$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.mft File: f2fcde55-dd78-49f8-8c66-802a68b8f6c4.mft (raw, json) Hash identifier: ZvI5sLqmG05QVmpEeNc40/HF82HmMR0PvbZgrw7Bigo= Subject key identifier: CF:FC:B0:47:95:CE:1F:E4:C6:84:D6:3B:E8:A1:67:C5:80:CF:5C:A2 Authority key identifier: 59:20:26:E6:D7:C6:47:62:EE:A3:1C:A3:AC:33:A5:32:CC:CD:15:00 Certificate issuer: /CN=f2fcde55-dd78-49f8-8c66-802a68b8f6c4 Certificate serial: 010D0C9F43285849AD90A5770A1CEDC9F67C5600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.mft Manifest number: 010D0C9F432858423799864CC11D48F50D369459 Signing time: Mon 28 Apr 2025 17:00:03 +0000 Manifest this update: Mon 28 Apr 2025 17:00:03 +0000 Manifest next update: Thu 01 May 2025 17:00:00 +0000 Files and hashes: 1: 57e4fd2b-c249-3242-b21f-922745f2ebfd.roa (hash: jDnCqjOSpdfazzkC4/a7AIH7vPNlCqn47pgajQWvkcY=) 2: 8fa4741d-7763-345d-8a6e-84a1da7bd394.roa (hash: +OZ2drt5OO+uFEQEefMhnYoKAh8zzUQdCiMYHDfgLwg=) 3: 9505f0a3-0703-386f-b4ed-699788414aa7.roa (hash: 32DWCqYZmTaZu1UqKaj+iM7GjSSLu+0yAPOOS1Rl0Sc=) 4: 9e778761-5dd5-3836-af97-180e9c9bae86.roa (hash: U7cSbtyZq/om+d/F/5thu6K+uMlcYvgj/JX5GfWAxDE=) 5: edf9317d-d023-3670-9f97-477e94fcb8b3.roa (hash: b6mFL141TrKLiu0BJd6zQj5kUdPD+guA93xpyVkMtIU=) 6: f2fcde55-dd78-49f8-8c66-802a68b8f6c4.crl (hash: zn7g5ZiaRsz7KuergsMaNXL2JHoXuF0WJB8kGsNpcwE=) 7: f8ed1838-7ca7-384a-990b-6e78286fd5e5.roa (hash: ddNCy48N+45b/lntsFKygtfrof+EZOB6jhbmXX3yETs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:90:a5:77:0a:1c:ed:c9:f6:7c:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2fcde55-dd78-49f8-8c66-802a68b8f6c4 Validity Not Before: Apr 28 17:00:03 2025 GMT Not After : May 1 17:00:00 2025 GMT Subject: CN=7dd66b8c-ecbc-4c58-9174-1bcef6082a66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b6:c2:ee:67:25:c3:ef:42:9c:d4:75:67:f0: 37:a9:a7:b3:07:fb:f3:f3:3b:01:d7:1c:c8:c3:39: 3b:be:01:f8:05:78:e5:85:75:ba:47:bd:34:61:b1: 2f:6d:a0:6f:0b:72:4a:75:ac:b4:31:00:d1:39:d7: 71:7c:87:b3:36:69:f6:a5:a5:9c:19:86:00:f4:8b: d0:f6:c9:1a:e0:00:07:fc:e4:3b:53:96:60:c2:25: 1f:2b:eb:de:2c:3f:88:68:4e:7f:ba:f1:db:96:21: 48:8e:2c:8f:44:56:8f:4e:52:2f:8d:07:d1:d9:de: 39:66:6e:f1:f6:23:18:52:a5:ce:bc:44:0b:47:23: f6:0d:09:89:be:52:01:b2:cc:8d:55:96:4b:97:20: 21:e7:3a:b3:99:4a:2a:b4:54:90:b2:f9:e4:b3:54: 1a:34:6e:3a:1b:0b:34:6a:71:1a:eb:47:81:dc:48: d8:4a:84:13:ab:ce:9a:1a:db:58:71:7a:bf:b3:5a: 8f:d7:6f:19:c9:2c:a7:05:07:5c:53:a2:74:c2:c2: 19:96:cb:e1:5f:74:83:66:49:9b:0b:35:35:7c:da: aa:a8:21:81:50:41:33:fc:8b:0c:7a:05:96:0f:50: 65:36:b0:57:84:d2:a9:29:b3:86:dd:d9:6e:06:31: 6d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:FC:B0:47:95:CE:1F:E4:C6:84:D6:3B:E8:A1:67:C5:80:CF:5C:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.crl