$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/8c36a2b8-42c3-42fa-835e-49b2612cc29a.mft File: 8c36a2b8-42c3-42fa-835e-49b2612cc29a.mft (raw, json) Hash identifier: 00ATmxqbMtBDPZCPtp2d92whTie5rMbcgr8z4SgoKsU= Subject key identifier: 41:B4:75:D3:2D:B0:6A:0A:E7:68:76:21:CC:95:05:34:90:81:5D:EA Authority key identifier: 8A:4B:04:14:87:83:45:20:69:D3:E3:19:20:AF:ED:0B:62:19:3B:63 Certificate issuer: /CN=8c36a2b8-42c3-42fa-835e-49b2612cc29a Certificate serial: 010D0C9F43285849C4D556AC24ABF6F8FF9C8840 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/8c36a2b8-42c3-42fa-835e-49b2612cc29a.mft Manifest number: 010D0C9F4328584073A826DE89D6DEF45FFDEDC8 Signing time: Wed 07 May 2025 01:02:03 +0000 Manifest this update: Wed 07 May 2025 01:02:03 +0000 Manifest next update: Fri 09 May 2025 20:00:00 +0000 Files and hashes: 1: 0f2f1bf0-6bc8-3568-9ef7-8f737aaba25a.roa (hash: 7+jgxaHLB0DxkaYJfk8TzppZE0O5DloZYgD9F623sFc=) 2: 8c36a2b8-42c3-42fa-835e-49b2612cc29a.crl (hash: 9IupErAcrJfyIz+QMJi5CTLCDvJ3WzSUSvUlngcZvR8=) 3: 9fbd7817-7785-3e8e-b5d8-9a8b412a3f0c.roa (hash: xyIJiJnILyP+fDPh5iCPZj5ZV81RLQM3o4tSBxrh2Nw=) 4: a0679dfd-78ee-3728-b6d4-7b3d95d28292.roa (hash: mvIO/UZhUue/ArM9RQKGtjgtgBre+2l3ZJIRc++2QOU=) 5: e5c86172-2a9c-3e75-9dfb-b0bb48de9187.roa (hash: lmPQZTqMHFN6uteCHnK51M/JrGuIgFC4CccIyN1y53M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/8c36a2b8-42c3-42fa-835e-49b2612cc29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/8c36a2b8-42c3-42fa-835e-49b2612cc29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d5:56:ac:24:ab:f6:f8:ff:9c:88:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c36a2b8-42c3-42fa-835e-49b2612cc29a Validity Not Before: May 7 01:02:03 2025 GMT Not After : May 9 20:00:00 2025 GMT Subject: CN=eb7d33ea-2373-4d48-ab87-1506956c2d61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9a:df:24:ec:43:a8:fd:32:7f:d3:b6:b6:83: 3f:38:3d:15:1b:c1:b3:9d:3d:43:bc:e8:fa:85:f0: 12:d8:9e:ab:50:c2:4e:d2:2c:f3:1d:0c:46:89:47: ae:a3:d0:8e:1a:55:27:e5:e3:0e:73:a2:a0:fd:dd: 90:6e:79:da:65:0e:97:89:45:f7:2c:38:f5:90:64: 24:8e:39:19:df:70:b6:5f:12:d7:80:8a:63:93:e4: b4:c8:2c:6b:32:bf:f7:fb:c3:0d:08:aa:64:59:31: 5f:62:1a:7b:80:ce:41:97:9f:bd:40:6a:d7:19:78: 46:49:de:38:4b:51:1c:f4:ce:37:1f:38:6b:c4:b8: ad:9a:af:84:f6:3b:df:f2:28:f6:a1:2a:ce:91:df: a4:15:e2:e9:42:42:c4:18:03:cc:e7:c2:20:8c:9e: 11:08:69:e0:a9:84:cc:7e:36:84:e6:0e:f2:cb:94: ab:73:41:73:85:02:70:ba:e0:1e:13:1c:43:92:da: a6:a9:46:a3:0e:a4:6e:6e:8d:c3:71:0f:05:44:dc: f5:75:5f:b3:67:53:1c:49:29:a3:38:0d:9e:84:88: eb:f5:53:a6:7c:1d:09:6b:24:bc:ed:ac:c6:4b:ee: d4:95:45:ec:33:fd:8c:f0:9e:ec:16:13:f1:d1:61: