$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.mft File: b35fc23a-e422-4c61-a25a-b73b0963b6f7.mft (raw, json) Hash identifier: rBxL/UbJTgmvYSjjI8se5SPydSxmQ+xL4QmNk5RjIZ4= Subject key identifier: 64:8C:9F:4A:08:8A:60:C3:22:1E:BC:05:E9:2E:82:F8:F0:55:90:1F Authority key identifier: 8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE Certificate issuer: /CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7 Certificate serial: 010D0C9F432858496895FB400BFFC26A525FF100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.mft Manifest number: 010D0C9F43285844998427B86FB83ED25ABB14F2 Signing time: Fri 04 Apr 2025 00:00:03 +0000 Manifest this update: Fri 04 Apr 2025 00:00:03 +0000 Manifest next update: Sun 06 Apr 2025 00:00:00 +0000 Files and hashes: 1: 1bc87842-5d25-3a72-85e2-db4dcde05f2f.roa (hash: 3+hOcY1cgBgL77Y63dGSNUmUkTvavLjkIxcnXCS2jaQ=) 2: 26125667-09fc-3849-ad03-b3300d2580a2.roa (hash: /J7z4F98hmCi+eLvmB7/keIqh3ms/vam6iwnTQKojTU=) 3: 4d1f008f-67a9-308d-9f82-30e56f078c23.roa (hash: IYpacZTUhKE8KsbQRn6t7IRprX2Mu6i0Ke9NXPP9I+c=) 4: 8739209d-0492-3814-9eef-35e5f7d13167.roa (hash: vGdxx0uhPkqndahWexNZbtl4IcUuwHtNrW29I25YPb4=) 5: aebdf556-2f6a-3251-b1c2-5b9e20c527e2.roa (hash: MXup2tMmBs+7NB/8QubpeHqMUMiDXrSKjCZWhDVFKck=) 6: b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl (hash: X7Liqe1kQzTcqJ4NMRqVJQ+ZGO7jkijDxlBSmo4/fe4=) 7: d68b1747-8766-30c7-9761-0368f3106f64.roa (hash: MJZMlAc1Gle1jbwu/Bv4cHeyJr4GpsxNXQUC3XCycMM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:68:95:fb:40:0b:ff:c2:6a:52:5f:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7 Validity Not Before: Apr 4 00:00:03 2025 GMT Not After : Apr 6 00:00:00 2025 GMT Subject: CN=41bc2ee2-5ee4-4b78-9e96-4c50c7f62bfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4d:4f:73:5d:69:bd:9e:0f:4a:60:92:e7:ec: 6c:8d:ce:73:ea:84:a0:43:86:4e:88:26:cb:dc:f1: f6:6e:37:10:32:44:d5:05:5a:31:e2:b1:09:93:55: 33:f1:5b:46:6e:97:46:0d:c3:66:6f:b6:76:da:9a: a1:dc:a1:25:9d:86:20:9a:dd:d0:c9:35:91:69:a8: 90:ca:8f:5b:03:1f:50:3d:e2:cf:58:78:c0:20:ef: d8:1f:e3:51:39:d9:fd:3b:c7:11:23:3e:a2:4f:40: 7e:4a:c5:67:5d:92:d9:22:41:0d:50:9a:aa:ec:0c: 2f:6f:d0:5c:e9:de:83:ef:c5:57:1f:8f:31:df:e1: aa:44:4d:bc:c3:77:11:80:82:a4:e8:48:69:20:85: 8f:b1:ae:2b:9c:5e:dc:74:47:81:22:3b:30:5a:08: 37:a6:0a:a8:a8:4d:b1:a2:0e:85:f5:f9:5d:95:35: 55:fd:0f:c2:98:84:d3:98:4e:b1:3f:4e:b0:23:bc: 67:30:f6:11:31:30:25:da:35:d0:8c:79:42:30:22: 53:ea:f9:b3:b1:e4:d2:d2:a0:b7:cf:a5:e4:ae:49: b7:a5:0a:fa:4d:d6:05:9d:d2:63:23:cf:11:9d:13: 85:27:bb:b9:f3:b5:8e:cd:d2:70:da:c6:8f:cc:c8: 4d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:8C:9F:4A:08:8A:60:C3:22:1E:BC:05:E9:2E:82:F8:F0:55:90:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl X509v3 Authority Key Identifier: keyid:8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:b6:50:e2:94:49:d9:85:a7:12:0b:0f:04:b5:35:80:fa:6a: 5d:41:ca:59:a5:97:ae:ef:2e:66:72:ea:38:3a:5e:2d:e9:e9: 45:c6:f5:2f:43:22:d1:f1:f6:85:2a:56:ee:c1:eb:52:2b:fe: ba:30:aa:30:83:c1:9e:c7:44:d4:c6:e2:7b:3c:26:92:f0:b4: 44:51:e8:57:a4:5c:2f:99:8e:ea:ad:75:04:5d:00:c0:b8:da: 99:be:ed:1a:56:72:5d:04:4f:11:19:ed:fe:a4:05:be:3e:4d: e2:75:46:72:f7:2b:ac:4e:a9:56:49:bf:04:07:a7:96:51:9a: 3a:10:0a:a9:dd:d1:74:c2:5d:a5:f2:bb:83:c9:83:a4:b1:b5: b3:8c:9c:2c:52:10:21:1f:b6:09:f0:6a:c8:0d:a3:a6:50:d8: f4:17:c8:1f:a0:64:32:85:c6:f3:c5:aa:7a:40:4b:0d:2d:bc: 1f:ba:0a:5a:4a:40:c9:b5:90:96:6a:53:b4:1d:e9:5a:49:07: b1:ba:16:c3:10:6d:8a:04:b1:a6:51:34:c0:69:3e:fc:a9:bb: af:25:4e:6a:de:13:51:d5:61:0d:f0:a1:4d:11:76:09:07:2b: 5a:60:f1:13:d2:f3:19:6b:87:ef:bd:f5:8f:76:b1:1f:14:0f: 7a:56:96:21 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWElolftAC//CalJf8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM1ZmMyM2EtZTQyMi00YzYxLWEyNWEtYjczYjA5NjNi NmY3MB4XDTI1MDQwNDAwMDAwM1oXDTI1MDQwNjAwMDAwMFowLzEtMCsGA1UEAxMk NDFiYzJlZTItNWVlNC00Yjc4LTllOTYtNGM1MGM3ZjYyYmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjE1Pc11pvZ4PSmCS5+xsjc5z6oSgQ4ZOiCbL 3PH2bjcQMkTVBVox4rEJk1Uz8VtGbpdGDcNmb7Z22pqh3KElnYYgmt3QyTWRaaiQ yo9bAx9QPeLPWHjAIO/YH+NROdn9O8cRIz6iT0B+SsVnXZLZIkENUJqq7Awvb9Bc 6d6D78VXH48x3+GqRE28w3cRgIKk6EhpIIWPsa4rnF7cdEeBIjswWgg3pgqoqE2x og6F9fldlTVV/Q/CmITTmE6xP06wI7xnMPYRMTAl2jXQjHlCMCJT6vmzseTS0qC3 z6Xkrkm3pQr6TdYFndJjI88RnROFJ7u587WOzdJw2saPzMhN9QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGSMn0oIimDDIh68BekugvjwVZAfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMzVm YzIzYS1lNDIyLTRjNjEtYTI1YS1iNzNiMDk2M2I2ZjcvYjM1ZmMyM2EtZTQyMi00 YzYxLWEyNWEtYjczYjA5NjNiNmY3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjM1ZmMyM2EtZTQyMi00YzYxLWEy NWEtYjczYjA5NjNiNmY3L2IzNWZjMjNhLWU0MjItNGM2MS1hMjVhLWI3M2IwOTYz YjZmNy5jcmwwHwYDVR0jBBgwFoAUjS9eZJw3d6zMTnUYB7+cZ2lqHf4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iMzVmYzIzYS1lNDIyLTRjNjEtYTI1YS1iNzNi MDk2M2I2ZjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBntlDilEnZhacSCw8EtTWA +mpdQcpZpZeu7y5mcuo4Ol4t6elFxvUvQyLR8faFKlbuwetSK/66MKowg8Gex0TU xuJ7PCaS8LREUehXpFwvmY7qrXUEXQDAuNqZvu0aVnJdBE8RGe3+pAW+Pk3idUZy 9yusTqlWSb8EB6eWUZo6EAqp3dF0wl2l8ruDyYOksbWzjJwsUhAhH7YJ8GrIDaOm UNj0F8gfoGQyhcbzxap6QEsNLbwfugpaSkDJtZCWalO0HelaSQexuhbDEG2KBLGm UTTAaT78qbuvJU5q3hNR1WEN8KFNEXYJBytaYPET0vMZa4fvvfWPdrEfFA96VpYh -----END CERTIFICATE-----Generated at Fri Apr 4 18:52:08 2025 by rpki-client