$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.mft File: 40d03225-c5b6-47c4-9f4e-7de1d16d554f.mft (raw, json) Hash identifier: wWkZefS8DL3zgHGmue+c9Z+muHjxtUPuL0P1qgU4Ysc= Subject key identifier: 68:EC:43:9D:2F:16:BC:31:0F:94:9E:DA:3A:CB:51:CE:81:E0:3E:37 Authority key identifier: E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13 Certificate issuer: /CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f Certificate serial: 010D0C9F432858497F80588E34D4B85E868C4E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.mft Manifest number: 010D0C9F4328584073A83E277B757F6097E08D92 Signing time: Sat 12 Apr 2025 05:00:03 +0000 Manifest this update: Sat 12 Apr 2025 05:00:03 +0000 Manifest next update: Mon 14 Apr 2025 05:00:00 +0000 Files and hashes: 1: 2c733a41-1d85-3fff-a8e9-5ef96865182f.roa (hash: gajByCXQza3MXtFf8dD/9/82ODLqNTYilneOZtHhetE=) 2: 2ce662e8-1e6c-3b7f-98c6-5f1164f4dd22.roa (hash: yqugbA+lBMUC048SGrEnMLM5i3xx4AHDGx50s1F/qsQ=) 3: 40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl (hash: 7G8i1M2YrVWxAyU9HxWtMfbWRisB2yOEW6LdR4MaFKg=) 4: 549312e1-41dd-30a1-8037-c87eabd4988f.roa (hash: SHVCMIo5sWBxBSjR1FoaDoQb02lhC4Bx6Nk9zcXPEcY=) 5: ba9c5d06-13d1-3ff7-9d30-951a9b14cd98.roa (hash: NnUgoRTphrGUioP0/y1NeCJ2gANX6SDoEfFIXpTNtiI=) 6: e4c840a6-7c44-37cd-8d84-325c36434df5.roa (hash: byN7zWrFh6Y/0EoqQuXZJ/j/wfv36eiZnYaPBxJT01k=) 7: ea556a40-a873-3ed9-aa90-580d0a9fa927.roa (hash: AxfEHCuFV7estvND7AsD0K2U9ddXkbu4bdkjN2/DLws=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7f:80:58:8e:34:d4:b8:5e:86:8c:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f Validity Not Before: Apr 12 05:00:03 2025 GMT Not After : Apr 14 05:00:00 2025 GMT Subject: CN=023c6696-8d17-43c3-ac8f-7c2e5d979aa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c8:8c:57:7d:50:3a:49:73:63:88:13:27:dc: 9d:02:46:a7:ae:a0:31:36:61:e0:a8:d5:64:c7:be: 8c:ed:48:1e:b4:d5:76:7a:ac:aa:67:e4:03:c0:f3: 8c:a1:57:2c:d7:29:0c:60:ee:3e:ad:12:13:51:35: 2e:f6:b6:5a:93:48:1d:4b:e5:cd:76:a3:0d:94:92: 7c:a1:94:52:df:af:76:95:9d:74:ea:3b:c1:41:e0: 7b:9b:06:84:32:9e:85:23:e9:97:f6:55:54:96:df: 3d:8e:47:09:7e:d1:6c:e2:72:eb:3f:f0:c1:b8:1d: f5:34:b0:b2:01:96:52:44:34:41:c6:4e:4a:68:9f: 44:ca:ac:54:8c:2a:b2:87:b8:76:f2:8a:c5:55:84: 03:ce:4d:55:21:53:3a:4f:23:07:27:19:ed:50:55: 44:a7:f8:c6:30:96:1a:3e:55:2f:18:59:4d:46:77: ec:a7:11:25:5c:ff:e7:cc:3a:f8:a9:13:9c:3c:96: 12:d8:30:b6:14:a9:9e:9d:1b:89:17:fc:31:5d:e4: 78:57:67:b2:a2:27:6e:36:93:25:1c:1f:ae:77:ff: 09:f5:cb:72:ae:c0:02:5e:f4:0c:e7:bc:b8:56:19: fc:09:6d:34:03:a0:5e:72:7f:5d:81:f6:d0:ad:11: 49:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:EC:43:9D:2F:16:BC:31:0F:94:9E:DA:3A:CB:51:CE:81:E0:3E:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl X509v3 Authority Key Identifier: keyid:E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:cf:36:01:fd:a3:24:3e:74:67:09:c7:e3:12:06:dd:92:40: 11:66:6c:f6:59:21:33:8b:ff:4b:21:49:6c:bc:5d:c0:64:b1: d1:78:f3:bd:e6:01:31:8d:2e:cb:ad:06:eb:72:b3:be:5a:93: 7a:e5:f9:b8:76:b4:27:ff:cc:2f:a3:09:09:25:af:91:4f:0b: e8:c8:4f:6b:1f:78:4a:ef:7a:05:e3:80:40:29:09:38:61:9d: 7a:99:7e:4f:b9:4a:1d:27:13:f5:82:6c:be:70:9c:22:cb:96: 80:eb:ff:78:3b:e5:67:91:ac:07:03:83:82:ef:1e:fc:a5:2d: 6f:75:56:dc:89:f0:e3:7d:a5:d9:19:4c:4f:e1:0d:a1:96:4e: be:c5:27:e9:14:d2:3c:fd:f3:19:8b:9f:91:ac:a5:34:42:51: 8e:e3:b1:82:96:93:93:f2:41:40:6f:6a:41:92:d6:c6:8e:e0: 65:46:68:a7:10:d1:52:bb:68:38:eb:0c:54:4b:08:52:10:83: ce:c7:56:c4:f9:00:f6:b5:f7:38:fc:23:6c:d0:fd:fc:f8:21: 6a:48:e9:8e:2e:82:d4:9a:cb:69:88:86:7f:4a:9d:07:2d:12: 21:c8:d4:2b:61:c1:33:3a:3b:ab:8f:12:70:96:bf:93:61:50: 2c:1f:48:7c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl/gFiONNS4XoaMTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBkMDMyMjUtYzViNi00N2M0LTlmNGUtN2RlMWQxNmQ1 NTRmMB4XDTI1MDQxMjA1MDAwM1oXDTI1MDQxNDA1MDAwMFowLzEtMCsGA1UEAxMk MDIzYzY2OTYtOGQxNy00M2MzLWFjOGYtN2MyZTVkOTc5YWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6siMV31QOklzY4gTJ9ydAkanrqAxNmHgqNVk x76M7UgetNV2eqyqZ+QDwPOMoVcs1ykMYO4+rRITUTUu9rZak0gdS+XNdqMNlJJ8 oZRS3692lZ106jvBQeB7mwaEMp6FI+mX9lVUlt89jkcJftFs4nLrP/DBuB31NLCy AZZSRDRBxk5KaJ9EyqxUjCqyh7h28orFVYQDzk1VIVM6TyMHJxntUFVEp/jGMJYa PlUvGFlNRnfspxElXP/nzDr4qROcPJYS2DC2FKmenRuJF/wxXeR4V2eyoiduNpMl HB+ud/8J9ctyrsACXvQM57y4Vhn8CW00A6Becn9dgfbQrRFJOQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGjsQ50vFrwxD5Se2jrLUc6B4D43MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQw MzIyNS1jNWI2LTQ3YzQtOWY0ZS03ZGUxZDE2ZDU1NGYvNDBkMDMyMjUtYzViNi00 N2M0LTlmNGUtN2RlMWQxNmQ1NTRmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDBkMDMyMjUtYzViNi00N2M0LTlm NGUtN2RlMWQxNmQ1NTRmLzQwZDAzMjI1LWM1YjYtNDdjNC05ZjRlLTdkZTFkMTZk NTU0Zi5jcmwwHwYDVR0jBBgwFoAU6DRhhWrT1VHbhGXdoM02Pj/ijxMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQwMzIyNS1jNWI2LTQ3YzQtOWY0ZS03ZGUx ZDE2ZDU1NGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBozzYB/aMkPnRnCcfjEgbd kkARZmz2WSEzi/9LIUlsvF3AZLHRePO95gExjS7LrQbrcrO+WpN65fm4drQn/8wv owkJJa+RTwvoyE9rH3hK73oF44BAKQk4YZ16mX5PuUodJxP1gmy+cJwiy5aA6/94 O+VnkawHA4OC7x78pS1vdVbcifDjfaXZGUxP4Q2hlk6+xSfpFNI8/fMZi5+RrKU0 QlGO47GClpOT8kFAb2pBktbGjuBlRminENFSu2g46wxUSwhSEIPOx1bE+QD2tfc4 /CNs0P38+CFqSOmOLoLUmstpiIZ/Sp0HLRIhyNQrYcEzOjurjxJwlr+TYVAsH0h8 -----END CERTIFICATE-----Generated at Sat Apr 12 13:35:08 2025 by rpki-client