X509v3 Authority Key Identifier: keyid:59:20:26:E6:D7:C6:47:62:EE:A3:1C:A3:AC:33:A5:32:CC:CD:15:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:a1:74:5f:e9:25:3c:9b:ff:f8:dd:78:c9:61:ce:86:4a:f7: 48:d2:43:d1:91:9d:81:a9:b2:9f:5c:4c:f2:18:0e:7a:cc:0d: 8d:a0:df:ed:29:f9:f2:76:71:75:c9:45:74:79:e1:ae:39:27: cf:06:1d:df:d5:19:32:91:ef:f4:36:bc:1a:37:7f:81:8c:e6: b1:14:f1:b3:10:b0:19:f5:a1:c3:f1:4b:0f:ed:69:fe:3c:98: 3c:a7:9d:6a:7d:d6:5d:53:35:59:01:0b:70:ad:9a:ab:85:ba: 1a:d9:04:d9:d1:7d:2b:09:79:a4:d6:1c:9e:e7:97:63:89:eb: b7:00:fb:f8:46:42:ee:4d:64:55:3c:37:33:49:8b:66:2a:a7: 36:d8:26:cb:4b:85:b9:87:b8:5d:67:18:b5:14:b3:9a:fe:a6: 5a:d9:54:d7:51:04:1e:35:17:3e:2e:80:fb:a7:82:76:81:ff: 70:95:9f:7f:bb:0d:3b:f2:58:63:bd:8d:e8:55:70:3c:75:ab: 5b:ac:6f:23:86:64:6f:87:3d:78:82:53:ea:ca:3a:4e:14:d8: ad:07:13:5a:a2:23:a8:88:36:31:32:d1:5f:f1:61:7d:93:cf: e2:56:45:85:e8:11:54:5f:a2:c0:bd:0e:e2:d0:8e:de:d3:10: 7c:01:ec:9d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmtkKV3ChztyfZ8VgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJmY2RlNTUtZGQ3OC00OWY4LThjNjYtODAyYTY4Yjhm NmM0MB4XDTI1MDQyODE3MDAwM1oXDTI1MDUwMTE3MDAwMFowLzEtMCsGA1UEAxMk N2RkNjZiOGMtZWNiYy00YzU4LTkxNzQtMWJjZWY2MDgyYTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLbC7mclw+9CnNR1Z/A3qaezB/vz8zsB1xzI wzk7vgH4BXjlhXW6R700YbEvbaBvC3JKday0MQDROddxfIezNmn2paWcGYYA9IvQ 9ska4AAH/OQ7U5ZgwiUfK+veLD+IaE5/uvHbliFIjiyPRFaPTlIvjQfR2d45Zm7x 9iMYUqXOvEQLRyP2DQmJvlIBssyNVZZLlyAh5zqzmUoqtFSQsvnks1QaNG46Gws0 anEa60eB3EjYSoQTq86aGttYcXq/s1qP128ZySynBQdcU6J0wsIZlsvhX3SDZkmb CzU1fNqqqCGBUEEz/IsMegWWD1BlNrBXhNKpKbOG3dluBjFtXwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFM/8sEeVzh/kxoTWO+ihZ8WAz1yiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mMmZj ZGU1NS1kZDc4LTQ5ZjgtOGM2Ni04MDJhNjhiOGY2YzQvZjJmY2RlNTUtZGQ3OC00 OWY4LThjNjYtODAyYTY4YjhmNmM0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjJmY2RlNTUtZGQ3OC00OWY4LThj NjYtODAyYTY4YjhmNmM0L2YyZmNkZTU1LWRkNzgtNDlmOC04YzY2LTgwMmE2OGI4 ZjZjNC5jcmwwHwYDVR0jBBgwFoAUWSAm5tfGR2LuoxyjrDOlMszNFQAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mMmZjZGU1NS1kZDc4LTQ5ZjgtOGM2Ni04MDJh NjhiOGY2YzQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBPoXRf6SU8m//43XjJYc6G SvdI0kPRkZ2BqbKfXEzyGA56zA2NoN/tKfnydnF1yUV0eeGuOSfPBh3f1Rkyke/0 NrwaN3+BjOaxFPGzELAZ9aHD8UsP7Wn+PJg8p51qfdZdUzVZAQtwrZqrhboa2QTZ 0X0rCXmk1hye55djieu3APv4RkLuTWRVPDczSYtmKqc22CbLS4W5h7hdZxi1FLOa /qZa2VTXUQQeNRc+LoD7p4J2gf9wlZ9/uw078lhjvY3oVXA8datbrG8jhmRvhz14 glPqyjpOFNitBxNaoiOoiDYxMtFf8WF9k8/iVkWF6BFUX6LAvQ7i0I7e0xB8Aeyd -----END CERTIFICATE-----Generated at Mon Apr 28 22:49:53 2025 by rpki-client