$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft File: 28591b95-39d7-4e54-90f3-1339338b842c.mft (raw, json) Hash identifier: 64y1cwaK9fQfuNOxnYJvQdNPe1vVnmaNNepgM63opeU= Subject key identifier: 37:0B:9C:D2:1D:E5:63:D4:54:0B:42:6B:AF:78:C7:42:AC:1D:82:D4 Authority key identifier: FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A Certificate issuer: /CN=28591b95-39d7-4e54-90f3-1339338b842c Certificate serial: 010D0C9F432858498B046D0D63736EF8F302C858 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft Manifest number: 010D0C9F4328584073A84793D8858966B57162EE Signing time: Wed 16 Apr 2025 08:00:03 +0000 Manifest this update: Wed 16 Apr 2025 08:00:03 +0000 Manifest next update: Fri 18 Apr 2025 08:00:00 +0000 Files and hashes: 1: 139652f7-af23-334e-a7f9-9e08d724d62f.roa (hash: KPmVi3U+Tg0Uww3xja1O7L+JhKxE5xG9CQWBz0F+rTw=) 2: 27626520-245c-33fb-bb99-5dc7d0821da1.roa (hash: 3xg6wT+z1MwF7dpho5YhGMhfC8hk0z3UXfRvc1G+Rxs=) 3: 28591b95-39d7-4e54-90f3-1339338b842c.crl (hash: kgOZDL38nd6a2XV8hWfXUe2T0ojN4o3Cx0xKCb7ozn8=) 4: 486cf596-6ac5-320c-b437-e9c1fdb89e8b.roa (hash: BOGeH27lln6FLRP7FyUt/A//9mK5qUZiwGSWq8H+ZXA=) 5: a6469a75-3af9-39ef-ae2f-0b913de50d29.roa (hash: UAypTPiSJ/VIxblHpw8jSIDGuDmipFw7skTw9L7DVCc=) 6: dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa (hash: xD7rWjf84+aZk6zf/llql+XmyZXFND3bh6FN8lSYjQA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8b:04:6d:0d:63:73:6e:f8:f3:02:c8:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28591b95-39d7-4e54-90f3-1339338b842c Validity Not Before: Apr 16 08:00:03 2025 GMT Not After : Apr 18 08:00:00 2025 GMT Subject: CN=cb062ff0-f540-4db1-b2f9-4edb66c0b940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9d:c8:b0:81:44:42:4d:2b:ee:98:9a:0b:82: 51:4c:c0:9b:d0:26:2c:33:1d:ea:e3:be:86:d4:c9: 39:35:22:2d:71:87:00:73:e3:2a:e1:af:1f:29:97: b2:77:eb:04:ad:75:71:91:8b:4a:c4:12:a9:de:33: 92:ce:bd:71:0e:3a:f0:28:a7:4b:bf:e5:4b:79:f0: 5b:a1:a0:da:4c:31:4b:5f:2e:73:95:52:2f:c6:53: bb:de:d7:bd:91:df:3c:80:7d:fa:36:ed:cc:9a:05: 1d:5b:3d:cd:14:86:14:31:c9:af:7b:86:96:69:7c: 85:5a:02:26:52:1e:ac:5a:5a:76:87:f1:da:7b:68: ac:25:60:84:1f:f1:06:07:b9:7a:cb:9c:e1:82:9c: 79:09:5f:cf:2e:af:d2:75:b7:f8:f2:22:ff:cc:8f: 79:6c:1f:1d:4d:68:0d:60:6a:e5:83:00:ad:7d:32: 90:c6:30:2b:0e:cf:42:bf:a5:d7:53:3d:36:2a:81: 65:4b:af:bb:79:b8:97:63:bb:8f:e2:7c:3d:6b:31: c4:f2:1f:60:30:4f:66:3f:f1:53:f2:a2:97:99:57: d2:e2:bb:7f:ff:0f:e9:d6:0c:67:07:0a:0b:d1:79: aa:c1:84:9d:e3:19:53:89:9a:98:dc:db:36:7f:a4: cf:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:0B:9C:D2:1D:E5:63:D4:54:0B:42:6B:AF:78:C7:42:AC:1D:82:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl X509v3 Authority Key Identifier: keyid:FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:89:54:4f:28:48:7f:00:db:51:ee:b6:66:00:b0:1f:d7:b6: 9a:b6:4b:e3:76:3a:12:e6:5d:e7:41:5d:55:13:cc:4a:7c:d4: 4c:30:ac:5a:39:ff:ef:3b:03:ae:78:da:44:b0:db:9c:78:58: ff:02:63:0c:6c:ca:be:f4:9c:fa:28:29:40:56:55:ee:35:23: fd:59:7b:6e:a9:6b:c9:17:e7:e6:22:24:7b:e0:aa:ff:77:f8: d4:2b:34:d7:d4:85:e6:41:ad:15:c2:f0:0b:ff:da:ac:9a:46: 1a:ba:f8:4e:26:ce:7c:5d:7e:c3:ce:84:45:54:25:53:13:e8: 3b:99:68:b9:d7:59:76:fe:76:45:a7:71:9d:2e:b5:7e:ca:48: 53:c6:3b:47:1b:6d:9f:5c:fc:d1:46:56:bf:3a:2f:dd:58:91: e4:21:ba:32:73:cf:7d:64:35:26:2c:90:9b:b1:b4:a6:e3:e6: 8e:94:f1:1f:ea:95:27:9e:26:b7:91:9e:15:2e:76:0c:0b:03: 1c:ae:89:52:65:5f:24:92:ff:8e:59:92:fc:41:1f:6c:2b:ac: f2:bc:19:b2:38:10:d9:6f:54:b2:d6:f9:ac:b1:ba:9e:dc:98: 37:8b:d2:16:65:f2:b5:7f:a7:2e:ca:de:e3:b4:ef:d4:3f:f0: ef:96:b2:1a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmLBG0NY3Nu+PMCyFgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg1OTFiOTUtMzlkNy00ZTU0LTkwZjMtMTMzOTMzOGI4 NDJjMB4XDTI1MDQxNjA4MDAwM1oXDTI1MDQxODA4MDAwMFowLzEtMCsGA1UEAxMk Y2IwNjJmZjAtZjU0MC00ZGIxLWIyZjktNGVkYjY2YzBiOTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJ3IsIFEQk0r7piaC4JRTMCb0CYsMx3q476G 1Mk5NSItcYcAc+Mq4a8fKZeyd+sErXVxkYtKxBKp3jOSzr1xDjrwKKdLv+VLefBb oaDaTDFLXy5zlVIvxlO73te9kd88gH36Nu3MmgUdWz3NFIYUMcmve4aWaXyFWgIm Uh6sWlp2h/Hae2isJWCEH/EGB7l6y5zhgpx5CV/PLq/Sdbf48iL/zI95bB8dTWgN YGrlgwCtfTKQxjArDs9Cv6XXUz02KoFlS6+7ebiXY7uP4nw9azHE8h9gME9mP/FT 8qKXmVfS4rt//w/p1gxnBwoL0XmqwYSd4xlTiZqY3Ns2f6TPuwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDcLnNId5WPUVAtCa694x0KsHYLUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5 MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5MzM4Yjg0MmMvMjg1OTFiOTUtMzlkNy00 ZTU0LTkwZjMtMTMzOTMzOGI4NDJjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg1OTFiOTUtMzlkNy00ZTU0LTkw ZjMtMTMzOTMzOGI4NDJjLzI4NTkxYjk1LTM5ZDctNGU1NC05MGYzLTEzMzkzMzhi ODQyYy5jcmwwHwYDVR0jBBgwFoAU/hD3fjltydQ3zw/RR1+y/RTGxWowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5 MzM4Yjg0MmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAUiVRPKEh/ANtR7rZmALAf 17aatkvjdjoS5l3nQV1VE8xKfNRMMKxaOf/vOwOueNpEsNuceFj/AmMMbMq+9Jz6 KClAVlXuNSP9WXtuqWvJF+fmIiR74Kr/d/jUKzTX1IXmQa0VwvAL/9qsmkYauvhO Js58XX7DzoRFVCVTE+g7mWi511l2/nZFp3GdLrV+ykhTxjtHG22fXPzRRla/Oi/d WJHkIboyc899ZDUmLJCbsbSm4+aOlPEf6pUnnia3kZ4VLnYMCwMcrolSZV8kkv+O WZL8QR9sK6zyvBmyOBDZb1Sy1vmssbqe3Jg3i9IWZfK1f6cuyt7jtO/UP/DvlrIa -----END CERTIFICATE-----Generated at Wed Apr 16 17:13:24 2025 by rpki-client