$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.mft File: 8a57b69a-d683-4350-83d4-e449c0242b7d.mft (raw, json) Hash identifier: drd/q7QrqYNfIYlX2sViNoOuoOl4O7kcghSeflZx6TY= Subject key identifier: 4C:3A:9B:65:A5:F8:0F:DE:40:93:2A:3B:67:4D:28:2B:63:AC:51:35 Authority key identifier: 38:8D:06:A4:B8:D5:B5:2E:32:40:F9:04:97:CD:53:11:DC:85:6F:09 Certificate issuer: /CN=8a57b69a-d683-4350-83d4-e449c0242b7d Certificate serial: 010D0C9F43285849A854A5C2529BC337767CF200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.mft Manifest number: 010D0C9F43285846F40ADE3C011D281CFA966903 Signing time: Sat 26 Apr 2025 20:00:08 +0000 Manifest this update: Sat 26 Apr 2025 20:00:08 +0000 Manifest next update: Tue 29 Apr 2025 20:00:00 +0000 Files and hashes: 1: 456ba9f7-e72c-305d-b3cd-691ae04fe061.roa (hash: 8e0xfzisdhJL3cYe6YIKA+1QVSXFLyAdkBo6upmZr5g=) 2: 80ca88fd-748b-398c-994d-51d5dfc053ba.roa (hash: d99m5EbPUvIuVJoFj2BTYrj2HNrIVSEKXBmq245o/S0=) 3: 8a57b69a-d683-4350-83d4-e449c0242b7d.crl (hash: ce1YAJtQvnqtGWw6wgzuoe+KTxtS4/PHQUQmVV/e7jI=) 4: ec69835c-0929-34da-8360-1c7309443e7a.roa (hash: 6FnwbKZpb5wBeCLc1RazeZ5iBjFF3aYctz1oW4tYWJo=) 5: fb852d4e-c641-3f9b-9b30-7dd2284f817c.roa (hash: 62D5fkESQ57w7Y3lKypTTpY7wafRpqCTDcfGNu6AUFQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:54:a5:c2:52:9b:c3:37:76:7c:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a57b69a-d683-4350-83d4-e449c0242b7d Validity Not Before: Apr 26 20:00:08 2025 GMT Not After : Apr 29 20:00:00 2025 GMT Subject: CN=92dfbb3d-f1ab-4c5c-bdbc-f3e0ddb269c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:07:46:9c:61:0e:0d:57:65:3e:8c:a3:ed:d3: dc:44:24:e8:71:bf:0f:61:c3:01:cc:42:f4:7d:85: 75:f0:34:6c:13:a9:43:ac:41:d9:9e:59:c0:ed:dd: 56:16:2e:00:1d:cb:47:0e:12:54:71:0e:d5:33:d3: a7:a1:85:3d:14:5d:66:bf:a7:20:a1:a0:2c:f3:05: dc:ab:2f:d8:65:75:ee:b4:c5:7a:77:0b:bf:ad:c6: 87:7c:f3:99:fc:e1:ef:eb:6f:98:67:02:74:5a:a3: 69:9d:1f:a1:3d:8a:32:f2:86:66:5f:24:11:f2:da: 0a:7b:60:79:4b:61:a7:2e:07:bb:a4:f8:ce:96:15: bd:d2:e0:75:c2:43:b8:94:3f:ff:ff:cb:cd:4f:07: 23:8a:d4:42:db:53:f2:55:b6:c0:6b:3f:3e:3b:af: ec:d8:47:b0:2f:b8:ac:ce:f3:b1:e0:7f:80:d4:da: 8e:91:ea:ea:95:b3:66:4c:b9:d4:c9:f6:7a:f5:41: 17:fc:f4:23:1f:e7:54:0e:31:d3:27:80:79:08:c0: df:48:1f:0d:b7:39:78:4a:a9:65:7d:71:36:c4:49: 47:81:d9:31:d5:cc:a3:e5:ca:14:a9:45:38:b3:dd: 2c:de:37:85:e3:ba:56:95:de:0e:00:51:f4:64:f7: 7b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:3A:9B:65:A5:F8:0F:DE:40:93:2A:3B:67:4D:28:2B:63:AC:51:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.crl X509v3 Authority Key Identifier: