$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/ec23d019-d079-49df-94b6-ad79d138e90f.mft File: ec23d019-d079-49df-94b6-ad79d138e90f.mft (raw, json) Hash identifier: aOHwMc4Xo3BOmzaGupjlWOwDNlKzg16KRzVaXcmCUk8= Subject key identifier: 44:74:9A:50:DB:31:41:E1:CB:98:4F:08:D6:FF:BD:CF:56:D9:99:1C Authority key identifier: 7B:45:19:0A:67:71:07:CE:9A:BC:4B:A6:4F:63:DD:81:75:A4:BA:C0 Certificate issuer: /CN=ec23d019-d079-49df-94b6-ad79d138e90f Certificate serial: 010D0C9F43285849AE2592B06A29351E1AC68280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/ec23d019-d079-49df-94b6-ad79d138e90f.mft Manifest number: 010D0C9F4328584073A82C00942A8714883300AD Signing time: Mon 28 Apr 2025 22:00:07 +0000 Manifest this update: Mon 28 Apr 2025 22:00:07 +0000 Manifest next update: Thu 01 May 2025 22:00:00 +0000 Files and hashes: 1: 334e389e-539d-33fc-b67f-c8bb35d92840.roa (hash: Iqm1R5eu7QqP3lSdJ1JE0kMNAyGDOg1fsznml7Bb3JY=) 2: 514f37a8-f9dd-3461-9c07-1b89920890ee.roa (hash: UbFVd0ktOWHf+J61wwO2KUni7Dduh5X3rZJIl2qqsfw=) 3: a06d614f-16f7-331e-8592-956602a28aba.roa (hash: e8Q7eLYHrwefopfHCU3ZqpGbQHHr+zMz/TqBJnH1fg4=) 4: dc518f3c-d185-3d9b-be1c-376bacbd09e5.roa (hash: cTd0gPzoFkMAfy9ISIXOixxPgPFCy96P2rCG3CnnH7k=) 5: e3ed2319-0a50-3776-9dbe-a5edd2a06292.roa (hash: 51YchrKVkbwBBNRwyV9GsD+HhPC97GCS1FEXDe5vQBI=) 6: ec23d019-d079-49df-94b6-ad79d138e90f.crl (hash: wqHPj+DyLYXlloRAEmFfwUWWTzjs2JSMfYMFTR+5fcg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/ec23d019-d079-49df-94b6-ad79d138e90f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/ec23d019-d079-49df-94b6-ad79d138e90f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ae:25:92:b0:6a:29:35:1e:1a:c6:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec23d019-d079-49df-94b6-ad79d138e90f Validity Not Before: Apr 28 22:00:07 2025 GMT Not After : May 1 22:00:00 2025 GMT Subject: CN=70e0b5d0-8372-4bf5-9b7a-9a965b9a4d4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:94:18:72:20:08:c2:ce:f7:f4:50:3a:87:1a: da:af:cc:9f:cc:41:e6:91:3f:f7:cf:6d:f8:ef:19: 4d:38:8d:53:1a:66:2a:af:a7:57:fd:ea:f0:8f:fc: aa:39:12:ec:76:db:37:7b:28:50:27:d0:b9:6f:3b: 38:80:0b:8b:a8:37:49:5d:44:e5:a9:d1:89:d9:fc: 48:1f:d6:a2:8b:a9:a5:c1:d1:eb:9a:f2:d9:7f:33: 34:97:1d:65:0d:c3:14:81:25:b0:51:fa:e6:50:c4: 90:93:e2:b4:46:79:09:80:7d:3d:32:5d:99:c2:06: 53:54:70:e2:4d:d9:06:af:f8:b7:42:97:7c:f3:d0: 52:df:a1:90:82:58:e5:10:4f:29:5b:f5:83:13:2c: e5:ba:a4:29:6c:6b:ed:3d:ee:0d:f1:30:2d:56:a5: 3d:5f:a5:3b:5d:a5:0f:7a:e0:27:91:ad:a2:70:9d: e3:63:97:61:14:8e:ce:c5:7d:c5:b0:3b:32:8b:45: 66:c8:ee:5d:0b:89:9a:73:0b:3f:40:2b:2c:43:69: 1e:a8:e9:04:6c:25:4d:52:1e:e0:41:e6:c8:b3:f9: f3:a6:04:78:19:26:f5:8c:e0:49:4f:1d:c2:f5:bf: d5:8d:d7:8c:cb:08:d8:26:2a:86:fb:fe:78:bf:48: 73:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:74:9A:50:DB:31:41:E1:CB:98:4F:08:D6:FF:BD:CF:56:D9:99:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/ec23d019-d079-49df-94b6-ad79d138e90f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/ec23d019-d079-49df-94b6-ad79d138e90f.crl X509v3 Authority Key Identifier: keyid:7B:45:19:0A:67:71:07:CE:9A:BC:4B:A6:4F:63:DD:81:75:A4:BA:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:9a:e2:68:16:5f:cf:20:7b:7c:43:60:4a:7a:91:bc:71:34: 8f:95:29:1e:b5:66:a8:91:3f:6f:a3:7c:94:f1:d1:10:f7:93: 8f:67:ba:4c:dc:01:f7:fb:5e:67:b8:b3:a2:da:90:6f:c9:ab: 50:1b:2e:35:3e:95:90:32:60:8b:4f:23:44:c7:ed:ed:0b:d5: 91:55:1c:cc:99:19:75:07:ba:b3:bc:8e:ad:be:47:c2:c2:d8: f2:2d:a2:9c:36:1c:e1:c4:8f:8f:9b:53:3b:55:a6:f5:1e:6e: e6:01:ed:eb:26:ef:1a:d9:db:de:0e:97:84:5c:56:7a:a6:03: aa:78:f4:2c:40:6a:e8:e6:ab:bb:49:cb:00:7a:43:c0:8a:9e: b9:fd:68:47:6b:9c:ab:6f:16:ba:ea:0e:92:68:45:2b:92:4b: f3:01:15:6c:87:fb:dc:6f:95:57:8a:cf:05:3b:1e:3d:81:ce: 40:cf:61:a7:e2:73:be:85:a0:87:34:07:e0:83:20:d2:f0:66: 25:b6:28:6d:18:4a:f9:ab:e2:28:63:0b:a9:7a:0d:75:4c:d8: 18:f7:ba:37:85:3e:a3:48:c7:ed:4d:02:96:f3:14:08:f9:e2: f2:eb:9a:10:b8:3a:a2:a3:b1:8c:58:38:1b:d1:47:3f:57:98: b2:89:3d:0e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmuJZKwaik1HhrGgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWMyM2QwMTktZDA3OS00OWRmLTk0YjYtYWQ3OWQxMzhl OTBmMB4XDTI1MDQyODIyMDAwN1oXDTI1MDUwMTIyMDAwMFowLzEtMCsGA1UEAxMk NzBlMGI1ZDAtODM3Mi00YmY1LTliN2EtOWE5NjViOWE0ZDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5QYciAIws739FA6hxrar8yfzEHmkT/3z234 7xlNOI1TGmYqr6dX/erwj/yqORLsdts3eyhQJ9C5bzs4gAuLqDdJXUTlqdGJ2fxI H9aii6mlwdHrmvLZfzM0lx1lDcMUgSWwUfrmUMSQk+K0RnkJgH09Ml2ZwgZTVHDi TdkGr/i3Qpd889BS36GQgljlEE8pW/WDEyzluqQpbGvtPe4N8TAtVqU9X6U7XaUP euAnka2icJ3jY5dhFI7OxX3FsDsyi0VmyO5dC4macws/QCssQ2keqOkEbCVNUh7g QebIs/nzpgR4GSb1jOBJTx3C9b/VjdeMywjYJiqG+/54v0hzZwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFER0mlDbMUHhy5hPCNb/vc9W2ZkcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYzIz ZDAxOS1kMDc5LTQ5ZGYtOTRiNi1hZDc5ZDEzOGU5MGYvZWMyM2QwMTktZDA3OS00 OWRmLTk0YjYtYWQ3OWQxMzhlOTBmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWMyM2QwMTktZDA3OS00OWRmLTk0 YjYtYWQ3OWQxMzhlOTBmL2VjMjNkMDE5LWQwNzktNDlkZi05NGI2LWFkNzlkMTM4 ZTkwZi5jcmwwHwYDVR0jBBgwFoAUe0UZCmdxB86avEumT2PdgXWkusAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYzIzZDAxOS1kMDc5LTQ5ZGYtOTRiNi1hZDc5 ZDEzOGU5MGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBTmuJoFl/PIHt8Q2BKepG8 cTSPlSketWaokT9vo3yU8dEQ95OPZ7pM3AH3+15nuLOi2pBvyatQGy41PpWQMmCL TyNEx+3tC9WRVRzMmRl1B7qzvI6tvkfCwtjyLaKcNhzhxI+Pm1M7Vab1Hm7mAe3r Ju8a2dveDpeEXFZ6pgOqePQsQGro5qu7ScsAekPAip65/WhHa5yrbxa66g6SaEUr kkvzARVsh/vcb5VXis8FOx49gc5Az2Gn4nO+haCHNAfggyDS8GYltihtGEr5q+Io Ywupeg11TNgY97o3hT6jSMftTQKW8xQI+eLy65oQuDqio7GMWDgb0Uc/V5iyiT0O -----END CERTIFICATE-----Generated at Tue Apr 29 07:41:21 2025 by rpki-client