$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.mft File: 1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.mft (raw, json) Hash identifier: YwCG9w/Xkinph7L5fGya3P2E15Eg63/yXi/xF4LbfTA= Subject key identifier: 7A:29:FC:2A:F7:B1:10:DE:63:53:7B:0C:0D:80:A3:A1:C1:64:71:58 Authority key identifier: 3A:40:F3:76:43:CD:0A:7A:FA:BD:DA:79:7D:F1:84:CA:E8:00:4D:8C Certificate issuer: /CN=1cfb66bc-dcfd-4c7e-bd00-38e923719ab4 Certificate serial: 010D0C9F43285849AB3D1C7F09279CAB7691BF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.mft Manifest number: 010D0C9F4328584073A826D0788A0F363B068AF6 Signing time: Sun 27 Apr 2025 21:00:07 +0000 Manifest this update: Sun 27 Apr 2025 21:00:07 +0000 Manifest next update: Tue 29 Apr 2025 21:00:00 +0000 Files and hashes: 1: 16879c3a-efc4-389c-b69b-d8417a7de201.roa (hash: RA2lSmZhx7Igms+wiAFsFS+SUorl9EtBbxirrWVie0M=) 2: 1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.crl (hash: DMMwocx2ig9taFl0Lpy/ojEB0XzDSAx0U9M+k9kYndk=) 3: 2289cf57-959f-3a84-8712-d7d38208f851.roa (hash: 1rfA78/RoVORZaKSvUQsNGXPsmfEQXA6FAdgv4SWCkA=) 4: 287a2a23-ee50-3199-aa52-e050b1ad449e.roa (hash: ui3Cd6h9pAwjQpdjFSge0pj+NCpiE+Vl2kVLUJhFsrU=) 5: 65cc3172-6703-3140-9e77-62d231e4cb8c.roa (hash: +xZkxThsANG1t2LGjfBfANKFt35MkSEfZKEzT5ZWmnk=) 6: 67b19f83-b457-3ac9-98b0-799510e57661.roa (hash: 6bqIVvRN9Z0pZ9CVRjPM5jkGWj1+CEGzlv3eukzGaa0=) 7: b98bdb7b-0f34-3742-8c4f-8540ab9bf86d.roa (hash: wq/B+Q8/XYcGNMQbFN/jJ7hGwcsX5x55qSLHc/uAnro=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:3d:1c:7f:09:27:9c:ab:76:91:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cfb66bc-dcfd-4c7e-bd00-38e923719ab4 Validity Not Before: Apr 27 21:00:07 2025 GMT Not After : Apr 29 21:00:00 2025 GMT Subject: CN=fc47c308-55ce-4443-b151-71a3c41f5775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:48:9e:15:88:29:7c:cf:12:f0:6f:35:75:4d: 5b:c6:28:09:79:80:65:52:a0:c0:aa:9a:bc:3c:69: 73:90:1b:38:0c:58:93:68:5b:92:68:b5:c9:04:06: ba:aa:e1:b1:2c:c0:7e:df:37:d0:ec:7c:4e:3f:a5: fb:e5:11:d6:ce:4a:ed:b5:3c:49:02:fa:18:44:62: 47:c4:f8:f1:78:79:4c:f6:f8:20:df:b4:9f:4e:fa: 02:7a:94:a6:51:69:a1:0e:49:2c:53:0b:0c:0b:f4: a0:15:d9:34:ef:98:f8:b9:c2:69:d2:3b:9d:b4:5e: 7d:e0:b2:3a:88:00:46:5b:f4:b8:ca:61:6d:7b:d7: b8:f2:8a:fe:35:02:33:b3:58:7d:35:d8:7f:6a:c0: 6f:d6:3a:4f:71:03:96:c6:3e:99:f2:da:0a:23:e7: f5:16:cf:f6:9a:06:fa:11:5c:90:b3:f2:6e:57:02: 32:d5:b7:a1:20:f5:f7:4c:13:9d:90:d5:80:ea:e8: 52:73:0b:60:0a:43:8d:27:81:d5:ea:f2:71:bc:fe: 90:d4:27:26:d3:5f:fc:28:50:0b:7e:b0:77:f4:8d: 94:b1:0a:b1:ee:f0:d2:94:7d:ab:8a:34:66:8c:6b: e9:83:9d:c8:5e:c6:f5:a3:11:f3:53:c9:01:f6:ce: 04:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:29:FC:2A:F7:B1:10:DE:63:53:7B:0C:0D:80:A3:A1:C1:64:71:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.crl