$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft File: 95e29289-6f1c-4c2f-84f4-c944e9e54940.mft (raw, json) Hash identifier: wfzFsuufMUAZGqY9hoZshsKg5zBZ0Ez2DWm2DHqhXiI= Subject key identifier: 7B:E8:F4:0B:00:6B:85:91:E2:03:9E:A6:A3:DB:69:4D:3A:DD:F7:42 Authority key identifier: 4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E Certificate issuer: /CN=95e29289-6f1c-4c2f-84f4-c944e9e54940 Certificate serial: 010D0C9F432858497F27027BE26AF40DD5CFA880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft Manifest number: 010D0C9F4328584073A8378ED965A26DC80B7B9E Signing time: Sat 12 Apr 2025 02:00:03 +0000 Manifest this update: Sat 12 Apr 2025 02:00:03 +0000 Manifest next update: Mon 14 Apr 2025 02:00:00 +0000 Files and hashes: 1: 13c7705c-5068-3193-a68c-a2e387dab614.roa (hash: a6dwtfH68oKKZpHXm8ejCwP5VsN4CcGJUdqiyNzbIXI=) 2: 20e21523-7867-3e6d-bd2a-f4ba5558ced0.roa (hash: cN8R5qC4NlR5uWvhUCzKpCYleWok7iYO4MSTCkC8hSo=) 3: 42017b9c-7ea7-3f9a-8686-04d01900fd20.roa (hash: eE+T381MdR/qQQc8thyoh8V4NGPTtTr8rmOB92XbOok=) 4: 650dd2fc-99af-35a3-81ca-030219a24999.roa (hash: ZJiCv03s2scquqm44dosAwFmuMHEdUjcMiNY3LldOsc=) 5: 95dd5242-3b5c-376f-81d5-8ede1c2277b6.roa (hash: S1crQs1bS3+fVWk1sr+MxbbXeysQXbMkIzdeCnOShtQ=) 6: 95e29289-6f1c-4c2f-84f4-c944e9e54940.crl (hash: HsSwrC1pkhuNHNjxxKcWJntg4AtVC77WgfGYy6Ezp4s=) 7: eb6fc912-909b-3236-8ac8-46c73ef2bbbe.roa (hash: rtAFnXL437qYvEK9XSwcrUbxUCinLmnzFBQNcHvyQ1M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7f:27:02:7b:e2:6a:f4:0d:d5:cf:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95e29289-6f1c-4c2f-84f4-c944e9e54940 Validity Not Before: Apr 12 02:00:03 2025 GMT Not After : Apr 14 02:00:00 2025 GMT Subject: CN=145238a9-e6d4-45d1-a156-a39c4be5e19b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e2:e9:d8:10:2f:c4:8b:1b:59:94:d6:5b:47: 51:74:a4:77:35:cb:31:60:57:f5:c3:76:f8:39:3f: 4f:9e:97:84:40:42:dc:fb:f1:88:b1:69:28:50:b7: 55:cc:56:70:54:92:4c:db:7f:80:95:4a:94:0d:9d: f7:d5:0f:1d:5b:56:b9:c9:cf:b0:ab:19:8e:51:17: 48:39:b0:b4:4b:cc:90:b4:ae:a9:51:be:7f:1e:d2: 59:c2:05:27:e2:ea:02:25:b9:1c:67:01:70:60:cb: 9b:af:42:40:55:61:62:a2:a6:9f:36:65:d6:4a:24: 95:3e:a3:47:ac:df:e8:0c:9b:6f:5f:1e:09:21:c9: a4:32:9d:1b:bb:15:49:81:d9:4f:cd:d8:b3:5e:a1: e4:23:6c:ec:7d:df:36:8f:02:84:c2:a6:87:37:ab: b7:2a:4d:be:e0:37:6f:9c:52:4d:21:8a:c1:21:d6: 77:63:c8:bd:9d:f8:f7:11:c8:ce:e3:b5:a5:f9:2c: 1c:9c:df:8e:e6:73:cf:3c:22:14:cc:93:8a:f9:79: 97:9b:c4:11:49:c6:be:ae:ca:48:32:7b:9b:80:78: 69:16:19:30:1a:98:76:58:18:eb:c1:eb:c2:39:05: f2:02:36:e9:d1:3c:f0:4a:85:94:c4:73:03:15:fa: 94:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E8:F4:0B:00:6B:85:91:E2:03:9E:A6:A3:DB:69:4D:3A:DD:F7:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl X509v3 Authority Key Identifier: keyid:4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:cb:8f:67:d1:4d:67:2a:44:73:32:2e:73:57:5b:35:29:f3: 81:0d:47:ae:39:88:12:61:d9:87:57:6d:aa:1a:86:17:2d:ea: e0:f1:44:0e:f5:90:c4:f3:dd:a5:18:85:ee:3d:80:e8:f5:84: 03:4a:0c:b7:52:9f:d0:a6:61:1c:f3:46:75:6d:9b:c9:51:45: 1c:33:5d:5f:7b:c5:c6:da:2e:27:1a:61:46:44:58:a2:c3:34: b5:3f:c4:b2:80:01:ff:39:da:c8:ec:98:f4:02:fd:e2:5e:ac: 51:d1:b9:be:61:db:97:28:f6:a3:23:f0:92:8c:72:15:65:af: 77:0a:df:ab:b3:80:fc:1b:73:7c:a6:da:e8:90:c4:a8:e4:42: 5b:56:ec:c6:b3:a1:0a:24:dc:26:b6:91:32:1c:cf:a7:8f:32: 9a:55:ac:20:f0:5d:1d:a9:75:2b:cc:d2:c6:38:4c:a2:fa:b8: 4d:9c:c5:6a:71:15:c2:a3:ab:69:5f:07:5d:c0:1d:bb:89:d3: 53:b5:07:3e:6d:88:7d:8d:b8:99:74:6e:9e:ab:33:a0:70:3a: 8a:9f:26:f3:23:fd:05:3f:8c:0c:0f:0f:42:4b:d2:81:54:ba: db:d5:93:3d:79:b3:74:ed:ec:6b:4b:0c:1b:22:9b:c5:3a:29: 1b:53:01:20 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl/JwJ74mr0DdXPqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVlMjkyODktNmYxYy00YzJmLTg0ZjQtYzk0NGU5ZTU0 OTQwMB4XDTI1MDQxMjAyMDAwM1oXDTI1MDQxNDAyMDAwMFowLzEtMCsGA1UEAxMk MTQ1MjM4YTktZTZkNC00NWQxLWExNTYtYTM5YzRiZTVlMTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOLp2BAvxIsbWZTWW0dRdKR3NcsxYFf1w3b4 OT9PnpeEQELc+/GIsWkoULdVzFZwVJJM23+AlUqUDZ331Q8dW1a5yc+wqxmOURdI ObC0S8yQtK6pUb5/HtJZwgUn4uoCJbkcZwFwYMubr0JAVWFioqafNmXWSiSVPqNH rN/oDJtvXx4JIcmkMp0buxVJgdlPzdizXqHkI2zsfd82jwKEwqaHN6u3Kk2+4Ddv nFJNIYrBIdZ3Y8i9nfj3EcjO47Wl+SwcnN+O5nPPPCIUzJOK+XmXm8QRSca+rspI MnubgHhpFhkwGph2WBjrwevCOQXyAjbp0TzwSoWUxHMDFfqUcwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHvo9AsAa4WR4gOepqPbaU063fdCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NWUy OTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0ZTllNTQ5NDAvOTVlMjkyODktNmYxYy00 YzJmLTg0ZjQtYzk0NGU5ZTU0OTQwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTVlMjkyODktNmYxYy00YzJmLTg0 ZjQtYzk0NGU5ZTU0OTQwLzk1ZTI5Mjg5LTZmMWMtNGMyZi04NGY0LWM5NDRlOWU1 NDk0MC5jcmwwHwYDVR0jBBgwFoAUTbpFqqu5h2Ol5m+zCcVulzCUmp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85NWUyOTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0 ZTllNTQ5NDAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBly49n0U1nKkRzMi5zV1s1 KfOBDUeuOYgSYdmHV22qGoYXLerg8UQO9ZDE892lGIXuPYDo9YQDSgy3Up/QpmEc 80Z1bZvJUUUcM11fe8XG2i4nGmFGRFiiwzS1P8SygAH/OdrI7Jj0Av3iXqxR0bm+ YduXKPajI/CSjHIVZa93Ct+rs4D8G3N8ptrokMSo5EJbVuzGs6EKJNwmtpEyHM+n jzKaVawg8F0dqXUrzNLGOEyi+rhNnMVqcRXCo6tpXwddwB27idNTtQc+bYh9jbiZ dG6eqzOgcDqKnybzI/0FP4wMDw9CS9KBVLrb1ZM9ebN07exrSwwbIpvFOikbUwEg -----END CERTIFICATE-----Generated at Sat Apr 12 14:50:45 2025 by rpki-client