keyid:38:8D:06:A4:B8:D5:B5:2E:32:40:F9:04:97:CD:53:11:DC:85:6F:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:47:79:c4:65:ae:96:b8:ea:35:f2:39:d6:e9:bd:f1:c1:14: 31:3c:d3:bc:9c:6d:22:66:7d:b1:c5:71:8c:a3:11:7a:83:9b: 48:ef:7e:fd:3c:84:ce:10:41:40:66:5c:94:7f:b8:b8:80:46: 31:10:be:37:69:10:56:a0:a8:bc:01:a7:41:e7:ba:f1:88:0a: 54:e4:32:de:5a:75:c7:de:42:db:78:e0:64:bd:70:5f:7e:fa: ff:c8:f9:25:71:b8:c5:65:00:57:47:f5:2e:20:08:19:09:71: 2f:91:72:2d:7f:42:81:96:6e:4c:98:d3:24:34:e8:c9:e0:90: e1:95:da:78:1e:2e:d4:93:db:50:de:1b:a6:1a:b2:cb:eb:64: 95:27:33:c2:57:03:e2:79:8c:1c:11:26:6f:4d:4d:ce:24:81: 98:7e:3a:f1:7b:fc:f1:c9:f9:a6:0c:98:ae:2a:33:7c:b9:17: ca:5a:4f:1a:fd:d7:a1:f2:e2:69:ca:7b:a5:49:20:cb:8c:63: f3:83:ae:ab:fb:17:5a:9d:fc:b2:10:06:40:84:ce:83:54:42: f5:95:31:3b:13:c3:f6:66:c8:e3:a5:b3:cd:52:ae:7b:e8:f8: a7:b2:02:53:32:43:57:4e:5c:15:87:bf:c0:8a:a2:f2:a4:e4: 08:57:a9:63 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmoVKXCUpvDN3Z88gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1N2I2OWEtZDY4My00MzUwLTgzZDQtZTQ0OWMwMjQy YjdkMB4XDTI1MDQyNjIwMDAwOFoXDTI1MDQyOTIwMDAwMFowLzEtMCsGA1UEAxMk OTJkZmJiM2QtZjFhYi00YzVjLWJkYmMtZjNlMGRkYjI2OWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwdGnGEODVdlPoyj7dPcRCTocb8PYcMBzEL0 fYV18DRsE6lDrEHZnlnA7d1WFi4AHctHDhJUcQ7VM9OnoYU9FF1mv6cgoaAs8wXc qy/YZXXutMV6dwu/rcaHfPOZ/OHv62+YZwJ0WqNpnR+hPYoy8oZmXyQR8toKe2B5 S2GnLge7pPjOlhW90uB1wkO4lD///8vNTwcjitRC21PyVbbAaz8+O6/s2EewL7is zvOx4H+A1NqOkerqlbNmTLnUyfZ69UEX/PQjH+dUDjHTJ4B5CMDfSB8Ntzl4Sqll fXE2xElHgdkx1cyj5coUqUU4s90s3jeF47pWld4OAFH0ZPd70QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEw6m2Wl+A/eQJMqO2dNKCtjrFE1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YTU3 YjY5YS1kNjgzLTQzNTAtODNkNC1lNDQ5YzAyNDJiN2QvOGE1N2I2OWEtZDY4My00 MzUwLTgzZDQtZTQ0OWMwMjQyYjdkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGE1N2I2OWEtZDY4My00MzUwLTgz ZDQtZTQ0OWMwMjQyYjdkLzhhNTdiNjlhLWQ2ODMtNDM1MC04M2Q0LWU0NDljMDI0 MmI3ZC5jcmwwHwYDVR0jBBgwFoAUOI0GpLjVtS4yQPkEl81TEdyFbwkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YTU3YjY5YS1kNjgzLTQzNTAtODNkNC1lNDQ5 YzAyNDJiN2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAaR3nEZa6WuOo18jnW6b3x wRQxPNO8nG0iZn2xxXGMoxF6g5tI7379PITOEEFAZlyUf7i4gEYxEL43aRBWoKi8 AadB57rxiApU5DLeWnXH3kLbeOBkvXBffvr/yPklcbjFZQBXR/UuIAgZCXEvkXIt f0KBlm5MmNMkNOjJ4JDhldp4Hi7Uk9tQ3humGrLL62SVJzPCVwPieYwcESZvTU3O JIGYfjrxe/zxyfmmDJiuKjN8uRfKWk8a/deh8uJpynulSSDLjGPzg66r+xdanfyy EAZAhM6DVEL1lTE7E8P2ZsjjpbPNUq576PinsgJTMkNXTlwVh7/AiqLypOQIV6lj -----END CERTIFICATE-----Generated at Sun Apr 27 09:02:18 2025 by rpki-client