$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft File: bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft (raw, json) Hash identifier: fgE8tLROgts0yK0Mb9uqQN84h9CYdTXWxVHo61eU3Vc= Subject key identifier: BF:59:C7:42:7D:81:C1:A3:38:D9:91:B3:CF:89:E5:86:D9:95:59:38 Authority key identifier: 00:96:DD:99:13:E4:C1:00:CA:66:7C:56:A6:9F:2F:41:B9:D4:5C:31 Certificate issuer: /CN=bc3951ec-0f8a-49d2-bec7-41a9657e87f5 Certificate serial: 010D0C9F432858497561AA1C9CF766F93C490000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft Manifest number: 010D0C9F432858427253B358C10542724BFE7297 Signing time: Tue 08 Apr 2025 14:00:07 +0000 Manifest this update: Tue 08 Apr 2025 14:00:07 +0000 Manifest next update: Thu 10 Apr 2025 14:00:00 +0000 Files and hashes: 1: 30556b03-38d3-3916-aa52-b8ba0322c064.roa (hash: ceApeDLXa9Ozl34rkpjTAE5wiSK8w3QjP/SK2HCajV8=) 2: 9ff30824-1084-32e9-aa19-53c49b5db5a4.roa (hash: twbxRuqvpVynaX1Co8ImU6+f7vjL9nuWB0Zv0pj+z84=) 3: bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl (hash: e3McAt/tcRa3sNIwmeTYXvKZO0Hq1O0lIkKDbgwzOU4=) 4: be400544-19f0-3ed1-bf3c-e5f9ab3730af.roa (hash: kVgPwD1sQLn8NUFlnUJxnUeap+qbiudouz9a6clINEU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:61:aa:1c:9c:f7:66:f9:3c:49:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc3951ec-0f8a-49d2-bec7-41a9657e87f5 Validity Not Before: Apr 8 14:00:07 2025 GMT Not After : Apr 10 14:00:00 2025 GMT Subject: CN=5f39fe4c-d8aa-49ae-bf50-55bec735ee1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5a:83:02:a4:9f:6a:b1:e4:ad:5f:d9:29:0c: 73:cc:49:2a:1a:c3:14:3f:3a:24:03:7e:c7:32:2a: 9c:f4:d7:5d:9a:43:90:bc:c3:26:e7:68:ec:5c:ee: 34:53:c8:31:89:6e:99:0a:59:ef:31:b6:e3:ad:82: dc:30:8b:76:d6:78:1a:b3:57:8d:85:63:af:23:80: 10:7a:a7:43:c8:a2:7a:5e:db:6a:e9:7a:90:f5:d1: 65:8b:4d:2f:10:ba:2a:7b:41:3e:99:da:55:10:67: 86:b7:47:b6:1d:3f:d5:b4:cf:6e:44:f0:14:23:e0: 4e:84:82:74:e7:8c:c4:6b:6d:ff:17:c2:a7:26:1f: 10:d5:54:5b:fe:8d:42:a3:1d:aa:ec:fc:f1:38:0e: 48:c6:97:91:eb:e3:ae:97:6b:8c:7e:e0:5e:a4:5c: d1:d3:c6:f1:e0:ad:cd:ca:7c:29:1c:09:b0:1c:74: 96:52:47:76:ee:91:50:c8:b4:89:91:f9:fe:d5:fd: 95:40:26:77:f1:4f:ad:85:28:bc:2d:95:8b:fd:ec: b5:e3:5e:7b:19:4d:0f:c0:8e:78:94:4d:db:52:7e: 08:58:d8:12:bc:b7:b6:b4:4f:86:ef:0a:1d:8d:aa: e7:3a:3f:15:27:b1:bd:fd:d0:ca:3e:f2:a8:5e:af: 78:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:59:C7:42:7D:81:C1:A3:38:D9:91:B3:CF:89:E5:86:D9:95:59:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl X509v3 Authority Key Identifier: