$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.mft File: 7f900e4e-5f0a-4b14-98c0-6647bff5e64e.mft (raw, json) Hash identifier: 41p23Tsk9aGC+K2bRrCQYGOjt4YTHxC92BycUMyynws= Subject key identifier: 1C:F5:51:06:6C:E9:FB:B3:03:0E:2D:B9:C3:10:8A:80:CB:F6:96:87 Authority key identifier: F3:E5:8A:D2:B8:EF:87:D7:3E:80:88:32:FE:7B:A3:A3:0B:F5:C4:A0 Certificate issuer: /CN=7f900e4e-5f0a-4b14-98c0-6647bff5e64e Certificate serial: 010D0C9F432858497FF781FE78A21FCE08F61200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.mft Manifest number: 010D0C9F4328584073A84C39376BC697A05F2EE8 Signing time: Sat 12 Apr 2025 09:00:07 +0000 Manifest this update: Sat 12 Apr 2025 09:00:07 +0000 Manifest next update: Mon 14 Apr 2025 09:00:00 +0000 Files and hashes: 1: 350e638e-f9b0-39e9-b359-52ea50ce6dd4.roa (hash: 3MPpTM+Ctf5htI4HkXve+cfSPhTcLNNRXVCaKG7d+aI=) 2: 693b043c-7dd0-3e66-9b30-96dc0a32abd1.roa (hash: chxH9JgNy8/u2dIMwC7BAj+x/+hmMf5Vn3xPk+ONp4U=) 3: 69c85a7e-5c7c-3cbc-8360-f4b315370081.roa (hash: 86J+KW/CetWgn1UAuxmrw037LYAd0X7zaOxR8r+XDEk=) 4: 7f900e4e-5f0a-4b14-98c0-6647bff5e64e.crl (hash: Bk4I+xhJxJM2woyS20iaSGNmXyGdMDyK2n6m94Ezc80=) 5: 900974d7-8989-307f-a8dd-f27fbe573f09.roa (hash: D28WxPx0DbSnGKOPeOxO/2tFB3XyiiAT7q1dstR9G2k=) 6: d3d52428-3366-3940-ba48-6c79fec227e0.roa (hash: XoNT6OeDS2d5cJxcoX2Imx4XbB4LMNRhT7CzbaqUm6o=) 7: e7103f53-8715-3d60-9b51-c7bb1d74637b.roa (hash: GjAiwuaf/Qz3g5riszTVMweKsa0FhCyHcQiajGD+Jd0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7f:f7:81:fe:78:a2:1f:ce:08:f6:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f900e4e-5f0a-4b14-98c0-6647bff5e64e Validity Not Before: Apr 12 09:00:07 2025 GMT Not After : Apr 14 09:00:00 2025 GMT Subject: CN=a95ae3e6-076a-4875-9071-a23a0ce35f8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4f:9d:55:b4:b0:39:74:69:69:80:5f:dd:5b: 49:6c:8b:bf:5c:88:50:b1:53:a9:04:f1:ac:c6:73: 25:47:9c:d0:d4:d3:18:42:39:16:d1:dd:63:b9:73: c4:56:81:e3:10:c4:e7:f0:16:c3:ff:16:ce:b7:40: 3c:ef:4a:3b:de:cf:60:fa:b6:ce:bc:34:41:e1:74: c0:55:a7:0d:9a:66:ad:d6:1a:6d:ad:b9:75:55:3b: 5a:d4:63:66:0e:ec:c7:df:e3:20:ab:8a:d2:d7:74: f3:1e:db:aa:42:5b:fa:e4:f0:ac:f3:af:b0:70:aa: d8:8b:8a:00:0d:b1:be:ec:f0:e5:36:7d:79:0e:d9: f9:8d:0c:03:d8:a2:61:46:e2:d5:05:e2:63:c8:8e: 6c:ca:46:63:d7:5c:ab:31:14:a4:c3:8f:4d:d9:82: e5:e5:39:8e:dd:17:a2:f7:39:23:7e:30:9b:9c:27: 67:b0:a1:03:f7:48:97:8d:cc:8e:ee:21:db:b8:a5: 9f:f2:ae:fa:84:0a:35:6d:2a:e1:ac:0d:80:43:40: 7f:cf:01:44:5c:8c:a4:49:81:9a:ef:cf:fa:5a:d7: ce:dc:24:a4:94:c0:a5:67:ed:7f:02:68:81:31:e7: ee:0d:bb:9f:25:6e:c9:0f:e0:2a:50:c2:1d:d9:35: f8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F5:51:06:6C:E9:FB:B3:03:0E:2D:B9:C3:10:8A:80:CB:F6:96:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.crl