$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.mft File: faf569a5-954e-480e-9904-712ec61652b7.mft (raw, json) Hash identifier: ISi4qCxCiRLas5M5J2iWcw6Kkm2QUgwj4lxchkhRRA4= Subject key identifier: 2C:43:06:46:62:A0:F2:AC:8D:13:94:60:BC:EB:7A:5E:65:A3:89:8C Authority key identifier: 06:32:5E:FB:8B:27:C3:34:23:E2:86:F6:6C:02:1A:A9:B4:81:29:45 Certificate issuer: /CN=faf569a5-954e-480e-9904-712ec61652b7 Certificate serial: 010D0C9F43285849A97E6E9515738B571A80FBA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.mft Manifest number: 010D0C9F43285846CB5C5477BF376375C438FF96 Signing time: Sun 27 Apr 2025 06:00:07 +0000 Manifest this update: Sun 27 Apr 2025 06:00:07 +0000 Manifest next update: Tue 29 Apr 2025 06:00:00 +0000 Files and hashes: 1: 2b19fe31-783c-3d4a-8ece-06a253df9756.roa (hash: /uKLnduOyWsNc8Sh+LhZrKTOqT+sYpp7rqfMjRnh1jc=) 2: 97fde43b-16f3-3046-9287-5bb8d7603efa.roa (hash: m4cft9R9KacQhWV9Wn9JYc0jELgTAbW+kBCbugKwNQ8=) 3: c2c6f7d3-cba4-3cc7-bff6-77ef5ec8df20.roa (hash: 1YVvWq4351QQxmXNWmSqah5sLAIYwK2KdV/g/z8Pzxc=) 4: da28cf00-8f8b-3953-a50b-406aac3a4726.roa (hash: R8kYHcMwBbN4yW1s8CEa1yWbQ+bpaV4FIcgcpZp7Apw=) 5: ea9b1f11-cc10-3201-8210-2b8888464357.roa (hash: Z/bW89ezv2bJput4xdOp3iVwobr4Iz1e7Pt9HEEOPNU=) 6: faf569a5-954e-480e-9904-712ec61652b7.crl (hash: KZhbdlkE4yudwIyKN0iyfF+qp38Zy4+pgfRlohAiY3U=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a9:7e:6e:95:15:73:8b:57:1a:80:fb:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faf569a5-954e-480e-9904-712ec61652b7 Validity Not Before: Apr 27 06:00:07 2025 GMT Not After : Apr 29 06:00:00 2025 GMT Subject: CN=ab21276e-bbd2-43bd-97ff-f965cc91034b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e4:f8:aa:89:0a:1a:a8:5d:59:4c:cf:06:87: 68:01:ea:67:7e:be:e4:fd:86:91:ea:27:9d:6e:08: fb:90:e3:86:45:c6:b0:7c:72:4f:ab:32:b6:95:82: 34:5f:d1:32:e9:12:d6:45:ac:9a:7f:4e:b4:5e:76: 76:cc:5c:28:f3:5d:7c:f1:ef:86:b0:60:02:43:2c: bb:4c:10:0d:d3:6d:53:f8:e3:a0:ef:e8:87:e5:4e: 11:48:69:38:e4:10:d4:8d:d3:5a:76:00:01:f2:7c: 3d:b3:6a:42:65:0b:29:e6:c4:8a:65:8d:d3:5d:21: a0:32:63:2a:7e:aa:df:f0:33:07:6f:90:d4:6e:d5: cb:26:c1:ab:b3:69:e2:3f:87:d2:ff:fd:b8:d7:f0: 59:f1:35:cf:ed:1a:a5:1b:22:9a:98:1e:43:2c:b7: 29:96:1f:9a:5e:2d:2c:c9:c4:18:a7:ef:8a:4c:30: 08:06:6d:2f:4b:c1:10:6c:eb:b8:08:30:57:61:b9: e9:f5:8d:46:7c:cc:a5:83:1d:f1:e2:2e:81:3c:21: 4d:02:6f:4e:8f:9c:9b:b5:d1:67:46:a9:85:32:77: e0:5e:7f:7e:f2:4b:02:8d:0d:00:ef:6f:79:61:6f: ce:27:07:41:2a:fa:30:be:2d:96:49:b5:6e:f2:4e: 0c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:43:06:46:62:A0:F2:AC:8D:13:94:60:BC:EB:7A:5E:65:A3:89:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.crl