$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.mft File: 29d35b5d-b56a-49ea-be01-fcbff8e02fcf.mft (raw, json) Hash identifier: rCi8pV7sE0s56csG0KWC1VWi44Hhvfu4/7qxUt2wors= Subject key identifier: 52:9F:2F:98:21:AA:5B:85:D5:08:E7:AB:1B:C6:F1:C8:6A:05:0D:EC Authority key identifier: 0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D Certificate issuer: /CN=29d35b5d-b56a-49ea-be01-fcbff8e02fcf Certificate serial: 010D0C9F432858496789FC26F905E46AE7C2ED00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.mft Manifest number: 010D0C9F43285843E88E1CC30CF7312D57C34C96 Signing time: Thu 03 Apr 2025 15:00:03 +0000 Manifest this update: Thu 03 Apr 2025 15:00:03 +0000 Manifest next update: Sun 06 Apr 2025 15:00:00 +0000 Files and hashes: 1: 29d35b5d-b56a-49ea-be01-fcbff8e02fcf.crl (hash: PLhezZIbrbU7lbOw+sTCEGlZ4ScpbWwPN1rzhH+mWvI=) 2: 2b2ac11b-e48e-3d7b-bb47-74b882986e3b.roa (hash: S2BRSrbXJOnl0h3fZoT5y6BOZ52xk23uFsNOL9Hli2s=) 3: 34c75caf-5f31-3ddf-b113-d584f51f166e.roa (hash: CVfFSiTxCNNpZ9GBQC6AKT9nWv6NcC7vWQW5YNVMQfA=) 4: 53fdbdf2-a0bc-3fd6-9a48-1c9ccbc1af83.roa (hash: 9Ax4ivLuvjEJG9JllkpNxWcap9fJO32OZckzECnQ2aw=) 5: a1f6d499-4f97-3e96-b33e-adb8ba79683d.roa (hash: 8YbLkO4w+Ah/ipQE4lTT74kMQgezfLB482ypLtS2JYQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:89:fc:26:f9:05:e4:6a:e7:c2:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d35b5d-b56a-49ea-be01-fcbff8e02fcf Validity Not Before: Apr 3 15:00:03 2025 GMT Not After : Apr 6 15:00:00 2025 GMT Subject: CN=50ee0ca3-b70f-4366-a288-584d240cbf41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b9:16:d3:0f:8f:92:59:18:be:49:ee:cf:54: d9:e6:e8:9d:b2:ec:61:41:8d:95:9f:c5:69:f3:95: e9:5e:d1:31:d3:fb:5b:fd:d2:f4:d1:b5:ea:64:71: a9:8d:2e:c5:d2:df:37:5e:ea:53:c0:20:e8:42:fe: 24:2e:9c:08:14:8a:b3:32:8d:44:03:23:3a:64:37: f0:7b:40:60:7e:89:b6:56:e9:0c:36:42:31:5f:0c: 3a:53:cc:41:3a:6e:01:ed:f6:3e:50:50:f9:83:00: ea:f0:26:94:09:f6:3d:d0:c1:47:8a:8b:29:01:51: ed:47:28:3c:7b:bb:c3:30:e6:07:33:5a:0a:f5:bf: d9:a4:16:1c:05:2d:28:73:30:74:b4:ec:ac:10:0e: e5:3a:94:c7:05:f3:45:10:d5:68:2e:b8:c3:77:2a: c3:c9:ce:da:a3:35:01:b2:ea:0c:31:ae:8a:33:4e: 46:12:95:ef:63:4b:0d:60:61:5a:44:0d:ad:9b:98: 94:12:7e:b0:35:df:82:a7:e5:d0:af:e4:10:15:ee: a4:45:5e:3a:40:16:b0:7d:19:ad:1b:c0:9f:d3:23: e0:7d:e0:d8:e1:bb:9c:4e:47:65:79:99:94:33:65: 24:79:47:4b:f0:ee:83:b0:34:af:86:e7:b4:8f:dd: 0c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9F:2F:98:21:AA:5B:85:D5:08:E7:AB:1B:C6:F1:C8:6A:05:0D:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.crl X509v3 Authority