$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.mft File: 60af319e-0c74-40e2-b93c-daa51c45791e.mft (raw, json) Hash identifier: OMYyW7XZVSQ/+mKryszPkfUA6VTs52EiN1sVYEO8M8I= Subject key identifier: 59:E0:EE:E8:41:B6:58:C5:78:98:B9:A4:4C:F9:65:86:9F:39:CE:4B Authority key identifier: 11:7A:F7:77:29:9D:64:9C:CE:9C:56:4A:81:6C:42:D9:C9:5F:B3:40 Certificate issuer: /CN=60af319e-0c74-40e2-b93c-daa51c45791e Certificate serial: 010D0C9F432858496B0760662EDB7854627B3440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.mft Manifest number: 010D0C9F43285844FAD1DEDA63DD5B41DF68F72F Signing time: Fri 04 Apr 2025 21:00:07 +0000 Manifest this update: Fri 04 Apr 2025 21:00:07 +0000 Manifest next update: Sun 06 Apr 2025 21:00:00 +0000 Files and hashes: 1: 4df6fcae-809c-334c-948c-a1db49d80779.roa (hash: uynQV7wGw4CcY7pEfCdeJU6Td3uOv38eOE9zFObXz8Y=) 2: 5ae342a0-d05b-3afe-a3ba-c3dba3275f49.roa (hash: xdZKTUnu2Uf7UlYPD6ZM5ZnilqYpasLUKstGiQbGUcY=) 3: 60af319e-0c74-40e2-b93c-daa51c45791e.crl (hash: ssGdkqQJuVTRLB0/gp6h1Qy2nCrJ8opdK6V+IZRkoRA=) 4: 7241d360-8b98-3868-8cc3-308a2527d3e0.roa (hash: JMEYuC7wAJGwxhuuxcxpiWjyAFLAH5UxQPD5zMNNCj4=) 5: 81aa012f-28a9-395d-8dc8-8ff9a31db9e3.roa (hash: Uqj5lPFqLrIC9hdlxPCuJxbYjQ4yrv/rDM07oRgh2Wc=) 6: b9adabc2-fc08-39d4-aaca-584aaef77c91.roa (hash: aRRreCSeGZr0ri2KO98tcDmx5S1CTAr7kIjp6+YgBM8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6b:07:60:66:2e:db:78:54:62:7b:34:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60af319e-0c74-40e2-b93c-daa51c45791e Validity Not Before: Apr 4 21:00:07 2025 GMT Not After : Apr 6 21:00:00 2025 GMT Subject: CN=869ead67-c0c6-4a32-ac27-1ae5b40f9805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7f:10:6c:8e:58:ef:f3:b0:53:d8:06:2f:d0: b8:c7:a8:ca:73:85:3f:c7:2b:3f:ef:3e:26:27:8b: 69:e3:f1:d2:e2:f2:dc:bb:49:1d:6c:9f:a9:b8:8f: ec:99:5c:23:9c:80:08:c5:f8:c2:f7:8d:e1:44:ab: d6:80:90:e7:9c:18:01:fe:c0:52:41:4d:50:15:0a: f5:40:00:01:a0:bc:67:2a:99:97:3a:c6:45:33:4b: 95:11:24:6a:93:c1:2e:80:f8:f9:8b:99:ea:9e:3c: c0:14:3d:f1:a5:6d:bd:51:75:81:2a:6c:af:81:bd: 1f:1f:73:2d:11:28:2b:02:71:b2:90:fb:9f:2d:39: fc:28:81:2c:17:a4:bd:ac:88:9e:ea:cd:22:52:b1: 48:2a:e8:4d:b0:14:13:20:ae:ab:3d:da:d7:32:7d: 8b:54:28:bb:13:8a:18:bb:7a:ee:2f:e8:f5:c8:66: a3:f0:47:d9:f2:c6:45:62:e0:16:ae:c6:5e:7b:a3: df:70:dc:72:84:ec:aa:3b:03:2d:c9:84:9d:6d:bf: 38:74:ba:6b:ab:a7:61:be:25:a4:84:e0:72:91:60: 4c:5c:d1:d7:f1:5c:9c:4b:30:48:a5:6c:06:41:71: d3:c2:bc:20:db:d6:45:29:b1:ad:87:b1:f2:75:07: 17:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E0:EE:E8:41:B6:58:C5:78:98:B9:A4:4C:F9:65:86:9F:39:CE:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.crl