X509v3 Authority Key Identifier: keyid:06:32:5E:FB:8B:27:C3:34:23:E2:86:F6:6C:02:1A:A9:B4:81:29:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:a4:e8:13:2e:3e:29:88:4c:3e:d1:bb:57:f3:63:32:01:b3: 17:ae:e3:32:a4:f4:bd:3c:d5:19:c7:a8:5e:d9:97:0c:b3:c4: 13:7d:91:d5:d7:d3:92:3e:b5:14:0b:7c:e6:09:d0:19:75:56: c6:7e:9d:e5:d3:44:ba:f8:5e:70:a6:aa:de:7f:61:55:88:ab: 9d:9d:7d:bf:ff:f1:14:4e:e5:00:83:97:59:22:c8:6a:14:3e: 2b:94:9f:b1:9b:5a:53:88:28:35:e5:bc:3e:ad:a1:77:c1:d0: 20:cc:d4:27:d5:ea:64:fe:c5:6e:10:e0:78:b2:cc:b7:46:e7: 60:f1:cb:6f:bd:b0:38:04:b4:66:fa:6f:cc:09:29:9d:c0:e8: 0d:43:49:06:1e:a1:7c:72:ba:e8:8c:bf:b3:23:cf:3f:fe:0b: 2e:86:83:d9:90:d5:19:1c:4e:c8:38:71:35:df:86:13:db:59: 6b:8a:eb:94:b2:7b:bb:fe:a0:68:f3:ea:c4:b9:99:b5:3c:e6: df:1f:21:4e:c6:ae:88:cc:15:b4:64:cb:06:96:13:bb:e7:c7: 97:3b:21:45:30:3e:b9:2c:8e:ea:d7:1c:c6:d4:c1:e7:da:f5: b8:9f:0a:79:aa:79:fa:8a:2c:9b:7a:3a:96:da:1d:53:fd:06: 26:82:7d:24 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmpfm6VFXOLVxqA+6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFmNTY5YTUtOTU0ZS00ODBlLTk5MDQtNzEyZWM2MTY1 MmI3MB4XDTI1MDQyNzA2MDAwN1oXDTI1MDQyOTA2MDAwMFowLzEtMCsGA1UEAxMk YWIyMTI3NmUtYmJkMi00M2JkLTk3ZmYtZjk2NWNjOTEwMzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+T4qokKGqhdWUzPBodoAepnfr7k/YaR6ied bgj7kOOGRcawfHJPqzK2lYI0X9Ey6RLWRayaf060XnZ2zFwo81188e+GsGACQyy7 TBAN021T+OOg7+iH5U4RSGk45BDUjdNadgAB8nw9s2pCZQsp5sSKZY3TXSGgMmMq fqrf8DMHb5DUbtXLJsGrs2niP4fS//241/BZ8TXP7RqlGyKamB5DLLcplh+aXi0s ycQYp++KTDAIBm0vS8EQbOu4CDBXYbnp9Y1GfMylgx3x4i6BPCFNAm9Oj5ybtdFn RqmFMnfgXn9+8ksCjQ0A7295YW/OJwdBKvowvi2WSbVu8k4MdwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCxDBkZioPKsjROUYLzrel5lo4mMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9mYWY1 NjlhNS05NTRlLTQ4MGUtOTkwNC03MTJlYzYxNjUyYjcvZmFmNTY5YTUtOTU0ZS00 ODBlLTk5MDQtNzEyZWM2MTY1MmI3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZmFmNTY5YTUtOTU0ZS00ODBlLTk5 MDQtNzEyZWM2MTY1MmI3L2ZhZjU2OWE1LTk1NGUtNDgwZS05OTA0LTcxMmVjNjE2 NTJiNy5jcmwwHwYDVR0jBBgwFoAUBjJe+4snwzQj4ob2bAIaqbSBKUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9mYWY1NjlhNS05NTRlLTQ4MGUtOTkwNC03MTJl YzYxNjUyYjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCmpOgTLj4piEw+0btX82My AbMXruMypPS9PNUZx6he2ZcMs8QTfZHV19OSPrUUC3zmCdAZdVbGfp3l00S6+F5w pqref2FViKudnX2///EUTuUAg5dZIshqFD4rlJ+xm1pTiCg15bw+raF3wdAgzNQn 1epk/sVuEOB4ssy3Rudg8ctvvbA4BLRm+m/MCSmdwOgNQ0kGHqF8crrojL+zI88/ /gsuhoPZkNUZHE7IOHE134YT21lriuuUsnu7/qBo8+rEuZm1PObfHyFOxq6IzBW0 ZMsGlhO758eXOyFFMD65LI7q1xzG1MHn2vW4nwp5qnn6iiybejqW2h1T/QYmgn0k -----END CERTIFICATE-----Generated at Sun Apr 27 11:33:02 2025 by rpki-client