$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8b355aa3-cf28-4a53-96c5-ddf3bb800418.mft File: 8b355aa3-cf28-4a53-96c5-ddf3bb800418.mft (raw, json) Hash identifier: Tk89qhDXjhJhdEBXsDQS7JSxL+bzu/OdJr7p3hY+qUs= Subject key identifier: 4D:3B:C1:C9:47:3C:6F:03:7A:3B:EF:58:79:38:4A:98:7E:8F:06:2D Authority key identifier: CB:52:A8:91:CC:74:8F:8E:32:A5:73:ED:0F:1A:83:CF:41:F5:24:78 Certificate issuer: /CN=8b355aa3-cf28-4a53-96c5-ddf3bb800418 Certificate serial: 010D0C9F432858496A54B231FF597E318542D200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8b355aa3-cf28-4a53-96c5-ddf3bb800418.mft Manifest number: 010D0C9F43285844877A803C815D64810A246ED2 Signing time: Fri 04 Apr 2025 15:00:07 +0000 Manifest this update: Fri 04 Apr 2025 15:00:07 +0000 Manifest next update: Mon 07 Apr 2025 15:00:00 +0000 Files and hashes: 1: 0fd8c82c-3db0-3fb0-8cf2-3522ad4acd9c.roa (hash: zzKKmqNEZXoaFe4HNZP7qDe+QIao5I+YbMR0j/kBHQo=) 2: 12ed2f8a-c88a-3b46-be5d-31bc70385456.roa (hash: CbekrlMvXusigeDz/myMvRfJV/sxTp0ZIprBjHOwS1k=) 3: 3e8b16bd-486a-3c7c-8cfa-c46c7a2eb3ab.roa (hash: qGyejkEIvFWSZThqbuwsUN9FZ10zMuH3bVil9QdYDe4=) 4: 806d23d8-c66d-37f4-8690-3d333fee3c39.roa (hash: x5o8tCaJG72l64+dwPZmnF3zL2QPw5Xf8U1lxEXeMRY=) 5: 836c14ca-62f6-301e-a6fd-849ce77331d5.roa (hash: rvjSSv9L6k5Zi4/wLdXHVG/A6yxk+4sloUdCuzxQG4E=) 6: 8b355aa3-cf28-4a53-96c5-ddf3bb800418.crl (hash: g94564pRGVpXb+lG0hpuX/5UO8SsOgduxxRZZNpbBZM=) 7: a112e6f1-5989-3baf-baab-bc4c1df7dd87.roa (hash: pbWjCZnlcftH1w+ie/pCv2GWnHyvL3ctozE3btnSs+o=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8b355aa3-cf28-4a53-96c5-ddf3bb800418.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8b355aa3-cf28-4a53-96c5-ddf3bb800418.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:54:b2:31:ff:59:7e:31:85:42:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b355aa3-cf28-4a53-96c5-ddf3bb800418 Validity Not Before: Apr 4 15:00:07 2025 GMT Not After : Apr 7 15:00:00 2025 GMT Subject: CN=1cc70fe2-d039-4ca9-8e94-313efffca656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:98:16:49:d0:47:df:0e:c8:76:29:38:00:b2: 28:86:72:3f:df:9e:d8:25:a4:23:db:e2:b2:12:45: 6d:4b:af:a9:bc:97:f1:a4:e4:d7:24:5c:df:3e:27: 41:fa:2c:26:06:6d:39:ce:d2:3a:c6:27:4f:cc:83: c8:37:03:c0:05:18:85:a4:6c:27:91:7e:3e:3d:d6: 66:76:ac:57:e2:42:0f:69:39:99:34:eb:3d:76:70: 37:09:7e:fb:24:f5:fa:11:94:c2:10:4f:2b:d6:3b: bd:5d:df:42:06:e1:74:a4:ce:a4:e5:21:56:c3:b6: f9:7c:b5:b1:ba:5a:9b:c7:7f:74:2f:17:90:bc:19: 77:88:50:73:5a:4f:63:c5:13:9a:09:1f:e2:e1:7c: 3f:4b:04:98:0e:92:87:b8:43:cb:52:cb:2f:26:a9: 3a:00:0c:e9:c0:3d:5c:5d:91:be:71:90:f2:be:03: c7:ae:07:76:2f:2e:3e:57:bf:1a:7f:58:a9:d8:d8: e1:77:9c:1f:66:ca:cd:26:43:98:e1:5e:a1:df:6c: 64:f3:22:8e:99:af:15:fa:e6:90:7d:55:30:bf:28: 2b:7f:5e:11:d6:f2:2f:3c:89:b9:a5:b4:26:44:ee: bc:9f:93:3b:89:19:50:1b:7c:5e:db:1a:6a:8e:9a: 19:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:3B:C1:C9:47:3C:6F:03:7A:3B:EF:58:79:38:4A:98:7E:8F:06:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8b355aa3-cf28-4a53-96c5-ddf3bb800418.