Key Identifier: keyid:0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:8f:98:4d:ff:d4:34:6d:8a:c9:1b:90:a5:82:07:b6:f4:10: 9f:07:b1:71:85:cd:98:04:44:61:78:aa:2e:5f:44:7a:28:fd: 9d:c1:b6:cf:be:9a:f9:86:71:80:ca:c9:b0:9a:92:03:ab:7b: 74:9d:f1:58:b6:47:f8:86:7f:b1:c2:03:e9:0c:32:5c:f2:52: ba:0c:5d:cc:97:27:a1:62:f1:97:f2:67:91:42:d6:10:7e:e2: 80:a9:51:c2:e0:24:61:6e:35:c6:8b:a0:8d:77:dd:04:a9:c5: 81:5d:05:70:f5:45:8e:cf:9f:05:18:18:13:42:13:39:73:bd: ab:86:e1:ef:d1:0e:06:26:31:0f:55:6e:05:c5:82:21:9c:04: fb:fb:49:0e:3f:86:be:5a:34:10:8a:66:df:9b:2c:0c:e4:82: 22:48:12:a7:da:51:37:40:a0:cd:31:6f:52:27:a8:4b:94:5d: 29:95:de:c0:92:bc:19:ce:fe:b8:cc:f4:d8:16:fe:5a:3f:e7: 1f:c4:07:17:45:c1:83:de:12:53:a7:2d:84:a8:98:ce:a5:f3: 7e:ed:cd:f4:c0:c3:0a:61:7b:d1:6c:a0:e1:1d:fe:86:cd:00: 12:07:8d:a1:82:c0:24:61:a1:3a:02:be:5a:6c:1a:00:b3:73: 34:36:65:fc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWElnifwm+QXkaufC7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjlkMzViNWQtYjU2YS00OWVhLWJlMDEtZmNiZmY4ZTAy ZmNmMB4XDTI1MDQwMzE1MDAwM1oXDTI1MDQwNjE1MDAwMFowLzEtMCsGA1UEAxMk NTBlZTBjYTMtYjcwZi00MzY2LWEyODgtNTg0ZDI0MGNiZjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7kW0w+PklkYvknuz1TZ5uidsuxhQY2Vn8Vp 85XpXtEx0/tb/dL00bXqZHGpjS7F0t83XupTwCDoQv4kLpwIFIqzMo1EAyM6ZDfw e0Bgfom2VukMNkIxXww6U8xBOm4B7fY+UFD5gwDq8CaUCfY90MFHiospAVHtRyg8 e7vDMOYHM1oK9b/ZpBYcBS0oczB0tOysEA7lOpTHBfNFENVoLrjDdyrDyc7aozUB suoMMa6KM05GEpXvY0sNYGFaRA2tm5iUEn6wNd+Cp+XQr+QQFe6kRV46QBawfRmt G8Cf0yPgfeDY4bucTkdleZmUM2UkeUdL8O6DsDSvhue0j90MPQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFKfL5ghqluF1QjnqxvG8chqBQ3sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yOWQz NWI1ZC1iNTZhLTQ5ZWEtYmUwMS1mY2JmZjhlMDJmY2YvMjlkMzViNWQtYjU2YS00 OWVhLWJlMDEtZmNiZmY4ZTAyZmNmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjlkMzViNWQtYjU2YS00OWVhLWJl MDEtZmNiZmY4ZTAyZmNmLzI5ZDM1YjVkLWI1NmEtNDllYS1iZTAxLWZjYmZmOGUw MmZjZi5jcmwwHwYDVR0jBBgwFoAUCuttE9fwYHuK0QB7KKCVi0UQpC0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yOWQzNWI1ZC1iNTZhLTQ5ZWEtYmUwMS1mY2Jm ZjhlMDJmY2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAwj5hN/9Q0bYrJG5Clgge2 9BCfB7Fxhc2YBERheKouX0R6KP2dwbbPvpr5hnGAysmwmpIDq3t0nfFYtkf4hn+x wgPpDDJc8lK6DF3MlyehYvGX8meRQtYQfuKAqVHC4CRhbjXGi6CNd90EqcWBXQVw 9UWOz58FGBgTQhM5c72rhuHv0Q4GJjEPVW4FxYIhnAT7+0kOP4a+WjQQimbfmywM 5IIiSBKn2lE3QKDNMW9SJ6hLlF0pld7AkrwZzv64zPTYFv5aP+cfxAcXRcGD3hJT py2EqJjOpfN+7c30wMMKYXvRbKDhHf6GzQASB42hgsAkYaE6Ar5abBoAs3M0NmX8 -----END CERTIFICATE-----Generated at Thu Apr 3 22:18:40 2025 by rpki-client