1:7d:fc:65: 8b:fc:dd:f5:3d:da:cc:d2:c0:d6:1c:7b:26:d7:83:c9:da:1a: 53:aa:a0:09:1b:3a:ec:80:4e:c6:cd:5a:d5:a5:a9:d8:b8:2a: bf:93:18:7e:a8:18:f3:85:db:43:d2:7c:75:7d:de:6e:c3:36: a6:0f:dd:04:f8:bb:ab:3b:53:94:d1:a5:c1:d2:10:04:f7:18: bc:1c:4f:45:e5:e8:65:2b:c7:9c:d0:2b:e8:a5:3b:80:64:23: c7:2b:75:9a:62:8b:bc:fc:68:03:60:c2:bc:f1:d4:97:98:c9: c8:7c:ad:ad:e5:b4:49:48:40:21:df:7d:2f:40:23:f7:81:ab: c3:ac:46:7c:c2:d7:d0:82:90:ca:3e:cc:15:a8:24:41:1b:cc: 08:12:34:83:0e:e9:c3:4f:84:89:96:ff:16:cf:e2:8b:93:7e: dd:fa:7e:ba:19:3a:25:e0:74:6d:c2:6e:23:98:5d:4e:3c:b3: 7f:7c:f6:5b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEml40NGsqnOvwYv5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWMyNjBmMDQtZDg1Ni00ZTlmLTlkY2MtZjE2ZDkzYzNh YjU2MB4XDTI1MDQyNTIzMDAwM1oXDTI1MDQyNzIzMDAwMFowLzEtMCsGA1UEAxMk ODI2ZmE0OGEtNTk1OS00ZGY0LTkxZjctNTJiYjA4ZjEyMmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuny4tCEo1qah2KwmyC1Wswf7I+fdHHuTtD7o Jel4YpCdEBlzbGhbhOZvwVk2CtRrv37h7hakHf7siJntGs1lCPiDze3WAlXrvBsj NkX/SQVNoGERm7em72glmIGbl47XTOxEoE9qM/vEXJzzSIOGz4HGvV+tzngBkaJ4 ANVmTbginnQg+yQzl+N4XSfd3gRxWbB2tiumU+KZbPK/6gLPWXTBalI5PlP94rWn jWTzWyvaoyIe3Tso5atOXKmQR0BSq3LqiB/uE5KMyQHXGn89kM2HeQtxvP8T3yDy f1veijk9SRhvxvgKZdnh8+uXXZfUc/6oQhjxmcdO7qTjXA1iIwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDKpRwPwvQGp3JETAiLlxTK9AOxxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzI2 MGYwNC1kODU2LTRlOWYtOWRjYy1mMTZkOTNjM2FiNTYvYWMyNjBmMDQtZDg1Ni00 ZTlmLTlkY2MtZjE2ZDkzYzNhYjU2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWMyNjBmMDQtZDg1Ni00ZTlmLTlk Y2MtZjE2ZDkzYzNhYjU2L2FjMjYwZjA0LWQ4NTYtNGU5Zi05ZGNjLWYxNmQ5M2Mz YWI1Ni5jcmwwHwYDVR0jBBgwFoAU7yEh5J/N86BToYwMH70Ba5lsi5swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzI2MGYwNC1kODU2LTRlOWYtOWRjYy1mMTZk OTNjM2FiNTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCxgpm62U5eggDSehUYD2Y/ NKT9J5Ty2ofwpmKeOC/Oriavs2P1cFJxHt3zkpqQ8quiZ51P+pB+kJYvv08ELm6k nfeYxaF9/GWL/N31PdrM0sDWHHsm14PJ2hpTqqAJGzrsgE7GzVrVpanYuCq/kxh+ qBjzhdtD0nx1fd5uwzamD90E+LurO1OU0aXB0hAE9xi8HE9F5ehlK8ec0CvopTuA ZCPHK3WaYou8/GgDYMK88dSXmMnIfK2t5bRJSEAh330vQCP3gavDrEZ8wtfQgpDK PswVqCRBG8wIEjSDDunDT4SJlv8Wz+KLk37d+n66GTol4HRtwm4jmF1OPLN/fPZb -----END CERTIFICATE-----Generated at Sat Apr 26 19:55:45 2025 by rpki-client