$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.mft File: 0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.mft (raw, json) Hash identifier: FWrO/eRf9xTlCJv7yMLyE/mmRluedXEds77rRhoDsLo= Subject key identifier: F1:C3:94:D5:61:29:A1:94:FE:89:E3:5B:4E:54:0C:D1:36:4D:98:EE Authority key identifier: 8F:F9:0F:06:64:B0:32:AE:06:2D:7A:C2:E3:4B:C1:8E:E4:79:4D:3C Certificate issuer: /CN=0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9 Certificate serial: 010D0C9F43285849ACC039F0D23CECCAC832A400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.mft Manifest number: 010D0C9F4328584073A84E0231FF2DF1C04A35F6 Signing time: Mon 28 Apr 2025 10:00:07 +0000 Manifest this update: Mon 28 Apr 2025 10:00:07 +0000 Manifest next update: Wed 30 Apr 2025 10:00:00 +0000 Files and hashes: 1: 0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.crl (hash: VRZHzPZVnB9kKS4zxM+8ibvSKbFzmBR78bc/HmN3Sn4=) 2: 58ae2a95-69c6-3c2a-8493-3f45c86d73e0.roa (hash: Kl+2DtexweJ9FlhPhTQImqCJvLiO6kq2dbL1ND7JGDY=) 3: 6624b998-13e0-3a4d-aac9-4037a34bff51.roa (hash: BIVRNugWOO2PeDYkETa1VHfEFwsZO0L3mlQauhwI+KE=) 4: 8e308c21-96a9-3c5f-9236-af36b607b789.roa (hash: jxEK4LxAFdiS9KNmkZs4XZlset1E9b1HvfP8oZlfuC8=) 5: b7eef4be-80b7-3b1d-9220-d57d94c78330.roa (hash: lT7SSuE7OkhcsZzzAxZE59QTW1alg1Sq6TRc9yIuCDM=) 6: d057ed2f-9fd1-3cf7-8b2f-92f9901c8924.roa (hash: n6+uizkH9h0MriSMHFj7eKpkmAxFAGo7fRYpJX26vuc=) 7: ed6b1126-250f-33f9-a75a-557964e92852.roa (hash: ZmfvOJHgXrb+4yppoJ5wqlWzUM78okmuacyFMZbfZ9M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ac:c0:39:f0:d2:3c:ec:ca:c8:32:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9 Validity Not Before: Apr 28 10:00:07 2025 GMT Not After : Apr 30 10:00:00 2025 GMT Subject: CN=a5286f7b-7327-4052-bbc0-bb3aac876faf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cc:a3:b8:03:e1:e9:21:53:39:bc:ca:4a:ae: b6:38:d2:79:d9:5d:da:a5:8a:24:fa:6e:3f:9e:b3: c1:0c:12:d5:9d:d0:a8:80:dc:32:e7:d5:3d:c4:1f: 1c:09:5d:c9:28:1b:d0:f4:78:2e:32:b3:e8:3b:be: 61:89:17:ad:14:77:68:c0:59:fe:a8:71:4e:d8:44: aa:18:64:de:20:13:a7:11:c2:ad:af:20:2e:3e:35: 80:6c:a9:fc:e4:ba:ec:aa:9e:f5:0f:09:1c:74:0f: 85:bd:a9:56:cc:49:1d:de:22:a7:f7:e2:7f:76:90: 6f:ca:20:ce:72:e6:ba:74:1f:e9:a0:d0:60:85:f1: 6c:f2:d3:11:20:7f:53:45:f4:a6:4e:2f:d4:6f:8a: 89:28:d3:fc:48:46:d0:7a:39:84:be:34:50:db:43: f8:f9:72:08:05:00:09:86:ed:e7:0f:77:a3:55:39: 9b:42:eb:d5:1b:42:96:eb:31:03:ea:82:10:8f:76: 4e:9c:6b:33:70:10:81:78:86:8b:ca:56:bb:78:ba: c8:99:31:db:d3:2a:3e:3f:3f:0f:ea:0d:cb:89:ec: 37:eb:17:a0:7c:ce:83:f5:b8:8d:5a:bb:f0:aa:8b: 7a:06:35:df:36:2c:5b:89:e7:2b:42:23:30:74:6c: e7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:C3:94:D5:61:29:A1:94:FE:89:E3:5B:4E:54:0C:D1:36:4D:98:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.crl