$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.mft File: d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.mft (raw, json) Hash identifier: dHxJcbAlArK6jVMV3snFrm3OCbs0tQDMxkK/cwYEZ6Q= Subject key identifier: 4C:33:53:F1:C9:25:3D:AD:4C:A2:41:8F:9C:79:1B:95:D1:B4:E1:96 Authority key identifier: D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52 Certificate issuer: /CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e Certificate serial: 010D0C9F43285849817A94B2B1742E96C4BD2FC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.mft Manifest number: 010D0C9F4328584073A82B7771818A24D9D124A7 Signing time: Sat 12 Apr 2025 22:00:03 +0000 Manifest this update: Sat 12 Apr 2025 22:00:03 +0000 Manifest next update: Tue 15 Apr 2025 22:00:00 +0000 Files and hashes: 1: 0ecb879e-98c9-3896-bc6d-f8030a714e58.roa (hash: 2dZBYcMt21w/846V7ZxaobkQ/aA6m9Vem4rSSKfRra0=) 2: 40a22eee-4031-3336-8b2d-96d68d61d8a9.roa (hash: vDzhQr2fyYkYga+gqeWRBK5SjWieCq1JdDqAM4t8SbY=) 3: d34eb0d8-fa0c-30d6-b322-c61af3045ad1.roa (hash: yaScqUoPnHyGw9PsijEW0qNq0h4MVlA4Agl5vjlyvVI=) 4: d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl (hash: W0qrFdbvjL3EuDvrrdccv6jhnfiXTi3R2ZFID6NbSXM=) 5: ee8f09fe-1b7b-3104-b2f6-ea18346f6f0f.roa (hash: PrIF7iVrkuujChZ3/1qZbB8Z5QXuixjvtN5fLOgFevc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:81:7a:94:b2:b1:74:2e:96:c4:bd:2f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e Validity Not Before: Apr 12 22:00:03 2025 GMT Not After : Apr 15 22:00:00 2025 GMT Subject: CN=bca7f5ac-d58f-456b-96a0-9ca53930735c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4b:40:86:ef:42:a1:63:49:1d:89:d6:46:e4: 25:70:3e:a3:52:a1:80:c4:56:e7:cd:7c:9c:ab:4a: 2e:af:97:97:21:a9:bf:ba:db:6a:31:16:f7:14:1d: d6:df:7d:2b:e3:2d:70:f0:46:87:75:6b:67:cc:e6: 9f:56:5d:25:fe:45:44:b7:27:db:d7:44:d9:ae:a4: 28:c8:28:dd:78:04:8b:c7:58:b1:26:b2:a9:e9:95: 89:60:0e:20:7a:48:37:f9:ce:23:12:17:c3:7e:4b: a9:15:11:59:17:78:ba:6e:e0:bc:cd:e9:f4:60:5a: bd:07:d3:53:e8:1d:56:a0:e5:0b:f8:5b:0a:f4:34: 54:2e:72:3b:ea:51:bd:5c:8c:f4:95:e3:dd:d5:96: a3:6e:97:3a:1e:1b:02:9e:fe:da:14:aa:5e:57:2b: c9:49:24:1f:38:59:c4:34:fa:c1:6b:c3:b5:08:9e: 2f:7b:2b:18:56:fb:8b:f1:f4:6a:fe:a8:38:28:e6: 0d:4e:d9:81:66:c7:e6:f4:ca:a3:57:fe:40:09:39: 9f:2a:41:c8:93:28:4a:23:72:3f:02:d4:c3:88:36: 34:d8:2a:e7:e5:0b:0c:40:9f:8a:c9:1b:ca:cb:84: a2:e5:16:03:89:a7:9f:4d:1a:8d:e4:a1:59:5f:1e: 69:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:33:53:F1:C9:25:3D:AD:4C:A2:41:8F:9C:79:1B:95:D1:B4:E1:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl X509v3 Authority Key Identifier: keyid:D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:7c:19:f5:61:27:d1:4c:9c:aa:bc:a7:99:9b:4f:f3:12:f4: be:b6:eb:a2:99:88:e7:8c:ad:fa:9f:7a:62:bc:e0:18:1e:fa: 0a:7b:65:da:78:ee:d5:90:ce:50:ad:ec:21:2f:63:ae:51:4c: e0:c8:ef:6b:ea:0f:e4:3e:57:9f:fb:ef:bd:3e:26:fc:1b:66: 1a:4d:ec:ab:69:83:07:0c:21:f6:6e:95:c3:37:14:d9:87:fb: 91:47:ba:0a:c2:a6:9f:64:46:ef:8e:f1:4e:66:68:af:e1:e2: db:e7:4f:a2:5a:3c:aa:0c:8e:3d:1b:1d:7a:e8:a5:5b:e6:b5: d3:89:48:59:be:e2:06:7e:db:7c:b2:3b:5e:43:fa:09:e2:fe: 86:93:24:49:84:77:f4:a7:8b:05:fa:5a:68:d8:f1:40:ef:c1: 72:c3:68:3b:b5:77:81:39:68:43:42:f9:cf:12:93:a7:eb:18: 37:7c:5d:54:66:57:54:da:b8:80:24:7e:3c:d7:ff:79:f5:f0: b4:de:31:bf:0b:c0:2e:5c:ed:ea:d2:3c:a0:25:bd:30:63:fe: f9:9e:b3:9c:64:73:6a:f0:b7:7b:92:f5:5f:f3:06:b7:32:8a: 4c:c5:e6:6a:e1:6d:c0:f3:68:00:22:08:01:f7:88:af:cb:49: c6:13:bd:3a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmBepSysXQulsS9L8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0Y2U1ZjQtMjhhOS00YzFmLWIwMjktY2MzNWIzZTM5 NTBlMB4XDTI1MDQxMjIyMDAwM1oXDTI1MDQxNTIyMDAwMFowLzEtMCsGA1UEAxMk YmNhN2Y1YWMtZDU4Zi00NTZiLTk2YTAtOWNhNTM5MzA3MzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEtAhu9CoWNJHYnWRuQlcD6jUqGAxFbnzXyc q0our5eXIam/uttqMRb3FB3W330r4y1w8EaHdWtnzOafVl0l/kVEtyfb10TZrqQo yCjdeASLx1ixJrKp6ZWJYA4gekg3+c4jEhfDfkupFRFZF3i6buC8zen0YFq9B9NT 6B1WoOUL+FsK9DRULnI76lG9XIz0lePd1Zajbpc6HhsCnv7aFKpeVyvJSSQfOFnE NPrBa8O1CJ4veysYVvuL8fRq/qg4KOYNTtmBZsfm9MqjV/5ACTmfKkHIkyhKI3I/ AtTDiDY02Crn5QsMQJ+KyRvKy4Si5RYDiaefTRqN5KFZXx5pUwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEwzU/HJJT2tTKJBj5x5G5XRtOGWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDRj ZTVmNC0yOGE5LTRjMWYtYjAyOS1jYzM1YjNlMzk1MGUvZDQ0Y2U1ZjQtMjhhOS00 YzFmLWIwMjktY2MzNWIzZTM5NTBlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ0Y2U1ZjQtMjhhOS00YzFmLWIw MjktY2MzNWIzZTM5NTBlL2Q0NGNlNWY0LTI4YTktNGMxZi1iMDI5LWNjMzViM2Uz OTUwZS5jcmwwHwYDVR0jBBgwFoAU0nBTqh5BS82k/zz4vLDcHCu2DFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDRjZTVmNC0yOGE5LTRjMWYtYjAyOS1jYzM1 YjNlMzk1MGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA5fBn1YSfRTJyqvKeZm0/z EvS+tuuimYjnjK36n3pivOAYHvoKe2XaeO7VkM5QrewhL2OuUUzgyO9r6g/kPlef +++9Pib8G2YaTeyraYMHDCH2bpXDNxTZh/uRR7oKwqafZEbvjvFOZmiv4eLb50+i WjyqDI49Gx166KVb5rXTiUhZvuIGftt8sjteQ/oJ4v6GkyRJhHf0p4sF+lpo2PFA 78Fyw2g7tXeBOWhDQvnPEpOn6xg3fF1UZldU2riAJH481/959fC03jG/C8AuXO3q 0jygJb0wY/75nrOcZHNq8Ld7kvVf8wa3MopMxeZq4W3A82gAIggB94ivy0nGE706 -----END CERTIFICATE-----Generated at Sun Apr 13 01:12:51 2025 by rpki-client