$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.mft File: 8322c61d-99cf-48fc-b867-b2c2cce4d324.mft (raw, json) Hash identifier: zrtyXCX0embo0b3NCfGFK1VIgQ4TyireQKoGvSgp9k8= Subject key identifier: 30:A1:E3:AA:6C:28:74:20:F1:5E:9C:04:C2:A9:30:36:81:9F:A5:44 Authority key identifier: 23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA Certificate issuer: /CN=8322c61d-99cf-48fc-b867-b2c2cce4d324 Certificate serial: 010D0C9F432858496B7E7330A0F50316915811F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.mft Manifest number: 010D0C9F4328584073A834B047174291E7698AF2 Signing time: Sat 05 Apr 2025 01:00:03 +0000 Manifest this update: Sat 05 Apr 2025 01:00:03 +0000 Manifest next update: Tue 08 Apr 2025 01:00:00 +0000 Files and hashes: 1: 12121739-ba19-3a49-a1ce-88a3e9cad17f.roa (hash: COMZbA0VOU9okzYgVge8pqZXk5CvGbAz5NzHxUG1KRc=) 2: 34ce1e22-d80b-3394-974b-ed5e2ba8c51d.roa (hash: L+AbanZvrS53mqPBqAwqG5Mch8ZGjj3NkpjSOCo03fg=) 3: 36bdb9f6-a9aa-3c34-b7fc-b79ba39abbb5.roa (hash: rxSY4kmaxlOnnJusGcEUP9BxJwVLW8osKR3d9ZdlOuo=) 4: 3a41c66c-7e29-38fb-9f24-8df2f5fd953f.roa (hash: 7SDNmDIGq3sIxjbGc56Z52gIZd6A3jEDfOxBRhhdjJ8=) 5: 8322c61d-99cf-48fc-b867-b2c2cce4d324.crl (hash: loqiUFWAEUBN96Qx0b22dA1VcebVJg5jtZyPvYrqjgI=) 6: dfe95880-e08c-3c88-ba0f-676ebf56bd93.roa (hash: JaqSYuxdAYTolN1RUkgS/6cbjgGDKkMq8Q60I5j1LWw=) 7: f51b59c2-dbdd-3e38-9a36-408bdbdd9594.roa (hash: Vs4SUNO6kcAKyuyIzfVGAYVOmKZOhMvOWNEjUjb8ByU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6b:7e:73:30:a0:f5:03:16:91:58:11:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8322c61d-99cf-48fc-b867-b2c2cce4d324 Validity Not Before: Apr 5 01:00:03 2025 GMT Not After : Apr 8 01:00:00 2025 GMT Subject: CN=e04c5ad3-2f84-4250-8bd9-f428ca53e923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ed:33:c2:d8:6d:d4:b2:25:42:e6:44:89:e0: 22:e0:e9:af:11:c3:15:49:05:ce:a7:96:b7:e8:80: 29:e1:60:05:c1:73:4f:30:63:2c:a3:db:b5:f8:ef: 10:62:63:f6:dd:eb:77:c8:73:5a:f7:cc:3c:51:dd: d8:32:02:52:3b:ab:c2:e3:11:18:7e:59:73:81:b5: bc:40:c8:64:02:f8:c3:5b:e3:19:72:84:4f:6b:c3: 01:76:44:67:67:8f:ea:7f:2d:eb:86:cf:f5:bc:45: 5c:89:67:b1:d2:d5:63:6c:52:5c:fe:1e:a6:aa:ae: 1c:98:b8:74:e3:5e:4f:19:95:a4:1e:1b:32:6e:28: 84:c7:52:74:14:fe:8f:68:a7:e5:d5:6a:82:b6:c3: e3:fe:ff:37:85:71:d3:da:62:58:c2:cb:bd:f5:b6: 05:d4:9e:58:1d:cf:87:21:0e:5f:74:25:03:34:89: 90:2a:d6:aa:f3:a7:fb:13:e1:7f:5c:ca:ce:56:e2: 39:e2:24:70:93:1f:11:e2:da:d4:6c:4d:d4:7b:4d: 94:c9:96:4b:5d:72:26:42:8d:c7:fc:17:28:1d:a8: 05:29:7d:f3:d7:aa:37:55:85:23:42:8d:4b:7b:71: 9f:1e:26:2e:c9:e5:62:4a:4f:74:c0:b6:4e:bd:e4: e2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A1:E3:AA:6C:28:74:20:F1:5E:9C:04:C2:A9:30:36:81:9F:A5:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl