$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft File: 28591b95-39d7-4e54-90f3-1339338b842c.mft (raw, json) Hash identifier: 7q79NQ86PJxxw9/+xY6y+ckjWTSFsMpsVk1hNj55r1k= Subject key identifier: 0F:CA:1C:A1:9A:80:14:E8:9E:30:9F:27:68:78:6C:A4:98:CD:D7:23 Authority key identifier: FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A Certificate issuer: /CN=28591b95-39d7-4e54-90f3-1339338b842c Certificate serial: 010D0C9F43285849D0CF8F605F1EEF9C6AACBF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft Manifest number: 010D0C9F4328584073A84793D8858966B5716309 Signing time: Sun 11 May 2025 08:00:07 +0000 Manifest this update: Sun 11 May 2025 08:00:07 +0000 Manifest next update: Wed 14 May 2025 08:00:00 +0000 Files and hashes: 1: 139652f7-af23-334e-a7f9-9e08d724d62f.roa (hash: 6mCtWOrCU7yZSu63p0bi1qdHEPoLLVdEdbp3Yr/l8Zg=) 2: 27626520-245c-33fb-bb99-5dc7d0821da1.roa (hash: YUUsUgxukIJu0+btURfRRwCfb7mZJjDs1IMNbXcN20g=) 3: 28591b95-39d7-4e54-90f3-1339338b842c.crl (hash: exCBnIzO/rNb+VzH/EtXyP23/dNZlOFfD1ZhB2trLK0=) 4: 486cf596-6ac5-320c-b437-e9c1fdb89e8b.roa (hash: BOGeH27lln6FLRP7FyUt/A//9mK5qUZiwGSWq8H+ZXA=) 5: a6469a75-3af9-39ef-ae2f-0b913de50d29.roa (hash: UAypTPiSJ/VIxblHpw8jSIDGuDmipFw7skTw9L7DVCc=) 6: dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa (hash: xD7rWjf84+aZk6zf/llql+XmyZXFND3bh6FN8lSYjQA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d0:cf:8f:60:5f:1e:ef:9c:6a:ac:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28591b95-39d7-4e54-90f3-1339338b842c Validity Not Before: May 11 08:00:07 2025 GMT Not After : May 14 08:00:00 2025 GMT Subject: CN=3559fc9d-7796-4ce2-8f5c-67826031807f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:98:f3:65:8b:a3:6c:c5:5e:1d:9e:0e:1d:d8: bb:a8:a9:fe:ae:39:1b:63:a3:d7:a0:09:8f:e9:bf: ba:e8:24:bf:2d:e4:f7:15:34:a0:4e:51:0a:c5:76: 4f:bb:2d:84:56:3c:ba:62:fc:b4:1b:9c:50:cc:61: bb:3c:de:11:ad:35:ee:89:f0:14:ef:13:81:1b:45: 6a:92:c7:e9:97:ab:c8:64:63:3d:0b:16:0b:f1:3a: 9d:78:92:17:c6:0c:25:f1:29:6f:f7:5a:8c:88:72: 0a:52:ec:70:5f:68:e7:55:84:9f:b5:1f:ed:8f:55: 5a:55:1b:c6:66:cb:80:77:74:4a:27:27:5f:68:f4: c8:c4:76:f5:15:8e:16:56:e3:ef:50:9c:8d:4b:40: 44:70:53:f6:1c:e0:58:77:6f:21:e4:38:46:20:ea: 5f:5f:78:b1:f3:67:7a:4c:58:43:e9:cc:45:3a:99: 44:7f:f2:7b:ae:9e:48:05:76:5f:f0:90:c8:44:b9: 31:8c:26:f7:18:9c:ce:ee:d9:b6:2a:5c:6a:cc:d5: 65:69:a3:50:97:36:94:74:58:ff:4e:54:e0:0a:80: 90:d6:d1:d5:4d:4e:f0:29:7a:c4:6e:93:9b:7d:f8: ca:2e:dd:28:77:2f:ef:d9:c4:5d:da:42:58:89:f9: ef:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:CA:1C:A1:9A:80:14:E8:9E:30:9F:27:68:78:6C:A4:98:CD:D7:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl X509v3 Authority Key Identifier: keyid:FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:38:5e:46:ca:86:e0:4a:57:23:ea:ea:69:38:11:0b:cb:bc: b1:91:c0:d2:d5:a3:d3:02:4b:b6:7f:8a:86:87:03:89:9b:13: 47:d5:b2:ed:0c:c9:d0:a5:6b:46:4a:0b:ed:a0:44:39:a4:d3: 59:99:76:0c:76:4e:27:61:d6:af:c6:55:97:63:9b:d1:ca:ad: 5a:a9:77:18:57:94:7f:8f:7a:83:11:82:89:5f:c8:ce:71:1b: a1:fc:ad:43:d2:24:2f:e6:2d:07:bc:91:1c:32:47:b3:77:77: a3:10:c9:1d:2d:c6:1e:ba:9b:f4:fd:0c:ef:2e:28:d4:77:ca: 76:5f:6c:61:9d:63:01:62:24:fb:a8:dd:b6:77:bb:64:08:40: 25:82:13:b0:de:72:27:c7:d2:09:a1:5d:2f:f2:1d:32:a1:62: 8c:81:9a:6c:b5:1f:6e:c3:52:e8:a6:f7:c9:bb:b7:f4:f1:de: ea:7b:bc:04:24:9f:6c:a7:49:7a:c8:c3:7c:0c:d9:d6:9e:f1: 80:bd:ac:88:ec:c8:11:f3:21:05:fe:c9:fe:bc:02:ba:e0:fc: 58:7c:75:82:8b:8d:65:bb:c1:b0:06:8a:c8:b2:92:6b:32:7c: 7b:be:a1:0d:de:7b:74:98:30:9a:a4:ac:e9:1b:24:8b:50:42: ba:0b:ee:bb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnQz49gXx7vnGqsvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg1OTFiOTUtMzlkNy00ZTU0LTkwZjMtMTMzOTMzOGI4 NDJjMB4XDTI1MDUxMTA4MDAwN1oXDTI1MDUxNDA4MDAwMFowLzEtMCsGA1UEAxMk MzU1OWZjOWQtNzc5Ni00Y2UyLThmNWMtNjc4MjYwMzE4MDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5jzZYujbMVeHZ4OHdi7qKn+rjkbY6PXoAmP 6b+66CS/LeT3FTSgTlEKxXZPuy2EVjy6Yvy0G5xQzGG7PN4RrTXuifAU7xOBG0Vq ksfpl6vIZGM9CxYL8TqdeJIXxgwl8Slv91qMiHIKUuxwX2jnVYSftR/tj1VaVRvG ZsuAd3RKJydfaPTIxHb1FY4WVuPvUJyNS0BEcFP2HOBYd28h5DhGIOpfX3ix82d6 TFhD6cxFOplEf/J7rp5IBXZf8JDIRLkxjCb3GJzO7tm2KlxqzNVlaaNQlzaUdFj/ TlTgCoCQ1tHVTU7wKXrEbpObffjKLt0ody/v2cRd2kJYifnv2QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFA/KHKGagBTonjCfJ2h4bKSYzdcjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5 MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5MzM4Yjg0MmMvMjg1OTFiOTUtMzlkNy00 ZTU0LTkwZjMtMTMzOTMzOGI4NDJjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg1OTFiOTUtMzlkNy00ZTU0LTkw ZjMtMTMzOTMzOGI4NDJjLzI4NTkxYjk1LTM5ZDctNGU1NC05MGYzLTEzMzkzMzhi ODQyYy5jcmwwHwYDVR0jBBgwFoAU/hD3fjltydQ3zw/RR1+y/RTGxWowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5 MzM4Yjg0MmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCQOF5GyobgSlcj6uppOBEL y7yxkcDS1aPTAku2f4qGhwOJmxNH1bLtDMnQpWtGSgvtoEQ5pNNZmXYMdk4nYdav xlWXY5vRyq1aqXcYV5R/j3qDEYKJX8jOcRuh/K1D0iQv5i0HvJEcMkezd3ejEMkd LcYeupv0/QzvLijUd8p2X2xhnWMBYiT7qN22d7tkCEAlghOw3nInx9IJoV0v8h0y oWKMgZpstR9uw1LopvfJu7f08d7qe7wEJJ9sp0l6yMN8DNnWnvGAvayI7MgR8yEF /sn+vAK64PxYfHWCi41lu8GwBorIspJrMnx7vqEN3nt0mDCapKzpGySLUEK6C+67 -----END CERTIFICATE-----Generated at Mon May 12 07:26:42 2025 by rpki-client