$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/01b2d667-c096-462f-9ad9-6391b09e9746.mft File: 01b2d667-c096-462f-9ad9-6391b09e9746.mft (raw, json) Hash identifier: 3vvcGN4ySe+vMd08pQzJ1MQBMmwr3HUVwCe9fIVc+1U= Subject key identifier: 86:BA:A2:15:B2:82:28:8F:19:BB:56:82:91:FA:D6:AB:F8:AC:FD:47 Authority key identifier: EF:55:74:99:02:9B:7D:CA:4F:EF:EE:5F:8A:11:58:6F:46:D7:2F:B1 Certificate issuer: /CN=01b2d667-c096-462f-9ad9-6391b09e9746 Certificate serial: 010D0C9F43285849C0FDA8D46844BE1684E32B40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/01b2d667-c096-462f-9ad9-6391b09e9746.mft Manifest number: 010D0C9F432858496A8E452CA1A4985B47E679A3 Signing time: Mon 05 May 2025 16:00:03 +0000 Manifest this update: Mon 05 May 2025 16:00:03 +0000 Manifest next update: Wed 07 May 2025 16:00:00 +0000 Files and hashes: 1: 01b2d667-c096-462f-9ad9-6391b09e9746.crl (hash: p7D5pUJWDHXgmV17EX8PUIT7/vRiyFyyjGwKMzQWndI=) 2: 188cf477-528b-33dd-b162-1bba1bd7e1c9.roa (hash: ffCOpJpY7Nce1daD2jL9HEeU6JzUF3GUIJcX3ZzPNAY=) 3: 2dd74a6d-3813-3171-a4e0-9bf74f942879.roa (hash: Nt1wGA0nW2F7izZZHhQ85czcmBXF1RzbdSeAdlB+fro=) 4: 92955305-866b-3a61-b99e-62f5778e6046.roa (hash: 5eRYHMPTosq4WV8Dafw/TKe8ksHW8sTaicbB6htF7fI=) 5: f722ad9f-9529-34f6-b01e-6e78de3ae7af.roa (hash: 3RDZUzS0PHO60w0FtCwyu0TsTQF00OnoKo+Wl12IiPo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/01b2d667-c096-462f-9ad9-6391b09e9746.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/01b2d667-c096-462f-9ad9-6391b09e9746.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:fd:a8:d4:68:44:be:16:84:e3:2b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01b2d667-c096-462f-9ad9-6391b09e9746 Validity Not Before: May 5 16:00:03 2025 GMT Not After : May 7 16:00:00 2025 GMT Subject: CN=308c9bcd-90f2-45a8-876a-2c8bb45d8c84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:88:7f:6f:a6:9f:3f:11:e5:9b:0d:93:b9:ed: b4:16:b9:83:53:cb:38:f6:c1:c5:6d:9c:a1:1f:fc: e3:f0:83:14:9d:5d:39:e9:16:6d:c8:c0:49:23:c6: 15:88:a3:5d:75:0b:45:be:da:d0:f5:f6:c4:06:51: 60:87:cb:59:61:9f:8f:0d:ba:49:7d:1b:ee:e5:9d: d4:4b:53:b1:0f:7a:60:48:57:f0:4d:05:89:c0:df: fa:01:dd:9b:52:f3:a2:04:88:f0:4a:d1:f4:56:12: 7d:14:50:5b:6c:40:82:f3:d1:4e:3c:85:e2:6d:40: 08:bb:91:80:07:df:37:c6:0b:2d:6a:a7:11:e0:30: 41:6f:1f:e5:02:3e:d8:fe:a6:7f:b0:a7:3f:c5:76: 4a:b9:0b:06:26:5f:ef:46:8f:dd:11:ff:a5:11:00: 53:55:a4:e0:b8:00:86:2f:94:07:95:d5:01:ac:0f: 5e:95:6f:77:ab:cc:80:0e:6d:77:8b:29:da:f6:6e: 1b:7b:06:f5:29:5c:b9:23:6a:0f:bd:30:be:60:56: 3f:c0:54:21:62:85:f1:5f:4c:ff:fe:80:51:39:4b: 68:0e:fa:72:69:bc:a1:2a:cf:eb:2b:77:8c:de:9e: 73:36:4a:f5:9a:e4:5e:9b:67:d1:b9:48:a9:f6:49: 3d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:BA:A2:15:B2:82:28:8F:19:BB:56:82:91:FA:D6:AB:F8:AC:FD:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/01b2d667-c096-462f-9ad9-6391b09e9746.