$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft File: 35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft (raw, json) Hash identifier: XGWOsmynvV0xOCjglb0lY/KG+BWCb6B/7wc4ZkWd5vc= Subject key identifier: 67:92:1C:34:4E:2A:D7:D6:7A:E2:17:26:06:87:AC:46:15:6F:BF:EA Authority key identifier: 34:AE:D6:22:F5:BE:AB:1C:32:9E:55:11:CD:76:03:75:50:9C:17:05 Certificate issuer: /CN=35a3f088-05b7-470a-9af5-45bd25ee8fc1 Certificate serial: 010D0C9F43285849A8E97F146FC2E0E4AEB5A6C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft Manifest number: 010D0C9F432858420F19A4505BD7EEE07D91AB02 Signing time: Sun 27 Apr 2025 01:00:03 +0000 Manifest this update: Sun 27 Apr 2025 01:00:03 +0000 Manifest next update: Tue 29 Apr 2025 01:00:00 +0000 Files and hashes: 1: 189a7a4b-2e62-3420-8747-80aab84fcb06.roa (hash: xK8l3VYiTLt4d+i+TM4t09JeFo3Hy95jch3t4IB1M08=) 2: 35a3f088-05b7-470a-9af5-45bd25ee8fc1.crl (hash: rDWPnAAweB6fxYtOvvXP63vuw/pKcYYyddVmWKQ4hGE=) 3: c1255ba5-964c-3a54-9623-b83967aa57ed.roa (hash: qqaR3NqEgsXxJFdg1Vn+NYMNvFFyJLOiSSN5gQn+Nio=) 4: c98bcc7f-33a9-3609-84f1-216cce3ea44e.roa (hash: wjHivPFiCLd0Pi6/RhpmHX3t6wi8pPueK9hSKNsz4CE=) 5: e8701d46-d019-31ab-beee-5bfc34ed3804.roa (hash: il6wwYO2tPpudJa12Vq4kjglKZ8KjgmwanmwwhjKg/Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:e9:7f:14:6f:c2:e0:e4:ae:b5:a6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35a3f088-05b7-470a-9af5-45bd25ee8fc1 Validity Not Before: Apr 27 01:00:03 2025 GMT Not After : Apr 29 01:00:00 2025 GMT Subject: CN=e613e7cc-897e-4c01-8dab-57b3ffb2013c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:24:b0:82:45:41:8f:35:6d:a6:eb:7f:20:03: 76:60:43:7f:55:20:27:9c:15:4b:0c:b7:98:46:31: 9d:97:53:d6:ee:bc:14:2c:ce:d8:47:d4:ef:d3:9d: fa:68:97:44:65:ed:ad:22:d0:dc:d6:c1:8a:c4:07: 80:df:ba:2c:43:2a:5c:08:42:0d:f7:96:65:66:13: 1e:2d:f0:1d:7e:ce:26:19:8f:de:22:0e:f7:ee:a8: bf:9b:3d:c8:d5:b5:cd:5b:b0:52:83:79:db:1f:d8: 9f:9c:87:a3:56:52:a0:70:02:4b:01:12:41:0a:f2: ce:31:a4:99:1c:74:8f:9a:e6:dc:3f:bc:56:02:a0: 51:1d:2f:b6:b5:c4:cc:7c:4d:a1:52:6c:25:cb:9f: 81:12:6c:26:0b:c7:9c:35:1b:d7:63:86:13:c4:e1: c1:86:d9:b9:0e:bc:55:46:63:72:32:d5:69:19:9a: bc:89:9d:3c:c4:96:c5:d6:91:04:ce:8f:7c:73:2a: a5:3c:cd:bf:5d:7d:97:46:6f:ae:c1:47:1a:6e:fc: 1e:0d:7f:77:1f:96:b7:68:22:ce:13:f3:f1:40:8d: ae:d9:c1:f1:57:92:c7:ae:a8:26:3f:79:1e:1e:fd: ac:d4:72:95:3a:97:6e:8c:33:24:98:5a:af:8a:4b: d5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:92:1C:34:4E:2A:D7:D6:7A:E2:17:26:06:87:AC:46:15:6F:BF:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.crl X509v3 Authority Key Identifier: keyid:34:AE:D6:22:F5:BE:AB:1C:32:9E:55:11:CD:76:03:75:50:9C:17:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:42:4e:a6:4f:57:ff:b4:30:21:c9:c8:6b:01:29:f1:e1:d3: e1:7f:cc:f7:bb:41:50:d8:db:0c:26:d7:04:83:a0:bc:f5:18: 87:c9:30:88:3c:3c:0f:20:da:70:58:22:3d:65:79:18:f2:2e: 5e:76:c6:00:4d:97:2d:bb:5c:da:8d:ab:8e:01:5d:ce:45:bb: 9d:3b:2c:41:e5:01:83:02:11:77:28:7c:7a:a2:e0:af:2b:b7: 1b:5a:67:1e:56:29:7b:2b:db:78:7a:b1:ef:69:93:11:4c:4f: d2:17:5b:ec:14:4b:a9:f9:c6:ba:18:38:4b:4f:c2:fb:5f:15: 16:d5:d8:5e:05:44:7a:c5:ba:1c:29:0e:5f:99:32:76:23:d6: 14:bf:ac:fd:86:96:79:0c:b6:c2:be:e9:90:8c:0a:66:89:e7: 60:7d:ba:23:93:13:c3:7b:ff:5f:12:22:67:26:d6:42:03:59: 08:e9:95:f1:6c:b8:5d:6a:3e:d3:32:05:ee:7e:98:6d:9c:6a: 7b:09:ee:0f:07:30:84:74:60:61:0f:d5:67:50:71:b7:58:18: 6a:0e:e5:fb:82:da:e7:4c:83:15:57:53:43:26:50:a0:50:8d: 60:ff:30:67:42:c6:b7:eb:10:92:c7:58:96:fa:74:49:52:ef: 22:36:d4:38 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmo6X8Ub8Lg5K61psAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVhM2YwODgtMDViNy00NzBhLTlhZjUtNDViZDI1ZWU4 ZmMxMB4XDTI1MDQyNzAxMDAwM1oXDTI1MDQyOTAxMDAwMFowLzEtMCsGA1UEAxMk ZTYxM2U3Y2MtODk3ZS00YzAxLThkYWItNTdiM2ZmYjIwMTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzySwgkVBjzVtput/IAN2YEN/VSAnnBVLDLeY RjGdl1PW7rwULM7YR9Tv0536aJdEZe2tItDc1sGKxAeA37osQypcCEIN95ZlZhMe LfAdfs4mGY/eIg737qi/mz3I1bXNW7BSg3nbH9ifnIejVlKgcAJLARJBCvLOMaSZ HHSPmubcP7xWAqBRHS+2tcTMfE2hUmwly5+BEmwmC8ecNRvXY4YTxOHBhtm5DrxV RmNyMtVpGZq8iZ08xJbF1pEEzo98cyqlPM2/XX2XRm+uwUcabvweDX93H5a3aCLO E/PxQI2u2cHxV5LHrqgmP3keHv2s1HKVOpdujDMkmFqvikvVtQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGeSHDROKtfWeuIXJgaHrEYVb7/qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNWEz ZjA4OC0wNWI3LTQ3MGEtOWFmNS00NWJkMjVlZThmYzEvMzVhM2YwODgtMDViNy00 NzBhLTlhZjUtNDViZDI1ZWU4ZmMxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzVhM2YwODgtMDViNy00NzBhLTlh ZjUtNDViZDI1ZWU4ZmMxLzM1YTNmMDg4LTA1YjctNDcwYS05YWY1LTQ1YmQyNWVl OGZjMS5jcmwwHwYDVR0jBBgwFoAUNK7WIvW+qxwynlURzXYDdVCcFwUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNWEzZjA4OC0wNWI3LTQ3MGEtOWFmNS00NWJk MjVlZThmYzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBJQk6mT1f/tDAhychrASnx 4dPhf8z3u0FQ2NsMJtcEg6C89RiHyTCIPDwPINpwWCI9ZXkY8i5edsYATZctu1za jauOAV3ORbudOyxB5QGDAhF3KHx6ouCvK7cbWmceVil7K9t4erHvaZMRTE/SF1vs FEup+ca6GDhLT8L7XxUW1dheBUR6xbocKQ5fmTJ2I9YUv6z9hpZ5DLbCvumQjApm iedgfbojkxPDe/9fEiJnJtZCA1kI6ZXxbLhdaj7TMgXufphtnGp7Ce4PBzCEdGBh D9VnUHG3WBhqDuX7gtrnTIMVV1NDJlCgUI1g/zBnQsa36xCSx1iW+nRJUu8iNtQ4 -----END CERTIFICATE-----Generated at Sun Apr 27 05:49:40 2025 by rpki-client