$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.mft File: a9d8715f-6d4a-4b9f-93ff-8eb251588f61.mft (raw, json) Hash identifier: 3sUN0tbhFwROfcChnF9oDphlzejO5OOX6WKd2AT9MLw= Subject key identifier: CD:74:AA:F6:B8:27:6B:47:30:8F:DC:E2:39:AF:B4:20:79:52:17:26 Authority key identifier: A6:25:D6:7E:3C:AB:C9:7A:58:9A:30:A3:BB:F5:E1:BC:A6:5B:0F:7A Certificate issuer: /CN=a9d8715f-6d4a-4b9f-93ff-8eb251588f61 Certificate serial: 010D0C9F43285849A942E1231E135487F7072880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.mft Manifest number: 010D0C9F4328584228961CC4E4B00AEF0AD0C970 Signing time: Sun 27 Apr 2025 04:00:07 +0000 Manifest this update: Sun 27 Apr 2025 04:00:07 +0000 Manifest next update: Wed 30 Apr 2025 04:00:00 +0000 Files and hashes: 1: 73a1ba04-7efc-34a6-a1fb-cb1b5f25e5c5.roa (hash: Td6dbwGuem9Xmtv3Xh5Qy1rICbKkD2ld3rb0xy5bSNI=) 2: a948d01b-e39d-30fe-ac56-3ed402c24e01.roa (hash: Jv/iJSX4VGZVj7Ty1sOt+QSWxI8UiXy4XKGsJhlJMXw=) 3: a9d8715f-6d4a-4b9f-93ff-8eb251588f61.crl (hash: 1HvvKk6Hm2TyfWRZUCACFv+DtNXn9IYJFnuim64fjRg=) 4: cf03c4bd-eb7c-3cee-9900-d3cc9c4d11a9.roa (hash: BkcFqrIGMaWJq0r3CCie3V9XvsNpHyPccfgF3hMe/Fw=) 5: dec6e365-7207-39e3-b761-dd444c1dc0b3.roa (hash: vu69w8RrbXbXniJSdGMiPklDcZOo/rQWsRKjTZxGoG4=) 6: f40a319f-feb8-33ea-8a99-b02869d401c2.roa (hash: KD6zfolLdbXK7X1weyubFRYP9jdHnRHdQrIfag/dBqg=) 7: f8d9eddf-26f3-32cc-bbdd-539fc22fa679.roa (hash: MNj2cSkt3EEjKjurvt+cIwLHjSQMQdopu/lArtUoJrE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a9:42:e1:23:1e:13:54:87:f7:07:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9d8715f-6d4a-4b9f-93ff-8eb251588f61 Validity Not Before: Apr 27 04:00:07 2025 GMT Not After : Apr 30 04:00:00 2025 GMT Subject: CN=722e08ee-9d76-4b6b-b00c-7650f77047bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d5:b9:fe:99:a9:8d:c6:eb:3e:2d:3d:5e:6d: e2:c8:3d:35:81:e2:5a:59:49:fc:12:c5:3b:24:0c: 0e:9b:a5:d3:8b:17:4f:ba:29:e3:1c:e4:08:aa:8b: cd:3d:1f:71:3a:47:e5:00:b1:3a:37:df:3a:b9:8d: f4:d6:af:1c:85:9c:8f:0b:28:67:72:b2:77:4b:df: 26:b7:4a:52:9c:09:17:91:f5:a5:89:4d:80:ca:ad: 7e:4a:ac:32:ad:85:3c:67:14:58:04:fd:ec:46:71: f2:ce:2e:31:fb:5b:f8:6d:e7:db:34:a5:84:c5:73: f0:53:17:44:f2:1d:56:91:b4:3f:66:a8:4d:96:30: 9f:e2:b7:4d:04:cb:2b:1b:37:ae:2e:0a:05:53:83: 36:2f:e9:c6:c1:44:68:16:dc:d9:46:9b:5b:0d:14: 09:15:15:8e:95:5b:77:08:32:59:4c:ff:a4:49:7b: 56:d5:24:71:97:a1:06:eb:e9:99:4d:f4:38:0c:d4: 1c:1b:a3:22:05:27:04:35:2f:94:f1:a4:17:02:d5: 82:a1:81:4a:24:15:86:91:4c:67:f9:29:75:b6:29: 01:6c:ed:ba:6a:e9:9a:17:b8:76:d3:d5:23:8a:e6: 77:be:d2:d2:b3:3b:94:89:c0:20:d8:c4:cb:9f:15: d4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:74:AA:F6:B8:27:6B:47:30:8F:DC:E2:39:AF:B4:20:79:52:17:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.crl