$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba/f601ba70-383e-4f5d-aacb-7e45e33ac6ba.mft File: f601ba70-383e-4f5d-aacb-7e45e33ac6ba.mft (raw, json) Hash identifier: hlBAfR6pMsyOxqjCgm1R38OkNAWmr+IqxpuRdp2OT2I= Subject key identifier: 01:FC:E0:2B:00:0A:F2:77:12:9D:0E:17:01:01:D1:9D:E5:CF:FF:51 Authority key identifier: 63:E4:E1:0B:2B:65:78:FC:96:06:23:A2:03:18:67:8B:54:59:F4:DA Certificate issuer: /CN=f601ba70-383e-4f5d-aacb-7e45e33ac6ba Certificate serial: 010D0C9F43285849AD374A98DE81D44C8B929080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba/f601ba70-383e-4f5d-aacb-7e45e33ac6ba.mft Manifest number: 010D0C9F43285842136080B815B1C64F1BB0388A Signing time: Mon 28 Apr 2025 14:00:02 +0000 Manifest this update: Mon 28 Apr 2025 14:00:02 +0000 Manifest next update: Wed 30 Apr 2025 14:00:00 +0000 Files and hashes: 1: 5ecf6e9d-9516-32a2-9864-2408ded5aa46.roa (hash: hxj0I3luZsSe/OrdHw2z3TTqTOkwiHj5L7utONrP2CQ=) 2: 75778f4d-d544-304c-866f-15f6bf74494e.roa (hash: lnF5r6wpS4GwadeCrW2J7rZYZykpOpoQ/hHG45pjWeI=) 3: 91e5a6dd-69aa-374a-a36e-71b8d69d2b42.roa (hash: oB1U2LGRbzx5hCC75B+NrE12IMnbXGw7sMpDQPw9Q5o=) 4: 9843d163-819a-3ab6-8ca0-90d88abb7ebb.roa (hash: 832zJGDh1NfFsbh/EAxRWEC5Dl9DDz6Bm3//3No8HpM=) 5: c2d2ca0b-f812-3101-ba90-0261d1b5768a.roa (hash: 96nNzKVxM6ctA5jsnBq4Uu39Ul44/Lvb3reDA9Q98pA=) 6: e7a95372-575d-3224-98f1-9fe65e90017b.roa (hash: asJCtDYDgIbjTe17XpRnigfrUdhDghq4omfy/awhEVM=) 7: f601ba70-383e-4f5d-aacb-7e45e33ac6ba.crl (hash: 10H7xWmsQHEWI3x2fMGwjTfBnrGQhGinzEWs9qYg0lE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba/f601ba70-383e-4f5d-aacb-7e45e33ac6ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba/f601ba70-383e-4f5d-aacb-7e45e33ac6ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:37:4a:98:de:81:d4:4c:8b:92:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f601ba70-383e-4f5d-aacb-7e45e33ac6ba Validity Not Before: Apr 28 14:00:02 2025 GMT Not After : Apr 30 14:00:00 2025 GMT Subject: CN=b7bd9acf-d957-4c21-989c-3c6b87850b3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:32:02:03:7b:df:c1:a6:d7:63:1c:36:40:14: 2b:03:fb:5f:2f:32:3d:29:0e:5a:8c:72:d3:3a:aa: 76:6b:67:57:2c:da:50:e4:66:15:5b:b2:44:26:82: 19:20:0e:b5:dd:9f:41:8a:8a:0c:4d:07:4d:e5:cb: da:cc:f9:cb:cd:67:d8:1b:a0:8f:7b:1a:d1:07:cb: f5:50:4c:99:50:0d:24:5b:08:3a:ec:43:05:16:ce: 41:6f:3c:aa:1b:f0:71:11:8c:8b:13:7e:3b:82:50: 13:01:19:be:ef:60:9a:ac:69:25:80:a1:5e:32:5a: 5b:49:e2:e5:ab:d2:a9:e4:26:5b:e9:68:c4:64:8c: 3a:b4:75:10:a0:e6:f7:c2:10:ca:8b:07:51:41:b6: 23:bb:27:ec:d6:5a:a1:00:6e:94:72:64:56:5c:cb: 85:f6:af:e5:7c:f7:ea:3c:9c:e1:d0:12:c1:06:73: c9:89:32:bd:e4:37:98:8e:a9:a9:ae:95:a0:b7:34: 54:e4:38:f8:22:2c:97:c6:13:c0:f8:08:f8:d1:cf: 83:34:6b:9b:f1:3f:99:89:62:a8:42:9f:f8:6f:ed: a1:00:65:8e:60:7c:61:c9:f0:7b:8b:c9:fd:fa:c8: f2:64:67:36:a9:61:73:e5:9a:0a:8c:c0:3a:37:23: 0f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:FC:E0:2B:00:0A:F2:77:12:9D:0E:17:01:01:D1:9D:E5:CF:FF:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba/f601ba70-383e-4f5d-aacb-7e45e33ac6ba.