X509v3 Authority Key Identifier: keyid:3A:40:F3:76:43:CD:0A:7A:FA:BD:DA:79:7D:F1:84:CA:E8:00:4D:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:97:51:48:6d:97:0d:44:c4:b0:d9:65:d0:db:91:0e:5a:29: 2d:71:36:31:12:5b:69:86:6d:fc:14:2a:31:89:3a:1c:db:f9: 3b:ad:dc:f3:52:65:49:cb:cf:26:3c:75:ba:0b:6b:95:09:d2: 11:1a:88:a2:ee:d2:6b:e3:96:9b:da:ce:b4:66:92:43:63:8d: 9d:a4:62:32:a5:41:a3:64:a5:7b:2a:57:b5:70:d0:3e:61:d3: 6a:88:77:c1:e0:ff:2f:e6:35:df:3b:44:64:2c:bc:bf:e5:11: c8:f8:05:34:d0:1d:35:3e:d3:0e:eb:6b:dc:82:4a:3b:65:7c: 07:75:65:34:46:9b:7c:8f:50:65:b9:8e:24:d5:be:33:2c:74: 0f:c0:e7:cf:6c:86:e3:11:3b:3d:fa:85:e9:2c:42:bf:81:06: a6:c7:05:3d:ed:57:6b:62:6c:28:a4:c6:b2:91:e9:a1:06:e3: 48:07:bb:23:69:f1:f2:12:02:14:c9:38:78:5e:12:27:d6:a9: ef:4d:9d:19:a2:cc:3b:ff:7f:60:ee:47:2e:40:b3:3d:a0:1d: a3:03:6f:df:84:e3:ec:67:8b:cb:63:43:3b:32:2f:77:71:98: dc:30:2f:29:2e:24:01:8c:3f:78:de:4a:0d:14:b2:68:3c:e6: 8f:74:11:09 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmrPRx/CSecq3aRvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmYjY2YmMtZGNmZC00YzdlLWJkMDAtMzhlOTIzNzE5 YWI0MB4XDTI1MDQyNzIxMDAwN1oXDTI1MDQyOTIxMDAwMFowLzEtMCsGA1UEAxMk ZmM0N2MzMDgtNTVjZS00NDQzLWIxNTEtNzFhM2M0MWY1Nzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0ieFYgpfM8S8G81dU1bxigJeYBlUqDAqpq8 PGlzkBs4DFiTaFuSaLXJBAa6quGxLMB+3zfQ7HxOP6X75RHWzkrttTxJAvoYRGJH xPjxeHlM9vgg37SfTvoCepSmUWmhDkksUwsMC/SgFdk075j4ucJp0judtF594LI6 iABGW/S4ymFte9e48or+NQIzs1h9Ndh/asBv1jpPcQOWxj6Z8toKI+f1Fs/2mgb6 EVyQs/JuVwIy1behIPX3TBOdkNWA6uhScwtgCkONJ4HV6vJxvP6Q1Ccm01/8KFAL frB39I2UsQqx7vDSlH2rijRmjGvpg53IXsb1oxHzU8kB9s4EZQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHop/Cr3sRDeY1N7DA2Ao6HBZHFYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xY2Zi NjZiYy1kY2ZkLTRjN2UtYmQwMC0zOGU5MjM3MTlhYjQvMWNmYjY2YmMtZGNmZC00 YzdlLWJkMDAtMzhlOTIzNzE5YWI0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWNmYjY2YmMtZGNmZC00YzdlLWJk MDAtMzhlOTIzNzE5YWI0LzFjZmI2NmJjLWRjZmQtNGM3ZS1iZDAwLTM4ZTkyMzcx OWFiNC5jcmwwHwYDVR0jBBgwFoAUOkDzdkPNCnr6vdp5ffGEyugATYwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xY2ZiNjZiYy1kY2ZkLTRjN2UtYmQwMC0zOGU5 MjM3MTlhYjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBzl1FIbZcNRMSw2WXQ25EO WiktcTYxEltphm38FCoxiToc2/k7rdzzUmVJy88mPHW6C2uVCdIRGoii7tJr45ab 2s60ZpJDY42dpGIypUGjZKV7Kle1cNA+YdNqiHfB4P8v5jXfO0RkLLy/5RHI+AU0 0B01PtMO62vcgko7ZXwHdWU0Rpt8j1BluY4k1b4zLHQPwOfPbIbjETs9+oXpLEK/ gQamxwU97VdrYmwopMaykemhBuNIB7sjafHyEgIUyTh4XhIn1qnvTZ0Zosw7/39g 7kcuQLM9oB2jA2/fhOPsZ4vLY0M7Mi93cZjcMC8pLiQBjD943koNFLJoPOaPdBEJ -----END CERTIFICATE-----Generated at Mon Apr 28 11:37:25 2025 by rpki-client