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8b355aa3-cf28-4a53-96c5-ddf3bb800418.crl X509v3 Authority Key Identifier: keyid:CB:52:A8:91:CC:74:8F:8E:32:A5:73:ED:0F:1A:83:CF:41:F5:24:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:b4:03:e6:d9:a8:23:29:74:6b:8b:04:5c:42:f4:b8:b5:76: b4:65:b9:8f:f6:2d:a5:69:1b:a8:a8:d8:0d:60:45:50:57:24: 77:52:59:c0:4b:2c:d8:30:3e:f0:8b:bf:a3:31:c3:e9:b0:44: 67:12:f1:9f:fd:31:f0:be:7f:8c:d9:8e:f6:c6:3a:31:c0:cf: 23:37:92:70:e6:f6:41:28:24:2b:22:f6:bb:06:0b:1b:28:7b: dc:22:bf:25:da:8c:1b:09:53:7a:c1:78:0c:70:41:67:80:c5: 96:b0:4e:b9:99:4f:97:1f:77:4d:74:cb:15:88:36:21:1b:b1: a2:07:fe:32:64:c4:db:0d:44:0d:22:6a:75:3f:98:71:4e:35: 8b:19:a2:f4:16:f0:dc:50:ed:bd:36:25:47:e3:f1:36:0d:92: a7:c2:e5:4d:48:9a:4f:36:3d:73:a1:fd:ad:6f:79:3e:fa:9c: ae:f1:08:aa:1b:f0:1b:bd:d8:50:e1:f8:11:a6:b8:45:0a:03: e4:f5:ec:c1:9c:88:45:07:ee:e2:a5:fe:17:19:a8:a6:29:5c: 5e:ae:d2:42:eb:98:ff:ff:96:04:a9:8c:4b:f0:c1:3b:e4:a3: 76:9a:19:13:8d:63:3e:fd:f0:76:e8:23:d7:63:00:fd:6f:22: 66:9c:3c:b3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWElqVLIx/1l+MYVC0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGIzNTVhYTMtY2YyOC00YTUzLTk2YzUtZGRmM2JiODAw NDE4MB4XDTI1MDQwNDE1MDAwN1oXDTI1MDQwNzE1MDAwMFowLzEtMCsGA1UEAxMk MWNjNzBmZTItZDAzOS00Y2E5LThlOTQtMzEzZWZmZmNhNjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpgWSdBH3w7Idik4ALIohnI/357YJaQj2+Ky EkVtS6+pvJfxpOTXJFzfPidB+iwmBm05ztI6xidPzIPINwPABRiFpGwnkX4+PdZm dqxX4kIPaTmZNOs9dnA3CX77JPX6EZTCEE8r1ju9Xd9CBuF0pM6k5SFWw7b5fLWx ulqbx390LxeQvBl3iFBzWk9jxROaCR/i4Xw/SwSYDpKHuEPLUssvJqk6AAzpwD1c XZG+cZDyvgPHrgd2Ly4+V78af1ip2Njhd5wfZsrNJkOY4V6h32xk8yKOma8V+uaQ fVUwvygrf14R1vIvPIm5pbQmRO68n5M7iRlQG3xe2xpqjpoZcwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFE07wclHPG8DejvvWHk4Sph+jwYtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84YjM1 NWFhMy1jZjI4LTRhNTMtOTZjNS1kZGYzYmI4MDA0MTgvOGIzNTVhYTMtY2YyOC00 YTUzLTk2YzUtZGRmM2JiODAwNDE4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGIzNTVhYTMtY2YyOC00YTUzLTk2 YzUtZGRmM2JiODAwNDE4LzhiMzU1YWEzLWNmMjgtNGE1My05NmM1LWRkZjNiYjgw MDQxOC5jcmwwHwYDVR0jBBgwFoAUy1Kokcx0j44ypXPtDxqDz0H1JHgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84YjM1NWFhMy1jZjI4LTRhNTMtOTZjNS1kZGYz YmI4MDA0MTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA8tAPm2agjKXRriwRcQvS4 tXa0ZbmP9i2laRuoqNgNYEVQVyR3UlnASyzYMD7wi7+jMcPpsERnEvGf/THwvn+M 2Y72xjoxwM8jN5Jw5vZBKCQrIva7BgsbKHvcIr8l2owbCVN6wXgMcEFngMWWsE65 mU+XH3dNdMsViDYhG7GiB/4yZMTbDUQNImp1P5hxTjWLGaL0FvDcUO29NiVH4/E2 DZKnwuVNSJpPNj1zof2tb3k++pyu8QiqG/AbvdhQ4fgRprhFCgPk9ezBnIhFB+7i pf4XGaimKVxertJC65j//5YEqYxL8ME75KN2mhkTjWM+/fB26CPXYwD9byJmnDyz -----END CERTIFICATE-----Generated at Fri Apr 4 18:53:50 2025 by rpki-client