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba/f601ba70-383e-4f5d-aacb-7e45e33ac6ba.crl X509v3 Authority Key Identifier: keyid:63:E4:E1:0B:2B:65:78:FC:96:06:23:A2:03:18:67:8B:54:59:F4:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:7f:1e:e7:9b:81:c4:2d:f6:8b:d0:19:6d:2e:a4:e7:00:89: be:af:d4:aa:9f:12:e7:ff:1e:5c:6c:02:f2:44:f0:00:00:6e: 1d:4e:13:bf:b5:f5:f9:01:28:33:b2:73:21:0c:a9:a7:84:9c: 7e:4e:85:5d:14:0c:52:c6:01:66:ef:a7:fa:a7:03:2b:cd:3a: b2:2a:bd:7b:0c:9d:c3:6f:9f:a3:e1:3d:83:9b:1a:da:42:f9: 67:0f:f4:7d:d3:0e:85:5c:6e:a7:89:09:5d:cb:bc:ad:27:bd: 4a:f2:21:f7:79:0e:f5:27:7d:3c:70:b0:ac:82:51:dc:02:d5: 08:d9:60:b6:f6:41:07:89:4b:26:5d:98:85:49:88:59:57:21: 60:29:46:a4:cb:b1:3e:8e:3e:b5:c7:55:cc:3e:81:b2:a9:09: 49:9c:33:65:da:be:31:c1:50:ab:fc:98:88:6e:9c:84:34:bd: a4:62:90:51:99:39:b4:be:86:e5:cb:35:81:52:a5:1b:73:17: 59:4f:f0:44:01:e8:8a:dd:10:c9:83:d0:dc:4e:bc:67:b8:0b: 5e:b7:43:3f:cd:7e:e6:0d:75:48:cc:1f:06:67:1e:40:f6:47: ea:ff:ef:8e:a0:9d:9d:1f:70:7d:0f:6f:1a:93:be:1d:20:6d: 93:a9:b1:7b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmtN0qY3oHUTIuSkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwMWJhNzAtMzgzZS00ZjVkLWFhY2ItN2U0NWUzM2Fj NmJhMB4XDTI1MDQyODE0MDAwMloXDTI1MDQzMDE0MDAwMFowLzEtMCsGA1UEAxMk YjdiZDlhY2YtZDk1Ny00YzIxLTk4OWMtM2M2Yjg3ODUwYjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijICA3vfwabXYxw2QBQrA/tfLzI9KQ5ajHLT Oqp2a2dXLNpQ5GYVW7JEJoIZIA613Z9BiooMTQdN5cvazPnLzWfYG6CPexrRB8v1 UEyZUA0kWwg67EMFFs5BbzyqG/BxEYyLE347glATARm+72CarGklgKFeMlpbSeLl q9Kp5CZb6WjEZIw6tHUQoOb3whDKiwdRQbYjuyfs1lqhAG6UcmRWXMuF9q/lfPfq PJzh0BLBBnPJiTK95DeYjqmprpWgtzRU5Dj4IiyXxhPA+Aj40c+DNGub8T+ZiWKo Qp/4b+2hAGWOYHxhyfB7i8n9+sjyZGc2qWFz5ZoKjMA6NyMPQwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAH84CsACvJ3Ep0OFwEB0Z3lz/9RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjAx YmE3MC0zODNlLTRmNWQtYWFjYi03ZTQ1ZTMzYWM2YmEvZjYwMWJhNzAtMzgzZS00 ZjVkLWFhY2ItN2U0NWUzM2FjNmJhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYwMWJhNzAtMzgzZS00ZjVkLWFh Y2ItN2U0NWUzM2FjNmJhL2Y2MDFiYTcwLTM4M2UtNGY1ZC1hYWNiLTdlNDVlMzNh YzZiYS5jcmwwHwYDVR0jBBgwFoAUY+ThCytlePyWBiOiAxhni1RZ9NowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjAxYmE3MC0zODNlLTRmNWQtYWFjYi03ZTQ1 ZTMzYWM2YmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCkfx7nm4HELfaL0BltLqTn AIm+r9SqnxLn/x5cbALyRPAAAG4dThO/tfX5ASgzsnMhDKmnhJx+ToVdFAxSxgFm 76f6pwMrzTqyKr17DJ3Db5+j4T2DmxraQvlnD/R90w6FXG6niQldy7ytJ71K8iH3 eQ71J308cLCsglHcAtUI2WC29kEHiUsmXZiFSYhZVyFgKUaky7E+jj61x1XMPoGy qQlJnDNl2r4xwVCr/JiIbpyENL2kYpBRmTm0voblyzWBUqUbcxdZT/BEAeiK3RDJ g9DcTrxnuAtet0M/zX7mDXVIzB8GZx5A9kfq/++OoJ2dH3B9D28ak74dIG2TqbF7 -----END CERTIFICATE-----Generated at Mon Apr 28 16:49:04 2025 by rpki-client