X509v3 Authority Key Identifier: keyid:F3:E5:8A:D2:B8:EF:87:D7:3E:80:88:32:FE:7B:A3:A3:0B:F5:C4:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:15:c4:ba:c0:e2:24:87:2c:6d:fb:0a:ca:bc:46:fc:46:b4: 07:9d:3a:66:bf:12:39:18:8d:36:88:68:f7:1a:fa:6d:48:60: d1:21:65:6e:d3:61:9e:7c:23:e7:ab:eb:73:62:ee:ad:64:1a: 83:cb:f9:f3:bf:a2:ee:b8:f3:ab:c5:1f:e5:8f:22:6b:b5:b2: a3:72:66:54:5f:cb:20:d1:e5:cd:7a:3c:bb:cb:64:fa:56:dd: 69:bf:a6:16:26:a1:cc:b2:71:71:1c:47:f3:a6:19:aa:93:31: da:76:08:b6:44:54:7d:47:24:b4:e1:57:a4:f2:3a:18:27:74: 3a:c1:15:5f:54:83:d3:da:b4:b2:c2:6b:3f:62:36:47:9c:ad: b5:5c:f7:b5:a5:78:6d:c6:b1:70:3b:fd:5c:2a:3d:f1:0e:be: fe:b4:ec:da:07:84:0e:e4:80:6f:4f:b5:a7:a3:ce:a2:7b:a0: 8c:e5:db:dd:a1:64:96:32:df:b4:d8:b1:d2:bb:d6:6e:70:10: 83:18:3b:49:34:d3:fa:2f:bc:c2:d0:54:56:43:f6:81:df:d7: f1:04:e7:ce:77:df:42:e2:94:7b:f2:07:ae:ae:38:40:b0:e8: 2b:f7:3e:bf:a5:87:75:f3:80:a8:2c:7b:e2:59:c8:f6:f6:be: a2:91:9a:ae -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl/94H+eKIfzgj2EgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Y5MDBlNGUtNWYwYS00YjE0LTk4YzAtNjY0N2JmZjVl NjRlMB4XDTI1MDQxMjA5MDAwN1oXDTI1MDQxNDA5MDAwMFowLzEtMCsGA1UEAxMk YTk1YWUzZTYtMDc2YS00ODc1LTkwNzEtYTIzYTBjZTM1ZjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0+dVbSwOXRpaYBf3VtJbIu/XIhQsVOpBPGs xnMlR5zQ1NMYQjkW0d1juXPEVoHjEMTn8BbD/xbOt0A870o73s9g+rbOvDRB4XTA VacNmmat1hptrbl1VTta1GNmDuzH3+Mgq4rS13TzHtuqQlv65PCs86+wcKrYi4oA DbG+7PDlNn15Dtn5jQwD2KJhRuLVBeJjyI5sykZj11yrMRSkw49N2YLl5TmO3Rei 9zkjfjCbnCdnsKED90iXjcyO7iHbuKWf8q76hAo1bSrhrA2AQ0B/zwFEXIykSYGa 78/6WtfO3CSklMClZ+1/AmiBMefuDbufJW7JD+AqUMId2TX4ZQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBz1UQZs6fuzAw4tucMQioDL9paHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83Zjkw MGU0ZS01ZjBhLTRiMTQtOThjMC02NjQ3YmZmNWU2NGUvN2Y5MDBlNGUtNWYwYS00 YjE0LTk4YzAtNjY0N2JmZjVlNjRlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2Y5MDBlNGUtNWYwYS00YjE0LTk4 YzAtNjY0N2JmZjVlNjRlLzdmOTAwZTRlLTVmMGEtNGIxNC05OGMwLTY2NDdiZmY1 ZTY0ZS5jcmwwHwYDVR0jBBgwFoAU8+WK0rjvh9c+gIgy/nujowv1xKAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZjkwMGU0ZS01ZjBhLTRiMTQtOThjMC02NjQ3 YmZmNWU2NGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA7FcS6wOIkhyxt+wrKvEb8 RrQHnTpmvxI5GI02iGj3GvptSGDRIWVu02GefCPnq+tzYu6tZBqDy/nzv6LuuPOr xR/ljyJrtbKjcmZUX8sg0eXNejy7y2T6Vt1pv6YWJqHMsnFxHEfzphmqkzHadgi2 RFR9RyS04Vek8joYJ3Q6wRVfVIPT2rSywms/YjZHnK21XPe1pXhtxrFwO/1cKj3x Dr7+tOzaB4QO5IBvT7Wno86ie6CM5dvdoWSWMt+02LHSu9ZucBCDGDtJNNP6L7zC 0FRWQ/aB39fxBOfOd99C4pR78geurjhAsOgr9z6/pYd184CoLHviWcj29r6ikZqu -----END CERTIFICATE-----Generated at Sat Apr 12 17:24:31 2025 by rpki-client