$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466/a1ff4d78-24e6-4db2-8e97-e5c39ff21466.mft File: a1ff4d78-24e6-4db2-8e97-e5c39ff21466.mft (raw, json) Hash identifier: YjF+R6/0FfnSyU8h/87F/uuxauAKq4RbkBktjU4M6Uk= Subject key identifier: 5C:D2:A4:B9:31:EF:F0:13:5F:B0:11:90:98:A0:7F:4D:5F:91:9E:4C Authority key identifier: 43:A7:4D:A0:EC:21:06:75:71:91:4B:D6:D3:B6:B8:D3:D5:D5:96:43 Certificate issuer: /CN=a1ff4d78-24e6-4db2-8e97-e5c39ff21466 Certificate serial: 010D0C9F43285849A72AD0956E6FBF9C05E173BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466/a1ff4d78-24e6-4db2-8e97-e5c39ff21466.mft Manifest number: 010D0C9F4328584073A84E3DD5B8FD7071D7CA72 Signing time: Sat 26 Apr 2025 10:00:03 +0000 Manifest this update: Sat 26 Apr 2025 10:00:03 +0000 Manifest next update: Mon 28 Apr 2025 10:00:00 +0000 Files and hashes: 1: 2b45a8d2-36c0-3698-8b2f-2c6aa1d56b60.roa (hash: KBoarxPwJ15TWksAp3+lEo6miWe5syGZYK82EnYjCHU=) 2: 94db6164-13b1-3f6c-a4d4-7b1c710f8574.roa (hash: NbjWFS3SHxiu6aPl8O5rw2C8Jxmlcrh9JXKCyKBFu7E=) 3: a1ff4d78-24e6-4db2-8e97-e5c39ff21466.crl (hash: ysMC1PRFIV3Y9AdIhr4oC6mpfUFu178HDFOuMLyUBwY=) 4: facb9f6d-63db-360f-ada8-edd0be484667.roa (hash: 72T9ov+Is/arsURQTpPR6kLmJx35BWsMs/mzipNIsQU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466/a1ff4d78-24e6-4db2-8e97-e5c39ff21466.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466/a1ff4d78-24e6-4db2-8e97-e5c39ff21466.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:2a:d0:95:6e:6f:bf:9c:05:e1:73:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ff4d78-24e6-4db2-8e97-e5c39ff21466 Validity Not Before: Apr 26 10:00:03 2025 GMT Not After : Apr 28 10:00:00 2025 GMT Subject: CN=a90b9be6-15d2-47c3-84cc-26148d5b7953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ba:f5:21:80:a8:73:82:b7:bc:0f:2e:87:b7: 32:d9:be:25:9c:77:57:b1:85:33:72:c9:ee:f3:ef: 8c:30:59:b6:f3:84:16:12:11:2a:45:31:8a:5e:28: c1:2b:45:45:f7:26:c0:0a:1a:90:0a:e9:8c:d0:2c: b2:da:00:1a:4c:4c:36:dc:dc:72:b3:21:b1:3c:9d: da:8f:ec:15:f7:64:f4:7c:c3:41:4e:6e:a7:e0:00: 95:55:d5:2c:90:20:30:3a:92:9e:01:6b:f6:7a:5d: bb:6c:39:41:1e:1a:f4:b3:15:94:c3:ac:b1:cd:be: 26:e9:87:79:cc:3f:3b:1f:18:ba:7c:8f:2b:98:35: 23:9e:e9:74:06:38:5d:a8:54:2d:6f:28:6f:a7:dc: e2:f7:63:89:12:00:7d:51:46:32:db:b6:cb:2a:a1: 4b:9c:d6:d7:d1:79:32:aa:52:9b:22:c0:9c:16:05: cb:d9:6e:7c:81:a8:3f:3b:e1:9c:07:86:ce:15:19: 1c:e1:00:49:4f:0f:92:a7:11:77:db:7a:92:fc:d3: da:63:27:4b:bb:95:ff:74:73:dd:be:3d:e5:b8:6e: 43:7c:62:bf:e5:c1:5d:11:78:3a:c6:43:4a:e9:1c: b6:0b:7e:9d:db:db:74:ad:07:e0:f8:30:7b:e5:6b: cb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D2:A4:B9:31:EF:F0:13:5F:B0:11:90:98:A0:7F:4D:5F:91:9E:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466/a1ff4d78-24e6-4db2-8e97-e5c39ff21466.