$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.mft File: c057d9a7-8f3f-4c97-9503-e2a936c27c7b.mft (raw, json) Hash identifier: B1FhlAZEwUpMxjBpif+o9Yx/9D61HXWuaAUMm8vOdQE= Subject key identifier: 83:E6:B4:B6:1B:45:74:8E:B2:A0:78:00:3D:43:1A:33:82:59:F3:5C Authority key identifier: 5F:FC:6F:16:2F:93:08:ED:CA:F2:1D:62:E6:3C:59:3D:85:58:13:64 Certificate issuer: /CN=c057d9a7-8f3f-4c97-9503-e2a936c27c7b Certificate serial: 010D0C9F43285849AEBA6D9FA586F3E2C12B5D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.mft Manifest number: 010D0C9F4328584073A83A5B787AC8596C7E254A Signing time: Tue 29 Apr 2025 03:00:03 +0000 Manifest this update: Tue 29 Apr 2025 03:00:03 +0000 Manifest next update: Fri 02 May 2025 03:00:00 +0000 Files and hashes: 1: 5a6c99b5-0f9c-330e-91eb-b2bddf673fa3.roa (hash: Di1O+4ZieWkuvHNlyfagocGlZ/VZK4GZNW4Zn6NOfSg=) 2: c057d9a7-8f3f-4c97-9503-e2a936c27c7b.crl (hash: YX50kKGhvNuHu9rmQe9hXpvU9A25WKsoWsdjenY8mek=) 3: d83b099f-7012-3a33-a612-37aa394fe4f5.roa (hash: 39hG7+ww8fhzIiTPubnoNeR4u20g6RVcieuHfRbCi5I=) 4: e84cb9af-b706-3cf4-8dd9-7e233014e201.roa (hash: vi33QNflCWvfQVrtntwV1qzv0H05e4cZNtpAt6pLGyo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ae:ba:6d:9f:a5:86:f3:e2:c1:2b:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c057d9a7-8f3f-4c97-9503-e2a936c27c7b Validity Not Before: Apr 29 03:00:03 2025 GMT Not After : May 2 03:00:00 2025 GMT Subject: CN=9581f71d-6466-4169-a1ad-e4db34207c05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5e:de:c4:e7:a6:a7:03:c8:78:d8:bd:45:45: 7c:f3:9d:7f:da:59:ea:1a:1e:23:c4:c9:9d:26:9c: 5c:8f:c0:a8:03:c9:27:13:53:88:c4:6a:47:7b:b9: f3:cd:87:1a:8e:3e:65:98:d8:e9:26:36:75:7d:57: 5d:4a:94:f9:0d:fb:b0:1d:a7:8a:5d:24:2c:2a:ab: ce:f6:e5:3a:29:41:72:18:4c:ec:fd:8f:be:82:5a: 21:6e:47:8c:aa:05:2b:55:62:7e:b7:5f:83:53:7f: 49:c5:a1:76:d5:15:1a:9a:ce:8c:b0:24:19:4f:8d: df:e3:0c:87:9a:a4:62:91:c0:4e:61:53:d2:90:ae: a0:94:af:a4:38:95:99:26:3e:73:6b:5d:02:37:6f: 8a:63:6c:e1:5a:9c:08:00:af:9b:bc:a0:b8:87:23: 1e:df:c8:56:a6:c2:b5:15:2f:fe:a8:2a:3d:c3:4a: 1a:52:03:f1:37:6f:a4:3b:9c:eb:d0:be:4a:b3:3e: 36:5f:f2:04:92:5b:3e:67:ed:80:15:c4:f5:13:ff: 50:de:a0:b7:47:2d:6e:42:dc:7b:e6:1b:23:f6:e3: 6e:1c:d2:0f:b8:8f:fd:71:ce:70:b6:3a:eb:12:3a: 8c:94:ea:04:a7:d3:d7:b9:36:4d:28:7c:c9:fb:13: f6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:E6:B4:B6:1B:45:74:8E:B2:A0:78:00:3D:43:1A:33:82:59:F3:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.crl X509v3 Authority Key Identifier: keyid:5F:FC:6F:16:2F:93:08:ED:CA:F2:1D:62:E6:3C:59:3D:85:58:13:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:d3:01:00:d3:99:60:95:97:0f:6e:e1:3a:c9:36:01:ab:88: 49:f2:10:18:fa:8d:61:83:0d:a3:4b:74:04:a7:bb:9a:73:55: c2:d2:ca:12:66:00:af:fe:24:e8:3b:37:c2:93:7a:a5:66:66: b7:29:f9:ca:0a:41:c2:0d:30:b1:9f:a2:7f:6b:29:3a:5e:09: 46:6a:e9:2c:2d:b3:d5:ee:12:f6:f3:3e:36:87:09:f9:0a:de: d3:01:7d:4f:df:57:0e:47:cf:9c:94:c4:d7:50:1c:3b:74:f9: f7:3d:4c:3d:4b:e1:56:a3:f8:df:87:bf:7d:47:50:29:fc:03: 4b:4a:a7:ab:db:aa:83:a0:9a:c1:ba:9c:ed:94:1b:f4:5a:c5: 7d:60:06:f7:fc:4d:7d:fc:df:04:54:4f:2e:1a:c5:62:18:ba: 3a:e8:51:e7:62:63:ad:bf:c5:2d:ca:1b:cc:79:ab:40:7c:7b: 83:fa:45:0b:3f:b6:fc:a4:e7:d9:38:dc:7e:c0:0f:3f:5b:a6: b2:74:e4:bd:d3:e8:56:0a:ff:dc:85:2b:6f:8c:e4:f7:f9:7d: 95:bb:98:48:19:df:d3:7c:77:9a:c9:be:8e:5a:85:d0:c1:10: 4a:3f:f6:b1:04:9a:8e:49:f0:76:41:99:8a:c8:1a:e7:c7:85: 60:b4:06:c6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmuum2fpYbz4sErXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzA1N2Q5YTctOGYzZi00Yzk3LTk1MDMtZTJhOTM2YzI3 YzdiMB4XDTI1MDQyOTAzMDAwM1oXDTI1MDUwMjAzMDAwMFowLzEtMCsGA1UEAxMk OTU4MWY3MWQtNjQ2Ni00MTY5LWExYWQtZTRkYjM0MjA3YzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAml7exOempwPIeNi9RUV8851/2lnqGh4jxMmd Jpxcj8CoA8knE1OIxGpHe7nzzYcajj5lmNjpJjZ1fVddSpT5DfuwHaeKXSQsKqvO 9uU6KUFyGEzs/Y++glohbkeMqgUrVWJ+t1+DU39JxaF21RUams6MsCQZT43f4wyH mqRikcBOYVPSkK6glK+kOJWZJj5za10CN2+KY2zhWpwIAK+bvKC4hyMe38hWpsK1 FS/+qCo9w0oaUgPxN2+kO5zr0L5Ksz42X/IEkls+Z+2AFcT1E/9Q3qC3Ry1uQtx7 5hsj9uNuHNIPuI/9cc5wtjrrEjqMlOoEp9PXuTZNKHzJ+xP20QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIPmtLYbRXSOsqB4AD1DGjOCWfNcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMDU3 ZDlhNy04ZjNmLTRjOTctOTUwMy1lMmE5MzZjMjdjN2IvYzA1N2Q5YTctOGYzZi00 Yzk3LTk1MDMtZTJhOTM2YzI3YzdiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzA1N2Q5YTctOGYzZi00Yzk3LTk1 MDMtZTJhOTM2YzI3YzdiL2MwNTdkOWE3LThmM2YtNGM5Ny05NTAzLWUyYTkzNmMy N2M3Yi5jcmwwHwYDVR0jBBgwFoAUX/xvFi+TCO3K8h1i5jxZPYVYE2QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jMDU3ZDlhNy04ZjNmLTRjOTctOTUwMy1lMmE5 MzZjMjdjN2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBH0wEA05lglZcPbuE6yTYB q4hJ8hAY+o1hgw2jS3QEp7uac1XC0soSZgCv/iToOzfCk3qlZma3KfnKCkHCDTCx n6J/ayk6XglGauksLbPV7hL28z42hwn5Ct7TAX1P31cOR8+clMTXUBw7dPn3PUw9 S+FWo/jfh799R1Ap/ANLSqer26qDoJrBupztlBv0WsV9YAb3/E19/N8EVE8uGsVi GLo66FHnYmOtv8UtyhvMeatAfHuD+kULP7b8pOfZONx+wA8/W6aydOS90+hWCv/c hStvjOT3+X2Vu5hIGd/TfHeayb6OWoXQwRBKP/axBJqOSfB2QZmKyBrnx4VgtAbG -----END CERTIFICATE-----Generated at Tue Apr 29 22:17:14 2025 by rpki-client