$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.mft File: 643914aa-5306-4352-8a01-3ac381827191.mft (raw, json) Hash identifier: 409qnjSDRA9+yIo79moC/qowTpDgGdTUW6w755FhYds= Subject key identifier: B2:82:41:4E:C0:28:83:EE:2B:29:95:69:29:FD:F4:54:4E:14:0B:F1 Authority key identifier: EB:2A:47:49:E5:CE:F0:85:DE:1A:D7:92:C9:A9:2D:B4:E5:73:17:71 Certificate issuer: /CN=643914aa-5306-4352-8a01-3ac381827191 Certificate serial: 010D0C9F43285849B5975AC9EA51A72039466300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.mft Manifest number: 010D0C9F4328584134209A8DD551C015B0DF874C Signing time: Thu 01 May 2025 14:00:03 +0000 Manifest this update: Thu 01 May 2025 14:00:03 +0000 Manifest next update: Sun 04 May 2025 14:00:00 +0000 Files and hashes: 1: 30b7c806-6a96-33a0-bafa-ab6449b34a8f.roa (hash: LRC514typkTmuj8iej4AVL7nHP8vuSCQ42gtNbZu/zc=) 2: 643914aa-5306-4352-8a01-3ac381827191.crl (hash: IaqKLBon3u+chRZJuLyIK3jt9teUoJJR9MBbubBBAkY=) 3: 83bcec99-de2e-3c30-978c-f6f6e12ff1c1.roa (hash: Cnhu5416weC7YPrAHFZ3atPsX/Yj4M7WBy3tCaUS4Mc=) 4: 897adddb-a309-3fc0-b793-ccbf5388c1bb.roa (hash: 3EQ+KOKFMjXNAfPGWEZ2w67ibTmrARXqNIwiiQ8KXbY=) 5: 9b37bf87-6e73-341b-93c2-4a27e0f6a79c.roa (hash: qdrMbZ73lJv7AgJfbrhtMspDdK1tvkvcAwOUyvgJyFM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:97:5a:c9:ea:51:a7:20:39:46:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=643914aa-5306-4352-8a01-3ac381827191 Validity Not Before: May 1 14:00:03 2025 GMT Not After : May 4 14:00:00 2025 GMT Subject: CN=84b7aef4-b6c9-442f-9199-09319d559fbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:04:77:8b:ac:6e:e1:54:06:f7:39:b6:ac:93: 35:96:41:5c:c0:7d:3b:3b:84:86:7d:43:37:c1:2e: 01:db:3b:26:60:74:b6:df:88:57:a8:21:03:01:99: 55:1d:e5:01:a3:f8:13:32:df:0a:2f:f5:88:0d:46: 68:f6:5e:be:57:f3:fe:c5:bd:39:06:64:fe:d1:12: e7:8c:b2:4f:d7:d0:cc:80:3c:bb:86:12:a0:f9:81: 8c:43:52:7f:20:14:34:76:f3:20:5f:0e:39:7d:f3: ec:a6:a5:b7:e8:38:64:30:41:e9:61:ea:9c:37:93: 90:1a:de:cb:33:5e:ac:c8:f7:58:50:14:9b:e0:6e: 40:bf:37:7e:b1:9f:82:81:ef:b6:b7:6e:7c:ef:70: c5:40:76:9c:dc:d4:17:d3:a6:28:63:19:83:cc:a2: 2f:37:f5:fc:27:f6:19:89:de:05:c4:7a:a7:88:3b: 2e:1b:b9:a3:5e:69:0a:7b:2e:43:4c:39:6f:3a:55: f3:a9:77:4b:94:49:9e:ae:50:3d:6f:af:a6:b5:d0: 28:55:97:cb:04:8b:89:f1:d6:2f:bc:54:bd:9b:da: f7:b6:4f:40:7f:5f:36:f7:b4:98:90:3d:7f:b0:7d: 77:57:4c:33:b2:93:f9:90:01:14:f7:61:d1:f0:fd: 76:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:82:41:4E:C0:28:83:EE:2B:29:95:69:29:FD:F4:54:4E:14:0B:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.crl X509v3 Authority Key Identifier: keyid:EB:2A:47:49:E5:CE:F0:85:DE:1A:D7:92:C9:A9:2D:B4:E5:73:17:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:c7:18:2e:0f:f6:a9:23:89:12:5e:03:32:69:ab:8a:53:46: b0:b7:60:c3:d1:77:b4:93:ed:b5:34:93:d1:20:3a:34:17:da: 4c:e4:36:a6:42:f7:5d:77:4b:3d:2c:06:f6:10:49:e7:97:58: 5d:c1:3e:c8:be:c9:18:1a:1c:4c:b0:d5:fa:f2:3f:99:41:5f: dd:17:41:e5:5e:64:45:34:cc:f6:b3:d3:7d:5a:8a:5a:d9:73: 6e:a8:85:65:56:0b:c8:5e:7f:5b:a1:85:bc:99:73:e8:df:9f: a3:b6:de:1b:82:d6:ff:26:e3:e9:57:66:c2:bf:fc:75:60:31: 60:b7:fa:31:06:38:5e:c7:d3:a3:8a:ab:79:78:29:c7:2f:1f: 79:72:9d:3b:a3:6c:28:5c:e6:84:01:d2:04:31:d0:b9:2d:60: cf:1f:ef:af:6e:c5:af:29:7b:d6:f9:2c:21:f1:fa:d6:99:b1: ad:bc:c6:8c:5b:e1:fd:31:ab:c6:fc:41:7f:ce:d9:f2:5d:cb: 1c:26:b3:b4:11:6d:36:d8:9f:e7:65:73:48:c6:59:bd:17:b8: 94:1f:e9:80:da:ae:58:0a:6f:56:53:78:c0:1e:30:df:2a:ce: c6:3e:c4:62:9b:31:f7:ea:e6:ca:65:0a:64:73:46:a2:33:49: 5e:a8:fa:8f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEm1l1rJ6lGnIDlGYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQzOTE0YWEtNTMwNi00MzUyLThhMDEtM2FjMzgxODI3 MTkxMB4XDTI1MDUwMTE0MDAwM1oXDTI1MDUwNDE0MDAwMFowLzEtMCsGA1UEAxMk ODRiN2FlZjQtYjZjOS00NDJmLTkxOTktMDkzMTlkNTU5ZmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQR3i6xu4VQG9zm2rJM1lkFcwH07O4SGfUM3 wS4B2zsmYHS234hXqCEDAZlVHeUBo/gTMt8KL/WIDUZo9l6+V/P+xb05BmT+0RLn jLJP19DMgDy7hhKg+YGMQ1J/IBQ0dvMgXw45ffPspqW36DhkMEHpYeqcN5OQGt7L M16syPdYUBSb4G5Avzd+sZ+Cge+2t25873DFQHac3NQX06YoYxmDzKIvN/X8J/YZ id4FxHqniDsuG7mjXmkKey5DTDlvOlXzqXdLlEmerlA9b6+mtdAoVZfLBIuJ8dYv vFS9m9r3tk9Af18297SYkD1/sH13V0wzspP5kAEU92HR8P12yQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLKCQU7AKIPuKymVaSn99FROFAvxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NDM5 MTRhYS01MzA2LTQzNTItOGEwMS0zYWMzODE4MjcxOTEvNjQzOTE0YWEtNTMwNi00 MzUyLThhMDEtM2FjMzgxODI3MTkxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjQzOTE0YWEtNTMwNi00MzUyLThh MDEtM2FjMzgxODI3MTkxLzY0MzkxNGFhLTUzMDYtNDM1Mi04YTAxLTNhYzM4MTgy NzE5MS5jcmwwHwYDVR0jBBgwFoAU6ypHSeXO8IXeGteSyakttOVzF3EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82NDM5MTRhYS01MzA2LTQzNTItOGEwMS0zYWMz ODE4MjcxOTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAOxxguD/apI4kSXgMyaauK U0awt2DD0Xe0k+21NJPRIDo0F9pM5DamQvddd0s9LAb2EEnnl1hdwT7IvskYGhxM sNX68j+ZQV/dF0HlXmRFNMz2s9N9Wopa2XNuqIVlVgvIXn9boYW8mXPo35+jtt4b gtb/JuPpV2bCv/x1YDFgt/oxBjhex9Ojiqt5eCnHLx95cp07o2woXOaEAdIEMdC5 LWDPH++vbsWvKXvW+Swh8frWmbGtvMaMW+H9MavG/EF/ztnyXcscJrO0EW022J/n ZXNIxlm9F7iUH+mA2q5YCm9WU3jAHjDfKs7GPsRimzH36ubKZQpkc0aiM0leqPqP -----END CERTIFICATE-----Generated at Fri May 2 12:29:19 2025 by rpki-client