$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft File: de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft (raw, json) Hash identifier: /jxbF80ivJ/IffQx1F1zCQQmlfPUQj1Phy5KJWz3JDA= Subject key identifier: 32:45:B8:5A:B6:BE:AD:9A:E8:41:8A:5A:F4:F3:E3:23:F2:7F:8D:BA Authority key identifier: F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 Certificate issuer: /CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Certificate serial: 010D0C9F43285849B10DFF8C2EE9A9B0C4C905C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft Manifest number: 010D0C9F4328584073A8304831365BDD4E70C9F7 Signing time: Tue 29 Apr 2025 23:00:03 +0000 Manifest this update: Tue 29 Apr 2025 23:00:03 +0000 Manifest next update: Thu 01 May 2025 23:00:00 +0000 Files and hashes: 1: 28db5388-3028-3372-82b7-0e51f7f410ea.roa (hash: UoVNnfhbJA6FxlQK0/QwNEF2v1s7eJu51Kr0yk88JTI=) 2: 6d5ee0b0-8051-316d-8cab-edd1a702aaee.roa (hash: lbP0BbqswA+dMxlaBhoSqEwf8kOrsfj0EfuV3AooxSo=) 3: de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl (hash: CkBYAmM6r0od4Ii/6n8HRBU5muczSB65N3yTdVKyIuE=) 4: ed656f57-c876-3393-937a-7eabe0e6e42a.roa (hash: BMWvpJL97gzIBeft9pejjY6q0UDKsWrGvVjA0epj1Do=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:0d:ff:8c:2e:e9:a9:b0:c4:c9:05:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Validity Not Before: Apr 29 23:00:03 2025 GMT Not After : May 1 23:00:00 2025 GMT Subject: CN=04fcba84-3932-46ea-8874-c6b1e80589a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:03:86:66:05:7f:21:d1:77:e4:77:af:33:f9: 86:15:ba:fe:da:66:6f:ae:dd:df:7f:1d:ce:c1:c5: a9:16:d9:60:c7:54:ff:03:ad:71:f3:3f:ff:80:aa: dd:05:1e:11:c4:55:09:33:28:89:61:8e:23:49:fe: f1:30:e2:34:fe:d2:a8:22:ad:9e:b6:d9:0c:3e:f0: 20:a6:ce:35:57:8f:d0:bb:42:d3:38:d3:f8:e8:e3: 15:5c:72:61:51:b1:9d:7c:e4:c3:4f:75:b1:22:84: 08:c6:5c:16:16:b0:90:61:e5:c9:72:1b:5a:23:d2: a4:bf:c4:fc:23:e0:6e:41:b2:4f:eb:fc:a6:bd:b9: 25:76:50:b8:bb:81:18:76:58:c4:8b:dc:76:44:6c: 38:89:89:3a:21:30:2e:99:39:bd:dd:80:11:6c:0f: 3d:2c:79:c5:ab:d4:ea:a2:7b:ee:0a:49:ce:03:0b: 8e:39:a6:67:a2:83:0b:fe:11:27:b1:d9:11:c8:d8: 02:18:af:13:99:33:70:a3:d9:81:e4:22:98:e3:29: de:b6:2f:a0:06:34:3c:2d:a8:f6:5a:af:a7:31:7e: 89:75:78:ce:f9:7c:fa:e0:b8:92:cb:b5:06:52:68: 17:db:31:13:86:46:8b:77:54:26:72:02:39:fa:59: 07:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:45:B8:5A:B6:BE:AD:9A:E8:41:8A:5A:F4:F3:E3:23:F2:7F:8D:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl X509v3 Authority Key Identifier: keyid:F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:41:fd:e2:27:85:05:a7:e8:34:49:68:68:1d:ff:a7:46:78: fc:5a:5c:fd:cb:f4:f6:70:e6:75:44:77:b3:0a:90:a5:76:bd: 8d:42:a8:0f:bf:3b:39:c8:c7:fa:73:f2:6f:11:83:70:37:b0: c9:48:41:c2:5f:08:4d:e2:bf:78:dd:b2:94:e1:41:5a:82:50: 75:23:11:50:a7:7f:bd:36:55:c9:ce:96:1e:d9:6c:d9:3f:e5: ac:25:d9:2f:fb:04:0a:94:f1:35:a9:76:fd:c5:a4:aa:23:2e: c3:f9:22:bb:79:53:f4:39:46:dd:55:4b:7c:5d:e6:7d:8b:6e: c7:73:f5:04:e0:01:fb:51:e8:a4:a9:e5:a3:4c:6b:98:87:d5: 68:bf:c5:9d:4f:a0:cb:a7:e0:03:12:97:a6:09:b0:3d:0f:a6: fa:35:b0:7c:cc:63:0e:80:d9:75:b8:bd:8a:e2:2d:29:5f:91: 38:b7:da:8a:e7:aa:ba:b7:5f:35:e3:61:9a:75:29:b9:05:63: 62:36:6c:72:ce:af:5b:9f:c4:30:48:32:ff:b6:91:53:97:fe: 87:74:9b:ed:52:4a:09:98:15:e8:e0:b8:a1:c2:d2:5c:86:4f: 54:3f:6c:d1:5d:a1:9f:fa:2d:02:67:62:f9:59:c2:92:16:3f: f7:b0:61:8c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmxDf+MLumpsMTJBcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4OTM5YTYtNmFjYi00OGU1LWFmOWEtZDFmN2NjYTNi MThlMB4XDTI1MDQyOTIzMDAwM1oXDTI1MDUwMTIzMDAwMFowLzEtMCsGA1UEAxMk MDRmY2JhODQtMzkzMi00NmVhLTg4NzQtYzZiMWU4MDU4OWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QOGZgV/IdF35HevM/mGFbr+2mZvrt3ffx3O wcWpFtlgx1T/A61x8z//gKrdBR4RxFUJMyiJYY4jSf7xMOI0/tKoIq2ettkMPvAg ps41V4/Qu0LTONP46OMVXHJhUbGdfOTDT3WxIoQIxlwWFrCQYeXJchtaI9Kkv8T8 I+BuQbJP6/ymvbkldlC4u4EYdljEi9x2RGw4iYk6ITAumTm93YARbA89LHnFq9Tq onvuCknOAwuOOaZnooML/hEnsdkRyNgCGK8TmTNwo9mB5CKY4yneti+gBjQ8Laj2 Wq+nMX6JdXjO+Xz64LiSy7UGUmgX2zEThkaLd1QmcgI5+lkHVQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDJFuFq2vq2a6EGKWvTz4yPyf426MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5 MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3Y2NhM2IxOGUvZGU4OTM5YTYtNmFjYi00 OGU1LWFmOWEtZDFmN2NjYTNiMThlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGU4OTM5YTYtNmFjYi00OGU1LWFm OWEtZDFmN2NjYTNiMThlL2RlODkzOWE2LTZhY2ItNDhlNS1hZjlhLWQxZjdjY2Ez YjE4ZS5jcmwwHwYDVR0jBBgwFoAU9xsfJFQFgH9uxl1GG4KiieftgsYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3 Y2NhM2IxOGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAKQf3iJ4UFp+g0SWhoHf+n Rnj8Wlz9y/T2cOZ1RHezCpCldr2NQqgPvzs5yMf6c/JvEYNwN7DJSEHCXwhN4r94 3bKU4UFaglB1IxFQp3+9NlXJzpYe2WzZP+WsJdkv+wQKlPE1qXb9xaSqIy7D+SK7 eVP0OUbdVUt8XeZ9i27Hc/UE4AH7UeikqeWjTGuYh9Vov8WdT6DLp+ADEpemCbA9 D6b6NbB8zGMOgNl1uL2K4i0pX5E4t9qK56q6t18142GadSm5BWNiNmxyzq9bn8Qw SDL/tpFTl/6HdJvtUkoJmBXo4LihwtJchk9UP2zRXaGf+i0CZ2L5WcKSFj/3sGGM -----END CERTIFICATE-----Generated at Wed Apr 30 01:23:41 2025 by rpki-client