X509v3 Authority Key Identifier: keyid:8F:F9:0F:06:64:B0:32:AE:06:2D:7A:C2:E3:4B:C1:8E:E4:79:4D:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:3d:9c:27:b7:0b:19:14:52:6b:78:b3:51:52:9e:d5:60:21: 34:1c:0b:5f:c7:c5:d4:42:10:4a:07:d4:76:b8:5e:15:0e:fb: 37:ff:93:3b:0d:60:b9:a4:66:d0:6f:e1:a6:03:4a:1c:c8:79: aa:29:9c:80:d2:55:02:42:3d:1c:ee:77:81:fc:19:ab:b8:43: 12:22:bb:dd:20:31:54:c7:02:33:07:2b:8f:87:97:02:77:63: 36:7c:0a:0a:da:1c:bf:09:74:82:9a:15:54:9e:3e:01:da:cf: bd:3c:29:42:a9:1a:b0:be:b7:57:6a:b5:70:a2:bd:50:c0:6a: 48:4d:fd:4b:31:17:b7:4b:d6:01:94:55:d2:6e:b3:c5:ec:27: ea:02:32:49:22:1b:cc:66:43:89:ea:c2:74:fb:dc:33:55:9b: ea:de:88:f5:6c:e8:5c:4b:0e:c4:2c:d1:0b:ad:61:43:95:5c: 98:df:78:f3:8e:5d:4f:ea:e3:93:0b:a4:7f:f2:20:2a:73:7e: df:3c:c0:d6:17:fc:73:15:ce:09:79:9e:e6:91:4b:c2:2b:62: 95:4b:58:49:eb:9b:47:25:fa:3c:14:81:f9:ad:2c:a3:d8:97: 94:1c:90:77:b9:5a:73:83:04:95:aa:c3:11:49:18:33:30:88: 98:ed:50:69 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmswDnw0jzsysgypAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFhOGMyOTktMDNjYS00YjgxLThiYWUtODNiNmQxYjNk N2Q5MB4XDTI1MDQyODEwMDAwN1oXDTI1MDQzMDEwMDAwMFowLzEtMCsGA1UEAxMk YTUyODZmN2ItNzMyNy00MDUyLWJiYzAtYmIzYWFjODc2ZmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8yjuAPh6SFTObzKSq62ONJ52V3apYok+m4/ nrPBDBLVndCogNwy59U9xB8cCV3JKBvQ9HguMrPoO75hiRetFHdowFn+qHFO2ESq GGTeIBOnEcKtryAuPjWAbKn85Lrsqp71DwkcdA+FvalWzEkd3iKn9+J/dpBvyiDO cua6dB/poNBghfFs8tMRIH9TRfSmTi/Ub4qJKNP8SEbQejmEvjRQ20P4+XIIBQAJ hu3nD3ejVTmbQuvVG0KW6zED6oIQj3ZOnGszcBCBeIaLyla7eLrImTHb0yo+Pz8P 6g3Liew36xegfM6D9biNWrvwqot6BjXfNixbiecrQiMwdGznCwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPHDlNVhKaGU/onjW05UDNE2TZjuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYWE4 YzI5OS0wM2NhLTRiODEtOGJhZS04M2I2ZDFiM2Q3ZDkvMGFhOGMyOTktMDNjYS00 YjgxLThiYWUtODNiNmQxYjNkN2Q5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGFhOGMyOTktMDNjYS00YjgxLThi YWUtODNiNmQxYjNkN2Q5LzBhYThjMjk5LTAzY2EtNGI4MS04YmFlLTgzYjZkMWIz ZDdkOS5jcmwwHwYDVR0jBBgwFoAUj/kPBmSwMq4GLXrC40vBjuR5TTwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYWE4YzI5OS0wM2NhLTRiODEtOGJhZS04M2I2 ZDFiM2Q3ZDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBGPZwntwsZFFJreLNRUp7V YCE0HAtfx8XUQhBKB9R2uF4VDvs3/5M7DWC5pGbQb+GmA0ocyHmqKZyA0lUCQj0c 7neB/BmruEMSIrvdIDFUxwIzByuPh5cCd2M2fAoK2hy/CXSCmhVUnj4B2s+9PClC qRqwvrdXarVwor1QwGpITf1LMRe3S9YBlFXSbrPF7CfqAjJJIhvMZkOJ6sJ0+9wz VZvq3oj1bOhcSw7ELNELrWFDlVyY33jzjl1P6uOTC6R/8iAqc37fPMDWF/xzFc4J eZ7mkUvCK2KVS1hJ65tHJfo8FIH5rSyj2JeUHJB3uVpzgwSVqsMRSRgzMIiY7VBp -----END CERTIFICATE-----Generated at Tue Apr 29 00:57:11 2025 by rpki-client