$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.mft File: e35c7007-7a33-480f-a32e-40481f8f1792.mft (raw, json) Hash identifier: zyeI0On7DC0hDPoJcGr+JXPNCyevB2CuOZyVGpu/f3o= Subject key identifier: EC:6E:1C:D0:DB:7C:85:BA:0E:11:E7:44:C0:AD:87:CE:EA:0F:81:9C Authority key identifier: 69:C5:93:B3:CB:4A:4F:6B:F2:C7:1E:19:B2:7A:66:85:BA:C2:EA:EC Certificate issuer: /CN=e35c7007-7a33-480f-a32e-40481f8f1792 Certificate serial: 010D0C9F432858497BC77C6CA61868CE45E63F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.mft Manifest number: 010D0C9F4328584073A828D6B15D74B5AB65F101 Signing time: Thu 10 Apr 2025 21:00:07 +0000 Manifest this update: Thu 10 Apr 2025 21:00:07 +0000 Manifest next update: Sun 13 Apr 2025 21:00:00 +0000 Files and hashes: 1: 0ce0c169-ef1f-32ec-967d-086703bd7584.roa (hash: XFuhxJV0KQkv6WMxfu0wycDvRDX6aT1fwFdv2G0uXGI=) 2: 2c8c6ad3-e963-3175-a096-858ac3ef6191.roa (hash: tTrnXBQnpBFAVJ4yZui9QU/BWUwRV+dSg9eLV906jgc=) 3: 5388bc64-7e00-3aef-b50b-4426eee59515.roa (hash: AjFJocaIFG5VefC2/2aRNsvINLi0HxahjBNbW6+Gi18=) 4: a3f0893a-35f0-324d-b592-cfd2098b1ae7.roa (hash: BnPXcJRVfL+DDrR2lBSxtOCVkUj0W5lWHJSkfD+CnRE=) 5: e35c7007-7a33-480f-a32e-40481f8f1792.crl (hash: GHG3n64GQFIAuHrIVHuDfbm1C0MY2xDDCyh73CJc1+g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7b:c7:7c:6c:a6:18:68:ce:45:e6:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e35c7007-7a33-480f-a32e-40481f8f1792 Validity Not Before: Apr 10 21:00:07 2025 GMT Not After : Apr 13 21:00:00 2025 GMT Subject: CN=87d1bfac-8db7-4f81-9338-bc4b2cec4d11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:12:ac:3f:86:56:89:75:e2:fd:de:66:49:f5: 24:04:46:6f:8f:d5:cf:f6:e8:9a:30:be:46:67:96: 5b:5b:0e:95:61:a8:30:0e:49:c9:63:48:69:c7:41: 61:d1:4a:e0:60:02:bb:f0:5d:ca:a5:ae:a2:cd:e9: c5:8e:b9:37:f8:ef:60:9b:e8:b2:77:97:da:67:78: cb:74:80:a7:2a:a6:d2:d8:79:52:00:66:18:32:2c: 8f:08:c5:25:aa:58:a9:30:d3:c2:af:fe:e3:0a:62: e0:f3:e5:92:2e:ef:cf:ca:49:b8:e9:c3:38:7d:43: 7c:b7:46:99:d1:94:d0:01:01:26:40:61:89:03:ad: cc:60:3b:f7:8b:4a:c1:c4:ce:1b:a0:66:e8:28:3f: aa:43:28:23:d0:32:83:d1:6f:ba:c5:a9:6e:1c:82: 0b:6b:aa:70:c6:0b:f3:1f:89:96:91:43:57:fe:5f: dc:81:e4:32:8f:81:d2:fd:d1:3d:52:e5:54:7e:cf: 16:0a:bf:79:1e:a5:af:aa:ea:07:83:fc:48:39:c3: 52:8f:ea:2a:72:e6:04:63:88:0f:1d:c9:5f:2f:77: ae:6b:fe:7f:93:10:8f:fb:70:38:2f:61:59:0a:07: c9:7f:f0:ad:fe:ec:27:2e:26:38:d4:34:69:e4:c1: 5f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:6E:1C:D0:DB:7C:85:BA:0E:11:E7:44:C0:AD:87:CE:EA:0F:81:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.crl X509v3 Authority Key Identifier: keyid:69:C5:93:B3:CB:4A:4F:6B:F2:C7:1E:19:B2:7A:66:85:BA:C2:EA:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:0f:79:6f:0c:05:ba:09:cc:96:c2:2b:aa:9a:9b:3c:99:6f: 04:f5:96:f1:02:0d:1c:7a:dd:72:5a:22:48:1d:47:d2:c3:69: f5:01:04:f8:c8:52:8d:82:1e:cd:e1:e5:2a:48:87:ad:13:8d: 7c:7b:58:48:74:54:67:2b:86:e5:cd:b5:85:4b:0a:96:31:d4: be:cb:26:51:80:4f:a1:a0:fa:ec:86:cf:4b:70:93:a8:32:31: 65:b5:1a:7b:63:91:f1:56:57:93:58:51:3e:33:47:3f:20:7d: 6e:35:e3:55:f3:24:45:24:b1:f9:3e:ed:47:cd:c5:6f:80:9c: d8:d0:fa:5e:28:71:6d:cd:53:ec:49:8e:b9:33:a2:de:da:61: 36:21:a2:17:e6:0a:82:15:bb:1c:5e:03:6f:f7:17:f7:61:67: b6:75:b8:f4:73:d9:cc:da:ef:a3:3b:f0:38:0c:62:63:af:20: 65:2c:6b:fa:81:2a:d5:54:03:e0:81:98:ce:c0:35:91:14:79: 6b:ac:7b:bb:7d:16:a8:df:87:8b:da:ea:3f:5e:2d:b3:bb:6c: 17:ea:74:94:1a:3e:96:f2:5d:c7:66:dc:20:30:e1:2b:5f:bc: 6c:0d:8a:b7:52:88:73:a0:a0:ba:32:a3:db:d2:66:4c:88:60: d8:4f:af:e6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl7x3xsphhozkXmP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM1YzcwMDctN2EzMy00ODBmLWEzMmUtNDA0ODFmOGYx NzkyMB4XDTI1MDQxMDIxMDAwN1oXDTI1MDQxMzIxMDAwMFowLzEtMCsGA1UEAxMk ODdkMWJmYWMtOGRiNy00ZjgxLTkzMzgtYmM0YjJjZWM0ZDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBKsP4ZWiXXi/d5mSfUkBEZvj9XP9uiaML5G Z5ZbWw6VYagwDknJY0hpx0Fh0UrgYAK78F3Kpa6izenFjrk3+O9gm+iyd5faZ3jL dICnKqbS2HlSAGYYMiyPCMUlqlipMNPCr/7jCmLg8+WSLu/Pykm46cM4fUN8t0aZ 0ZTQAQEmQGGJA63MYDv3i0rBxM4boGboKD+qQygj0DKD0W+6xaluHIILa6pwxgvz H4mWkUNX/l/cgeQyj4HS/dE9UuVUfs8WCr95HqWvquoHg/xIOcNSj+oqcuYEY4gP HclfL3eua/5/kxCP+3A4L2FZCgfJf/Ct/uwnLiY41DRp5MFfqwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOxuHNDbfIW6DhHnRMCth87qD4GcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMzVj NzAwNy03YTMzLTQ4MGYtYTMyZS00MDQ4MWY4ZjE3OTIvZTM1YzcwMDctN2EzMy00 ODBmLWEzMmUtNDA0ODFmOGYxNzkyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTM1YzcwMDctN2EzMy00ODBmLWEz MmUtNDA0ODFmOGYxNzkyL2UzNWM3MDA3LTdhMzMtNDgwZi1hMzJlLTQwNDgxZjhm MTc5Mi5jcmwwHwYDVR0jBBgwFoAUacWTs8tKT2vyxx4ZsnpmhbrC6uwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lMzVjNzAwNy03YTMzLTQ4MGYtYTMyZS00MDQ4 MWY4ZjE3OTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCRD3lvDAW6CcyWwiuqmps8 mW8E9ZbxAg0cet1yWiJIHUfSw2n1AQT4yFKNgh7N4eUqSIetE418e1hIdFRnK4bl zbWFSwqWMdS+yyZRgE+hoPrshs9LcJOoMjFltRp7Y5HxVleTWFE+M0c/IH1uNeNV 8yRFJLH5Pu1HzcVvgJzY0PpeKHFtzVPsSY65M6Le2mE2IaIX5gqCFbscXgNv9xf3 YWe2dbj0c9nM2u+jO/A4DGJjryBlLGv6gSrVVAPggZjOwDWRFHlrrHu7fRao34eL 2uo/Xi2zu2wX6nSUGj6W8l3HZtwgMOErX7xsDYq3UohzoKC6MqPb0mZMiGDYT6/m -----END CERTIFICATE-----Generated at Fri Apr 11 21:01:33 2025 by rpki-client