$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft File: 89dfa952-929a-4c50-a372-96882b2b33e2.mft (raw, json) Hash identifier: OI0QlpFWFDKXdR6U8vbjsbRfogYM4KD+4aWkAbMgEhs= Subject key identifier: 72:20:AE:00:83:1C:08:93:95:7A:02:A3:99:CD:9E:02:E9:1C:C4:E4 Authority key identifier: 39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 Certificate issuer: /CN=89dfa952-929a-4c50-a372-96882b2b33e2 Certificate serial: 010D0C9F43285849AB1F4C063484BE517958DA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft Manifest number: 010D0C9F4328584073A821439392B1CC62E2357A Signing time: Sun 27 Apr 2025 20:00:03 +0000 Manifest this update: Sun 27 Apr 2025 20:00:03 +0000 Manifest next update: Tue 29 Apr 2025 20:00:00 +0000 Files and hashes: 1: 0d36b90c-3ee5-3b4d-8a88-4a58b7068da7.roa (hash: F2YGL0qfevY63QZUdCOPirsAsLzwqo/0P6gt5FTXkSI=) 2: 89dfa952-929a-4c50-a372-96882b2b33e2.crl (hash: T78dSViOLDvKzIIW7gA8aBn9w0V4W+ZwEGgRZLOHwa8=) 3: b27b5fc5-f00a-34aa-bb4a-7a248aa6e187.roa (hash: Ir1auIENu8xseofDHLC+bWVCwOxK36UQMnn6hTRBxeg=) 4: c8a7e846-09f2-3189-8880-b661bfde1d4d.roa (hash: U5LJsYk7o1CD1ZNiSmS8ozUTnWpBZ6KqtU1y/LtHCos=) 5: e234c5cf-6ad7-350b-9018-aeef40195ca6.roa (hash: F4HSD+IH3g9rU4h3VC0cwyDXu6485cOvUzzotfvWw9k=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:1f:4c:06:34:84:be:51:79:58:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89dfa952-929a-4c50-a372-96882b2b33e2 Validity Not Before: Apr 27 20:00:03 2025 GMT Not After : Apr 29 20:00:00 2025 GMT Subject: CN=722cf739-07c4-4bda-9d00-7e0f6a6efb92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8b:45:12:a5:d0:08:4a:16:55:9b:19:ea:31: b2:36:7e:19:8a:6c:0d:86:d5:25:7c:0c:fc:52:e9: c4:31:9e:0c:e9:7f:80:82:db:54:8d:37:e5:28:d6: 95:b1:24:51:8e:b5:3a:08:91:63:a4:9b:3d:e0:d9: ed:8f:80:4f:84:5e:86:6b:2b:aa:a4:0d:56:63:9c: 91:0a:14:36:3b:ea:32:1c:c2:2b:df:f0:12:f8:5e: 0e:df:aa:d8:6f:67:75:1d:07:7e:30:20:ca:9d:a7: 57:77:b0:86:0f:44:ea:e5:24:ae:c0:6f:b5:35:5b: ba:cf:90:02:c2:bf:26:81:54:15:9a:58:fc:c5:e5: ee:cf:9f:74:94:01:6b:0d:e6:85:d7:33:8e:27:a1: db:ce:1e:8f:b3:03:73:28:4a:a8:9d:7f:e0:38:81: d0:54:97:af:06:1b:33:d4:9f:3d:f6:70:ba:84:e7: 1f:a5:fd:e0:f3:1a:8b:04:49:1e:50:33:35:2e:af: 79:20:7b:7c:27:c3:7a:49:6a:be:67:c8:6d:d1:39: 2d:77:31:8e:35:44:27:92:36:49:a0:50:ff:cb:00: 6a:4f:b9:45:07:08:58:19:a1:9c:47:bc:6e:63:5e: 61:84:a2:2f:7c:65:8a:71:26:b4:7d:b9:0b:13:54: 0a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:20:AE:00:83:1C:08:93:95:7A:02:A3:99:CD:9E:02:E9:1C:C4:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl X509v3 Authority Key Identifier: keyid:39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:3e:ae:36:ac:01:00:a6:dc:b2:49:44:79:2b:45:fa:cf:00: 67:68:ca:4a:61:70:f2:89:b1:10:b3:38:73:49:14:c6:5f:08: 1e:3c:4f:f0:2b:e2:23:e6:1e:a0:df:b7:3d:e1:38:9d:5b:53: dd:1f:0b:77:6a:16:db:41:c6:bf:ea:8e:69:aa:cf:64:52:10: 73:b8:a7:af:8c:37:20:ed:26:e1:20:9b:15:0c:07:fb:31:69: 9e:5f:f0:51:19:77:20:2a:0e:c3:09:38:ed:26:44:77:a3:d1: 1d:b0:fc:20:25:ba:4b:88:3c:26:e8:6b:59:ff:12:42:d5:d0: b4:18:68:30:23:a2:96:3f:d8:eb:bb:b2:57:01:79:a8:3f:36: d3:84:27:df:1a:fd:4d:a9:28:bd:7a:df:7f:bc:d3:5c:bf:d3: f6:ef:01:57:20:c0:4d:90:8c:ef:9f:84:ab:da:aa:f7:50:a3: fe:58:a2:2c:86:44:cb:e2:c1:91:11:97:39:c0:fb:8c:3b:1d: 7d:5a:83:65:85:83:64:ba:f9:5e:8c:0e:e9:61:d0:2b:cf:ad: 86:22:67:50:62:b7:d1:bb:b6:b1:08:c2:50:2a:67:7c:92:c4: db:19:24:dd:07:02:d7:6f:05:81:42:12:9e:d8:4a:1a:32:04: c7:9c:0e:bc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmrH0wGNIS+UXlY2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODlkZmE5NTItOTI5YS00YzUwLWEzNzItOTY4ODJiMmIz M2UyMB4XDTI1MDQyNzIwMDAwM1oXDTI1MDQyOTIwMDAwMFowLzEtMCsGA1UEAxMk NzIyY2Y3MzktMDdjNC00YmRhLTlkMDAtN2UwZjZhNmVmYjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4tFEqXQCEoWVZsZ6jGyNn4ZimwNhtUlfAz8 UunEMZ4M6X+AgttUjTflKNaVsSRRjrU6CJFjpJs94Nntj4BPhF6GayuqpA1WY5yR ChQ2O+oyHMIr3/AS+F4O36rYb2d1HQd+MCDKnadXd7CGD0Tq5SSuwG+1NVu6z5AC wr8mgVQVmlj8xeXuz590lAFrDeaF1zOOJ6Hbzh6PswNzKEqonX/gOIHQVJevBhsz 1J899nC6hOcfpf3g8xqLBEkeUDM1Lq95IHt8J8N6SWq+Z8ht0TktdzGONUQnkjZJ oFD/ywBqT7lFBwhYGaGcR7xuY15hhKIvfGWKcSa0fbkLE1QKRQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHIgrgCDHAiTlXoCo5nNngLpHMTkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84OWRm YTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4MmIyYjMzZTIvODlkZmE5NTItOTI5YS00 YzUwLWEzNzItOTY4ODJiMmIzM2UyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODlkZmE5NTItOTI5YS00YzUwLWEz NzItOTY4ODJiMmIzM2UyLzg5ZGZhOTUyLTkyOWEtNGM1MC1hMzcyLTk2ODgyYjJi MzNlMi5jcmwwHwYDVR0jBBgwFoAUOasMnuRd+CUK34yFXdjssScnYpMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84OWRmYTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4 MmIyYjMzZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBtPq42rAEAptyySUR5K0X6 zwBnaMpKYXDyibEQszhzSRTGXwgePE/wK+Ij5h6g37c94TidW1PdHwt3ahbbQca/ 6o5pqs9kUhBzuKevjDcg7SbhIJsVDAf7MWmeX/BRGXcgKg7DCTjtJkR3o9EdsPwg JbpLiDwm6GtZ/xJC1dC0GGgwI6KWP9jru7JXAXmoPzbThCffGv1NqSi9et9/vNNc v9P27wFXIMBNkIzvn4Sr2qr3UKP+WKIshkTL4sGREZc5wPuMOx19WoNlhYNkuvle jA7pYdArz62GImdQYrfRu7axCMJQKmd8ksTbGSTdBwLXbwWBQhKe2EoaMgTHnA68 -----END CERTIFICATE-----Generated at Mon Apr 28 15:23:33 2025 by rpki-client