$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.mft File: ba6a95b3-dd3c-40de-9bd2-84357b74f801.mft (raw, json) Hash identifier: BEMytz8KMj7bWys33h4DYioiRi2ZiTpGgFMzt0stg3I= Subject key identifier: 64:97:14:37:7D:15:87:39:91:D8:84:0B:7F:7F:0F:52:E9:10:61:23 Authority key identifier: 56:83:39:F0:DF:32:B7:60:C5:65:26:B1:9D:69:1F:6F:6C:44:A1:73 Certificate issuer: /CN=ba6a95b3-dd3c-40de-9bd2-84357b74f801 Certificate serial: 010D0C9F43285849A7DD86FA7D77CDD806FFF380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.mft Manifest number: 010D0C9F432858472B6773E5374B29032B8E75F7 Signing time: Sat 26 Apr 2025 16:00:07 +0000 Manifest this update: Sat 26 Apr 2025 16:00:07 +0000 Manifest next update: Tue 29 Apr 2025 16:00:00 +0000 Files and hashes: 1: 47b424ee-693e-3575-8fe0-83475339fcdd.roa (hash: ERreUzgAFOJj7kOrZQU4SpMdN+FAfQ20N9cJWRhgSvE=) 2: a847dbd4-56b3-34f7-8a9d-0ee415227c7a.roa (hash: hX5ZNA867ZCu36zOCtQhBUVedhGQV6qH2ubTDs3OPAo=) 3: ba6a95b3-dd3c-40de-9bd2-84357b74f801.crl (hash: X8fGPWwSzxxcrkhU6cX48vQTXecvJg8+CDDjwuXTD7k=) 4: c505d588-4c39-326a-8b02-29c7cdbd815b.roa (hash: ZIHl1+QTG58F0nGMfG1FvEWnnNAKcmSI/fXbZlnYtUA=) 5: d055bb6d-fe1f-349d-8627-c81fcd36a25e.roa (hash: +2xyAMkKLmq2XGBQHqgPsy365drEocjsrAEP/3VtMrY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:dd:86:fa:7d:77:cd:d8:06:ff:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6a95b3-dd3c-40de-9bd2-84357b74f801 Validity Not Before: Apr 26 16:00:07 2025 GMT Not After : Apr 29 16:00:00 2025 GMT Subject: CN=1f33545b-7839-4d0a-8c46-b1ce150a5c0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:7f:8d:bc:0c:66:01:06:69:68:13:c6:77:ee: ea:c9:0c:d3:62:48:e4:82:55:db:64:f5:ca:18:6c: 60:eb:82:2c:57:f4:fe:8d:aa:d6:96:18:92:ee:c6: 7e:25:0f:91:28:3c:87:fd:49:93:d8:42:e2:7b:0e: d1:54:13:45:4e:15:06:fa:47:f1:0a:af:e4:1f:4d: f4:97:4c:48:77:53:c5:f0:68:d2:63:14:7a:60:3c: 72:ac:2d:60:4b:8c:7a:ed:98:38:96:71:f1:6c:a1: 64:d3:f8:33:e3:14:e8:24:44:07:75:da:8d:ac:ae: 35:b4:33:dc:7d:8c:bf:8c:a4:f0:b9:c1:4d:90:87: 3c:0c:23:8a:71:5e:62:d7:80:36:14:05:5a:dc:91: f5:8d:55:c0:5e:e2:2d:fb:90:c4:74:fb:cf:69:b4: a9:dd:a3:d0:db:ea:fb:d7:c1:de:fe:22:64:9f:9d: e6:8d:c5:9a:79:68:b5:7e:fc:0f:0f:33:a3:ff:86: 24:5b:fa:8c:1e:67:40:e3:7d:98:b7:ec:85:be:30: fc:d6:da:d8:c4:d8:ed:31:ae:76:f1:da:47:2e:54: d8:1f:2e:40:e6:b5:b3:b0:97:da:fa:ab:11:10:7c: a6:f1:ad:80:dc:9b:aa:93:8b:d2:f2:e2:ca:e1:90: 34:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:97:14:37:7D:15:87:39:91:D8:84:0B:7F:7F:0F:52:E9:10:61:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.crl X509v3 Authority Key Identifier: keyid:56:83:39:F0:DF:32:B7:60:C5:65:26:B1:9D:69:1F:6F:6C:44:A1:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:ec:d2:e7:73:18:81:03:9e:95:18:ab:70:58:4e:89:f3:ef: ed:f8:54:6d:0c:6c:c4:75:9d:cd:25:b4:aa:9f:38:f8:63:be: 29:b5:1b:c6:3d:57:0c:41:e5:a4:37:b4:05:10:89:73:e7:71: 95:bb:4a:46:d8:a0:91:d3:16:44:ca:6c:0b:59:fc:b2:2a:1a: b6:7e:01:e2:dc:dd:ba:b6:34:b8:ec:34:2a:58:81:d2:26:e1: 01:50:c3:f1:11:2e:0a:59:3d:cc:fc:1b:56:9e:15:95:79:02: b4:e5:59:9c:30:91:05:0c:df:9b:fb:5e:0a:57:e2:aa:8d:a4: 9f:39:7b:8e:ad:ec:75:f3:c2:63:8b:36:12:76:82:f3:23:5d: 4c:4f:30:7d:8f:1c:57:07:10:bb:19:02:33:db:c0:ca:d3:60: 3d:a0:12:fb:fe:43:ec:82:9f:9d:1b:10:a8:16:67:89:64:64: 35:ae:43:fd:05:8f:4c:d1:3f:33:47:20:18:bd:b8:14:5a:88: e6:0b:68:15:9a:8e:69:55:f8:8b:59:f2:92:fb:03:5e:6d:ae: f8:23:e1:38:7f:9f:cb:13:51:4f:40:a1:35:f5:a2:3d:0d:c3: ef:ca:08:b2:c5:62:54:1b:e9:f1:6c:05:e1:07:6e:b7:5e:0e: 9a:a2:99:22 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmn3Yb6fXfN2Ab/84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE2YTk1YjMtZGQzYy00MGRlLTliZDItODQzNTdiNzRm ODAxMB4XDTI1MDQyNjE2MDAwN1oXDTI1MDQyOTE2MDAwMFowLzEtMCsGA1UEAxMk MWYzMzU0NWItNzgzOS00ZDBhLThjNDYtYjFjZTE1MGE1YzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63+NvAxmAQZpaBPGd+7qyQzTYkjkglXbZPXK GGxg64IsV/T+jarWlhiS7sZ+JQ+RKDyH/UmT2ELiew7RVBNFThUG+kfxCq/kH030 l0xId1PF8GjSYxR6YDxyrC1gS4x67Zg4lnHxbKFk0/gz4xToJEQHddqNrK41tDPc fYy/jKTwucFNkIc8DCOKcV5i14A2FAVa3JH1jVXAXuIt+5DEdPvPabSp3aPQ2+r7 18He/iJkn53mjcWaeWi1fvwPDzOj/4YkW/qMHmdA432Yt+yFvjD81trYxNjtMa52 8dpHLlTYHy5A5rWzsJfa+qsREHym8a2A3Juqk4vS8uLK4ZA0hQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGSXFDd9FYc5kdiEC39/D1LpEGEjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iYTZh OTViMy1kZDNjLTQwZGUtOWJkMi04NDM1N2I3NGY4MDEvYmE2YTk1YjMtZGQzYy00 MGRlLTliZDItODQzNTdiNzRmODAxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYmE2YTk1YjMtZGQzYy00MGRlLTli ZDItODQzNTdiNzRmODAxL2JhNmE5NWIzLWRkM2MtNDBkZS05YmQyLTg0MzU3Yjc0 ZjgwMS5jcmwwHwYDVR0jBBgwFoAUVoM58N8yt2DFZSaxnWkfb2xEoXMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iYTZhOTViMy1kZDNjLTQwZGUtOWJkMi04NDM1 N2I3NGY4MDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB67NLncxiBA56VGKtwWE6J 8+/t+FRtDGzEdZ3NJbSqnzj4Y74ptRvGPVcMQeWkN7QFEIlz53GVu0pG2KCR0xZE ymwLWfyyKhq2fgHi3N26tjS47DQqWIHSJuEBUMPxES4KWT3M/BtWnhWVeQK05Vmc MJEFDN+b+14KV+KqjaSfOXuOrex188JjizYSdoLzI11MTzB9jxxXBxC7GQIz28DK 02A9oBL7/kPsgp+dGxCoFmeJZGQ1rkP9BY9M0T8zRyAYvbgUWojmC2gVmo5pVfiL WfKS+wNeba74I+E4f5/LE1FPQKE19aI9DcPvygiyxWJUG+nxbAXhB263Xg6aopki -----END CERTIFICATE-----Generated at Sat Apr 26 19:04:22 2025 by rpki-client