keyid:00:96:DD:99:13:E4:C1:00:CA:66:7C:56:A6:9F:2F:41:B9:D4:5C:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:1c:a8:b2:65:3b:50:84:56:58:12:2f:89:49:22:b1:43:94: b3:28:22:32:ae:ef:d1:7a:7c:42:a8:49:fe:bb:fd:73:e4:49: fc:bb:bf:ca:f0:c5:37:7a:cd:75:fe:b8:b7:8a:fb:05:7a:3f: 61:3d:9f:b8:91:ae:db:93:68:74:07:dd:2a:fe:0e:9f:f1:18: a6:2a:4b:3a:8e:7c:79:d9:ef:2b:b9:d0:a4:28:1b:dd:00:5e: ba:a4:bd:88:4c:17:32:1a:55:f0:d2:92:ba:b7:81:ec:e9:af: 60:58:e8:a0:c8:a6:33:d5:60:44:7a:68:47:97:d7:b4:61:23: bd:e0:1d:4d:c5:d4:89:84:9f:90:50:cf:ce:04:d1:59:67:4d: c9:d5:84:8c:ad:ac:cc:42:7a:90:f2:37:8a:b0:6c:9b:60:56: 0a:c0:68:66:96:61:88:32:fc:bf:de:be:c7:60:8e:1e:6a:e3: aa:e9:91:fc:34:4b:be:cd:e9:da:4a:dc:8f:a6:48:53:a0:c5: ec:07:3b:0e:10:de:1a:5b:d6:be:c1:4f:9b:d9:a4:6e:11:8c: 57:10:93:dd:61:f1:c7:21:33:fb:d8:cb:7f:ed:47:a0:72:f5: d3:a3:1f:25:c6:ca:76:d6:ba:14:00:fc:9f:e5:e5:dc:db:3f: 92:fe:52:a0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl1YaocnPdm+TxJAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzOTUxZWMtMGY4YS00OWQyLWJlYzctNDFhOTY1N2U4 N2Y1MB4XDTI1MDQwODE0MDAwN1oXDTI1MDQxMDE0MDAwMFowLzEtMCsGA1UEAxMk NWYzOWZlNGMtZDhhYS00OWFlLWJmNTAtNTViZWM3MzVlZTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlqDAqSfarHkrV/ZKQxzzEkqGsMUPzokA37H Miqc9NddmkOQvMMm52jsXO40U8gxiW6ZClnvMbbjrYLcMIt21ngas1eNhWOvI4AQ eqdDyKJ6Xttq6XqQ9dFli00vELoqe0E+mdpVEGeGt0e2HT/VtM9uRPAUI+BOhIJ0 54zEa23/F8KnJh8Q1VRb/o1Cox2q7PzxOA5IxpeR6+Oul2uMfuBepFzR08bx4K3N ynwpHAmwHHSWUkd27pFQyLSJkfn+1f2VQCZ38U+thSi8LZWL/ey14157GU0PwI54 lE3bUn4IWNgSvLe2tE+G7wodjarnOj8VJ7G9/dDKPvKoXq94bQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL9Zx0J9gcGjONmRs8+J5YbZlVk4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iYzM5 NTFlYy0wZjhhLTQ5ZDItYmVjNy00MWE5NjU3ZTg3ZjUvYmMzOTUxZWMtMGY4YS00 OWQyLWJlYzctNDFhOTY1N2U4N2Y1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYmMzOTUxZWMtMGY4YS00OWQyLWJl YzctNDFhOTY1N2U4N2Y1L2JjMzk1MWVjLTBmOGEtNDlkMi1iZWM3LTQxYTk2NTdl ODdmNS5jcmwwHwYDVR0jBBgwFoAUAJbdmRPkwQDKZnxWpp8vQbnUXDEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iYzM5NTFlYy0wZjhhLTQ5ZDItYmVjNy00MWE5 NjU3ZTg3ZjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQATHKiyZTtQhFZYEi+JSSKx Q5SzKCIyru/RenxCqEn+u/1z5En8u7/K8MU3es11/ri3ivsFej9hPZ+4ka7bk2h0 B90q/g6f8RimKks6jnx52e8rudCkKBvdAF66pL2ITBcyGlXw0pK6t4Hs6a9gWOig yKYz1WBEemhHl9e0YSO94B1NxdSJhJ+QUM/OBNFZZ03J1YSMrazMQnqQ8jeKsGyb YFYKwGhmlmGIMvy/3r7HYI4eauOq6ZH8NEu+zenaStyPpkhToMXsBzsOEN4aW9a+ wU+b2aRuEYxXEJPdYfHHITP72Mt/7UegcvXTox8lxsp21roUAPyf5eXc2z+S/lKg -----END CERTIFICATE-----Generated at Wed Apr 9 09:11:10 2025 by rpki-client