$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/ddae52a5-cdb7-415c-ad44-5125bb123a7a.mft File: ddae52a5-cdb7-415c-ad44-5125bb123a7a.mft (raw, json) Hash identifier: qDXYOjmp7JL7JzSJMhzGgpCmvwnvZrfzSDEb+mgQsA0= Subject key identifier: 5C:97:96:41:F7:F7:CA:43:9C:EA:0A:5E:86:4A:1D:E4:A7:D5:7A:9D Authority key identifier: F0:E3:23:52:EB:8D:2B:15:D6:50:65:F8:E6:F7:20:A7:27:1E:32:FA Certificate issuer: /CN=ddae52a5-cdb7-415c-ad44-5125bb123a7a Certificate serial: 010D0C9F43285849806E94A5A97D4974811FF440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/ddae52a5-cdb7-415c-ad44-5125bb123a7a.mft Manifest number: 010D0C9F4328584073A8546306A18980D7C0B466 Signing time: Sat 12 Apr 2025 13:00:03 +0000 Manifest this update: Sat 12 Apr 2025 13:00:03 +0000 Manifest next update: Mon 14 Apr 2025 13:00:00 +0000 Files and hashes: 1: cf55352d-0396-321a-a7aa-13ef996b8602.roa (hash: 8SE1R7kC3pRiMZOTs8Wf1wd9u8/zNFX/1Z1OODam6vc=) 2: ddae52a5-cdb7-415c-ad44-5125bb123a7a.crl (hash: B4EewqManfUmEFTYELBJOx2Z+C3uZha+XhOaJM2oqIY=) 3: e1a69dd1-1a42-3b71-a6ff-7ee5f3b46afa.roa (hash: Ew3RAxeaDeZ+kVbaijCE0zZKaRo9G79GUzBwLGtVI4k=) 4: f924133a-b5ad-36f1-8a45-c86dbeb1db1d.roa (hash: 3xiCMUYPvipv7Goop1Ndim8BFjfcLGqyKNejgXSwehE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/ddae52a5-cdb7-415c-ad44-5125bb123a7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/ddae52a5-cdb7-415c-ad44-5125bb123a7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6e:94:a5:a9:7d:49:74:81:1f:f4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddae52a5-cdb7-415c-ad44-5125bb123a7a Validity Not Before: Apr 12 13:00:03 2025 GMT Not After : Apr 14 13:00:00 2025 GMT Subject: CN=511d493a-5a88-434e-b96f-20aa355295c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:44:ef:f4:41:90:29:28:43:c4:93:b5:4b:62: 18:af:4d:8c:24:db:f9:d5:54:cf:76:de:ff:e0:22: c4:99:98:6e:4e:af:ff:fb:b7:a1:8e:19:32:e5:e9: 01:17:0b:18:b0:da:78:e1:9c:fa:5c:ce:b1:bf:76: 27:c6:0e:7f:ef:db:43:4d:f5:96:e5:d1:38:39:eb: 9b:06:24:a0:3a:8d:85:9d:e8:a8:be:00:cc:57:d6: bf:99:18:a4:32:a4:73:0f:41:b3:b2:a6:8e:cc:8c: 0d:80:8f:2d:f2:14:51:b8:d6:a0:5d:64:fe:3a:68: db:83:26:75:26:a9:c9:3c:c5:c2:f1:23:d8:c9:5d: fb:ed:dd:8d:98:e2:ca:70:16:28:25:2a:07:b8:a6: 5e:af:5e:f6:1a:8b:e9:e8:f5:1f:e6:aa:38:b7:c2: 6b:77:f6:78:0b:dd:39:62:a1:3c:16:63:0a:05:81: 20:8b:f6:09:ea:69:2b:68:b6:b8:61:12:5d:b9:ce: 69:db:d8:e4:c7:6b:37:3f:55:ee:71:00:6b:6d:22: bc:06:2f:0b:fd:f8:fa:4a:d9:c4:34:9e:df:b0:2f: 98:53:af:63:37:22:53:58:46:cf:ca:1a:04:02:cf: 77:b4:b2:bd:c0:2a:dc:a5:21:c6:30:3a:47:94:6e: bd:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:97:96:41:F7:F7:CA:43:9C:EA:0A:5E:86:4A:1D:E4:A7:D5:7A:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/ddae52a5-cdb7-415c-ad44-5125bb123a7a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/ddae52a5-cdb7-415c-ad44-5125bb123a7a.crl