$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522/563c2ad3-4e5e-4758-b1be-07bf4ce94522.mft File: 563c2ad3-4e5e-4758-b1be-07bf4ce94522.mft (raw, json) Hash identifier: xcYdUDUrt4o/nenq44yehXdLpS06HQak0vvDDrVILTo= Subject key identifier: 6F:AC:8E:2A:56:97:0A:8C:9A:9D:AD:10:C7:6B:5F:57:8B:F5:A0:2F Authority key identifier: E4:1D:68:AD:2A:A1:CA:56:12:93:53:E0:77:2B:30:47:23:63:15:1B Certificate issuer: /CN=563c2ad3-4e5e-4758-b1be-07bf4ce94522 Certificate serial: 010D0C9F432858497D6856A52D9E05D0C8E19840 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522/563c2ad3-4e5e-4758-b1be-07bf4ce94522.mft Manifest number: 010D0C9F4328584659635AAD1FAC57ACCE84CA2D Signing time: Fri 11 Apr 2025 11:00:03 +0000 Manifest this update: Fri 11 Apr 2025 11:00:03 +0000 Manifest next update: Mon 14 Apr 2025 11:00:00 +0000 Files and hashes: 1: 0291bcbe-b4c2-3602-a93c-b0dc8bc0d999.roa (hash: 78QwWKXp2ON/eLIIBYU97Bf5Rd5MZIVkcLby2++GRqs=) 2: 1a9f6371-5de6-348f-926c-183d129cf5d2.roa (hash: l8wluitkbLdQ2A5wYsPl7XMI6ajz2VHUOrEk89VQijg=) 3: 563c2ad3-4e5e-4758-b1be-07bf4ce94522.crl (hash: kLsFjPY3H3LO94kN3LfVQJCcwasaUSai/+GmKVISeTU=) 4: a43ea527-a9e0-36fa-8d5e-c6f038a541a8.roa (hash: P9wOUnS5vP7YajqvqtyzWteDoKoYguM5pQ7L3BrZllw=) 5: dead6050-98df-3104-a6a9-4165e6d47a7d.roa (hash: b3ZeEdgLecJ1QgklCaf/NZPTeaVqfnuwsZjYtypEYms=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522/563c2ad3-4e5e-4758-b1be-07bf4ce94522.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522/563c2ad3-4e5e-4758-b1be-07bf4ce94522.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:68:56:a5:2d:9e:05:d0:c8:e1:98:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=563c2ad3-4e5e-4758-b1be-07bf4ce94522 Validity Not Before: Apr 11 11:00:03 2025 GMT Not After : Apr 14 11:00:00 2025 GMT Subject: CN=a9a15d48-1271-4b4a-8197-24d3041dc2d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:40:19:7e:8a:c8:fa:02:f4:9a:cc:43:d5:d6: ff:9b:f5:2b:d0:36:e7:48:d5:ae:35:58:72:2e:e9: 55:3c:46:00:a7:ce:75:88:25:00:80:05:b6:a0:42: 5e:3d:1f:8e:2d:a5:f4:1e:ae:3f:ff:a3:17:c3:3b: 6f:9f:26:fc:e6:80:cb:a1:a2:fb:e3:22:29:9e:80: c3:bc:a0:8a:ad:43:e9:8b:c5:48:8e:5f:d9:94:82: 44:ab:3c:ea:cf:3b:e1:7c:ed:f5:db:d6:ba:01:cf: 23:dd:b0:48:88:99:e6:4a:c4:d8:a5:9d:f3:ef:0f: 56:e1:54:c0:b7:74:ed:d4:76:2f:da:d1:e9:72:44: ea:72:5d:7d:bd:8e:e4:45:74:ca:c8:db:3a:dc:cb: 70:65:a3:fb:fc:92:b2:6b:2f:ff:4f:64:17:05:3a: 3c:30:1d:6c:9a:7c:f4:80:29:f1:20:33:a8:82:ee: de:31:80:29:f9:6b:93:65:68:d6:bc:7a:99:5e:67: 57:6d:f7:be:f7:6f:8d:01:14:bf:d2:39:06:4c:ae: c2:38:dd:e7:58:ec:91:cc:9c:73:09:1e:40:4d:72: 94:98:44:09:f4:06:ab:a9:cd:65:b4:30:9b:21:ed: 68:14:51:e5:e6:1d:f9:be:4e:19:66:ae:6e:f3:37: af:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:AC:8E:2A:56:97:0A:8C:9A:9D:AD:10:C7:6B:5F:57:8B:F5:A0:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522/563c2ad3-4e5e-4758-b1be-07bf4ce94522.