X509v3 Authority Key Identifier: keyid:11:7A:F7:77:29:9D:64:9C:CE:9C:56:4A:81:6C:42:D9:C9:5F:B3:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:5a:d0:0b:e8:15:4c:92:cd:2d:49:84:de:7e:76:68:99:93: 1d:13:10:c6:31:53:6a:0d:ae:b7:a9:55:0b:2b:b5:13:de:84: 7b:33:8f:8a:e5:a2:ee:a9:f7:e7:ca:be:46:8a:3a:93:ab:a0: 61:32:38:77:f3:24:0b:0a:a5:bf:eb:3b:f6:2c:03:f9:c5:fb: ef:33:a7:1d:6d:98:91:c4:af:2a:09:2d:b8:e1:10:42:65:e3: 83:40:2c:e0:d2:2c:b4:55:98:e3:a8:e0:77:82:fa:e4:36:ab: 68:1e:99:9a:03:fb:8c:ab:a4:3b:59:5c:03:4c:96:6c:2a:81: 29:9b:c1:8c:dc:85:de:9b:6a:14:87:cc:98:c0:b6:12:ae:09: dc:f3:f9:53:e6:f2:9d:a6:04:30:68:fd:79:bc:b3:23:8c:c8: e3:cc:81:b4:1d:8f:4f:07:72:c6:ca:8e:ec:1c:92:1c:9b:74: 58:96:de:a7:1a:16:05:9b:a1:3c:89:aa:07:5e:56:fa:58:5d: 32:9a:51:63:99:12:a4:14:25:14:61:62:7f:72:e2:22:ef:63: 70:82:8b:5c:09:70:4a:51:47:b0:82:24:69:94:97:61:9a:30: bd:f4:bc:c1:42:d4:3f:6f:6e:3e:bb:50:62:04:25:40:d0:17: 27:9c:08:45 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWElrB2BmLtt4VGJ7NEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBhZjMxOWUtMGM3NC00MGUyLWI5M2MtZGFhNTFjNDU3 OTFlMB4XDTI1MDQwNDIxMDAwN1oXDTI1MDQwNjIxMDAwMFowLzEtMCsGA1UEAxMk ODY5ZWFkNjctYzBjNi00YTMyLWFjMjctMWFlNWI0MGY5ODA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo38QbI5Y7/OwU9gGL9C4x6jKc4U/xys/7z4m J4tp4/HS4vLcu0kdbJ+puI/smVwjnIAIxfjC943hRKvWgJDnnBgB/sBSQU1QFQr1 QAABoLxnKpmXOsZFM0uVESRqk8EugPj5i5nqnjzAFD3xpW29UXWBKmyvgb0fH3Mt ESgrAnGykPufLTn8KIEsF6S9rIie6s0iUrFIKuhNsBQTIK6rPdrXMn2LVCi7E4oY u3ruL+j1yGaj8EfZ8sZFYuAWrsZee6PfcNxyhOyqOwMtyYSdbb84dLprq6dhviWk hOBykWBMXNHX8VycSzBIpWwGQXHTwrwg29ZFKbGth7HydQcXPwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFng7uhBtljFeJi5pEz5ZYafOc5LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82MGFm MzE5ZS0wYzc0LTQwZTItYjkzYy1kYWE1MWM0NTc5MWUvNjBhZjMxOWUtMGM3NC00 MGUyLWI5M2MtZGFhNTFjNDU3OTFlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjBhZjMxOWUtMGM3NC00MGUyLWI5 M2MtZGFhNTFjNDU3OTFlLzYwYWYzMTllLTBjNzQtNDBlMi1iOTNjLWRhYTUxYzQ1 NzkxZS5jcmwwHwYDVR0jBBgwFoAUEXr3dymdZJzOnFZKgWxC2clfs0AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82MGFmMzE5ZS0wYzc0LTQwZTItYjkzYy1kYWE1 MWM0NTc5MWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQApWtAL6BVMks0tSYTefnZo mZMdExDGMVNqDa63qVULK7UT3oR7M4+K5aLuqffnyr5GijqTq6BhMjh38yQLCqW/ 6zv2LAP5xfvvM6cdbZiRxK8qCS244RBCZeODQCzg0iy0VZjjqOB3gvrkNqtoHpma A/uMq6Q7WVwDTJZsKoEpm8GM3IXem2oUh8yYwLYSrgnc8/lT5vKdpgQwaP15vLMj jMjjzIG0HY9PB3LGyo7sHJIcm3RYlt6nGhYFm6E8iaoHXlb6WF0ymlFjmRKkFCUU YWJ/cuIi72NwgotcCXBKUUewgiRplJdhmjC99LzBQtQ/b24+u1BiBCVA0BcnnAhF -----END CERTIFICATE-----Generated at Sat Apr 5 04:36:34 2025 by rpki-client