$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.mft File: 8b2124a8-d6b6-483e-92de-67f8d7975cc4.mft (raw, json) Hash identifier: ncfNZxsVF1uywvXz4vh8QTlLQEh5+X1jI7DuaowXmrA= Subject key identifier: 11:F4:2F:8B:E5:46:05:DE:88:05:62:90:C2:32:AC:8D:3F:27:96:A3 Authority key identifier: 29:5A:24:7E:A2:89:9B:E2:BA:2C:49:81:4F:55:E6:63:4A:9A:FA:E8 Certificate issuer: /CN=8b2124a8-d6b6-483e-92de-67f8d7975cc4 Certificate serial: 010D0C9F43285849AB01811C5FEF31485EED2880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.mft Manifest number: 010D0C9F4328584164056837E0B16E008FA0681D Signing time: Sun 27 Apr 2025 19:00:03 +0000 Manifest this update: Sun 27 Apr 2025 19:00:03 +0000 Manifest next update: Tue 29 Apr 2025 19:00:00 +0000 Files and hashes: 1: 1c034f86-3bc7-3369-8d5e-016a9d9caae9.roa (hash: hQqk+rvxqMTUv/oALirfQ9cbQ/qTljQQbikV/mPEZ8A=) 2: 8b2124a8-d6b6-483e-92de-67f8d7975cc4.crl (hash: RZHs0nLFZStzzJZXjBGpJkXmFOZJk8bOPn4pGgGsZdA=) 3: ab7acae0-b363-34b5-acd1-1cea7c934a3b.roa (hash: uSdILUrf5prO9USGrbLLq9ZAb88qUJOFJ6nhbTM0xR8=) 4: aee607a7-cc40-3de7-9ba2-cd79e6f66f13.roa (hash: aw+TSEOH8kwPTT0gNwE713DTYKbPA8VRVFNrYNZ7rQ8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:01:81:1c:5f:ef:31:48:5e:ed:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b2124a8-d6b6-483e-92de-67f8d7975cc4 Validity Not Before: Apr 27 19:00:03 2025 GMT Not After : Apr 29 19:00:00 2025 GMT Subject: CN=1ab9cc6a-4ae4-4f92-902b-921ec9d5066e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:77:d3:d0:37:b3:94:11:66:4e:d6:d7:3f:20: 59:60:bf:dc:40:04:16:93:d0:20:4b:cd:b6:ca:d3: f4:57:d4:29:bb:37:70:7e:f8:e9:e2:d0:65:29:01: f5:bd:19:13:9a:8b:69:68:c0:15:9e:8b:cf:ec:cc: a2:08:42:62:e3:2a:67:1e:df:8d:05:fd:61:a8:68: 44:8b:15:3a:5c:c7:05:7b:ee:d7:45:47:f2:2b:32: 13:3b:a2:3b:98:35:e3:7c:d2:43:9c:2b:8b:7d:12: 36:76:d5:8f:15:03:65:f3:2b:bc:dd:31:fd:0b:67: 94:96:16:ee:c8:1a:03:7d:c3:2c:25:79:8b:f7:0d: cc:52:c5:50:f6:bc:cc:d9:1c:24:43:a4:f4:09:f2: 18:1e:c4:2f:09:f5:9c:ae:cc:79:e0:dd:be:6f:8f: 05:fc:60:24:76:65:32:34:9e:2a:1f:7e:3c:0d:fd: 64:ac:2c:ad:57:ca:a1:6c:af:a8:7c:96:72:6d:08: 85:a5:7a:f1:3d:a6:4f:24:87:90:b5:b2:d8:ba:91: 7d:17:52:06:84:7d:91:54:e9:1d:bc:18:00:f7:8a: 12:da:a2:24:4c:3b:a9:df:78:6c:fb:7f:68:90:28: 60:10:ac:d4:d7:75:cd:68:2a:15:8c:1b:93:f3:98: e7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F4:2F:8B:E5:46:05:DE:88:05:62:90:C2:32:AC:8D:3F:27:96:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.crl X509v3 Authority Key Identifier: keyid:29:5A:24:7E:A2:89:9B:E2:BA:2C:49:81:4F:55:E6:63:4A:9A:FA:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:dc:9a:20:0a:8a:5f:03:4c:b5:80:58:58:39:cb:ce:69:84: 89:c9:da:a4:1d:1b:bc:c4:67:19:f2:90:73:f0:62:a5:12:99: 97:f6:91:ad:09:3b:66:16:fb:8e:b3:fe:67:96:36:bd:0c:d2: b0:ce:4f:a8:af:74:36:21:7a:b3:43:44:26:5e:0d:85:3a:fa: 2e:23:be:85:7b:a9:6b:fb:1a:da:d7:43:56:51:7d:e1:e5:49: ba:7d:55:81:c2:65:58:41:6b:85:bb:8d:05:a8:15:2a:b2:e6: 29:a6:6f:38:b7:70:25:ee:da:70:e2:39:87:ef:8a:e4:f2:37: 1b:62:92:1d:10:e4:f6:9d:a9:b2:19:e0:14:69:78:b9:d7:15: c0:b5:2a:91:b0:5f:81:1a:cb:31:3c:77:80:0f:de:e3:bc:59: 46:b3:e6:bc:eb:d9:3a:0d:8f:11:e7:d2:0f:55:c7:3e:b4:cf: 0e:5f:4e:98:c6:d6:85:16:d7:b6:23:fd:72:f9:ab:6f:dd:82: 8a:50:6f:7f:63:6a:a2:d8:a1:3a:2d:5e:a7:79:82:9d:97:f2: 3b:61:10:5d:7c:9d:5d:52:57:94:99:0e:b3:09:49:4f:ff:92: b0:d0:ce:4e:ad:23:be:3c:ba:f8:a9:af:78:ed:4d:53:8b:0a: 89:a6:07:cd -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmrAYEcX+8xSF7tKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGIyMTI0YTgtZDZiNi00ODNlLTkyZGUtNjdmOGQ3OTc1 Y2M0MB4XDTI1MDQyNzE5MDAwM1oXDTI1MDQyOTE5MDAwMFowLzEtMCsGA1UEAxMk MWFiOWNjNmEtNGFlNC00ZjkyLTkwMmItOTIxZWM5ZDUwNjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HfT0DezlBFmTtbXPyBZYL/cQAQWk9AgS822 ytP0V9Qpuzdwfvjp4tBlKQH1vRkTmotpaMAVnovP7MyiCEJi4ypnHt+NBf1hqGhE ixU6XMcFe+7XRUfyKzITO6I7mDXjfNJDnCuLfRI2dtWPFQNl8yu83TH9C2eUlhbu yBoDfcMsJXmL9w3MUsVQ9rzM2RwkQ6T0CfIYHsQvCfWcrsx54N2+b48F/GAkdmUy NJ4qH348Df1krCytV8qhbK+ofJZybQiFpXrxPaZPJIeQtbLYupF9F1IGhH2RVOkd vBgA94oS2qIkTDup33hs+39okChgEKzU13XNaCoVjBuT85jnQQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBH0L4vlRgXeiAVikMIyrI0/J5ajMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YjIx MjRhOC1kNmI2LTQ4M2UtOTJkZS02N2Y4ZDc5NzVjYzQvOGIyMTI0YTgtZDZiNi00 ODNlLTkyZGUtNjdmOGQ3OTc1Y2M0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGIyMTI0YTgtZDZiNi00ODNlLTky ZGUtNjdmOGQ3OTc1Y2M0LzhiMjEyNGE4LWQ2YjYtNDgzZS05MmRlLTY3ZjhkNzk3 NWNjNC5jcmwwHwYDVR0jBBgwFoAUKVokfqKJm+K6LEmBT1XmY0qa+ugwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YjIxMjRhOC1kNmI2LTQ4M2UtOTJkZS02N2Y4 ZDc5NzVjYzQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBn3JogCopfA0y1gFhYOcvO aYSJydqkHRu8xGcZ8pBz8GKlEpmX9pGtCTtmFvuOs/5nlja9DNKwzk+or3Q2IXqz Q0QmXg2FOvouI76Fe6lr+xra10NWUX3h5Um6fVWBwmVYQWuFu40FqBUqsuYppm84 t3Al7tpw4jmH74rk8jcbYpIdEOT2namyGeAUaXi51xXAtSqRsF+BGssxPHeAD97j vFlGs+a869k6DY8R59IPVcc+tM8OX06YxtaFFte2I/1y+atv3YKKUG9/Y2qi2KE6 LV6neYKdl/I7YRBdfJ1dUleUmQ6zCUlP/5Kw0M5OrSO+PLr4qa947U1TiwqJpgfN -----END CERTIFICATE-----Generated at Mon Apr 28 08:27:57 2025 by rpki-client