$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.mft File: fd9ab029-fead-4e1c-b7cc-3aedf23a797f.mft (raw, json) Hash identifier: l6JND1dXdnnwK/zRVbZPxd9hUNkvjTJ2UWXvPg0ApgA= Subject key identifier: 40:26:09:0B:C6:4C:D3:11:05:84:A3:22:31:B1:21:9F:FA:BC:7E:0C Authority key identifier: 91:C7:D6:BD:DC:41:CD:1D:2A:AE:C6:8E:26:AF:B6:FA:74:7E:B0:92 Certificate issuer: /CN=fd9ab029-fead-4e1c-b7cc-3aedf23a797f Certificate serial: 010D0C9F43285849AA6C9D248FCD31A658183280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.mft Manifest number: 010D0C9F4328584073A8580B31F4DD7BE1E508C8 Signing time: Sun 27 Apr 2025 14:00:03 +0000 Manifest this update: Sun 27 Apr 2025 14:00:03 +0000 Manifest next update: Wed 30 Apr 2025 14:00:00 +0000 Files and hashes: 1: 12457d9b-1b73-3fa3-9936-55d404c83c78.roa (hash: JtytXz3JUS9eT4oXa0k8VEWZtvjInXd6CdyqUAd4EHQ=) 2: 5c321eb2-77c0-3367-a9c5-6d1e9f4412a8.roa (hash: IslEBd4ZgmHi0i+vJ+m5hDMxQfAiPx/lG2OZoGwFyxY=) 3: 71703ea0-4313-3b97-ab1e-b29a6f173349.roa (hash: FydSkU2Tzm/zF7P/mxNoEeBCw2lY6tNR0aE8H8m9jMU=) 4: fd9ab029-fead-4e1c-b7cc-3aedf23a797f.crl (hash: Qg2+Dbnmnw5Y7qtF/V5BiZCp5bgAk6/XqWJQ7rK4Zgg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:6c:9d:24:8f:cd:31:a6:58:18:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd9ab029-fead-4e1c-b7cc-3aedf23a797f Validity Not Before: Apr 27 14:00:03 2025 GMT Not After : Apr 30 14:00:00 2025 GMT Subject: CN=2b0554c1-1349-4028-b848-a8bc1a1ca8da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b1:55:a6:91:ed:90:7c:8b:e7:7b:04:9d:39: 97:96:fe:2b:57:9f:9e:85:c5:cb:cb:b9:f5:37:e6: 04:9d:f4:c9:bc:b5:e9:63:78:19:1e:2a:96:8a:0d: f3:d3:1b:e7:50:c3:ce:e8:44:7f:6b:33:58:53:a2: 1d:c5:0a:9c:cb:07:17:a2:0e:c6:fa:63:db:59:8b: 59:9a:48:c8:c6:c8:da:1a:94:3a:bd:86:42:fe:7b: 28:9a:c0:cd:dd:6d:8e:b1:50:37:11:df:6f:35:7d: 6d:43:03:fb:b4:a3:4e:79:7d:3c:84:d1:71:60:67: 37:bb:2f:80:8f:08:79:b6:ea:3e:66:a3:ae:af:6e: cd:e6:af:eb:20:bb:be:8a:18:9a:8a:35:f5:2b:af: a3:1f:04:05:f9:b5:fe:f3:ec:90:54:0e:a6:c5:f0: 29:b6:f0:c2:79:8c:c0:5b:2d:12:0d:bb:83:eb:f1: 49:d4:a3:00:53:20:55:64:5a:6f:ed:c3:22:02:0c: 73:46:81:1d:eb:e6:6d:c1:6f:a7:91:87:5d:59:7b: f7:99:9f:cd:8a:ca:0b:04:6b:25:82:e4:92:f7:f9: 2b:12:3e:9b:5b:21:75:4c:7e:77:b8:f7:3b:7e:bf: 0a:74:ce:5e:f0:f6:0f:73:a4:a1:a0:c0:30:df:9e: 94:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:26:09:0B:C6:4C:D3:11:05:84:A3:22:31:B1:21:9F:FA:BC:7E:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.crl X509v3 Authority Key Identifier: keyid:91:C7:D6:BD:DC:41:CD:1D:2A:AE:C6:8E:26:AF:B6:FA:74:7E:B0:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:e3:f4:66:06:97:c7:f0:c4:6d:35:94:ae:8a:b9:5d:a3:37: 88:71:da:31:ff:d9:e3:6a:f7:30:cb:6a:54:5c:58:69:b6:13: fd:3c:33:2c:ad:9d:cd:22:5a:a8:15:36:9b:d8:15:53:b5:7f: 2b:41:46:68:53:aa:c7:82:6f:21:55:ca:11:7e:43:01:ed:9b: 28:db:b5:3d:55:30:e6:7a:6f:fe:4a:2a:dc:46:db:65:a3:3f: b8:da:73:8c:93:f9:a6:44:05:79:33:c1:fc:a4:e4:be:02:7c: bb:35:58:be:7e:41:fa:ec:2c:a6:90:0e:4d:84:39:41:5d:10: c4:c1:8b:d4:53:21:80:cf:8f:5e:d6:e1:d6:c3:3f:0b:f7:16: dd:c7:df:1e:ec:35:c3:c6:b3:c5:22:6f:a1:b7:fd:f8:b9:5d: 29:05:98:41:a6:47:bc:6b:57:ce:2c:c0:c7:60:80:28:00:29: 12:22:d5:24:2b:65:6d:97:bf:92:a2:21:af:84:d7:2a:8d:50: c6:59:de:3f:26:87:d5:48:8c:31:57:28:dc:16:c4:99:07:87: 14:05:e8:b0:69:e6:0e:84:27:4d:47:5e:99:17:d0:17:b9:70: 86:fb:48:f4:2d:bf:9c:20:36:3e:42:a5:d0:1c:1e:69:2d:fe: 12:02:75:b1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmqbJ0kj80xplgYMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ5YWIwMjktZmVhZC00ZTFjLWI3Y2MtM2FlZGYyM2E3 OTdmMB4XDTI1MDQyNzE0MDAwM1oXDTI1MDQzMDE0MDAwMFowLzEtMCsGA1UEAxMk MmIwNTU0YzEtMTM0OS00MDI4LWI4NDgtYThiYzFhMWNhOGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bFVppHtkHyL53sEnTmXlv4rV5+ehcXLy7n1 N+YEnfTJvLXpY3gZHiqWig3z0xvnUMPO6ER/azNYU6IdxQqcywcXog7G+mPbWYtZ mkjIxsjaGpQ6vYZC/nsomsDN3W2OsVA3Ed9vNX1tQwP7tKNOeX08hNFxYGc3uy+A jwh5tuo+ZqOur27N5q/rILu+ihiaijX1K6+jHwQF+bX+8+yQVA6mxfAptvDCeYzA Wy0SDbuD6/FJ1KMAUyBVZFpv7cMiAgxzRoEd6+ZtwW+nkYddWXv3mZ/NisoLBGsl guSS9/krEj6bWyF1TH53uPc7fr8KdM5e8PYPc6ShoMAw356UOwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEAmCQvGTNMRBYSjIjGxIZ/6vH4MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDlh YjAyOS1mZWFkLTRlMWMtYjdjYy0zYWVkZjIzYTc5N2YvZmQ5YWIwMjktZmVhZC00 ZTFjLWI3Y2MtM2FlZGYyM2E3OTdmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmQ5YWIwMjktZmVhZC00ZTFjLWI3 Y2MtM2FlZGYyM2E3OTdmL2ZkOWFiMDI5LWZlYWQtNGUxYy1iN2NjLTNhZWRmMjNh Nzk3Zi5jcmwwHwYDVR0jBBgwFoAUkcfWvdxBzR0qrsaOJq+2+nR+sJIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDlhYjAyOS1mZWFkLTRlMWMtYjdjYy0zYWVk ZjIzYTc5N2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBa4/RmBpfH8MRtNZSuirld ozeIcdox/9njavcwy2pUXFhpthP9PDMsrZ3NIlqoFTab2BVTtX8rQUZoU6rHgm8h VcoRfkMB7Zso27U9VTDmem/+SircRttloz+42nOMk/mmRAV5M8H8pOS+Any7NVi+ fkH67CymkA5NhDlBXRDEwYvUUyGAz49e1uHWwz8L9xbdx98e7DXDxrPFIm+ht/34 uV0pBZhBpke8a1fOLMDHYIAoACkSItUkK2Vtl7+SoiGvhNcqjVDGWd4/JofVSIwx VyjcFsSZB4cUBeiwaeYOhCdNR16ZF9AXuXCG+0j0Lb+cIDY+QqXQHB5pLf4SAnWx -----END CERTIFICATE-----Generated at Sun Apr 27 17:13:13 2025 by rpki-client