X509v3 Authority Key Identifier: keyid:F0:E3:23:52:EB:8D:2B:15:D6:50:65:F8:E6:F7:20:A7:27:1E:32:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:1f:e9:20:e2:98:af:d3:5b:10:55:c8:dd:c3:ae:74:67:e3: df:cf:0c:37:b6:6c:9f:03:9a:59:9c:1d:ae:f7:75:b6:34:bf: ab:c6:dc:c8:08:38:08:76:45:a7:8e:9e:94:0a:11:eb:9d:d7: a1:c2:8a:2e:78:49:ca:bb:85:c0:99:c5:43:76:06:ca:15:dd: f4:5e:69:29:49:bb:e2:de:a6:e1:18:8a:14:9c:6c:73:43:e4: 02:c6:e7:35:7e:c8:11:89:c8:0f:06:de:8c:a1:0e:65:8f:13: 01:19:05:2d:8a:db:fe:19:0b:81:08:bb:04:77:02:79:02:82: b1:52:16:47:2d:a1:9c:48:00:c6:b0:8f:40:21:32:b4:e9:c5: c5:e4:b6:8e:e3:9c:72:1e:81:cc:dd:0c:2e:de:db:f4:be:19: b3:71:aa:0a:22:b6:bf:8a:7b:52:dd:e3:95:b6:78:f6:1f:af: b6:c1:a2:01:5a:50:6a:3e:ab:21:4e:0e:47:2f:fc:50:8e:bd: d9:f2:7b:c9:71:57:de:69:af:55:9d:4a:46:ba:6e:9d:d9:10: dd:6c:ab:4c:70:e5:b3:36:5f:f4:f1:d6:01:01:27:8f:31:2c: b1:88:94:b9:6a:23:db:b1:50:0f:77:f6:20:20:09:be:bc:1a: d8:09:45:01 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmAbpSlqX1JdIEf9EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGRhZTUyYTUtY2RiNy00MTVjLWFkNDQtNTEyNWJiMTIz YTdhMB4XDTI1MDQxMjEzMDAwM1oXDTI1MDQxNDEzMDAwMFowLzEtMCsGA1UEAxMk NTExZDQ5M2EtNWE4OC00MzRlLWI5NmYtMjBhYTM1NTI5NWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ETv9EGQKShDxJO1S2IYr02MJNv51VTPdt7/ 4CLEmZhuTq//+7ehjhky5ekBFwsYsNp44Zz6XM6xv3Ynxg5/79tDTfWW5dE4Oeub BiSgOo2FneiovgDMV9a/mRikMqRzD0GzsqaOzIwNgI8t8hRRuNagXWT+OmjbgyZ1 JqnJPMXC8SPYyV377d2NmOLKcBYoJSoHuKZer172Govp6PUf5qo4t8Jrd/Z4C905 YqE8FmMKBYEgi/YJ6mkraLa4YRJduc5p29jkx2s3P1XucQBrbSK8Bi8L/fj6StnE NJ7fsC+YU69jNyJTWEbPyhoEAs93tLK9wCrcpSHGMDpHlG69EQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFyXlkH398pDnOoKXoZKHeSn1XqdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZGFl NTJhNS1jZGI3LTQxNWMtYWQ0NC01MTI1YmIxMjNhN2EvZGRhZTUyYTUtY2RiNy00 MTVjLWFkNDQtNTEyNWJiMTIzYTdhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGRhZTUyYTUtY2RiNy00MTVjLWFk NDQtNTEyNWJiMTIzYTdhL2RkYWU1MmE1LWNkYjctNDE1Yy1hZDQ0LTUxMjViYjEy M2E3YS5jcmwwHwYDVR0jBBgwFoAU8OMjUuuNKxXWUGX45vcgpyceMvowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZGFlNTJhNS1jZGI3LTQxNWMtYWQ0NC01MTI1 YmIxMjNhN2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBsH+kg4piv01sQVcjdw650 Z+Pfzww3tmyfA5pZnB2u93W2NL+rxtzICDgIdkWnjp6UChHrndehwooueEnKu4XA mcVDdgbKFd30XmkpSbvi3qbhGIoUnGxzQ+QCxuc1fsgRicgPBt6MoQ5ljxMBGQUt itv+GQuBCLsEdwJ5AoKxUhZHLaGcSADGsI9AITK06cXF5LaO45xyHoHM3Qwu3tv0 vhmzcaoKIra/intS3eOVtnj2H6+2waIBWlBqPqshTg5HL/xQjr3Z8nvJcVfeaa9V nUpGum6d2RDdbKtMcOWzNl/08dYBASePMSyxiJS5aiPbsVAPd/YgIAm+vBrYCUUB -----END CERTIFICATE-----Generated at Sun Apr 13 06:48:08 2025 by rpki-client