$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.mft File: c22717c6-604d-4453-a20f-3430af557f6e.mft (raw, json) Hash identifier: xdVVD1ann72sxBO2/LFWiwBEeqo+JS3glDRKNlFyOFM= Subject key identifier: 24:8E:64:DA:0E:5C:D9:1F:ED:88:C1:51:1B:24:3C:8C:8F:53:D6:48 Authority key identifier: EE:A3:2B:CF:34:53:AB:3E:F1:A0:11:46:64:77:8B:DE:44:96:56:61 Certificate issuer: /CN=c22717c6-604d-4453-a20f-3430af557f6e Certificate serial: 010D0C9F43285849A854A5FC576DBACE1A9D6A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.mft Manifest number: 010D0C9F432858457DEA3EE13B43652F0FA9749B Signing time: Sat 26 Apr 2025 20:00:08 +0000 Manifest this update: Sat 26 Apr 2025 20:00:08 +0000 Manifest next update: Tue 29 Apr 2025 20:00:00 +0000 Files and hashes: 1: 8675f39c-f0b4-325e-bb35-10be8d68c537.roa (hash: UCRCHj4ZEQO0WBZ54nC5ebcnFdIetCnyiO+Sg9iyoaQ=) 2: b4363080-9456-3a3d-976f-99d803e806ca.roa (hash: BE+FT3yxUFhsWwrl+7X6FocmEUljV74LSf/RPvg1uPk=) 3: c22717c6-604d-4453-a20f-3430af557f6e.crl (hash: qi/3go0ax+hZ893qjBNo6yK65xcAChyXSNdY2lYvpkg=) 4: dfb8101e-ec2a-36e5-8cbe-576bb8c12e65.roa (hash: jyOv96KgRgcgyxD4MDthVwOTl55369wI4QGbKZ1xkZI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:54:a5:fc:57:6d:ba:ce:1a:9d:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c22717c6-604d-4453-a20f-3430af557f6e Validity Not Before: Apr 26 20:00:08 2025 GMT Not After : Apr 29 20:00:00 2025 GMT Subject: CN=0f1909e5-6e48-4971-a5e2-33bdd98090ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d0:54:89:54:22:b6:b5:a5:92:7a:88:8a:41: a3:21:3a:02:06:7c:43:f6:b6:fd:9f:5c:20:52:75: d6:e7:33:fb:e9:6e:7f:5a:68:64:40:e9:2a:00:7d: 3e:71:60:ae:b1:d3:3c:8e:c5:45:e5:d0:e0:2c:ee: 10:3b:cc:e9:3f:05:ff:3a:8e:ff:03:ef:04:f8:e0: b7:c0:e3:d9:e3:bc:6d:2f:7a:c8:fc:39:f4:c2:23: b4:59:40:7e:f8:d6:e5:33:d3:89:65:1c:f4:e5:6c: f2:6e:0e:c1:35:92:49:ee:cd:b8:cc:bf:0a:3c:cf: af:93:59:c9:a3:a8:f3:9b:d7:db:34:85:1d:5c:92: a6:05:fd:3f:db:53:b3:e9:9f:81:e2:67:fe:96:05: 50:e4:68:d1:17:72:d5:b3:11:ab:09:60:d3:a8:d6: 1a:43:65:e3:f0:be:d2:22:3a:ab:a5:d1:d1:ea:38: 45:d2:7f:36:f3:a0:b3:d0:03:98:c9:03:cb:b5:2d: da:93:c6:2e:54:ef:4e:6b:93:e1:7e:0d:d5:11:32: de:7d:e2:f4:93:ad:4c:e6:60:ab:a6:60:1d:70:ac: 7f:5b:c4:3e:c5:7f:5f:3e:55:9d:e0:01:d4:87:03: 51:e2:c3:79:e1:69:d2:98:47:31:71:79:34:02:e2: 83:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:8E:64:DA:0E:5C:D9:1F:ED:88:C1:51:1B:24:3C:8C:8F:53:D6:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.crl X509v3 Authority Key Identifier: keyid:EE:A3:2B:CF:34:53:AB:3E:F1:A0:11:46:64:77:8B:DE:44:96:56:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:bf:60:10:54:83:3f:21:c5:b3:56:ca:0c:1d:1c:39:a5:ad: f9:50:bf:dc:16:4b:87:ff:58:97:a8:68:7b:ce:a2:23:7a:61: 14:18:b2:67:5c:cc:92:ef:31:e7:cf:81:c7:9e:84:20:5c:f9: 55:78:05:0d:fb:30:09:51:07:9a:e3:ec:f1:62:ba:d7:d1:68: 1a:90:62:1d:b1:a5:8f:83:bb:a7:41:e9:82:a8:be:27:27:08: 51:cd:e1:c8:89:83:d6:3b:9b:65:02:82:d0:cd:ad:2a:66:3f: 43:ad:77:06:b8:30:c5:b1:66:ea:1a:0f:87:29:95:44:5b:34: 65:28:31:0f:19:4d:25:d4:71:0a:20:bc:fe:31:26:e0:b5:c1: 97:c0:85:80:32:f3:26:d6:a3:e4:4c:ec:69:79:71:7d:73:5b: 23:4b:01:2f:af:64:94:48:e7:67:39:52:99:7c:2f:d6:72:a8: 9e:7e:fc:bd:87:5c:25:49:22:94:51:f0:88:b9:a1:05:06:d0: db:4f:99:ab:1f:15:15:05:30:18:c8:1d:b3:53:2b:1a:72:e5: ed:04:8a:d3:10:52:f1:bd:5a:2b:87:d2:8c:83:b6:d6:12:91: e3:11:d1:aa:be:b7:67:23:c6:f9:22:fc:43:1f:01:48:e1:f1: fb:9b:80:f1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmoVKX8V226zhqdaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIyNzE3YzYtNjA0ZC00NDUzLWEyMGYtMzQzMGFmNTU3 ZjZlMB4XDTI1MDQyNjIwMDAwOFoXDTI1MDQyOTIwMDAwMFowLzEtMCsGA1UEAxMk MGYxOTA5ZTUtNmU0OC00OTcxLWE1ZTItMzNiZGQ5ODA5MGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdBUiVQitrWlknqIikGjIToCBnxD9rb9n1wg UnXW5zP76W5/WmhkQOkqAH0+cWCusdM8jsVF5dDgLO4QO8zpPwX/Oo7/A+8E+OC3 wOPZ47xtL3rI/Dn0wiO0WUB++NblM9OJZRz05Wzybg7BNZJJ7s24zL8KPM+vk1nJ o6jzm9fbNIUdXJKmBf0/21Oz6Z+B4mf+lgVQ5GjRF3LVsxGrCWDTqNYaQ2Xj8L7S IjqrpdHR6jhF0n8286Cz0AOYyQPLtS3ak8YuVO9Oa5Phfg3VETLefeL0k61M5mCr pmAdcKx/W8Q+xX9fPlWd4AHUhwNR4sN54WnSmEcxcXk0AuKDswIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCSOZNoOXNkf7YjBURskPIyPU9ZIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMjI3 MTdjNi02MDRkLTQ0NTMtYTIwZi0zNDMwYWY1NTdmNmUvYzIyNzE3YzYtNjA0ZC00 NDUzLWEyMGYtMzQzMGFmNTU3ZjZlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzIyNzE3YzYtNjA0ZC00NDUzLWEy MGYtMzQzMGFmNTU3ZjZlL2MyMjcxN2M2LTYwNGQtNDQ1My1hMjBmLTM0MzBhZjU1 N2Y2ZS5jcmwwHwYDVR0jBBgwFoAU7qMrzzRTqz7xoBFGZHeL3kSWVmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jMjI3MTdjNi02MDRkLTQ0NTMtYTIwZi0zNDMw YWY1NTdmNmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBMv2AQVIM/IcWzVsoMHRw5 pa35UL/cFkuH/1iXqGh7zqIjemEUGLJnXMyS7zHnz4HHnoQgXPlVeAUN+zAJUQea 4+zxYrrX0WgakGIdsaWPg7unQemCqL4nJwhRzeHIiYPWO5tlAoLQza0qZj9DrXcG uDDFsWbqGg+HKZVEWzRlKDEPGU0l1HEKILz+MSbgtcGXwIWAMvMm1qPkTOxpeXF9 c1sjSwEvr2SUSOdnOVKZfC/Wcqiefvy9h1wlSSKUUfCIuaEFBtDbT5mrHxUVBTAY yB2zUysacuXtBIrTEFLxvVorh9KMg7bWEpHjEdGqvrdnI8b5IvxDHwFI4fH7m4Dx -----END CERTIFICATE-----Generated at Sun Apr 27 16:10:46 2025 by rpki-client