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466/a1ff4d78-24e6-4db2-8e97-e5c39ff21466.crl X509v3 Authority Key Identifier: keyid:43:A7:4D:A0:EC:21:06:75:71:91:4B:D6:D3:B6:B8:D3:D5:D5:96:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1ff4d78-24e6-4db2-8e97-e5c39ff21466.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:7e:10:f1:8f:97:12:3a:51:fe:dd:32:fd:a7:38:d1:95:d2: 91:9d:91:d0:1f:29:11:b0:24:70:43:4f:e9:1d:d1:2c:d8:9d: ec:23:1e:7a:c4:b8:16:85:4a:08:95:cd:b4:df:0a:c3:41:80: ae:13:bb:20:e3:f3:4e:ec:d3:27:71:1a:97:a6:1f:d1:49:07: 73:b3:d2:9f:af:88:9c:5b:fe:dd:bb:1a:7b:92:34:6f:d4:73: b4:d2:de:e8:d0:f4:a2:52:16:d1:13:93:b7:c6:68:b7:5b:8b: ac:03:8e:ac:e9:19:33:6f:8b:c2:32:24:16:70:ff:66:17:48: 25:1b:7a:0b:ce:53:90:8f:b7:78:16:c5:b9:38:d3:57:3d:9b: 8c:b6:76:cd:13:bc:d5:9c:e4:4c:e2:75:d8:4f:99:bc:6c:40: 3a:55:c2:d9:74:e7:32:b3:d3:d1:1e:3a:69:f0:42:c7:93:79: 41:68:c7:28:34:76:ce:c6:97:55:19:04:24:0c:aa:b3:43:24: 21:51:ba:6d:85:8b:8e:c2:3d:17:a6:e7:0e:97:a2:e3:d6:2a: be:4d:a6:20:f5:ae:cd:db:13:42:4c:32:e6:d3:66:01:20:f1: 5e:09:e6:71:55:92:e8:2c:66:ed:b6:38:40:54:81:ce:0c:49: 13:00:b4:65 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmnKtCVbm+/nAXhc7wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFmZjRkNzgtMjRlNi00ZGIyLThlOTctZTVjMzlmZjIx NDY2MB4XDTI1MDQyNjEwMDAwM1oXDTI1MDQyODEwMDAwMFowLzEtMCsGA1UEAxMk YTkwYjliZTYtMTVkMi00N2MzLTg0Y2MtMjYxNDhkNWI3OTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLr1IYCoc4K3vA8uh7cy2b4lnHdXsYUzcsnu 8++MMFm284QWEhEqRTGKXijBK0VF9ybAChqQCumM0Cyy2gAaTEw23NxysyGxPJ3a j+wV92T0fMNBTm6n4ACVVdUskCAwOpKeAWv2el27bDlBHhr0sxWUw6yxzb4m6Yd5 zD87Hxi6fI8rmDUjnul0BjhdqFQtbyhvp9zi92OJEgB9UUYy27bLKqFLnNbX0Xky qlKbIsCcFgXL2W58gag/O+GcB4bOFRkc4QBJTw+SpxF323qS/NPaYydLu5X/dHPd vj3luG5DfGK/5cFdEXg6xkNK6Ry2C36d29t0rQfg+DB75WvLTQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFzSpLkx7/ATX7ARkJigf01fkZ5MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hMWZm NGQ3OC0yNGU2LTRkYjItOGU5Ny1lNWMzOWZmMjE0NjYvYTFmZjRkNzgtMjRlNi00 ZGIyLThlOTctZTVjMzlmZjIxNDY2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTFmZjRkNzgtMjRlNi00ZGIyLThl OTctZTVjMzlmZjIxNDY2L2ExZmY0ZDc4LTI0ZTYtNGRiMi04ZTk3LWU1YzM5ZmYy MTQ2Ni5jcmwwHwYDVR0jBBgwFoAUQ6dNoOwhBnVxkUvW07a409XVlkMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hMWZmNGQ3OC0yNGU2LTRkYjItOGU5Ny1lNWMz OWZmMjE0NjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAGfhDxj5cSOlH+3TL9pzjR ldKRnZHQHykRsCRwQ0/pHdEs2J3sIx56xLgWhUoIlc203wrDQYCuE7sg4/NO7NMn cRqXph/RSQdzs9Kfr4icW/7duxp7kjRv1HO00t7o0PSiUhbRE5O3xmi3W4usA46s 6Rkzb4vCMiQWcP9mF0glG3oLzlOQj7d4FsW5ONNXPZuMtnbNE7zVnORM4nXYT5m8 bEA6VcLZdOcys9PRHjpp8ELHk3lBaMcoNHbOxpdVGQQkDKqzQyQhUbpthYuOwj0X pucOl6Lj1iq+TaYg9a7N2xNCTDLm02YBIPFeCeZxVZLoLGbttjhAVIHODEkTALRl -----END CERTIFICATE-----Generated at Sat Apr 26 18:02:11 2025 by rpki-client