$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft File: d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft (raw, json) Hash identifier: 1zmo2ooTRk1ypyMnL2IBVdu8ULh9W36Gd8vrIpR6Mhs= Subject key identifier: 7E:22:5C:EF:E8:53:97:C1:CE:52:2F:D1:96:42:42:A3:84:18:8F:8B Authority key identifier: 41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 Certificate issuer: /CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Certificate serial: 010D0C9F43285849AA1350E9E50B810ECE0A4D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft Manifest number: 010D0C9F4328584073A84F901BB38ADE99836207 Signing time: Sun 27 Apr 2025 11:00:07 +0000 Manifest this update: Sun 27 Apr 2025 11:00:07 +0000 Manifest next update: Wed 30 Apr 2025 11:00:00 +0000 Files and hashes: 1: 1f9b0a21-4e53-3251-bedd-62da810defe6.roa (hash: seKz7X5f8FwYAoliULOtin3eQjWnnZzBijoVLW52Too=) 2: bd3530fc-aba4-30aa-b5ee-4cb67b4e5233.roa (hash: sJPWFMlQGsu5uPs9fc0/jkgdVSeEAbUSz3G1gWDMIcA=) 3: be5ef230-a561-3b1a-b0d0-d8840c8e46bc.roa (hash: 72J2KbPh8YJ90RYIBZdg5R3+PGVYhAfoww3Cyfo1YFQ=) 4: bf1ea0d0-c6c3-3bdf-a20c-a8a939551a91.roa (hash: +kW0nM4J5LmuY3CcNWYOI3ydET8icWokwMs5RO/e194=) 5: d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl (hash: FAKSMRzxWJswjzD5PRlL2W2jq9FxZw578AwE597od+A=) 6: e8ade94f-71c7-3847-9891-9cce69f41ac8.roa (hash: uPeRFoIQF+RThezPDTSByh7CajrH5v4RcNcwdMlcUcM=) 7: f03a9443-1468-3e4e-9fac-80bb32418d00.roa (hash: uim/cu4aoV2qNxwhFt6q2NIMpYbtzO6PGiOhEjerS3w=) 8: f30c9c21-4317-3091-8c73-74cf7dd4b318.roa (hash: esNdqYSRqLdQCtE1KXibfaoTXAR5m8IzdJx5pPrWK4g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:13:50:e9:e5:0b:81:0e:ce:0a:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Validity Not Before: Apr 27 11:00:07 2025 GMT Not After : Apr 30 11:00:00 2025 GMT Subject: CN=4533f219-321d-4c92-8c41-a255d893e844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:79:96:e1:20:20:aa:db:82:3e:b4:3f:b1:c4: c5:a1:2f:ab:21:4a:33:6c:cc:98:00:67:7b:6f:7e: 1c:25:a2:02:70:bd:7d:77:f4:c4:1f:5e:38:8b:3a: fc:83:17:67:e6:8f:07:b4:97:cb:df:13:08:f9:b8: 4f:8a:1c:1f:39:d4:03:ff:79:bd:be:c3:75:9c:58: 42:61:11:81:52:29:6c:95:4b:e0:c5:b2:2a:46:f7: 80:a8:c5:8d:f2:90:5a:47:c6:62:9e:40:c7:6a:06: 17:cf:12:aa:5e:da:97:5d:47:63:78:e3:23:fa:5c: ec:83:d2:d2:20:37:82:04:38:d8:92:4e:d9:e1:1b: da:68:a3:47:4e:1d:ca:0c:08:18:24:a6:9d:18:57: eb:df:36:ed:18:94:0e:37:f7:8c:21:6d:05:2d:20: 08:f2:92:e7:b4:66:0a:e6:37:f6:53:d8:37:01:c9: 05:ba:2a:21:e6:0e:22:de:4b:13:20:02:05:16:67: 2a:90:0f:03:97:a9:69:9f:8c:6c:1b:88:c8:a4:5c: 6d:f4:79:1d:72:10:bd:2c:21:60:91:6f:58:61:3a: fb:29:e9:87:c4:a6:5c:c8:51:a5:88:b5:9d:ed:58: 6e:ac:d5:e1:8f:cf:f1:6b:b6:d4:9f:d5:63:a2:42: 