$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.mft File: 945a7f76-bce3-4d85-a81e-c84df8d5197a.mft (raw, json) Hash identifier: MfF/pB2mg25C1R9E1hm+okncx2hdU597FfHrscyW1cY= Subject key identifier: A9:49:83:6E:40:44:17:40:84:66:05:22:54:36:D2:64:39:EF:6A:CE Authority key identifier: C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0 Certificate issuer: /CN=945a7f76-bce3-4d85-a81e-c84df8d5197a Certificate serial: 010D0C9F4328584990B79276AC2A09F6A7501D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.mft Manifest number: 010D0C9F4328584073A84A0930399A0899841449 Signing time: Fri 18 Apr 2025 09:00:03 +0000 Manifest this update: Fri 18 Apr 2025 09:00:03 +0000 Manifest next update: Sun 20 Apr 2025 09:00:00 +0000 Files and hashes: 1: 1e51682c-b9d8-3bf4-ad93-42f10f661e4f.roa (hash: m2yaKBHB4bHZGFy71MlyD2pKpLxZxLL2iunARLXg9XY=) 2: 945a7f76-bce3-4d85-a81e-c84df8d5197a.crl (hash: PoiNgn1Jc3IxiEAE1I9Ww+09glv9zengfObb0Vp2Yx4=) 3: db5733de-d9ee-315a-b4ee-49bb473ee114.roa (hash: SUiSX/QyYAwP6mG7Ye6S3RODJDUts6L5bz4kdnjMEZc=) 4: f1f80a7a-4e42-3e7f-b3f2-c76032fced54.roa (hash: ZHxa0ChlOY4je/jFXm11KTV2H5eIWRt1YyNHhTHZhEA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:90:b7:92:76:ac:2a:09:f6:a7:50:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=945a7f76-bce3-4d85-a81e-c84df8d5197a Validity Not Before: Apr 18 09:00:03 2025 GMT Not After : Apr 20 09:00:00 2025 GMT Subject: CN=df0e5cca-09cd-477a-815b-b45bb48de303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5c:e1:03:79:a1:65:49:ec:b0:5c:a3:89:a2: 55:ff:ba:cf:e8:9f:1b:93:e6:48:aa:00:38:29:87: 46:9e:96:40:1e:b1:d3:61:5e:ae:1d:b7:51:25:9c: 5f:61:a9:02:ec:93:a3:d1:a9:15:d9:63:04:9c:34: 1f:26:e4:09:4e:e6:1a:3c:e2:2c:79:fe:16:cd:a9: 8b:28:4b:e6:29:8c:48:e6:08:81:7c:c7:a8:a7:65: aa:45:14:ce:49:5f:49:e7:e8:a0:63:fd:95:67:df: 5a:0b:8f:74:52:21:a0:ab:8d:f3:4b:31:0c:21:6c: 0c:55:e4:3c:2c:ca:1c:70:fd:db:d2:f4:8f:97:15: b8:e4:f9:70:a2:8f:ca:f8:8e:41:05:b3:df:a8:9a: bc:3f:09:72:fd:05:6d:1c:02:08:b7:71:6d:4e:cf: a6:ef:d3:4d:79:59:7d:e2:ba:cd:b1:64:43:44:90: 78:13:73:f5:a1:2d:32:e8:61:da:b4:5c:e4:cc:7c: 3a:ed:14:26:08:2b:d8:19:95:05:2b:7e:48:a0:69: 4b:14:c9:1f:40:fd:f4:fa:4e:c3:10:a2:15:b1:2f: 89:35:e8:02:4c:45:68:69:91:d9:6b:2b:3d:e7:ca: 3e:07:67:29:7d:9a:85:07:f8:cd:5d:81:04:f4:df: bd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:49:83:6E:40:44:17:40:84:66:05:22:54:36:D2:64:39:EF:6A:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.crl X509v3 Authority Key Identifier: