$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.mft File: dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.mft (raw, json) Hash identifier: Z04Ckpj8R6kqJlR0WtkVt9lsohrAgPhODRz/ttTLC80= Subject key identifier: 71:68:53:21:E6:77:DE:7B:44:C6:8E:74:89:49:5C:E0:25:F8:52:86 Authority key identifier: D4:08:14:4A:5A:B6:1A:EF:00:62:89:48:42:C1:66:F0:04:D3:CE:BC Certificate issuer: /CN=dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be Certificate serial: 010D0C9F43285849AA8A69DC3B700C631A646B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.mft Manifest number: 010D0C9F43285842D168A689DC7162ABC8921686 Signing time: Sun 27 Apr 2025 15:00:03 +0000 Manifest this update: Sun 27 Apr 2025 15:00:03 +0000 Manifest next update: Wed 30 Apr 2025 15:00:00 +0000 Files and hashes: 1: 10315c07-19e5-332a-9619-ac334b5ed2bc.roa (hash: 8QhegT1P/1bNXH16xLhv1RzTEmBmE1UeCawiuWKw3LQ=) 2: 33cbc354-d185-3748-a67e-8b940dc311d1.roa (hash: Cs9d8HflAEvE9d+Nh//UunP0Ob3vtT6heiCPryVKqa4=) 3: b32af959-6588-30ef-ac6a-e1c8ea97071b.roa (hash: xBVYs76a/wBKkNiIQY9yuC+wcYjfYceT55JGa4DRYec=) 4: dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.crl (hash: oeRDY4TEJ7ePOswHfuZTwUTI9oKkGyJ/Ukrb5tDgbuM=) 5: e038b69d-c3ca-38eb-960c-9dbf206c11f8.roa (hash: HFPAiBGbDI4Qh24Eto7JvAV3jE/cQHHj8OKGi6DD47Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:8a:69:dc:3b:70:0c:63:1a:64:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be Validity Not Before: Apr 27 15:00:03 2025 GMT Not After : Apr 30 15:00:00 2025 GMT Subject: CN=eeca6bcc-df9e-4ed9-a999-24ff5739e15e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b2:7f:a4:e8:1b:2a:61:41:13:f0:c4:e2:af: 30:ef:d4:b6:6b:7e:f0:dd:ac:46:5b:4e:c3:1e:10: 91:87:eb:8e:98:6a:bc:7e:c4:f9:7d:f4:c3:55:a5: 38:42:63:8d:3a:08:c1:e4:d7:b5:8b:03:3b:50:47: 9e:27:6f:03:4e:13:2d:7f:f6:49:0a:cb:7a:f3:80: e0:a7:e5:e4:10:0c:50:29:15:c8:5b:1f:56:5d:17: d3:3e:c0:af:f5:d7:f2:bf:b9:9e:9d:ec:b8:ce:47: d0:66:e6:f7:d3:b0:9b:68:d6:47:0c:ac:82:c1:7e: cd:7d:18:9c:13:80:36:ef:58:fc:f2:db:05:17:f1: 36:5e:7a:45:74:d9:54:a5:4c:5b:58:c5:f1:ee:21: 31:20:0a:9d:f1:c7:cc:30:41:a5:d0:9e:9d:eb:6f: 4b:8f:e7:9c:30:f4:bf:9b:55:64:cb:d9:a7:05:c0: 5f:27:86:c3:34:58:20:a0:46:45:c4:c3:d1:4c:48: 77:4c:08:87:24:1d:34:40:b9:f0:7e:bc:ed:90:8d: 65:2c:90:c5:cb:2c:dd:0d:22:11:37:ef:3a:43:a9: 61:5d:86:dc:6a:b9:82:e9:29:0f:c2:38:74:07:0d: 4c:dc:e6:a6:5c:4b:f8:8c:55:3e:fe:e1:48:56:62: 81:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:68:53:21:E6:77:DE:7B:44:C6:8E:74:89:49:5C:E0:25:F8:52:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.crl X509v3 Authority Key Identifier: keyid:D4:08:14:4A:5A:B6:1A:EF:00:62:89:48:42:C1:66:F0:04:D3:CE:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:6b:ea:a5:46:38:8c:e4:65:28:76:86:a3:04:d6:fa:e5:3f: a6:6a:78:28:ee:8e:24:a1:92:fb:e4:21:75:35:9b:16:de:ab: af:60:d0:ac:57:6b:7a:c7:3d:dc:4c:fe:ce:ec:c3:74:6d:e6: 0c:af:65:bf:61:69:1d:a6:a3:44:9b:14:98:2d:f1:7d:4a:55: fc:6c:cf:6a:ae:4a:11:42:dc:fc:6e:07:60:95:2f:ae:f0:9c: f0:46:b0:b9:46:13:5a:d1:07:77:df:c2:76:3f:ad:ac:6e:3f: 10:8a:59:88:5f:ad:a0:d3:a0:5e:e9:33:2e:48:1a:86:65:25: 5d:d4:3d:35:cb:55:18:af:16:f1:46:0e:76:e5:e3:e6:47:ff: bd:17:d1:fd:b4:52:3b:ac:8f:3e:1a:15:5c:a1:60:26:c2:d2: 46:d4:8f:a1:01:e3:93:80:9e:04:20:3a:dc:10:57:48:94:e3: e3:76:c2:5c:fe:b1:e1:11:c8:d7:ba:33:38:93:6d:92:65:bb: fe:67:c3:ff:1c:80:27:2f:71:c7:cf:e8:08:12:c5:aa:89:91: b6:d4:b1:23:c8:20:04:a8:5e:b1:34:6b:09:91:da:cd:17:d4: ea:16:18:be:d5:eb:e4:11:d8:ab:da:ee:e9:08:cd:21:9d:75: 34:a8:bd:ec -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmqimncO3AMYxpka4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ2OGNiOGItMGQ5MS00YTBlLTlmMDQtYTNjNzhlNTVj N2JlMB4XDTI1MDQyNzE1MDAwM1oXDTI1MDQzMDE1MDAwMFowLzEtMCsGA1UEAxMk ZWVjYTZiY2MtZGY5ZS00ZWQ5LWE5OTktMjRmZjU3MzllMTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbJ/pOgbKmFBE/DE4q8w79S2a37w3axGW07D HhCRh+uOmGq8fsT5ffTDVaU4QmONOgjB5Ne1iwM7UEeeJ28DThMtf/ZJCst684Dg p+XkEAxQKRXIWx9WXRfTPsCv9dfyv7meney4zkfQZub307CbaNZHDKyCwX7NfRic E4A271j88tsFF/E2XnpFdNlUpUxbWMXx7iExIAqd8cfMMEGl0J6d629Lj+ecMPS/ m1Vky9mnBcBfJ4bDNFggoEZFxMPRTEh3TAiHJB00QLnwfrztkI1lLJDFyyzdDSIR N+86Q6lhXYbcarmC6SkPwjh0Bw1M3OamXEv4jFU+/uFIVmKBUwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHFoUyHmd957RMaOdIlJXOAl+FKGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDY4 Y2I4Yi0wZDkxLTRhMGUtOWYwNC1hM2M3OGU1NWM3YmUvZGQ2OGNiOGItMGQ5MS00 YTBlLTlmMDQtYTNjNzhlNTVjN2JlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGQ2OGNiOGItMGQ5MS00YTBlLTlm MDQtYTNjNzhlNTVjN2JlL2RkNjhjYjhiLTBkOTEtNGEwZS05ZjA0LWEzYzc4ZTU1 YzdiZS5jcmwwHwYDVR0jBBgwFoAU1AgUSlq2Gu8AYolIQsFm8ATTzrwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDY4Y2I4Yi0wZDkxLTRhMGUtOWYwNC1hM2M3 OGU1NWM3YmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBNa+qlRjiM5GUodoajBNb6 5T+mango7o4koZL75CF1NZsW3quvYNCsV2t6xz3cTP7O7MN0beYMr2W/YWkdpqNE mxSYLfF9SlX8bM9qrkoRQtz8bgdglS+u8JzwRrC5RhNa0Qd338J2P62sbj8QilmI X62g06Be6TMuSBqGZSVd1D01y1UYrxbxRg525ePmR/+9F9H9tFI7rI8+GhVcoWAm wtJG1I+hAeOTgJ4EIDrcEFdIlOPjdsJc/rHhEcjXujM4k22SZbv+Z8P/HIAnL3HH z+gIEsWqiZG21LEjyCAEqF6xNGsJkdrNF9TqFhi+1evkEdir2u7pCM0hnXU0qL3s -----END CERTIFICATE-----Generated at Mon Apr 28 13:24:02 2025 by rpki-client