$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.mft File: 70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.mft (raw, json) Hash identifier: B7RI79mmYSrZfzhxmHKu2zPQ08fEnGyFYOLt299/FcE= Subject key identifier: E0:84:6E:84:E6:6B:71:BC:DB:AD:86:8D:26:95:A8:3A:DD:DC:71:6A Authority key identifier: A9:DF:6F:56:4F:12:7B:EC:EC:ED:56:9C:DF:9C:D4:43:88:55:F4:E0 Certificate issuer: /CN=70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9 Certificate serial: 010D0C9F4328584978DF06E12AB9B51537C1A600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.mft Manifest number: 010D0C9F43285847291AD335A423E9975CDE91DB Signing time: Wed 09 Apr 2025 20:00:07 +0000 Manifest this update: Wed 09 Apr 2025 20:00:07 +0000 Manifest next update: Sat 12 Apr 2025 20:00:00 +0000 Files and hashes: 1: 1a114236-52d5-3a92-8dfa-95ffbe9bc232.roa (hash: mf7XjBncRBHeNgby1/MQAVwbuN0XbE8T+uVF/suQ1vE=) 2: 4f3e3026-6108-30d1-8cc9-5890c84a38ef.roa (hash: R5+ROWFtafgyhUcbH2Ie3RK37SqvI8KInaf355AWpsA=) 3: 5b22688f-decd-3057-8e30-eee2b25c918d.roa (hash: v5NGl21+OC+a1eVzamZSa6QQy+1xpIcNsf9KXWVnWSo=) 4: 70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.crl (hash: YA1LJ1qmviGoX3Xa/E1IiQtH2ZA4mAtdZLJcz762X+4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:df:06:e1:2a:b9:b5:15:37:c1:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9 Validity Not Before: Apr 9 20:00:07 2025 GMT Not After : Apr 12 20:00:00 2025 GMT Subject: CN=ff14367d-fb30-4e2b-8261-75d768bb33f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:87:8b:ba:dd:03:44:fc:c6:7c:e8:df:8f:70: d0:78:24:24:79:ba:c7:db:6b:e8:21:2f:41:27:b6: 46:1c:ba:07:bd:cf:df:14:2b:03:3a:12:e0:9b:b5: b7:1b:93:b7:36:29:54:aa:1c:c6:a6:6d:0f:a2:88: 1b:8b:05:fe:f2:5c:cc:6f:4d:5d:7a:20:f4:26:2e: 6b:94:3a:ba:67:42:86:4d:1d:a8:93:34:13:18:54: 2d:5f:d4:f6:db:ea:ee:31:b7:04:3f:e6:fe:f7:a7: 93:68:e0:65:9a:d5:f1:62:1c:74:e8:f3:dc:96:80: bc:3e:ed:1d:77:33:c5:91:60:07:12:fe:e6:5d:28: 81:41:cb:be:ce:54:4b:58:83:6a:25:3f:9f:00:45: 87:0d:db:20:a5:53:2c:6a:65:c7:1d:e1:05:cd:52: 08:6c:06:37:65:ba:ce:c0:b6:c5:a6:f7:3f:31:c3: bf:c7:f1:45:25:33:6b:c3:e3:70:ac:50:07:e8:42: 68:7f:2a:4a:55:75:a7:40:b6:04:26:64:65:50:2e: 55:e2:f0:bd:a6:bf:df:e7:da:92:2f:60:65:04:65: c1:54:da:07:0d:13:01:6c:aa:24:98:82:d2:61:e9: 39:0d:88:53:9f:81:61:0b:c1:b2:cf:fc:97:42:45: de:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:84:6E:84:E6:6B:71:BC:DB:AD:86:8D:26:95:A8:3A:DD:DC:71:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.crl X509v3 Authority Key Identifier: keyid:A9:DF:6F:56:4F:12:7B:EC:EC:ED:56:9C:DF:9C:D4:43:88:55:F4:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:eb:b4:cf:45:b0:ea:a3:64:9c:71:cf:33:c6:13:57:8b:47: d3:52:4a:12:7c:5d:c9:f9:48:13:a2:7b:0e:61:3f:c1:fe:2f: d5:b5:40:b0:a7:71:6a:dc:ba:32:5c:b9:ff:c3:0e:0a:21:2a: 04:9f:6d:07:e3:88:6d:ab:91:f5:71:f9:b4:9c:ca:a1:69:94: 4f:59:18:e8:ca:c7:85:87:f0:bb:02:cd:fd:de:ec:43:09:38: a1:4e:0c:d3:08:8a:55:e1:f1:b6:53:3d:ef:af:76:da:93:f2: 7c:bb:d9:bb:eb:45:cf:2d:16:e9:42:29:be:bd:ff:c8:05:02: 03:04:0c:9e:8c:4c:95:3b:91:5a:2a:bc:20:c8:bc:e2:37:e1: 96:55:0a:c7:2b:eb:5f:4f:8c:d4:a9:82:73:a0:46:fe:ec:9e: cb:68:0e:3e:fe:fa:ef:25:4c:f3:4b:6b:4d:a8:b3:92:77:d9: 8d:68:74:e2:89:3d:0e:10:a2:ca:4d:d3:b1:ce:7c:1d:2e:cc: 13:87:e9:f4:1e:c9:a5:e3:e6:ae:d1:ee:db:fc:44:01:8a:7a: 7e:04:59:c2:fc:ec:1c:e9:04:6f:4e:6a:8e:68:18:cf:c1:e1: b9:eb:a4:04:65:9e:98:54:3f:76:ec:de:69:7a:37:9f:1b:c9: ce:87:15:8d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl43wbhKrm1FTfBpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBiY2JkNjgtNDFkNi00YTVhLThkMjgtMWI5YTlhNGM1 ZWE5MB4XDTI1MDQwOTIwMDAwN1oXDTI1MDQxMjIwMDAwMFowLzEtMCsGA1UEAxMk ZmYxNDM2N2QtZmIzMC00ZTJiLTgyNjEtNzVkNzY4YmIzM2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoeLut0DRPzGfOjfj3DQeCQkebrH22voIS9B J7ZGHLoHvc/fFCsDOhLgm7W3G5O3NilUqhzGpm0PoogbiwX+8lzMb01deiD0Ji5r lDq6Z0KGTR2okzQTGFQtX9T22+ruMbcEP+b+96eTaOBlmtXxYhx06PPcloC8Pu0d dzPFkWAHEv7mXSiBQcu+zlRLWINqJT+fAEWHDdsgpVMsamXHHeEFzVIIbAY3ZbrO wLbFpvc/McO/x/FFJTNrw+NwrFAH6EJofypKVXWnQLYEJmRlUC5V4vC9pr/f59qS L2BlBGXBVNoHDRMBbKokmILSYek5DYhTn4FhC8Gyz/yXQkXeCwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOCEboTma3G8262GjSaVqDrd3HFqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83MGJj YmQ2OC00MWQ2LTRhNWEtOGQyOC0xYjlhOWE0YzVlYTkvNzBiY2JkNjgtNDFkNi00 YTVhLThkMjgtMWI5YTlhNGM1ZWE5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzBiY2JkNjgtNDFkNi00YTVhLThk MjgtMWI5YTlhNGM1ZWE5LzcwYmNiZDY4LTQxZDYtNGE1YS04ZDI4LTFiOWE5YTRj NWVhOS5jcmwwHwYDVR0jBBgwFoAUqd9vVk8Se+zs7Vac35zUQ4hV9OAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83MGJjYmQ2OC00MWQ2LTRhNWEtOGQyOC0xYjlh OWE0YzVlYTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBg67TPRbDqo2Sccc8zxhNX i0fTUkoSfF3J+UgTonsOYT/B/i/VtUCwp3Fq3LoyXLn/ww4KISoEn20H44htq5H1 cfm0nMqhaZRPWRjoyseFh/C7As393uxDCTihTgzTCIpV4fG2Uz3vr3bak/J8u9m7 60XPLRbpQim+vf/IBQIDBAyejEyVO5FaKrwgyLziN+GWVQrHK+tfT4zUqYJzoEb+ 7J7LaA4+/vrvJUzzS2tNqLOSd9mNaHTiiT0OEKLKTdOxznwdLswTh+n0Hsml4+au 0e7b/EQBinp+BFnC/Owc6QRvTmqOaBjPweG566QEZZ6YVD927N5pejefG8nOhxWN -----END CERTIFICATE-----Generated at Thu Apr 10 16:21:39 2025 by rpki-client