X509v3 Authority Key Identifier: keyid:23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:c5:d9:d7:49:55:5d:eb:05:ea:fc:bb:5d:f5:38:de:f8:1d: c5:95:da:b6:49:15:a8:0a:81:6c:7d:f5:bd:d3:33:1d:8b:b1: 3f:63:ab:82:9e:e9:ab:69:97:16:a4:ba:bc:5a:89:b1:a1:80: 4f:f6:5e:55:87:c4:e4:51:9e:6d:c6:96:71:ce:27:60:c1:bc: b7:fb:c5:3e:ce:31:58:02:ae:5d:69:57:b9:f7:6b:ea:cd:e4: c0:99:96:c7:ab:44:0d:de:ed:bb:0c:a6:b7:16:db:b8:f4:19: 64:ec:ca:c9:b5:22:22:28:d1:85:e8:ed:89:2c:d8:df:cc:f4: 8d:50:88:4c:cd:d5:a2:e9:59:7a:06:2a:4c:47:af:55:a6:59: a8:cd:18:f6:5d:b1:9d:3e:21:84:f9:6f:3d:ce:4f:7f:28:67: 3e:25:cd:37:33:ee:7b:6d:06:be:5e:47:98:2a:b1:81:5e:65: 30:56:d4:5a:c3:06:93:c7:ba:a7:72:fa:62:ed:23:32:d7:11: 4b:33:a1:a3:d9:f0:ad:21:25:80:5c:7c:d1:7e:71:0b:44:d3: a5:ea:1c:6c:6d:3a:56:df:81:4d:10:66:50:28:77:c0:fd:59: 3d:84:38:38:1e:22:cb:85:86:2c:49:00:c8:8d:75:ad:69:73: 17:4e:f3:99 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWElrfnMwoPUDFpFYEfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMyMmM2MWQtOTljZi00OGZjLWI4NjctYjJjMmNjZTRk MzI0MB4XDTI1MDQwNTAxMDAwM1oXDTI1MDQwODAxMDAwMFowLzEtMCsGA1UEAxMk ZTA0YzVhZDMtMmY4NC00MjUwLThiZDktZjQyOGNhNTNlOTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2e0zwtht1LIlQuZEieAi4OmvEcMVSQXOp5a3 6IAp4WAFwXNPMGMso9u1+O8QYmP23et3yHNa98w8Ud3YMgJSO6vC4xEYfllzgbW8 QMhkAvjDW+MZcoRPa8MBdkRnZ4/qfy3rhs/1vEVciWex0tVjbFJc/h6mqq4cmLh0 415PGZWkHhsybiiEx1J0FP6PaKfl1WqCtsPj/v83hXHT2mJYwsu99bYF1J5YHc+H IQ5fdCUDNImQKtaq86f7E+F/XMrOVuI54iRwkx8R4trUbE3Ue02UyZZLXXImQo3H /BcoHagFKX3z16o3VYUjQo1Le3GfHiYuyeViSk90wLZOveTitQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDCh46psKHQg8V6cBMKpMDaBn6VEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MzIy YzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMyY2NlNGQzMjQvODMyMmM2MWQtOTljZi00 OGZjLWI4NjctYjJjMmNjZTRkMzI0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODMyMmM2MWQtOTljZi00OGZjLWI4 NjctYjJjMmNjZTRkMzI0LzgzMjJjNjFkLTk5Y2YtNDhmYy1iODY3LWIyYzJjY2U0 ZDMyNC5jcmwwHwYDVR0jBBgwFoAUI+zNJQcutthFqfAEhrqRbZCPuPowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MzIyYzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMy Y2NlNGQzMjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBpxdnXSVVd6wXq/Ltd9Tje +B3Fldq2SRWoCoFsffW90zMdi7E/Y6uCnumraZcWpLq8WomxoYBP9l5Vh8TkUZ5t xpZxzidgwby3+8U+zjFYAq5daVe592vqzeTAmZbHq0QN3u27DKa3Ftu49Blk7MrJ tSIiKNGF6O2JLNjfzPSNUIhMzdWi6Vl6BipMR69VplmozRj2XbGdPiGE+W89zk9/ KGc+Jc03M+57bQa+XkeYKrGBXmUwVtRawwaTx7qncvpi7SMy1xFLM6Gj2fCtISWA XHzRfnELRNOl6hxsbTpW34FNEGZQKHfA/Vk9hDg4HiLLhYYsSQDIjXWtaXMXTvOZ -----END CERTIFICATE-----Generated at Sat Apr 5 11:29:59 2025 by rpki-client