$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft File: 2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft (raw, json) Hash identifier: F8mjLin667NNLO8Lr07Bg662cAyVqbk1UBpjOQrf+eE= Subject key identifier: 01:DC:99:86:3C:8A:5A:38:04:E9:58:73:0E:C3:47:D9:1B:1E:A7:AA Authority key identifier: C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC Certificate issuer: /CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8 Certificate serial: 010D0C9F43285849AA8A69F0D16718C518C48E20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft Manifest number: 010D0C9F432858474714BFB4E60C762DE243A66C Signing time: Sun 27 Apr 2025 15:00:03 +0000 Manifest this update: Sun 27 Apr 2025 15:00:03 +0000 Manifest next update: Tue 29 Apr 2025 15:00:00 +0000 Files and hashes: 1: 2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl (hash: jK9JkFj4dIH9M6l7yf6jvjs3HqaKSzR22apRlyt9bIw=) 2: 44fcabf0-f89c-3bb1-adb4-595ce7300823.roa (hash: wA9lboYwVu1VJ173c4Nq+b6trl3C9BAFAN/6bgQAcro=) 3: a981c111-3341-3f73-85ec-3e9f5b8d2766.roa (hash: SftXbNgEXfQ/GN5dULOgQhsSGq8Tlf2ifwcqDHDRuww=) 4: d6c17614-b6c8-3e14-9443-1922a25dd1ef.roa (hash: 7dchRC2BihUVPy7KskMNzu+cW537I66oQGx1AkMzwJE=) 5: d73dd892-ee55-3262-86e9-4939ca3508af.roa (hash: N3UMlq+w9G4jZlWtzVzI505Lbnz1EWc0Ae8vFBUN5zo=) 6: f8ba03ab-eb1d-305c-b6c7-6661ebf6f5a4.roa (hash: iU6dWIXboXial0H2tiSRTcRyAq3wChCxoKLjFaQaSM4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:8a:69:f0:d1:67:18:c5:18:c4:8e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8 Validity Not Before: Apr 27 15:00:03 2025 GMT Not After : Apr 29 15:00:00 2025 GMT Subject: CN=0adec46f-9387-4ed2-ae5d-51e2ae7c0e72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:38:35:a7:ea:66:75:c7:66:6d:d7:03:6f:75: 3c:be:f8:e0:d7:06:fe:6c:9d:c0:45:87:b5:cd:4b: f3:f9:7d:64:70:fd:2b:61:76:4f:85:e9:67:69:73: 3f:63:d4:ef:55:8f:4c:64:39:6d:1c:d9:f5:c3:a4: 3a:d5:44:14:6d:17:c3:a4:5a:4b:3a:04:24:2f:f1: c4:11:82:62:71:9c:65:9c:48:5d:17:b2:5b:a1:33: 9d:0a:07:e1:02:a9:6e:e1:33:b8:0e:4f:a9:99:61: 83:5f:0e:ce:3d:d8:e3:81:b5:8f:c2:8e:4a:d9:f9: a6:05:65:f2:8d:58:23:2a:c9:ac:2f:15:20:a7:32: 40:0e:1f:31:4e:06:de:67:4e:4e:3f:97:37:5c:a4: f1:23:e4:33:d6:0d:67:1e:10:3e:ef:98:4e:79:3d: 7e:cf:7c:6a:dd:09:2a:76:6c:75:fc:20:f4:98:b1: 17:e7:aa:16:2b:a6:d8:f7:b8:b9:6c:51:6e:7a:92: c7:b4:f2:bf:09:57:24:94:c8:4e:5d:f6:bf:48:4a: 2e:d6:24:7a:12:2d:73:a5:5d:29:33:a8:5d:b6:13: 97:0d:8a:94:95:cc:3b:f5:1c:63:12:22:de:89:f7: 2c:55:17:6d:f7:84:fe:62:c4:67:bc:38:0b:b0:3e: e3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:DC:99:86:3C:8A:5A:38:04:E9:58:73:0E:C3:47:D9:1B:1E:A7:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl X509v3 Authority Key Identifier: keyid:C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:fe:fa:1e:08:50:1f:5d:df:e8:55:58:f0:a5:00:5c:82:2a: 39:b7:8f:72:ab:3b:20:49:ec:e0:46:25:66:5f:f2:7f:62:0d: 56:55:58:ec:5d:3d:25:b4:82:fe:1b:c8:a0:d7:f2:b8:33:e1: b7:43:8b:fc:2d:b0:f6:6f:b6:56:6c:a3:b5:08:04:57:2a:e6: da:ac:f2:24:80:0f:59:9b:85:9c:ef:52:90:bb:96:82:44:94: 72:cb:ba:36:de:43:b6:f8:fb:77:5c:30:b5:d8:3a:f8:c4:56: 18:a8:93:1e:97:20:4c:50:1c:6e:63:ab:e5:48:94:07:1f:2c: 31:79:0a:6c:51:51:82:72:c6:73:e7:00:49:7f:a3:aa:43:ea: ff:f4:f5:1c:6b:c5:9f:d1:a6:a2:0f:91:16:2d:a4:54:da:ef: 75:af:32:0d:f4:93:5e:e4:16:c3:62:97:96:29:69:cb:2d:bd: af:97:87:c5:82:90:81:49:90:8c:a9:b0:27:b3:1e:90:a3:27: d6:ef:1d:5a:44:b3:5a:d1:1b:04:9a:07:b8:ee:7d:ea:7e:84: 55:f4:2b:82:8a:09:95:93:d2:ee:e5:05:d2:07:12:fc:0b:e4: bb:8d:8f:a0:21:e4:87:7f:32:67:94:df:01:61:d8:7e:0a:a0: 53:1f:54:9b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmqimnw0WcYxRjEjiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZmODVlNzktMTc0Yy00NmY2LThhNjItYTkyYzJjOTg3 NWI4MB4XDTI1MDQyNzE1MDAwM1oXDTI1MDQyOTE1MDAwMFowLzEtMCsGA1UEAxMk MGFkZWM0NmYtOTM4Ny00ZWQyLWFlNWQtNTFlMmFlN2MwZTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTg1p+pmdcdmbdcDb3U8vvjg1wb+bJ3ARYe1 zUvz+X1kcP0rYXZPhelnaXM/Y9TvVY9MZDltHNn1w6Q61UQUbRfDpFpLOgQkL/HE EYJicZxlnEhdF7JboTOdCgfhAqlu4TO4Dk+pmWGDXw7OPdjjgbWPwo5K2fmmBWXy jVgjKsmsLxUgpzJADh8xTgbeZ05OP5c3XKTxI+Qz1g1nHhA+75hOeT1+z3xq3Qkq dmx1/CD0mLEX56oWK6bY97i5bFFuepLHtPK/CVcklMhOXfa/SEou1iR6Ei1zpV0p M6hdthOXDYqUlcw79RxjEiLeifcsVRdt94T+YsRnvDgLsD7jkQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAHcmYY8ilo4BOlYcw7DR9kbHqeqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4 NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJjMmM5ODc1YjgvMmZmODVlNzktMTc0Yy00 NmY2LThhNjItYTkyYzJjOTg3NWI4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMmZmODVlNzktMTc0Yy00NmY2LThh NjItYTkyYzJjOTg3NWI4LzJmZjg1ZTc5LTE3NGMtNDZmNi04YTYyLWE5MmMyYzk4 NzViOC5jcmwwHwYDVR0jBBgwFoAUyL7y7tghnnjUrlWgB40hcC+PUdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJj MmM5ODc1YjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBM/voeCFAfXd/oVVjwpQBc gio5t49yqzsgSezgRiVmX/J/Yg1WVVjsXT0ltIL+G8ig1/K4M+G3Q4v8LbD2b7ZW bKO1CARXKubarPIkgA9Zm4Wc71KQu5aCRJRyy7o23kO2+Pt3XDC12Dr4xFYYqJMe lyBMUBxuY6vlSJQHHywxeQpsUVGCcsZz5wBJf6OqQ+r/9PUca8Wf0aaiD5EWLaRU 2u91rzIN9JNe5BbDYpeWKWnLLb2vl4fFgpCBSZCMqbAnsx6QoyfW7x1aRLNa0RsE mge47n3qfoRV9CuCigmVk9Lu5QXSBxL8C+S7jY+gIeSHfzJnlN8BYdh+CqBTH1Sb -----END CERTIFICATE-----Generated at Mon Apr 28 02:15:15 2025 by rpki-client