f0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B4:75:D3:2D:B0:6A:0A:E7:68:76:21:CC:95:05:34:90:81:5D:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/8c36a2b8-42c3-42fa-835e-49b2612cc29a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/8c36a2b8-42c3-42fa-835e-49b2612cc29a.crl X509v3 Authority Key Identifier: keyid:8A:4B:04:14:87:83:45:20:69:D3:E3:19:20:AF:ED:0B:62:19:3B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:67:b9:fe:30:19:1e:fe:15:1e:91:a8:f1:09:71:43:3e:86: 40:ae:f7:55:fa:19:3c:a6:25:21:26:f0:67:1f:f4:1c:f7:b7: 38:4f:b6:16:31:a1:df:d6:18:cb:9e:87:41:7e:a5:ae:9b:8c: 02:af:e9:18:dc:2e:16:38:01:4d:d9:3d:1f:67:de:01:0b:64: c9:47:ec:2b:84:4f:01:01:3a:12:36:3e:95:6f:dc:77:78:ec: 84:dd:fb:04:35:af:fb:38:c7:7f:cf:d1:9a:e6:f1:68:25:e4: c9:15:40:db:94:a2:9c:68:00:b5:c4:0c:5b:2e:fc:c7:4f:20: 31:0e:09:10:0a:30:02:14:82:81:67:c2:a2:98:d1:64:ea:3e: 85:f5:24:9c:45:b1:19:c4:97:f0:8c:9b:36:ad:41:07:7e:58: 66:0e:2e:31:07:e6:4c:7e:84:58:19:05:be:eb:8e:b3:62:19: 3d:99:9a:87:4a:45:60:e5:9a:c9:0f:c7:3c:ce:bd:72:26:cf: eb:1d:3d:b6:ce:30:aa:3e:df:20:1c:cd:47:50:8a:6a:14:26: de:31:5c:2a:ea:e3:4a:65:7b:bd:14:c9:4b:22:6d:93:35:47: 95:6a:11:21:02:62:98:a9:fe:40:18:5c:d3:bf:b6:f7:f7:88: 63:80:cf:f1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnE1VasJKv2+P+ciEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMzNmEyYjgtNDJjMy00MmZhLTgzNWUtNDliMjYxMmNj MjlhMB4XDTI1MDUwNzAxMDIwM1oXDTI1MDUwOTIwMDAwMFowLzEtMCsGA1UEAxMk ZWI3ZDMzZWEtMjM3My00ZDQ4LWFiODctMTUwNjk1NmMyZDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZrfJOxDqP0yf9O2toM/OD0VG8GznT1DvOj6 hfAS2J6rUMJO0izzHQxGiUeuo9COGlUn5eMOc6Kg/d2QbnnaZQ6XiUX3LDj1kGQk jjkZ33C2XxLXgIpjk+S0yCxrMr/3+8MNCKpkWTFfYhp7gM5Bl5+9QGrXGXhGSd44 S1Ec9M43HzhrxLitmq+E9jvf8ij2oSrOkd+kFeLpQkLEGAPM58IgjJ4RCGngqYTM fjaE5g7yy5Src0FzhQJwuuAeExxDktqmqUajDqRubo3DcQ8FRNz1dV+zZ1McSSmj OA2ehIjr9VOmfB0JayS87azGS+7UlUXsM/2M8J7sFhPx0WHwwwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEG0ddMtsGoK52h2IcyVBTSQgV3qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84YzM2 YTJiOC00MmMzLTQyZmEtODM1ZS00OWIyNjEyY2MyOWEvOGMzNmEyYjgtNDJjMy00 MmZhLTgzNWUtNDliMjYxMmNjMjlhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGMzNmEyYjgtNDJjMy00MmZhLTgz NWUtNDliMjYxMmNjMjlhLzhjMzZhMmI4LTQyYzMtNDJmYS04MzVlLTQ5YjI2MTJj YzI5YS5jcmwwHwYDVR0jBBgwFoAUiksEFIeDRSBp0+MZIK/tC2IZO2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84YzM2YTJiOC00MmMzLTQyZmEtODM1ZS00OWIy NjEyY2MyOWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB3Z7n+MBke/hUekajxCXFD PoZArvdV+hk8piUhJvBnH/Qc97c4T7YWMaHf1hjLnodBfqWum4wCr+kY3C4WOAFN 2T0fZ94BC2TJR+wrhE8BAToSNj6Vb9x3eOyE3fsENa/7OMd/z9Ga5vFoJeTJFUDb lKKcaAC1xAxbLvzHTyAxDgkQCjACFIKBZ8KimNFk6j6F9SScRbEZxJfwjJs2rUEH flhmDi4xB+ZMfoRYGQW+646zYhk9mZqHSkVg5ZrJD8c8zr1yJs/rHT22zjCqPt8g HM1HUIpqFCbeMVwq6uNKZXu9FMlLIm2TNUeVahEhAmKYqf5AGFzTv7b394hjgM/x -----END CERTIFICATE-----Generated at Wed May 7 15:03:10 2025 by rpki-client