$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/5cf06829-25a9-43c5-8a21-38599a1fb23f.mft File: 5cf06829-25a9-43c5-8a21-38599a1fb23f.mft (raw, json) Hash identifier: 3iHRP4OzvGNxN4GmIg0L/oXWglFGecP4H3va1GNB2kQ= Subject key identifier: 9A:60:5F:E0:61:77:07:84:68:C5:B9:2B:E0:C8:F2:AB:F7:AF:77:1B Authority key identifier: 1F:D9:E9:E3:A1:33:F1:2A:E1:D0:E5:46:B8:F3:20:DB:A1:1B:6D:C0 Certificate issuer: /CN=5cf06829-25a9-43c5-8a21-38599a1fb23f Certificate serial: 010D0C9F43285848C65102442FB7D91BC98B3580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/5cf06829-25a9-43c5-8a21-38599a1fb23f.mft Manifest number: 010D0C9F432858487DD40B7FFCCD9DDF802DB91D Signing time: Tue 04 Feb 2025 21:00:07 +0000 Manifest this update: Tue 04 Feb 2025 21:00:07 +0000 Manifest next update: Fri 07 Feb 2025 21:00:00 +0000 Files and hashes: 1: 5cf06829-25a9-43c5-8a21-38599a1fb23f.crl (hash: DJHkor7QBcsF+ruEN3/UvSw/GgUpyiY8Vt2aTV5b2W4=) 2: 66b5b82a-36b3-3a97-a9d7-81ea8dad7eb5.roa (hash: 56JcQ5vqa3ncXOA5FuhOZTNank6qfRk0AVUgHm+X/bQ=) 3: 8c4f7852-a07a-3eba-be77-b7b40082b3d1.roa (hash: MIV1tgnw2eob/dLjvWXo2jdai7lm93b28ioIb/HTXDs=) 4: b6306e0b-692d-3d91-95be-0462ce3e2584.roa (hash: fiwZ1MfAmINM9tJy0wLK4KSkFO/VNXmrUG3qSC6HdAU=) 5: f393c755-1aa5-3164-81e7-6f8c412d59a2.roa (hash: CPF5Nh7qWWoLM8vPrpuZOyR6N28CR0QWBwYr1nIKkbg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/5cf06829-25a9-43c5-8a21-38599a1fb23f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/5cf06829-25a9-43c5-8a21-38599a1fb23f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c6:51:02:44:2f:b7:d9:1b:c9:8b:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cf06829-25a9-43c5-8a21-38599a1fb23f Validity Not Before: Feb 4 21:00:07 2025 GMT Not After : Feb 7 21:00:00 2025 GMT Subject: CN=222c053c-0483-4c22-9b32-dbac7bca42cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ad:8f:f5:79:5a:24:31:f2:92:24:bd:ce:f0: fa:ce:f1:12:81:3f:36:30:f4:55:28:74:62:20:bf: 11:f3:44:c5:c8:d6:f8:39:88:f0:4b:7b:8d:a7:ce: a5:39:87:c2:47:f9:da:5a:df:de:45:b3:bc:73:1e: a7:4c:18:07:71:78:d0:7b:be:1f:97:d0:c8:43:1a: a8:51:6c:74:c9:79:c6:27:f5:dd:b5:f6:b8:85:a8: a3:d1:13:90:d9:b7:2a:be:c9:2a:47:36:cf:a5:2f: 58:bf:b5:21:92:be:09:00:2a:5c:3b:8d:e5:40:d3: 7b:de:22:29:40:58:ec:c7:8b:78:6f:43:cb:20:f1: 69:06:64:42:ec:24:db:93:bd:57:a6:72:97:a3:9b: 9a:88:d4:13:17:9a:0f:37:7f:74:eb:61:c7:cf:39: e0:41:8a:39:23:ac:b5:18:72:f1:f9:07:ac:e1:52: 5f:c5:c1:ae:15:8f:91:3d:13:cd:aa:eb:da:d0:ab: ff:22:c3:d3:7e:74:d0:52:d3:e9:ed:9d:37:88:8a: d8:31:1c:35:ff:4e:d1:e0:81:38:61:cf:9d:3a:9c: 1a:0b:e8:c8:13:2b:66:76:de:9e:a4:4f:5a:30:97: 55:f0:f5:38:d4:3c:c1:01:99:60:4b:d7:53:cc:a7: bc:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:60:5F:E0:61:77:07:84:68:C5:B9:2B:E0:C8:F2:AB:F7:AF:77:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/5cf06829-25a9-43c5-8a21-38599a1fb23f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/5cf06829-25a9-43c5-8a21-38599a1fb23f.crl X509v3 Authority Key Identifier: keyid:1F:D9:E9:E3:A1:33:F1:2A:E1:D0:E5:46:B8:F3:20:DB:A1:1B:6D:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:76:00:e2:0a:c8:10:77:90:fc:82:0e:0e:7c:8e:27:fa:79: c0:31:bd:12:83:70:e8:7f:e5:09:b8:a1:37:a3:35:15:96:73: 6d:e5:99:5b:3c:2a:44:f3:0a:3a:6e:d2:c8:5a:2b:05:8b:3b: 11:46:2c:21:32:6a:17:36:c4:18:24:82:91:9f:c6:b4:db:12: 5d:00:93:ce:56:97:85:f6:98:c5:17:9e:85:16:80:6f:17:f9: 2d:89:dc:8c:d3:9b:ad:e7:1e:48:ae:0a:08:cc:be:9e:04:26: 5d:01:62:40:88:b6:32:e3:51:31:34:b7:60:f8:5f:22:79:db: 89:ce:0c:2f:d8:52:59:64:10:f8:a7:a0:19:fb:48:e2:d4:a3: e5:7b:9d:cb:62:9d:7d:46:52:7c:9b:c5:e5:61:41:d8:0e:4d: 93:dc:4c:e5:54:74:d1:a8:88:77:36:f5:ee:56:07:9d:81:73: 9a:47:07:de:9b:77:a2:c3:53:c5:95:6c:6d:af:ab:ba:4c:66: cf:b9:52:60:d9:0a:ba:49:fa:c3:aa:f9:5f:ab:1e:6e:c7:84: ac:91:1f:0d:5e:78:bb:b7:c9:c0:3c:fc:7d:68:65:b5:47:13: 45:cb:a7:e0:61:8f:76:6e:54:35:20:75:ae:f9:29:02:6c:9e: a9:0b:f7:5b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEjGUQJEL7fZG8mLNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNmMDY4MjktMjVhOS00M2M1LThhMjEtMzg1OTlhMWZi MjNmMB4XDTI1MDIwNDIxMDAwN1oXDTI1MDIwNzIxMDAwMFowLzEtMCsGA1UEAxMk MjIyYzA1M2MtMDQ4My00YzIyLTliMzItZGJhYzdiY2E0MmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlK2P9XlaJDHykiS9zvD6zvESgT82MPRVKHRi IL8R80TFyNb4OYjwS3uNp86lOYfCR/naWt/eRbO8cx6nTBgHcXjQe74fl9DIQxqo UWx0yXnGJ/Xdtfa4haij0ROQ2bcqvskqRzbPpS9Yv7Uhkr4JACpcO43lQNN73iIp QFjsx4t4b0PLIPFpBmRC7CTbk71XpnKXo5uaiNQTF5oPN39062HHzzngQYo5I6y1 GHLx+Qes4VJfxcGuFY+RPRPNquva0Kv/IsPTfnTQUtPp7Z03iIrYMRw1/07R4IE4 Yc+dOpwaC+jIEytmdt6epE9aMJdV8PU41DzBAZlgS9dTzKe8qwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJpgX+BhdweEaMW5K+DI8qv3r3cbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81Y2Yw NjgyOS0yNWE5LTQzYzUtOGEyMS0zODU5OWExZmIyM2YvNWNmMDY4MjktMjVhOS00 M2M1LThhMjEtMzg1OTlhMWZiMjNmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWNmMDY4MjktMjVhOS00M2M1LThh MjEtMzg1OTlhMWZiMjNmLzVjZjA2ODI5LTI1YTktNDNjNS04YTIxLTM4NTk5YTFm YjIzZi5jcmwwHwYDVR0jBBgwFoAUH9np46Ez8Srh0OVGuPMg26EbbcAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81Y2YwNjgyOS0yNWE5LTQzYzUtOGEyMS0zODU5 OWExZmIyM2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA2dgDiCsgQd5D8gg4OfI4n +nnAMb0Sg3Dof+UJuKE3ozUVlnNt5ZlbPCpE8wo6btLIWisFizsRRiwhMmoXNsQY JIKRn8a02xJdAJPOVpeF9pjFF56FFoBvF/ktidyM05ut5x5IrgoIzL6eBCZdAWJA iLYy41ExNLdg+F8ieduJzgwv2FJZZBD4p6AZ+0ji1KPle53LYp19RlJ8m8XlYUHY Dk2T3EzlVHTRqIh3NvXuVgedgXOaRwfem3eiw1PFlWxtr6u6TGbPuVJg2Qq6SfrD qvlfqx5ux4SskR8NXni7t8nAPPx9aGW1RxNFy6fgYY92blQ1IHWu+SkCbJ6pC/db -----END CERTIFICATE-----Generated at Wed Feb 5 12:39:30 2025 by rpki-client