$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.mft File: 10aa04f0-7421-4813-bfda-269303d05d1d.mft (raw, json) Hash identifier: Fl5108lQ5bSfU5+5C8N0DQRwRsArRFayQRS5cCeuWZk= Subject key identifier: 8B:75:9F:B9:DB:8A:FF:23:13:84:F7:36:FD:E9:1D:02:F8:5B:20:F5 Authority key identifier: 4C:67:C6:2B:93:24:A6:E4:6A:F7:D6:8B:AA:7D:A5:9F:6A:13:7E:02 Certificate issuer: /CN=10aa04f0-7421-4813-bfda-269303d05d1d Certificate serial: 010D0C9F432858497E1B0C608E51023055EEB180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.mft Manifest number: 010D0C9F4328584203128B762DBC9412083D0CF5 Signing time: Fri 11 Apr 2025 17:00:07 +0000 Manifest this update: Fri 11 Apr 2025 17:00:07 +0000 Manifest next update: Mon 14 Apr 2025 17:00:00 +0000 Files and hashes: 1: 10aa04f0-7421-4813-bfda-269303d05d1d.crl (hash: 8ptV8qaA2rbAdQ10BHX/4U1TuFdwP6ZTZoY6QqCw2A0=) 2: 3fb7cd4a-dfa1-32e1-a311-ab18aeb1b13a.roa (hash: iWZuYl8tFQ5OIf6xvqA6QnLHPYVgWVACdjfZ3nimHcY=) 3: 663e90a8-582d-388a-8c51-a87ffad4ecb2.roa (hash: VlCj2/SunmjBAzYotD0YHRPXp0pFfqgp5YEPotP/YhY=) 4: 9aa7958f-f196-3a7a-b81c-c403cd9be274.roa (hash: X3A8BvkcF7AUhj0GOWpvks/HYJc8od3RBuGdpb45W68=) 5: b5f0e06a-af60-38fc-9dee-3312e7c2b8e5.roa (hash: qvgRQYCqBADZRNERSl8z8ig61xkI1Bv6DQSV0kKdQzU=) 6: d23c1663-1dc9-338f-b7d7-799b68465589.roa (hash: UnYq6PvDIy4qvFnaoqLlCYNjpptevfme0DFXcwN9Zog=) 7: f82fc5d7-4c78-3149-849d-64462b0104bd.roa (hash: QbOKX45cXILndDzmqsTeNQ1G3oqGgW5P1HCVnbfj3cQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7e:1b:0c:60:8e:51:02:30:55:ee:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10aa04f0-7421-4813-bfda-269303d05d1d Validity Not Before: Apr 11 17:00:07 2025 GMT Not After : Apr 14 17:00:00 2025 GMT Subject: CN=84969d9c-2869-460e-8c1b-e88969a380f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8f:e3:70:e3:dc:14:6f:52:13:61:b2:71:6c: ce:f5:aa:5f:f5:00:5e:8e:94:b6:68:1b:f8:98:16: 4e:99:3e:4f:eb:ae:06:74:47:93:92:42:e4:68:0b: bc:0e:ab:cf:4d:c9:74:8e:14:f5:81:c1:7d:70:48: df:72:ca:64:f8:9f:af:85:8c:67:cd:33:e6:6d:64: e5:b4:20:a0:ae:4f:30:e4:2e:07:99:75:18:82:23: 43:5d:8a:fd:db:28:75:67:cd:26:b9:e9:37:be:03: eb:cf:f7:e5:26:d6:76:bf:a4:6e:0e:9e:a8:18:35: 5f:dd:31:ec:2f:71:11:63:da:02:3d:8e:dc:7b:80: 95:51:84:e9:9f:6e:10:58:2d:a3:1f:78:af:d8:cc: fb:4c:f5:84:ea:e3:7d:3f:ab:f4:02:81:c8:2c:8c: de:72:df:39:28:ec:02:56:5d:45:0c:49:17:fa:09: a1:31:4f:7f:e0:f8:10:1e:af:02:37:e4:31:76:d8: 8d:aa:fa:74:f5:38:ad:b8:e3:05:2e:29:94:fc:1a: ae:d6:85:0e:68:ce:dd:ac:20:49:a2:3c:ab:49:65: f6:a7:85:e2:8e:86:87:d7:e4:cd:36:52:38:ae:37: 0a:0d:5b:30:62:57:87:de:05:c4:45:59:cb:c8:f6: c4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:75:9F:B9:DB:8A:FF:23:13:84:F7:36:FD:E9:1D:02:F8:5B:20:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.crl