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522/563c2ad3-4e5e-4758-b1be-07bf4ce94522.crl X509v3 Authority Key Identifier: keyid:E4:1D:68:AD:2A:A1:CA:56:12:93:53:E0:77:2B:30:47:23:63:15:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:f6:63:b8:2d:27:dd:8a:e1:dc:ea:04:f0:5b:ef:d9:2d:23: 36:c4:c9:6f:e8:4d:bd:56:45:3b:6b:97:55:d2:b6:f6:50:52: f5:3e:6d:65:ce:45:ad:9d:ea:3d:d9:7e:a1:b9:54:06:a3:42: 27:a2:c4:4e:fd:10:95:60:bb:49:d4:2e:a3:4b:5e:fb:9a:4a: 24:47:01:55:0f:b3:59:06:f9:68:af:94:0a:1a:02:d7:70:12: 25:f7:ec:05:fe:e6:19:3f:d7:b7:76:7b:ec:b6:9c:fd:fd:f2: 35:f6:35:2a:e7:0b:4a:46:59:c4:ad:2b:5c:bd:2d:93:55:c0: a1:d7:00:7e:ac:f9:0b:28:b4:2f:e5:6b:ec:9d:da:87:be:d8: e6:d4:f4:a0:73:d5:cf:c9:0a:72:75:cf:0b:eb:da:6c:fe:46: eb:b3:af:6b:91:66:6e:1c:c7:07:a1:9f:35:56:23:47:50:ee: dd:d0:91:5b:bb:82:7c:26:bb:da:bd:28:99:35:37:85:20:10: 0f:80:18:50:76:aa:82:5f:ad:4c:f7:5f:b8:0a:37:f9:35:50: 83:b7:85:2f:d3:65:01:a1:ef:5b:b7:1f:99:95:72:31:8c:62: 4b:90:5a:cf:3f:08:42:ed:7d:9e:e3:37:ba:22:8b:a0:5f:65: ee:75:98:87 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl9aFalLZ4F0MjhmEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTYzYzJhZDMtNGU1ZS00NzU4LWIxYmUtMDdiZjRjZTk0 NTIyMB4XDTI1MDQxMTExMDAwM1oXDTI1MDQxNDExMDAwMFowLzEtMCsGA1UEAxMk YTlhMTVkNDgtMTI3MS00YjRhLTgxOTctMjRkMzA0MWRjMmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokAZforI+gL0msxD1db/m/Ur0DbnSNWuNVhy LulVPEYAp851iCUAgAW2oEJePR+OLaX0Hq4//6MXwztvnyb85oDLoaL74yIpnoDD vKCKrUPpi8VIjl/ZlIJEqzzqzzvhfO3129a6Ac8j3bBIiJnmSsTYpZ3z7w9W4VTA t3Tt1HYv2tHpckTqcl19vY7kRXTKyNs63MtwZaP7/JKyay//T2QXBTo8MB1smnz0 gCnxIDOogu7eMYAp+WuTZWjWvHqZXmdXbfe+92+NARS/0jkGTK7CON3nWOyRzJxz CR5ATXKUmEQJ9Aarqc1ltDCbIe1oFFHl5h35vk4ZZq5u8zevSwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFG+sjipWlwqMmp2tEMdrX1eL9aAvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NjNj MmFkMy00ZTVlLTQ3NTgtYjFiZS0wN2JmNGNlOTQ1MjIvNTYzYzJhZDMtNGU1ZS00 NzU4LWIxYmUtMDdiZjRjZTk0NTIyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTYzYzJhZDMtNGU1ZS00NzU4LWIx YmUtMDdiZjRjZTk0NTIyLzU2M2MyYWQzLTRlNWUtNDc1OC1iMWJlLTA3YmY0Y2U5 NDUyMi5jcmwwHwYDVR0jBBgwFoAU5B1orSqhylYSk1PgdyswRyNjFRswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NjNjMmFkMy00ZTVlLTQ3NTgtYjFiZS0wN2Jm NGNlOTQ1MjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBz9mO4LSfdiuHc6gTwW+/Z LSM2xMlv6E29VkU7a5dV0rb2UFL1Pm1lzkWtneo92X6huVQGo0InosRO/RCVYLtJ 1C6jS177mkokRwFVD7NZBvlor5QKGgLXcBIl9+wF/uYZP9e3dnvstpz9/fI19jUq 5wtKRlnErStcvS2TVcCh1wB+rPkLKLQv5WvsndqHvtjm1PSgc9XPyQpydc8L69ps /kbrs69rkWZuHMcHoZ81ViNHUO7d0JFbu4J8JrvavSiZNTeFIBAPgBhQdqqCX61M 91+4Cjf5NVCDt4Uv02UBoe9btx+ZlXIxjGJLkFrPPwhC7X2e4ze6IougX2XudZiH -----END CERTIFICATE-----Generated at Fri Apr 11 21:18:41 2025 by rpki-client