6f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:22:5C:EF:E8:53:97:C1:CE:52:2F:D1:96:42:42:A3:84:18:8F:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl X509v3 Authority Key Identifier: keyid:41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:f9:9e:ea:24:03:23:5c:32:df:ca:09:20:fd:02:f3:89:44: ec:98:ea:57:84:81:6a:90:0b:2d:21:c0:94:fc:75:9b:73:1a: d9:b8:d4:85:d7:18:67:45:27:13:dc:72:6a:d1:9a:23:65:7a: ef:0c:0a:97:bb:86:d8:05:27:5e:a9:72:e0:ef:de:c8:b3:0c: 0d:6f:3f:3e:e9:86:b0:2f:69:62:52:27:1b:f5:ea:6c:07:5d: 89:79:e5:8c:18:31:28:a8:66:b3:7c:6b:83:df:2a:72:c4:e7: a1:8c:e0:a6:e3:41:f1:88:b9:31:68:40:c1:85:e8:90:a5:5c: 3f:ce:02:c8:12:f6:c5:e2:0a:69:82:97:cf:71:c2:c3:af:c3: 93:4a:c7:d4:f8:f7:62:01:25:40:6b:d8:a1:58:d8:cb:eb:f0: e4:9c:24:f0:99:7a:d9:41:22:bd:6d:91:03:f5:c2:c3:0e:ad: 02:22:95:2f:ed:8c:05:bb:47:9f:1c:f8:ce:83:f3:38:a1:8f: a7:c0:95:c7:db:ff:51:be:db:c6:7f:fd:a7:10:67:d2:55:06: 90:a7:3c:8e:38:ef:ae:72:87:1e:8e:20:7e:04:a3:b3:44:4d: 75:23:80:1e:d9:72:29:41:71:18:4b:14:b3:b3:c6:25:48:54: d4:95:ad:69 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmqE1Dp5QuBDs4KTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU4OWYzZTQtMjcwMS00OGY1LTljNmItN2VhOGQwNzFl Y2U3MB4XDTI1MDQyNzExMDAwN1oXDTI1MDQzMDExMDAwMFowLzEtMCsGA1UEAxMk NDUzM2YyMTktMzIxZC00YzkyLThjNDEtYTI1NWQ4OTNlODQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3mW4SAgqtuCPrQ/scTFoS+rIUozbMyYAGd7 b34cJaICcL19d/TEH144izr8gxdn5o8HtJfL3xMI+bhPihwfOdQD/3m9vsN1nFhC YRGBUilslUvgxbIqRveAqMWN8pBaR8ZinkDHagYXzxKqXtqXXUdjeOMj+lzsg9LS IDeCBDjYkk7Z4RvaaKNHTh3KDAgYJKadGFfr3zbtGJQON/eMIW0FLSAI8pLntGYK 5jf2U9g3AckFuioh5g4i3ksTIAIFFmcqkA8Dl6lpn4xsG4jIpFxt9HkdchC9LCFg kW9YYTr7KemHxKZcyFGliLWd7VhurNXhj8/xa7bUn9VjokJvNwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFH4iXO/oU5fBzlIv0ZZCQqOEGI+LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNTg5 ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4ZDA3MWVjZTcvZDU4OWYzZTQtMjcwMS00 OGY1LTljNmItN2VhOGQwNzFlY2U3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDU4OWYzZTQtMjcwMS00OGY1LTlj NmItN2VhOGQwNzFlY2U3L2Q1ODlmM2U0LTI3MDEtNDhmNS05YzZiLTdlYThkMDcx ZWNlNy5jcmwwHwYDVR0jBBgwFoAUQbmkG8YihK7ly7p7M2I7+iT7/yIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNTg5ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4 ZDA3MWVjZTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAG+Z7qJAMjXDLfygkg/QLz iUTsmOpXhIFqkAstIcCU/HWbcxrZuNSF1xhnRScT3HJq0ZojZXrvDAqXu4bYBSde qXLg797IswwNbz8+6YawL2liUicb9epsB12JeeWMGDEoqGazfGuD3ypyxOehjOCm 40HxiLkxaEDBheiQpVw/zgLIEvbF4gppgpfPccLDr8OTSsfU+PdiASVAa9ihWNjL 6/DknCTwmXrZQSK9bZED9cLDDq0CIpUv7YwFu0efHPjOg/M4oY+nwJXH2/9RvtvG f/2nEGfSVQaQpzyOOO+ucocejiB+BKOzRE11I4Ae2XIpQXEYSxSzs8YlSFTUla1p -----END CERTIFICATE-----Generated at Sun Apr 27 14:11:34 2025 by rpki-client