X509v3 Authority Key Identifier: keyid:4C:67:C6:2B:93:24:A6:E4:6A:F7:D6:8B:AA:7D:A5:9F:6A:13:7E:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:46:3a:82:ef:da:5f:97:fb:01:22:09:7b:c2:75:d6:06:41: d1:2c:38:eb:fd:93:c8:3d:d2:37:df:d6:95:fe:83:ec:07:44: 31:5f:88:00:e9:11:41:21:0e:57:1c:fe:1a:be:db:00:e3:53: fd:a1:b5:34:0e:ca:52:68:df:56:5b:ea:20:18:47:14:70:d2: b0:78:34:84:33:00:c6:bb:bb:f2:61:94:0a:10:e0:a1:7b:c3: eb:fc:0c:43:93:de:e3:13:a7:9d:ed:97:7b:99:bb:ab:94:9a: 5f:21:55:0a:81:bd:53:b1:51:ce:53:9c:d9:14:cb:89:07:e4: 7a:67:30:bd:61:b4:92:7e:cc:29:6a:a5:35:ef:ab:e9:9c:c4: 12:ba:bb:1c:b1:33:89:ea:1f:0e:9e:db:5f:8e:29:21:2e:23: 94:c6:b1:b6:82:c8:00:01:61:dd:20:5e:04:57:cb:d1:4d:b6: c9:aa:8d:8a:82:31:c5:ac:33:28:87:12:f8:9f:99:59:e6:36: 0d:33:85:82:f7:b8:56:ce:07:48:19:d9:68:7d:37:15:20:7c: ae:eb:91:9f:77:0a:34:a9:98:27:b6:e4:6c:5d:94:95:fb:2c: c7:a7:67:b9:53:bb:ca:41:50:83:5d:77:34:ed:7f:33:28:91: 02:0b:85:b7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl+GwxgjlECMFXusYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTBhYTA0ZjAtNzQyMS00ODEzLWJmZGEtMjY5MzAzZDA1 ZDFkMB4XDTI1MDQxMTE3MDAwN1oXDTI1MDQxNDE3MDAwMFowLzEtMCsGA1UEAxMk ODQ5NjlkOWMtMjg2OS00NjBlLThjMWItZTg4OTY5YTM4MGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyY/jcOPcFG9SE2GycWzO9apf9QBejpS2aBv4 mBZOmT5P664GdEeTkkLkaAu8DqvPTcl0jhT1gcF9cEjfcspk+J+vhYxnzTPmbWTl tCCgrk8w5C4HmXUYgiNDXYr92yh1Z80muek3vgPrz/flJtZ2v6RuDp6oGDVf3THs L3ERY9oCPY7ce4CVUYTpn24QWC2jH3iv2Mz7TPWE6uN9P6v0AoHILIzect85KOwC Vl1FDEkX+gmhMU9/4PgQHq8CN+QxdtiNqvp09TituOMFLimU/Bqu1oUOaM7drCBJ ojyrSWX2p4XijoaH1+TNNlI4rjcKDVswYleH3gXERVnLyPbEeQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIt1n7nbiv8jE4T3Nv3pHQL4WyD1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xMGFh MDRmMC03NDIxLTQ4MTMtYmZkYS0yNjkzMDNkMDVkMWQvMTBhYTA0ZjAtNzQyMS00 ODEzLWJmZGEtMjY5MzAzZDA1ZDFkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTBhYTA0ZjAtNzQyMS00ODEzLWJm ZGEtMjY5MzAzZDA1ZDFkLzEwYWEwNGYwLTc0MjEtNDgxMy1iZmRhLTI2OTMwM2Qw NWQxZC5jcmwwHwYDVR0jBBgwFoAUTGfGK5MkpuRq99aLqn2ln2oTfgIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xMGFhMDRmMC03NDIxLTQ4MTMtYmZkYS0yNjkz MDNkMDVkMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQByRjqC79pfl/sBIgl7wnXW BkHRLDjr/ZPIPdI339aV/oPsB0QxX4gA6RFBIQ5XHP4avtsA41P9obU0DspSaN9W W+ogGEcUcNKweDSEMwDGu7vyYZQKEOChe8Pr/AxDk97jE6ed7Zd7mburlJpfIVUK gb1TsVHOU5zZFMuJB+R6ZzC9YbSSfswpaqU176vpnMQSurscsTOJ6h8Onttfjikh LiOUxrG2gsgAAWHdIF4EV8vRTbbJqo2KgjHFrDMohxL4n5lZ5jYNM4WC97hWzgdI GdlofTcVIHyu65Gfdwo0qZgntuRsXZSV+yzHp2e5U7vKQVCDXXc07X8zKJECC4W3 -----END CERTIFICATE-----Generated at Fri Apr 11 23:15:05 2025 by rpki-client