$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft File: a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft (raw, json) Hash identifier: /yGwovmLYeVPpnchZgZ1gA3hW0kuXW0BEx66WuMlqtQ= Subject key identifier: E9:BA:DC:C6:81:B9:51:FC:5B:8C:A0:B4:BA:8B:51:D8:48:2C:1F:96 Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D Certificate issuer: /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Certificate serial: 010D0C9F4328584989BCE51CD5CA92ADADA19200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft Manifest number: 010D0C9F4328584073A82AD5E557AB286D7B2A4B Signing time: Tue 15 Apr 2025 21:00:07 +0000 Manifest this update: Tue 15 Apr 2025 21:00:07 +0000 Manifest next update: Thu 17 Apr 2025 21:00:00 +0000 Files and hashes: 1: 0a495132-7cda-3198-aa84-524b4588371a.roa (hash: E1qULXXoytrQhgWIpaT6GzhZO1xhcsVb3GZJC5WlGdQ=) 2: 2255066e-9ff0-38c8-9ca9-da39b830dabd.roa (hash: X2Gy1TTvQ6RCUW8VCkkz3lhS1x6Y+0iPG9BVtoYh6tU=) 3: 34b7440f-fa9d-3f40-9c87-f4e7484c5286.roa (hash: zV6O97N6R2WYzI7A3zUcaGo35fCIjthVgYIhDN4iZfU=) 4: 5a0ae7fa-e747-3e80-bbce-2e0f5ad57f24.roa (hash: SiglAnI+JSdwTbo9Au8EUwxg+YuVChIFX3VvQ4kL9FQ=) 5: 5acf57a9-6d5d-32d9-8e9b-9a22cce1ffcb.roa (hash: MD9ruS5RB7vSJDVI2hXesX1Ya+5M9czb9pHnPw2eP4c=) 6: 5b51a710-d903-3a9f-98a2-1f29da06ebe8.roa (hash: pvkj0A+AiRkHz1xKtJCgkQfS/zG1SbapGL0eIHvLUVk=) 7: 707934f0-2be6-3cdf-a514-9b44c5ca443b.roa (hash: kklgwBlqqHxwOhG+mVj0n2U/eIrzVIYuTbH2Bfzk/fM=) 8: 9bf4a8e0-75f2-3efc-ab74-653a24d8bb79.roa (hash: swsnO+dalFfLep9HYWYHVDJT6guTqr22bOBAG36R6Ig=) 9: a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl (hash: c/8x3CsgG3cChbdufAJE8vGorcEHN2OjiSpPdoxwf88=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:89:bc:e5:1c:d5:ca:92:ad:ad:a1:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Validity Not Before: Apr 15 21:00:07 2025 GMT Not After : Apr 17 21:00:00 2025 GMT Subject: CN=3575adbd-d62e-4f3d-8ba8-4a13b22318dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:94:5a:3d:2c:dd:04:3f:c4:79:71:f4:81:65: e9:b9:a4:07:27:1d:b3:8a:ac:b9:fb:f7:86:f7:db: 9f:94:13:ee:4c:bb:8f:06:ae:43:2f:ac:78:98:6e: 97:ed:f4:38:38:f5:94:2e:7d:a2:83:eb:18:e8:09: cc:bb:92:0e:02:17:0c:bb:8c:ff:92:a1:a9:26:6c: 53:3b:d2:1a:45:0f:c6:0b:f5:1a:c0:2c:fe:23:72: d7:72:17:4e:ce:1b:f1:eb:b0:f9:55:ac:d6:36:ab: 7c:fe:75:a4:dd:25:4e:b6:80:26:72:02:d4:b1:a1: 46:e5:b0:59:fe:f2:6f:4d:e2:c7:f4:82:f5:8e:3a: 6e:3a:f9:8c:7c:78:d5:61:df:27:7f:3a:94:14:22: 1f:7c:53:fb:a9:7d:ac:2c:1a:4b:1f:14:27:d7:8c: b2:03:cb:05:8d:31:9a:ec:00:07:fc:ba:da:da:9c: 41:f4:d7:6a:dd:e9:c5:6a:f6:0e:50:20:82:ee:f9: 70:1a:bf:e2:f2:94:68:04:f8:33:d0:3b:7a:c7:cc: 58:67:a9:0a:47:a3:23:6f:9c:f6:72:1f:df:13:2a: d6:ef:1e:37:71:74:ce:13:e2:ca:eb:9a:08:eb:67: ea:f6:c7:09:2d:2e:a9:5d:5e:95:2a:2b:fb:04:4a: 70:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:BA:DC:C6:81:B9:51:FC:5B:8C:A0:B4:BA:8B:51:D8:48:2C:1F:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl X509v3 Authority Key Identifier: keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:d6:bd:e2:b1:d3:5d:af:a7:07:a2:7b:0f:fa:c8:3b:c2:13: 84:9a:56:b6:bc:c1:f1:4e:c9:81:ec:86:08:4b:94:3a:9e:f8: da:fe:60:d2:cd:47:b0:45:a7:39:f5:6b:61:46:1c:62:23:4c: 53:75:70:30:fa:d2:23:20:4b:d7:14:46:8f:1f:ef:ce:6c:36: f4:cf:f2:44:2e:24:83:d6:2b:06:3f:fa:bb:00:cf:c7:85:4d: 51:50:43:df:b9:09:fc:c3:27:20:6b:dc:de:c1:83:b6:2e:04: 33:ad:ee:03:48:31:68:65:6a:6a:e3:d3:18:82:66:9d:83:ed: 01:c7:b7:f7:84:19:40:fa:d3:a3:a2:7f:74:5a:68:f6:b1:41: 8d:de:ca:4a:1c:9d:1a:a1:4b:38:82:91:e7:0e:cb:42:f0:31: ca:c9:ee:81:80:dd:7f:5c:01:47:12:6e:c4:67:99:05:c1:a6: 72:b2:e9:76:cb:53:21:41:74:b1:64:73:5a:eb:8a:dc:88:21: 01:09:05:86:8e:2b:ab:85:5a:5c:0b:b5:d7:1d:21:68:de:0c: 16:ff:01:e4:4d:d6:e5:3e:9b:d4:5b:40:3c:1d:ae:1e:5c:aa: c0:6c:58:40:ed:5e:30:d0:1e:8a:a3:2c:80:22:73:05:5e:72: c3:3a:f6:55 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmJvOUc1cqSra2hkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdkN2YxNGUtNzJjNC00N2U0LWFkMDYtYTFiNzJmOTRj N2IxMB4XDTI1MDQxNTIxMDAwN1oXDTI1MDQxNzIxMDAwMFowLzEtMCsGA1UEAxMk MzU3NWFkYmQtZDYyZS00ZjNkLThiYTgtNGExM2IyMjMxOGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJRaPSzdBD/EeXH0gWXpuaQHJx2ziqy5+/eG 99uflBPuTLuPBq5DL6x4mG6X7fQ4OPWULn2ig+sY6AnMu5IOAhcMu4z/kqGpJmxT O9IaRQ/GC/UawCz+I3LXchdOzhvx67D5VazWNqt8/nWk3SVOtoAmcgLUsaFG5bBZ /vJvTeLH9IL1jjpuOvmMfHjVYd8nfzqUFCIffFP7qX2sLBpLHxQn14yyA8sFjTGa 7AAH/Lra2pxB9Ndq3enFavYOUCCC7vlwGr/i8pRoBPgz0Dt6x8xYZ6kKR6Mjb5z2 ch/fEyrW7x43cXTOE+LK65oI62fq9scJLS6pXV6VKiv7BEpwcQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOm63MaBuVH8W4ygtLqLUdhILB+WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3 ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3MmY5NGM3YjEvYTdkN2YxNGUtNzJjNC00 N2U0LWFkMDYtYTFiNzJmOTRjN2IxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdkN2YxNGUtNzJjNC00N2U0LWFk MDYtYTFiNzJmOTRjN2IxL2E3ZDdmMTRlLTcyYzQtNDdlNC1hZDA2LWExYjcyZjk0 YzdiMS5jcmwwHwYDVR0jBBgwFoAUXtwOAtpu5BW/4iOR5NyjJ1ELeg0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3 MmY5NGM3YjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCV1r3isdNdr6cHonsP+sg7 whOEmla2vMHxTsmB7IYIS5Q6nvja/mDSzUewRac59WthRhxiI0xTdXAw+tIjIEvX FEaPH+/ObDb0z/JELiSD1isGP/q7AM/HhU1RUEPfuQn8wycga9zewYO2LgQzre4D SDFoZWpq49MYgmadg+0Bx7f3hBlA+tOjon90Wmj2sUGN3spKHJ0aoUs4gpHnDstC 8DHKye6BgN1/XAFHEm7EZ5kFwaZysul2y1MhQXSxZHNa64rciCEBCQWGjiurhVpc C7XXHSFo3gwW/wHkTdblPpvUW0A8Ha4eXKrAbFhA7V4w0B6KoyyAInMFXnLDOvZV -----END CERTIFICATE-----Generated at Wed Apr 16 14:41:16 2025 by rpki-client