$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.mft File: d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.mft (raw, json) Hash identifier: Glw1voD3yvKs+BcMBBn+WHVgEGrbl9JtKlGgDiDqn5M= Subject key identifier: 59:34:4E:78:F7:2E:EB:8E:1C:FC:36:EE:B7:27:D5:4B:6A:6D:2B:98 Authority key identifier: D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52 Certificate issuer: /CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e Certificate serial: 010D0C9F432858497EAFE8418B86518DB5CA6980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.mft Manifest number: 010D0C9F4328584073A82B7771818A24D9D124A6 Signing time: Fri 11 Apr 2025 22:00:03 +0000 Manifest this update: Fri 11 Apr 2025 22:00:03 +0000 Manifest next update: Sun 13 Apr 2025 22:00:00 +0000 Files and hashes: 1: 0ecb879e-98c9-3896-bc6d-f8030a714e58.roa (hash: 2dZBYcMt21w/846V7ZxaobkQ/aA6m9Vem4rSSKfRra0=) 2: 40a22eee-4031-3336-8b2d-96d68d61d8a9.roa (hash: vDzhQr2fyYkYga+gqeWRBK5SjWieCq1JdDqAM4t8SbY=) 3: d34eb0d8-fa0c-30d6-b322-c61af3045ad1.roa (hash: yaScqUoPnHyGw9PsijEW0qNq0h4MVlA4Agl5vjlyvVI=) 4: d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl (hash: 8XuHGZNAzqDs4WzQZ4lQRqQktJvcoSmdLe9Ti4Gh98o=) 5: ee8f09fe-1b7b-3104-b2f6-ea18346f6f0f.roa (hash: PrIF7iVrkuujChZ3/1qZbB8Z5QXuixjvtN5fLOgFevc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7e:af:e8:41:8b:86:51:8d:b5:ca:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e Validity Not Before: Apr 11 22:00:03 2025 GMT Not After : Apr 13 22:00:00 2025 GMT Subject: CN=095abe27-777e-46e7-a902-c4c46542ce50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:14:c7:70:85:3b:37:2c:1e:5f:d2:fe:e7:2b: 2d:80:3c:4f:2d:5e:2f:dd:39:5f:df:53:8f:5f:e6: 2b:ea:f8:13:5d:1c:36:66:0a:95:79:03:e9:cd:59: 66:ce:0c:72:b9:a8:83:f3:7e:5e:55:e9:e5:10:1d: 9d:68:af:c4:f6:3e:c2:07:ee:70:03:ee:c9:a2:95: 43:54:51:20:f6:c0:3d:a6:c6:1e:44:42:6b:7d:30: 5a:32:f5:8b:36:0e:16:47:24:f4:30:18:4a:0c:14: 7a:b9:97:3f:4e:d1:47:eb:fb:71:f7:ce:b7:db:12: ae:14:77:36:84:50:d7:87:52:fd:ed:03:ea:3c:f7: 01:f7:3c:6f:b0:1e:15:49:ab:29:0d:67:e5:6f:1b: d7:04:00:32:06:a5:ac:4b:02:09:e5:25:80:19:dc: ef:4e:63:04:e1:96:24:a6:45:07:92:43:25:8a:60: e3:ee:90:9b:46:44:85:47:4a:32:3c:37:4c:9e:ee: 83:95:29:d4:49:e1:f1:7a:4c:23:01:cb:27:24:e4: 31:42:3c:2b:4a:dd:c5:20:10:2f:ea:7c:00:31:70: cd:09:4f:13:77:1d:ee:9e:29:b3:5b:42:c8:25:a5: a0:ae:c6:6a:09:7e:95:40:dd:bc:58:83:35:b8:cc: 9d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:34:4E:78:F7:2E:EB:8E:1C:FC:36:EE:B7:27:D5:4B:6A:6D:2B:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl X509v3 Authority Key Identifier: keyid:D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:17:1f:44:5b:67:c6:d1:5d:9e:3c:0d:ba:68:b4:59:d1:90: 2f:7e:29:92:eb:44:61:70:1a:a6:bb:90:8b:7a:e9:25:19:69: f1:ce:26:70:19:d6:e7:47:76:86:3d:a1:d3:87:e3:ad:95:f2: e4:b3:e6:70:9e:d9:b1:2e:3c:d7:29:a9:13:5e:83:ea:e6:f8: b9:b2:7e:97:58:82:9b:20:55:e4:2b:cc:6d:27:2a:59:0e:6e: da:56:9b:05:f1:08:77:bd:f9:8b:8e:85:9a:cc:4a:b8:dc:b7: 8a:49:23:82:c8:e7:8e:ba:2d:be:72:d5:28:e2:d5:8f:63:7f: ac:e5:52:6d:2e:99:ae:5a:42:f0:c9:f0:9c:10:ee:7a:37:24: 9f:73:11:52:56:ad:c0:6f:5e:95:19:ca:f5:5f:0f:8c:28:13: d7:7c:41:05:39:dd:49:a3:ca:5b:2b:bb:6f:1e:ef:02:52:69: d5:7e:35:f3:bc:bc:e9:5a:cf:c4:9d:e2:42:ab:cf:e3:0d:34: e0:6e:c1:bd:1a:0b:2a:c0:16:f5:c4:98:43:55:83:a1:3a:a6: 53:93:7d:f0:ce:85:0c:0f:f4:28:55:9a:8d:55:88:0a:0d:5e: 1f:d7:1e:9d:d1:d9:de:61:e7:9a:cb:23:4d:8a:51:f2:24:00: ce:89:ed:73 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl+r+hBi4ZRjbXKaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0Y2U1ZjQtMjhhOS00YzFmLWIwMjktY2MzNWIzZTM5 NTBlMB4XDTI1MDQxMTIyMDAwM1oXDTI1MDQxMzIyMDAwMFowLzEtMCsGA1UEAxMk MDk1YWJlMjctNzc3ZS00NmU3LWE5MDItYzRjNDY1NDJjZTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxTHcIU7NyweX9L+5ystgDxPLV4v3Tlf31OP X+Yr6vgTXRw2ZgqVeQPpzVlmzgxyuaiD835eVenlEB2daK/E9j7CB+5wA+7JopVD VFEg9sA9psYeREJrfTBaMvWLNg4WRyT0MBhKDBR6uZc/TtFH6/tx98632xKuFHc2 hFDXh1L97QPqPPcB9zxvsB4VSaspDWflbxvXBAAyBqWsSwIJ5SWAGdzvTmME4ZYk pkUHkkMlimDj7pCbRkSFR0oyPDdMnu6DlSnUSeHxekwjAcsnJOQxQjwrSt3FIBAv 6nwAMXDNCU8Tdx3unimzW0LIJaWgrsZqCX6VQN28WIM1uMydxwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFk0Tnj3LuuOHPw27rcn1UtqbSuYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDRj ZTVmNC0yOGE5LTRjMWYtYjAyOS1jYzM1YjNlMzk1MGUvZDQ0Y2U1ZjQtMjhhOS00 YzFmLWIwMjktY2MzNWIzZTM5NTBlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ0Y2U1ZjQtMjhhOS00YzFmLWIw MjktY2MzNWIzZTM5NTBlL2Q0NGNlNWY0LTI4YTktNGMxZi1iMDI5LWNjMzViM2Uz OTUwZS5jcmwwHwYDVR0jBBgwFoAU0nBTqh5BS82k/zz4vLDcHCu2DFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDRjZTVmNC0yOGE5LTRjMWYtYjAyOS1jYzM1 YjNlMzk1MGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBCFx9EW2fG0V2ePA26aLRZ 0ZAvfimS60RhcBqmu5CLeuklGWnxziZwGdbnR3aGPaHTh+OtlfLks+ZwntmxLjzX KakTXoPq5vi5sn6XWIKbIFXkK8xtJypZDm7aVpsF8Qh3vfmLjoWazEq43LeKSSOC yOeOui2+ctUo4tWPY3+s5VJtLpmuWkLwyfCcEO56NySfcxFSVq3Ab16VGcr1Xw+M KBPXfEEFOd1Jo8pbK7tvHu8CUmnVfjXzvLzpWs/EneJCq8/jDTTgbsG9GgsqwBb1 xJhDVYOhOqZTk33wzoUMD/QoVZqNVYgKDV4f1x6d0dneYeeayyNNilHyJADOie1z -----END CERTIFICATE-----Generated at Sat Apr 12 03:05:44 2025 by rpki-client