$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/21e0730d-65d0-4a7c-9717-adf401d3e5d6.mft File: 21e0730d-65d0-4a7c-9717-adf401d3e5d6.mft (raw, json) Hash identifier: 8VbR6eoKQ+TTz7Nh/aF22M7XGdeMJgakBbb6QXSwIfY= Subject key identifier: 4F:48:06:4C:12:DC:B6:9F:30:B6:87:CD:3D:B3:4A:5A:82:6C:2D:92 Authority key identifier: 0A:37:C0:4C:F6:BF:1E:4F:FC:8B:AD:57:5A:16:FE:97:5D:C0:20:F3 Certificate issuer: /CN=21e0730d-65d0-4a7c-9717-adf401d3e5d6 Certificate serial: 010D0C9F4328584967A7C10B91C1C4E2F6C38480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/21e0730d-65d0-4a7c-9717-adf401d3e5d6.mft Manifest number: 010D0C9F43285843D25F5A1DE52D2063BC2ACB92 Signing time: Thu 03 Apr 2025 16:00:03 +0000 Manifest this update: Thu 03 Apr 2025 16:00:03 +0000 Manifest next update: Sun 06 Apr 2025 16:00:00 +0000 Files and hashes: 1: 21e0730d-65d0-4a7c-9717-adf401d3e5d6.crl (hash: 2J8p6ZIKbuNn1zG54shUGUYiyvjgocxE9wmv2ifZiuk=) 2: 245081f2-effd-35ab-aee8-d10c19f48000.roa (hash: 52mQ72AdsRiuLFubA5RN2sJawgiVQqqUbbNijyraw60=) 3: 757c630c-1704-3fb8-b8aa-a6f536633ed2.roa (hash: F9Jjo5EWIYgJ6J0tfCOpOiIJ7TeGfkEtALUViqwYCCk=) 4: 81a2323d-f9d4-3b36-9d0b-0baf160211f4.roa (hash: H4nfuPQHRcctnAw1tQwkDIzr3PpF3HAIT5Xzh3wfFfA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/21e0730d-65d0-4a7c-9717-adf401d3e5d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/21e0730d-65d0-4a7c-9717-adf401d3e5d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:a7:c1:0b:91:c1:c4:e2:f6:c3:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21e0730d-65d0-4a7c-9717-adf401d3e5d6 Validity Not Before: Apr 3 16:00:03 2025 GMT Not After : Apr 6 16:00:00 2025 GMT Subject: CN=bf5b5206-8387-4859-b121-10719c6000fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ce:e4:e8:63:91:6b:9f:74:3a:e8:48:19:a9: 0d:aa:f0:f0:c6:a8:48:2c:2f:89:a7:87:c1:af:67: 2b:b2:3e:52:5e:ae:4d:11:8d:f8:a1:1d:00:81:f2: 8b:4b:d5:6f:d1:23:53:d1:0b:05:6e:d9:f0:de:9c: 45:24:ca:dc:85:49:01:fc:16:40:f8:b4:72:67:a6: 07:d2:20:a3:39:f3:77:f1:69:76:80:21:0b:a6:1e: 0a:d1:dc:3d:88:74:d2:a8:64:c2:76:d5:58:39:0f: 3f:62:59:ef:d5:46:6c:b4:fd:b9:90:77:b2:91:e9: 54:06:e4:45:01:89:14:8e:2d:65:56:d1:bb:d3:28: 81:fe:f3:70:23:ed:ae:d8:25:07:b8:4b:81:90:fe: 0d:c4:13:3d:c3:b0:6c:9d:82:63:86:f7:79:30:ee: ac:8e:72:3b:66:fb:27:c7:97:66:8e:1f:9c:dd:56: 9f:d3:f1:da:b2:85:b7:c9:b4:42:a9:16:4d:36:e5: 36:c7:0d:d5:4a:d8:4e:f4:f0:ae:f9:45:d0:f7:ab: 43:3f:c6:f0:28:45:a1:dd:45:8a:37:36:7e:a1:17: 81:10:95:9d:7f:38:7f:95:06:fe:ea:96:67:1b:71: ca:5f:6c:8a:a9:07:08:df:77:4d:92:4d:c3:aa:50: 83:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:48:06:4C:12:DC:B6:9F:30:B6:87:CD:3D:B3:4A:5A:82:6C:2D:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/21e0730d-65d0-4a7c-9717-adf401d3e5d6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/21e0730d-65d0-4a7c-9717-adf401d3e5d6.crl