keyid:C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:b3:51:83:d2:19:d5:6e:ab:58:f4:41:13:71:74:65:e4:dd: ea:2a:c7:de:5d:18:73:64:6e:6b:35:a7:7f:a6:c6:b8:f4:ae: 08:17:56:9a:6c:75:09:2f:24:86:7d:5b:8a:63:21:e4:94:62: a7:ef:b2:de:85:6e:07:5f:21:55:cb:95:7f:42:83:7d:3c:8b: 26:ce:03:92:7c:2d:e9:42:38:75:85:ad:70:d1:ec:31:14:42: fb:07:5e:50:cd:44:95:bc:87:b7:e9:9b:9e:44:71:d8:93:8f: bb:3f:c4:84:7e:3e:58:b1:0b:5f:4a:40:f5:87:68:6b:87:f8: 5d:21:c1:5a:ff:1a:98:ca:5b:06:db:7c:75:8f:11:a2:e0:61: f2:4d:27:7b:12:a1:72:b7:ac:8c:97:69:ac:e5:9c:78:1b:17: a7:4e:44:ca:9c:d6:4b:93:6a:82:87:2d:c4:da:8d:b5:90:2a: 4b:5e:07:52:98:74:33:a9:9b:17:e0:7e:37:d8:9e:ab:7e:44: 03:9b:ae:e6:44:9e:39:1a:5d:f4:52:40:2b:b7:6f:60:79:f1: f3:a4:68:da:61:c7:84:b2:10:4b:90:ab:05:98:95:f4:c9:d5: e4:22:e1:2b:67:ba:75:27:34:2f:e8:05:74:95:3e:ef:2f:a6: 31:73:1f:15 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmQt5J2rCoJ9qdQHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQ1YTdmNzYtYmNlMy00ZDg1LWE4MWUtYzg0ZGY4ZDUx OTdhMB4XDTI1MDQxODA5MDAwM1oXDTI1MDQyMDA5MDAwMFowLzEtMCsGA1UEAxMk ZGYwZTVjY2EtMDljZC00NzdhLTgxNWItYjQ1YmI0OGRlMzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1zhA3mhZUnssFyjiaJV/7rP6J8bk+ZIqgA4 KYdGnpZAHrHTYV6uHbdRJZxfYakC7JOj0akV2WMEnDQfJuQJTuYaPOIsef4WzamL KEvmKYxI5giBfMeop2WqRRTOSV9J5+igY/2VZ99aC490UiGgq43zSzEMIWwMVeQ8 LMoccP3b0vSPlxW45Plwoo/K+I5BBbPfqJq8Pwly/QVtHAIIt3FtTs+m79NNeVl9 4rrNsWRDRJB4E3P1oS0y6GHatFzkzHw67RQmCCvYGZUFK35IoGlLFMkfQP30+k7D EKIVsS+JNegCTEVoaZHZays958o+B2cpfZqFB/jNXYEE9N+90QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKlJg25ARBdAhGYFIlQ20mQ572rOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85NDVh N2Y3Ni1iY2UzLTRkODUtYTgxZS1jODRkZjhkNTE5N2EvOTQ1YTdmNzYtYmNlMy00 ZDg1LWE4MWUtYzg0ZGY4ZDUxOTdhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTQ1YTdmNzYtYmNlMy00ZDg1LWE4 MWUtYzg0ZGY4ZDUxOTdhLzk0NWE3Zjc2LWJjZTMtNGQ4NS1hODFlLWM4NGRmOGQ1 MTk3YS5jcmwwHwYDVR0jBBgwFoAUycbekH+3MjHBmmelTWkcFSB9dfAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85NDVhN2Y3Ni1iY2UzLTRkODUtYTgxZS1jODRk ZjhkNTE5N2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCes1GD0hnVbqtY9EETcXRl 5N3qKsfeXRhzZG5rNad/psa49K4IF1aabHUJLySGfVuKYyHklGKn77LehW4HXyFV y5V/QoN9PIsmzgOSfC3pQjh1ha1w0ewxFEL7B15QzUSVvIe36ZueRHHYk4+7P8SE fj5YsQtfSkD1h2hrh/hdIcFa/xqYylsG23x1jxGi4GHyTSd7EqFyt6yMl2ms5Zx4 GxenTkTKnNZLk2qChy3E2o21kCpLXgdSmHQzqZsX4H432J6rfkQDm67mRJ45Gl30 UkArt29gefHzpGjaYceEshBLkKsFmJX0ydXkIuErZ7p1JzQv6AV0lT7vL6Yxcx8V -----END CERTIFICATE-----Generated at Fri Apr 18 19:05:03 2025 by rpki-client