$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea/ba34350e-8a32-444e-a9c3-3267735f96ea.mft File: ba34350e-8a32-444e-a9c3-3267735f96ea.mft (raw, json) Hash identifier: xSK1tw7NK6mHWv5Aq22Ov45I+KsWC842n9SWzSuW9r4= Subject key identifier: 2A:83:2A:4F:81:F8:3E:57:42:9A:99:A2:9B:F3:F1:01:39:0B:DD:4F Authority key identifier: 95:CE:E8:CF:4D:E9:4C:D0:B3:22:3D:3C:68:D2:DD:A5:A0:52:B2:DF Certificate issuer: /CN=ba34350e-8a32-444e-a9c3-3267735f96ea Certificate serial: 010D0C9F43285849ADE9F81F8D7CCF127271F600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea/ba34350e-8a32-444e-a9c3-3267735f96ea.mft Manifest number: 010D0C9F4328584742340732A8F7A5DFDABEC243 Signing time: Mon 28 Apr 2025 20:00:03 +0000 Manifest this update: Mon 28 Apr 2025 20:00:03 +0000 Manifest next update: Thu 01 May 2025 20:00:00 +0000 Files and hashes: 1: a59b07bd-087c-3bd2-b8c2-4ce5bbd233f4.roa (hash: ZNGQ0zqrOUHpBIc8cA++jXCyuEcPMq0G74f2lmdkZOk=) 2: ba34350e-8a32-444e-a9c3-3267735f96ea.crl (hash: Au1ch+eyUinKizDql90ekga5wYe/ljFNhSOc/0jzhh0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea/ba34350e-8a32-444e-a9c3-3267735f96ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea/ba34350e-8a32-444e-a9c3-3267735f96ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:e9:f8:1f:8d:7c:cf:12:72:71:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba34350e-8a32-444e-a9c3-3267735f96ea Validity Not Before: Apr 28 20:00:03 2025 GMT Not After : May 1 20:00:00 2025 GMT Subject: CN=caffae50-3cb5-4611-884c-50699b317d35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:bc:46:cc:15:57:f0:0b:1f:12:95:06:ab:e1: 10:4b:dc:79:70:be:0b:cb:a4:db:fb:d6:d8:cc:bf: 65:3d:a7:16:36:51:ae:04:06:63:8b:9b:86:b9:5b: 0c:ce:82:1a:f8:f4:f5:a3:73:bc:7d:24:59:1e:5a: ab:46:45:a4:44:fc:b2:57:30:2e:ce:83:2b:b3:f4: 11:96:ce:50:3a:a7:da:4c:fc:f0:37:13:46:ae:25: 6d:84:cc:b2:35:d2:c9:58:51:b6:93:b0:d0:fb:73: 74:8c:53:8c:78:55:23:52:e3:76:a0:e9:1e:54:e7: 26:05:93:1e:42:db:74:3d:d3:4d:41:4f:d8:06:01: aa:d8:59:b5:46:55:76:a0:f7:c9:ec:50:df:33:f0: 17:30:89:33:a9:b4:c0:9f:cc:6d:8b:af:fa:f7:97: d8:5e:d7:0f:0a:54:4a:61:02:cd:8d:71:27:4a:5b: ed:6c:e6:10:f1:0f:e9:a2:d7:32:f1:95:63:2e:da: 39:ae:93:1f:3f:11:ff:ce:df:36:d8:2d:ef:7e:df: 35:42:da:6a:c6:09:79:e1:a0:35:54:ae:f3:0b:da: 3c:38:cf:23:a2:4b:97:9e:fe:55:09:27:bc:8a:96: 57:3f:f1:38:cd:cf:c4:3b:c4:92:5d:07:20:a3:da: ab:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:83:2A:4F:81:F8:3E:57:42:9A:99:A2:9B:F3:F1:01:39:0B:DD:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea/ba34350e-8a32-444e-a9c3-3267735f96ea.