X509v3 Authority Key Identifier: keyid:0A:37:C0:4C:F6:BF:1E:4F:FC:8B:AD:57:5A:16:FE:97:5D:C0:20:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:be:81:25:57:3c:f1:20:4d:da:4e:72:9a:03:6d:7e:af:e9: d8:02:b9:99:17:ee:e0:7e:4e:ec:28:d3:8f:8d:b8:16:f4:a3: 49:42:57:cf:6b:9b:b6:f2:af:a8:78:06:14:ec:9f:f2:13:56: 86:e7:29:07:39:61:68:51:68:98:b6:34:ed:70:a5:10:ab:8b: 2d:21:55:00:bf:4c:f0:2f:9a:52:38:90:3c:d9:84:e9:17:f6: 92:e2:ea:6e:b2:6c:2e:14:69:99:76:2c:60:c2:b6:0b:19:0b: aa:ce:a1:d2:82:2b:e8:05:f1:db:77:7c:1f:c1:70:df:6c:9e: 15:f5:e9:3b:59:ff:ec:c0:68:c0:70:cb:5a:57:2b:75:db:c6: a8:4f:d0:52:c5:68:08:8b:36:c3:e1:27:42:2b:1c:f3:c9:bb: af:fa:e2:41:5d:fa:f1:05:be:30:37:6e:b1:82:92:35:32:86: 3a:36:b3:d8:95:bb:39:0c:f1:87:ae:25:b2:fc:22:05:e3:24: 92:08:3a:92:c7:7e:29:1a:87:5d:14:aa:08:9d:54:7a:1f:5c: b0:f6:11:fc:37:61:0d:05:d2:a6:54:76:9f:0a:48:19:2d:cd: de:7f:0d:18:0e:19:9c:b8:06:78:5c:cf:96:44:d5:86:97:f8: 26:02:6b:65 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWElnp8ELkcHE4vbDhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFlMDczMGQtNjVkMC00YTdjLTk3MTctYWRmNDAxZDNl NWQ2MB4XDTI1MDQwMzE2MDAwM1oXDTI1MDQwNjE2MDAwMFowLzEtMCsGA1UEAxMk YmY1YjUyMDYtODM4Ny00ODU5LWIxMjEtMTA3MTljNjAwMGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApM7k6GORa590OuhIGakNqvDwxqhILC+Jp4fB r2crsj5SXq5NEY34oR0AgfKLS9Vv0SNT0QsFbtnw3pxFJMrchUkB/BZA+LRyZ6YH 0iCjOfN38Wl2gCELph4K0dw9iHTSqGTCdtVYOQ8/Ylnv1UZstP25kHeykelUBuRF AYkUji1lVtG70yiB/vNwI+2u2CUHuEuBkP4NxBM9w7BsnYJjhvd5MO6sjnI7Zvsn x5dmjh+c3Vaf0/HasoW3ybRCqRZNNuU2xw3VSthO9PCu+UXQ96tDP8bwKEWh3UWK NzZ+oReBEJWdfzh/lQb+6pZnG3HKX2yKqQcI33dNkk3DqlCDywIDAQABo4IDbjCC A2owHQYDVR0OBBYEFE9IBkwS3LafMLaHzT2zSlqCbC2SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWUw NzMwZC02NWQwLTRhN2MtOTcxNy1hZGY0MDFkM2U1ZDYvMjFlMDczMGQtNjVkMC00 YTdjLTk3MTctYWRmNDAxZDNlNWQ2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjFlMDczMGQtNjVkMC00YTdjLTk3 MTctYWRmNDAxZDNlNWQ2LzIxZTA3MzBkLTY1ZDAtNGE3Yy05NzE3LWFkZjQwMWQz ZTVkNi5jcmwwHwYDVR0jBBgwFoAUCjfATPa/Hk/8i61XWhb+l13AIPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWUwNzMwZC02NWQwLTRhN2MtOTcxNy1hZGY0 MDFkM2U1ZDYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQATvoElVzzxIE3aTnKaA21+ r+nYArmZF+7gfk7sKNOPjbgW9KNJQlfPa5u28q+oeAYU7J/yE1aG5ykHOWFoUWiY tjTtcKUQq4stIVUAv0zwL5pSOJA82YTpF/aS4upusmwuFGmZdixgwrYLGQuqzqHS givoBfHbd3wfwXDfbJ4V9ek7Wf/swGjAcMtaVyt128aoT9BSxWgIizbD4SdCKxzz ybuv+uJBXfrxBb4wN26xgpI1MoY6NrPYlbs5DPGHriWy/CIF4ySSCDqSx34pGodd FKoInVR6H1yw9hH8N2ENBdKmVHafCkgZLc3efw0YDhmcuAZ4XM+WRNWGl/gmAmtl -----END CERTIFICATE-----Generated at Thu Apr 3 22:09:15 2025 by rpki-client