$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d/63f043cf-2b37-4962-9d5b-bc179102509d.mft File: 63f043cf-2b37-4962-9d5b-bc179102509d.mft (raw, json) Hash identifier: 3f6548iF6hTJ8Pqro3YfAvS/Rmib7pf0eKaXQN2LWsA= Subject key identifier: 77:3B:2C:37:8D:BC:2D:5A:53:CB:94:77:89:8D:48:39:33:08:36:2D Authority key identifier: DF:97:12:3D:BE:3D:39:FF:38:2D:47:2A:3B:D6:64:56:81:93:BE:67 Certificate issuer: /CN=63f043cf-2b37-4962-9d5b-bc179102509d Certificate serial: 010D0C9F43285849D093F80E01A0CC6BB6933E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d/63f043cf-2b37-4962-9d5b-bc179102509d.mft Manifest number: 010D0C9F43285848BC412B10542A2161F5139B85 Signing time: Sun 11 May 2025 06:00:03 +0000 Manifest this update: Sun 11 May 2025 06:00:03 +0000 Manifest next update: Tue 13 May 2025 06:00:00 +0000 Files and hashes: 1: 1298d51a-f11e-30fd-9b81-309e6723fa54.roa (hash: FKfk9TV2SDYn3+ocPW9PaXsj0f7+4+8G+uTmmPIhBkc=) 2: 4acf3816-9e0b-3a2a-8579-419b52356769.roa (hash: ZHE4LAxe0BqjfE1caBDUul+DPbpCHjvf0h56PrW5ofg=) 3: 56114885-4dbd-322d-b9aa-3a3aa5f9c220.roa (hash: 1fSw6pQJVx4+Pan6hgwxXGWWepFINHu8Zf9PUyEDxig=) 4: 63f043cf-2b37-4962-9d5b-bc179102509d.crl (hash: jYzKxb2iL0zfqzHAtm1jBW85hbT2DZF+TyM2CfWl9mw=) 5: 8c6a8585-83e9-32f4-9fe4-c19073532ddc.roa (hash: qQR1Uh3zdoCjkPy6HTl7PmPNmxYbagjZkZItFe8E9sI=) 6: f6805b1b-83be-3b26-926f-50971cbfbe0a.roa (hash: 768W+FR+30fO+vALT/Z11kIsEfb6C7FkOljmUHAivog=) 7: ff9d86b8-cc0e-32f6-88cd-a9487a1c32b3.roa (hash: tNQu2Rv3H+6B4hS9NXLHd9GRYX+oEWfcf3I1ooUUTOs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d/63f043cf-2b37-4962-9d5b-bc179102509d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d/63f043cf-2b37-4962-9d5b-bc179102509d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d0:93:f8:0e:01:a0:cc:6b:b6:93:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63f043cf-2b37-4962-9d5b-bc179102509d Validity Not Before: May 11 06:00:03 2025 GMT Not After : May 13 06:00:00 2025 GMT Subject: CN=68438c24-6869-4f3a-b6ab-9b06f95c7168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3c:d5:62:03:4f:c4:9e:57:3a:00:b7:02:72: 83:e7:7f:04:eb:5d:56:c0:89:3a:2e:7b:99:b5:49: 9d:5f:7e:19:b6:7a:59:26:97:44:07:4f:58:31:2a: bf:65:dd:5b:cc:2d:8a:50:4e:66:8f:9e:35:a9:ae: a0:0e:44:08:95:19:e9:43:8e:85:da:dc:94:b8:4a: 05:13:ab:47:10:57:53:98:1f:d6:23:a8:a9:fe:71: b8:74:f7:50:87:eb:f1:1f:ac:82:0a:67:69:62:81: 02:9a:d6:3a:43:1f:1b:c8:8c:9e:3a:32:e0:eb:df: 08:61:a2:ed:8b:14:34:0e:9e:90:00:57:0b:36:12: da:29:8f:b6:81:ab:b1:bd:a4:5a:70:e1:b1:13:26: 92:a6:07:26:50:54:8b:9d:96:e5:e6:54:f7:1f:e8: f7:d5:a7:6d:22:24:0b:d7:2e:fa:92:87:a0:be:6d: 1f:03:14:a3:ac:d8:ca:70:2d:ef:46:31:53:b1:73: 68:06:a1:7d:ee:56:84:ac:57:93:12:53:a2:4e:5e: c7:3e:19:2a:19:e0:55:8d:16:40:09:12:20:86:2c: 68:63:ad:3b:98:e8:d6:d1:86:5e:12:df:df:ac:53: 2a:24:4b:ec:d0:18:49:a6:b4:ce:94:7f:36:fd:b8: ff:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:3B:2C:37:8D:BC:2D:5A:53:CB:94:77:89:8D:48:39:33:08:36:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d/63f043cf-2b37-4962-9d5b-bc179102509d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d/63f043cf-2b37-4962-9d5b-bc179102509d.crl X509v3 Authority Key Identifier: keyid:DF:97:12:3D:BE:3D:39:FF:38:2D:47:2A:3B:D6:64:56:81:93:BE:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63f043cf-2b37-4962-9d5b-bc179102509d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:88:3a:4f:f1:f4:40:67:94:33:1b:84:f8:74:e9:23:ab:68: c3:92:6d:35:a0:4e:41:6b:ca:7c:38:db:2d:fe:a5:14:fc:89: e6:b0:c3:9c:f9:7d:e3:fc:3c:aa:a6:c6:da:3e:43:7a:eb:1b: 07:69:1f:cb:d3:c0:3b:15:56:fa:77:0f:b4:dd:be:9d:de:e1: 30:73:fd:53:a9:d9:b7:48:9b:45:08:47:02:15:dc:ce:9d:80: 1d:ea:48:af:54:b4:6d:19:2d:35:8c:a2:4a:fe:90:1a:f3:e5: 93:4d:36:63:07:b7:ec:cc:aa:2c:b7:64:f3:47:5b:b5:96:9a: a3:8a:7d:c0:40:a5:cc:c7:3d:72:e1:6e:7c:19:74:ab:ff:e9: ae:8f:1c:a0:03:4b:31:7f:c9:1d:28:f0:cd:77:b4:d6:eb:96: 37:ce:e5:bc:7a:9c:dc:60:7b:19:22:28:cc:e2:46:d8:97:31: e4:b9:de:92:38:6b:d3:2a:4b:e5:62:14:a5:9e:f8:e5:61:b0: 3a:62:f3:7f:e1:b4:5a:4e:37:2e:52:91:4e:6d:87:d4:70:6d: 88:ed:e6:8e:d8:cd:61:0a:a7:9d:a7:7b:53:e8:fa:83:d6:c9: c7:c8:89:d1:63:27:f7:5d:d4:80:8b:8a:87:0d:f9:a4:9a:dc: 17:fd:89:c5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnQk/gOAaDMa7aTPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjNmMDQzY2YtMmIzNy00OTYyLTlkNWItYmMxNzkxMDI1 MDlkMB4XDTI1MDUxMTA2MDAwM1oXDTI1MDUxMzA2MDAwMFowLzEtMCsGA1UEAxMk Njg0MzhjMjQtNjg2OS00ZjNhLWI2YWItOWIwNmY5NWM3MTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TzVYgNPxJ5XOgC3AnKD538E611WwIk6LnuZ tUmdX34ZtnpZJpdEB09YMSq/Zd1bzC2KUE5mj541qa6gDkQIlRnpQ46F2tyUuEoF E6tHEFdTmB/WI6ip/nG4dPdQh+vxH6yCCmdpYoECmtY6Qx8byIyeOjLg698IYaLt ixQ0Dp6QAFcLNhLaKY+2gauxvaRacOGxEyaSpgcmUFSLnZbl5lT3H+j31adtIiQL 1y76koegvm0fAxSjrNjKcC3vRjFTsXNoBqF97laErFeTElOiTl7HPhkqGeBVjRZA CRIghixoY607mOjW0YZeEt/frFMqJEvs0BhJprTOlH82/bj/LwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHc7LDeNvC1aU8uUd4mNSDkzCDYtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82M2Yw NDNjZi0yYjM3LTQ5NjItOWQ1Yi1iYzE3OTEwMjUwOWQvNjNmMDQzY2YtMmIzNy00 OTYyLTlkNWItYmMxNzkxMDI1MDlkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjNmMDQzY2YtMmIzNy00OTYyLTlk NWItYmMxNzkxMDI1MDlkLzYzZjA0M2NmLTJiMzctNDk2Mi05ZDViLWJjMTc5MTAy NTA5ZC5jcmwwHwYDVR0jBBgwFoAU35cSPb49Of84LUcqO9ZkVoGTvmcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82M2YwNDNjZi0yYjM3LTQ5NjItOWQ1Yi1iYzE3 OTEwMjUwOWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBNiDpP8fRAZ5QzG4T4dOkj q2jDkm01oE5Ba8p8ONst/qUU/InmsMOc+X3j/DyqpsbaPkN66xsHaR/L08A7FVb6 dw+03b6d3uEwc/1Tqdm3SJtFCEcCFdzOnYAd6kivVLRtGS01jKJK/pAa8+WTTTZj B7fszKost2TzR1u1lpqjin3AQKXMxz1y4W58GXSr/+mujxygA0sxf8kdKPDNd7TW 65Y3zuW8epzcYHsZIijM4kbYlzHkud6SOGvTKkvlYhSlnvjlYbA6YvN/4bRaTjcu UpFObYfUcG2I7eaO2M1hCqedp3tT6PqD1snHyInRYyf3XdSAi4qHDfmkmtwX/YnF -----END CERTIFICATE-----Generated at Sun May 11 15:24:40 2025 by rpki-client