X509v3 Authority Key Identifier: keyid:A6:25:D6:7E:3C:AB:C9:7A:58:9A:30:A3:BB:F5:E1:BC:A6:5B:0F:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:b4:20:ac:0c:05:41:4a:a1:ef:60:32:96:2f:a4:da:f5:1a: 1a:14:08:8c:d2:3a:8a:54:d6:06:a5:99:12:3c:b3:30:07:b4: 06:bf:3e:52:5a:e9:fd:f5:76:04:d0:53:b9:c1:b4:c1:7d:54: 94:97:54:cd:6e:9f:35:50:d0:e5:12:f2:f8:d2:be:ac:db:f8: 3e:72:c7:14:dd:2b:89:37:ae:f9:c3:4b:0b:dd:35:30:25:3b: bd:6b:d0:01:89:4c:d2:30:e6:f3:e8:4b:14:64:d7:fc:7b:f2: 43:bd:13:4a:2d:1c:c7:88:68:93:ce:87:2f:26:03:58:48:55: 0a:d7:74:8c:b2:c3:8d:7c:46:d1:64:93:9f:05:34:8a:76:9e: 70:3a:f0:e6:32:4d:59:98:27:37:a8:8e:3e:7f:ab:22:3f:ca: 54:8e:20:8e:2f:d4:91:97:d7:dc:a4:02:ef:f6:19:9c:37:f3: b5:d6:11:50:81:1c:d2:72:20:b4:5b:4a:8e:55:b3:5e:db:c2: 7c:f2:0f:ef:ae:40:4b:72:6d:30:55:4b:a7:2b:72:cd:a0:6b: 31:89:fd:4b:99:09:56:1b:29:14:7b:d3:f6:95:05:60:a4:64: cc:41:6c:07:82:14:23:a2:d9:f8:e1:60:0a:ea:11:38:00:e4: cb:68:14:cd -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmpQuEjHhNUh/cHKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTlkODcxNWYtNmQ0YS00YjlmLTkzZmYtOGViMjUxNTg4 ZjYxMB4XDTI1MDQyNzA0MDAwN1oXDTI1MDQzMDA0MDAwMFowLzEtMCsGA1UEAxMk NzIyZTA4ZWUtOWQ3Ni00YjZiLWIwMGMtNzY1MGY3NzA0N2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdW5/pmpjcbrPi09Xm3iyD01geJaWUn8EsU7 JAwOm6XTixdPuinjHOQIqovNPR9xOkflALE6N986uY301q8chZyPCyhncrJ3S98m t0pSnAkXkfWliU2Ayq1+SqwyrYU8ZxRYBP3sRnHyzi4x+1v4befbNKWExXPwUxdE 8h1WkbQ/ZqhNljCf4rdNBMsrGzeuLgoFU4M2L+nGwURoFtzZRptbDRQJFRWOlVt3 CDJZTP+kSXtW1SRxl6EG6+mZTfQ4DNQcG6MiBScENS+U8aQXAtWCoYFKJBWGkUxn +Sl1tikBbO26aumaF7h209UjiuZ3vtLSszuUicAg2MTLnxXUQQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFM10qva4J2tHMI/c4jmvtCB5UhcmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hOWQ4 NzE1Zi02ZDRhLTRiOWYtOTNmZi04ZWIyNTE1ODhmNjEvYTlkODcxNWYtNmQ0YS00 YjlmLTkzZmYtOGViMjUxNTg4ZjYxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTlkODcxNWYtNmQ0YS00YjlmLTkz ZmYtOGViMjUxNTg4ZjYxL2E5ZDg3MTVmLTZkNGEtNGI5Zi05M2ZmLThlYjI1MTU4 OGY2MS5jcmwwHwYDVR0jBBgwFoAUpiXWfjyryXpYmjCju/XhvKZbD3owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hOWQ4NzE1Zi02ZDRhLTRiOWYtOTNmZi04ZWIy NTE1ODhmNjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCCtCCsDAVBSqHvYDKWL6Ta 9RoaFAiM0jqKVNYGpZkSPLMwB7QGvz5SWun99XYE0FO5wbTBfVSUl1TNbp81UNDl EvL40r6s2/g+cscU3SuJN675w0sL3TUwJTu9a9ABiUzSMObz6EsUZNf8e/JDvRNK LRzHiGiTzocvJgNYSFUK13SMssONfEbRZJOfBTSKdp5wOvDmMk1ZmCc3qI4+f6si P8pUjiCOL9SRl9fcpALv9hmcN/O11hFQgRzSciC0W0qOVbNe28J88g/vrkBLcm0w VUunK3LNoGsxif1LmQlWGykUe9P2lQVgpGTMQWwHghQjotn44WAK6hE4AOTLaBTN -----END CERTIFICATE-----Generated at Sun Apr 27 23:52:04 2025 by rpki-client