$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.mft File: 3ed3e995-4cff-4a3d-af9b-7728ddaff70d.mft (raw, json) Hash identifier: YUaFVK2W6lQrYIgZIX/R6tMp08s1rnUsRnKtCaJeSVM= Subject key identifier: 4A:3A:6E:4D:90:70:E9:3F:BC:91:CE:D4:A5:23:D6:75:35:C8:80:92 Authority key identifier: F3:75:96:E2:1C:D8:1C:9A:D5:67:D1:E9:54:49:B0:A4:32:C1:A4:86 Certificate issuer: /CN=3ed3e995-4cff-4a3d-af9b-7728ddaff70d Certificate serial: 010D0C9F43285849AD90A3BD430104F45F645300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.mft Manifest number: 010D0C9F43285840EBD7406C829A14CA1929D0BE Signing time: Mon 28 Apr 2025 17:00:03 +0000 Manifest this update: Mon 28 Apr 2025 17:00:03 +0000 Manifest next update: Wed 30 Apr 2025 17:00:00 +0000 Files and hashes: 1: 1a475a05-1bff-3e3d-bc59-d988ebc9c4f3.roa (hash: Dab6Xhu6PdzHCJBtgu/v5Ghn7/Od1S67E9pbdRbb+3c=) 2: 3541c324-e433-371b-be7a-faaf22fea4ff.roa (hash: S7rzkAf+NTueqq6uF//NvHCNnl/EJA//H37OK5S9ATI=) 3: 3ed3e995-4cff-4a3d-af9b-7728ddaff70d.crl (hash: 9nEd1sYI+69iMiU6S3Is6XbmlONFSa9u0cpNQoh/8P8=) 4: e65865d4-5f44-3316-802f-7aa0ec28365b.roa (hash: 47Zq9U2TIW1fdsHYYIBIlymOq3JBlid1QwTxDD6NcZk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:90:a3:bd:43:01:04:f4:5f:64:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ed3e995-4cff-4a3d-af9b-7728ddaff70d Validity Not Before: Apr 28 17:00:03 2025 GMT Not After : Apr 30 17:00:00 2025 GMT Subject: CN=0730d977-aed8-4100-8651-dcee32d42178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:35:26:36:a5:58:aa:eb:fe:fc:55:2c:07:55: c8:bd:7f:86:31:8b:a5:86:7b:1c:f9:e8:e7:a3:94: cc:a8:2d:90:19:c8:c5:0b:c4:5b:b3:d3:02:61:29: e0:50:dc:7f:d6:ed:3c:05:43:99:0a:3a:20:f5:00: c5:96:76:6b:a8:43:5b:0c:ef:9d:a9:58:4c:a7:e0: b1:80:03:50:0c:64:08:f0:1b:6f:c2:bd:60:e3:2d: 93:fb:4b:8e:36:c9:ec:98:2d:65:4b:3e:49:d8:28: 4a:34:21:2b:1c:27:e6:73:f7:b3:85:05:45:39:0b: 95:39:20:54:75:2f:f2:b4:89:e0:5d:c5:49:24:c6: bf:dc:49:76:c9:3f:00:28:b6:83:bc:f4:e7:1b:48: 2d:fd:a4:48:ba:3b:13:ec:99:47:c0:11:f0:70:3a: e3:67:8f:4b:45:4a:c3:2a:00:e9:d3:43:45:9f:3f: 73:62:70:9f:f3:36:74:32:20:37:6f:08:34:ad:68: 3c:95:2c:31:5e:17:6a:ec:97:85:8d:d9:4f:cb:a2: 7b:92:c9:6a:50:c7:96:a1:9c:99:f2:ec:09:02:3f: 7b:0b:bc:00:78:81:1e:ab:23:de:5e:80:46:f2:e3: 3a:e6:c2:06:10:04:4b:03:2b:2b:b0:f9:8c:eb:cd: e4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:3A:6E:4D:90:70:E9:3F:BC:91:CE:D4:A5:23:D6:75:35:C8:80:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.crl X509v3 Authority Key Identifier: keyid:F3:75:96:E2:1C:D8:1C:9A:D5:67:D1:E9:54:49:B0:A4:32:C1:A4:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:8a:42:a2:2b:40:b3:c2:02:84:65:a2:ed:97:1a:e2:7c:36: 84:2b:7f:1f:03:3f:32:35:64:a5:fa:4b:ad:4b:4b:c7:cc:97: e5:b8:29:fc:41:0c:6a:34:5b:6d:b4:3d:ae:48:a3:84:f9:4c: d6:eb:ef:b9:71:14:3e:2b:22:48:85:8f:38:7c:8b:f7:68:4b: 80:8d:fe:a2:11:f9:a4:22:79:f9:4b:be:50:34:be:97:ec:a1: ff:fb:4e:9e:fe:97:ea:e0:e6:f1:8c:34:bb:c9:0c:62:5e:02: 46:f1:64:5e:f2:b1:c2:3e:38:30:cd:5a:02:c8:d1:a3:04:bb: bb:ac:84:38:2e:57:9d:03:a2:eb:66:84:eb:46:f9:e9:41:6f: fc:d2:63:4f:2a:f4:b9:4f:6d:df:a9:ab:9e:ce:b1:9c:28:b7: 95:b4:f7:1b:bb:e6:5f:87:c1:1c:60:f9:71:58:8d:ca:b1:bc: 62:14:34:f3:97:3c:94:57:0a:00:51:9b:95:2a:62:50:aa:4c: 50:e9:93:ee:3c:f6:93:f8:27:8f:9f:5d:a5:f6:11:52:6f:23: 0d:e8:66:03:60:b2:ee:80:18:c2:b6:74:00:57:41:39:51:c0: 15:22:02:1c:1f:29:a2:35:1a:67:87:da:f0:97:e0:d7:51:49: 3e:38:bd:56 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmtkKO9QwEE9F9kUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VkM2U5OTUtNGNmZi00YTNkLWFmOWItNzcyOGRkYWZm NzBkMB4XDTI1MDQyODE3MDAwM1oXDTI1MDQzMDE3MDAwMFowLzEtMCsGA1UEAxMk MDczMGQ5NzctYWVkOC00MTAwLTg2NTEtZGNlZTMyZDQyMTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zUmNqVYquv+/FUsB1XIvX+GMYulhnsc+ejn o5TMqC2QGcjFC8Rbs9MCYSngUNx/1u08BUOZCjog9QDFlnZrqENbDO+dqVhMp+Cx gANQDGQI8Btvwr1g4y2T+0uONsnsmC1lSz5J2ChKNCErHCfmc/ezhQVFOQuVOSBU dS/ytIngXcVJJMa/3El2yT8AKLaDvPTnG0gt/aRIujsT7JlHwBHwcDrjZ49LRUrD KgDp00NFnz9zYnCf8zZ0MiA3bwg0rWg8lSwxXhdq7JeFjdlPy6J7kslqUMeWoZyZ 8uwJAj97C7wAeIEeqyPeXoBG8uM65sIGEARLAysrsPmM683kzwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEo6bk2QcOk/vJHO1KUj1nU1yICSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZWQz ZTk5NS00Y2ZmLTRhM2QtYWY5Yi03NzI4ZGRhZmY3MGQvM2VkM2U5OTUtNGNmZi00 YTNkLWFmOWItNzcyOGRkYWZmNzBkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2VkM2U5OTUtNGNmZi00YTNkLWFm OWItNzcyOGRkYWZmNzBkLzNlZDNlOTk1LTRjZmYtNGEzZC1hZjliLTc3MjhkZGFm ZjcwZC5jcmwwHwYDVR0jBBgwFoAU83WW4hzYHJrVZ9HpVEmwpDLBpIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zZWQzZTk5NS00Y2ZmLTRhM2QtYWY5Yi03NzI4 ZGRhZmY3MGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAZikKiK0CzwgKEZaLtlxri fDaEK38fAz8yNWSl+kutS0vHzJfluCn8QQxqNFtttD2uSKOE+UzW6++5cRQ+KyJI hY84fIv3aEuAjf6iEfmkInn5S75QNL6X7KH/+06e/pfq4ObxjDS7yQxiXgJG8WRe 8rHCPjgwzVoCyNGjBLu7rIQ4LledA6LrZoTrRvnpQW/80mNPKvS5T23fqauezrGc KLeVtPcbu+Zfh8EcYPlxWI3KsbxiFDTzlzyUVwoAUZuVKmJQqkxQ6ZPuPPaT+CeP n12l9hFSbyMN6GYDYLLugBjCtnQAV0E5UcAVIgIcHymiNRpnh9rwl+DXUUk+OL1W -----END CERTIFICATE-----Generated at Mon Apr 28 18:42:34 2025 by rpki-client