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea/ba34350e-8a32-444e-a9c3-3267735f96ea.crl X509v3 Authority Key Identifier: keyid:95:CE:E8:CF:4D:E9:4C:D0:B3:22:3D:3C:68:D2:DD:A5:A0:52:B2:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba34350e-8a32-444e-a9c3-3267735f96ea.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:b6:6e:0d:79:44:26:66:a4:43:50:aa:d6:86:35:f5:48:05: c5:4b:41:e8:9f:58:dd:0f:53:15:fd:1f:bb:f6:2f:fc:8d:88: 57:e6:0e:70:7a:9d:1d:53:fc:8b:03:a8:f5:97:d0:04:7d:16: 4b:67:d1:77:3d:ad:f4:0e:24:dd:9b:2e:08:3a:c9:03:d2:7d: 20:0b:3b:5a:0b:93:e6:a9:8d:e1:0e:3d:f7:02:6f:aa:72:77: d6:a5:a8:3c:a6:7d:75:4c:89:fb:89:15:27:5b:8f:29:93:fb: 39:cc:65:fd:c9:4f:61:20:35:a0:99:14:53:da:7f:31:2a:63: 3a:e6:0e:6e:46:c2:23:c7:29:6d:6c:d5:62:9a:3b:73:33:41: de:fe:d4:61:28:de:a5:aa:9e:36:b8:62:37:54:ff:1d:92:0a: e9:99:b5:d3:15:c0:23:df:ea:41:11:42:ac:d5:6e:54:91:ce: 79:a6:61:9f:b4:47:52:3d:0a:71:21:a6:43:e2:0d:db:e3:72: 56:a2:ed:64:97:44:2b:18:e6:3d:86:8b:31:5d:fa:18:97:58: 24:1b:00:f6:6c:bd:e1:1a:7e:c3:94:5d:b3:06:84:f7:1e:48: 2e:a0:4e:a2:06:3c:f0:e2:80:d5:89:ac:bd:79:3d:3a:0e:e7: 9c:f9:5c:e1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmt6fgfjXzPEnJx9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEzNDM1MGUtOGEzMi00NDRlLWE5YzMtMzI2NzczNWY5 NmVhMB4XDTI1MDQyODIwMDAwM1oXDTI1MDUwMTIwMDAwMFowLzEtMCsGA1UEAxMk Y2FmZmFlNTAtM2NiNS00NjExLTg4NGMtNTA2OTliMzE3ZDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLxGzBVX8AsfEpUGq+EQS9x5cL4Ly6Tb+9bY zL9lPacWNlGuBAZji5uGuVsMzoIa+PT1o3O8fSRZHlqrRkWkRPyyVzAuzoMrs/QR ls5QOqfaTPzwNxNGriVthMyyNdLJWFG2k7DQ+3N0jFOMeFUjUuN2oOkeVOcmBZMe Qtt0PdNNQU/YBgGq2Fm1RlV2oPfJ7FDfM/AXMIkzqbTAn8xti6/695fYXtcPClRK YQLNjXEnSlvtbOYQ8Q/potcy8ZVjLto5rpMfPxH/zt822C3vft81Qtpqxgl54aA1 VK7zC9o8OM8jokuXnv5VCSe8ipZXP/E4zc/EO8SSXQcgo9qrBQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCqDKk+B+D5XQpqZopvz8QE5C91PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iYTM0 MzUwZS04YTMyLTQ0NGUtYTljMy0zMjY3NzM1Zjk2ZWEvYmEzNDM1MGUtOGEzMi00 NDRlLWE5YzMtMzI2NzczNWY5NmVhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmEzNDM1MGUtOGEzMi00NDRlLWE5 YzMtMzI2NzczNWY5NmVhL2JhMzQzNTBlLThhMzItNDQ0ZS1hOWMzLTMyNjc3MzVm OTZlYS5jcmwwHwYDVR0jBBgwFoAUlc7oz03pTNCzIj08aNLdpaBSst8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iYTM0MzUwZS04YTMyLTQ0NGUtYTljMy0zMjY3 NzM1Zjk2ZWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAftm4NeUQmZqRDUKrWhjX1 SAXFS0Hon1jdD1MV/R+79i/8jYhX5g5wep0dU/yLA6j1l9AEfRZLZ9F3Pa30DiTd my4IOskD0n0gCztaC5PmqY3hDj33Am+qcnfWpag8pn11TIn7iRUnW48pk/s5zGX9 yU9hIDWgmRRT2n8xKmM65g5uRsIjxyltbNVimjtzM0He/tRhKN6lqp42uGI3VP8d kgrpmbXTFcAj3+pBEUKs1W5Ukc55pmGftEdSPQpxIaZD4g3b43JWou1kl0QrGOY9 hosxXfoYl1gkGwD2bL3hGn7DlF2zBoT3HkguoE6iBjzw4oDViay9eT06Duec+Vzh -----END CERTIFICATE-----Generated at Tue Apr 29 11:25:32 2025 by rpki-client