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/01b2d667-c096-462f-9ad9-6391b09e9746.crl X509v3 Authority Key Identifier: keyid:EF:55:74:99:02:9B:7D:CA:4F:EF:EE:5F:8A:11:58:6F:46:D7:2F:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:95:b8:3a:93:0b:22:a1:d1:9f:8e:1a:3c:fd:f8:db:8c:f7: e1:dc:2e:27:67:6a:e0:9b:2d:ed:e0:92:ed:98:2a:78:44:b7: a6:3d:2b:ee:6c:5b:23:57:9c:b3:fe:af:34:ea:53:21:e4:5e: 7f:aa:a8:93:60:44:fa:00:f0:9c:4e:ba:e4:87:7c:e5:eb:52: 14:ff:7c:36:fa:5f:3d:e5:9e:02:7c:58:1b:a9:31:64:8c:1d: 30:ec:d1:bd:3d:6c:e5:4c:e4:b3:10:f5:e4:7e:0c:fe:70:f2: 82:99:01:b0:09:9b:97:6b:42:04:39:2a:f5:ed:59:c8:fc:61: 97:53:5f:a7:ea:f3:dc:62:64:2a:d4:56:05:d9:4b:1d:00:fb: 33:ae:96:3c:a8:ac:eb:61:35:e9:48:04:e7:c8:86:f8:7b:d8: b0:73:f4:a6:04:0e:b4:57:94:aa:3b:72:86:5c:db:85:4d:45: b8:a9:c7:38:b1:8e:40:f9:eb:a9:02:11:c5:7c:c8:e3:b4:2a: a5:24:99:79:89:07:e6:05:40:9c:42:c3:bb:34:86:28:83:f9: 6e:67:84:7d:63:20:94:75:4a:84:34:7f:a5:47:f7:15:95:68: 14:8e:f5:2d:fe:4f:67:71:04:26:de:90:b2:ff:2f:91:aa:0c: c6:e6:8c:bf -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnA/ajUaES+FoTjK0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDFiMmQ2NjctYzA5Ni00NjJmLTlhZDktNjM5MWIwOWU5 NzQ2MB4XDTI1MDUwNTE2MDAwM1oXDTI1MDUwNzE2MDAwMFowLzEtMCsGA1UEAxMk MzA4YzliY2QtOTBmMi00NWE4LTg3NmEtMmM4YmI0NWQ4Yzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIh/b6afPxHlmw2Tue20FrmDU8s49sHFbZyh H/zj8IMUnV056RZtyMBJI8YViKNddQtFvtrQ9fbEBlFgh8tZYZ+PDbpJfRvu5Z3U S1OxD3pgSFfwTQWJwN/6Ad2bUvOiBIjwStH0VhJ9FFBbbECC89FOPIXibUAIu5GA B983xgstaqcR4DBBbx/lAj7Y/qZ/sKc/xXZKuQsGJl/vRo/dEf+lEQBTVaTguACG L5QHldUBrA9elW93q8yADm13iyna9m4bewb1KVy5I2oPvTC+YFY/wFQhYoXxX0z/ /oBROUtoDvpyabyhKs/rK3eM3p5zNkr1muRem2fRuUip9kk9HQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIa6ohWygiiPGbtWgpH61qv4rP1HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wMWIy ZDY2Ny1jMDk2LTQ2MmYtOWFkOS02MzkxYjA5ZTk3NDYvMDFiMmQ2NjctYzA5Ni00 NjJmLTlhZDktNjM5MWIwOWU5NzQ2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDFiMmQ2NjctYzA5Ni00NjJmLTlh ZDktNjM5MWIwOWU5NzQ2LzAxYjJkNjY3LWMwOTYtNDYyZi05YWQ5LTYzOTFiMDll OTc0Ni5jcmwwHwYDVR0jBBgwFoAU71V0mQKbfcpP7+5fihFYb0bXL7EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wMWIyZDY2Ny1jMDk2LTQ2MmYtOWFkOS02Mzkx YjA5ZTk3NDYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAplbg6kwsiodGfjho8/fjb jPfh3C4nZ2rgmy3t4JLtmCp4RLemPSvubFsjV5yz/q806lMh5F5/qqiTYET6APCc Trrkh3zl61IU/3w2+l895Z4CfFgbqTFkjB0w7NG9PWzlTOSzEPXkfgz+cPKCmQGw CZuXa0IEOSr17VnI/GGXU1+n6vPcYmQq1FYF2UsdAPszrpY8qKzrYTXpSATnyIb4 e9iwc/SmBA60V5SqO3KGXNuFTUW4qcc4sY5A+eupAhHFfMjjtCqlJJl5iQfmBUCc QsO7NIYog/luZ4R9YyCUdUqENH+lR/cVlWgUjvUt/k9ncQQm3pCy/y+RqgzG5oy/ -----END CERTIFICATE-----Generated at Mon May 5 23:43:49 2025 by rpki-client