$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/a2d891cb-6de8-4437-8155-3741bf9d4144.mft File: a2d891cb-6de8-4437-8155-3741bf9d4144.mft (raw, json) Hash identifier: KH5jVPMF1BNUMw4eALvC6KF3IwtelBUiPHa2q1u0OHo= Subject key identifier: 95:A9:DB:7F:42:73:63:41:3C:CF:5C:CF:FC:AA:9D:1C:88:3D:3D:A6 Authority key identifier: 35:18:CE:6D:B2:C6:46:71:A0:E5:1A:1A:37:BE:E2:69:AB:CC:0C:9C Certificate issuer: /CN=a2d891cb-6de8-4437-8155-3741bf9d4144 Certificate serial: 010D0C9F43285849CF87F5C8DE42A6DFBB85CE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/a2d891cb-6de8-4437-8155-3741bf9d4144.mft Manifest number: 010D0C9F432858458ECB1B3EED5A1E71A21779D4 Signing time: Sat 10 May 2025 21:00:03 +0000 Manifest this update: Sat 10 May 2025 21:00:03 +0000 Manifest next update: Tue 13 May 2025 21:00:00 +0000 Files and hashes: 1: 05b1b493-9d94-3e6b-81eb-2cf069390bb0.roa (hash: hPMeqX4MdoXFAVGXU2L0XpW22ITgmPWkFlniac1NNrY=) 2: 1a554d21-9e17-3f96-a94b-91c96fdfa6bb.roa (hash: KDB4+saeKHyTtyuzIWblk4xm/yB2/ihs3wTbs3TUqw4=) 3: 211bb791-f615-328f-aa4a-b58ac1a58dd9.roa (hash: t69/9BH3wTMntmLwI8dG4D5THrjyaCeB9ECs93GT4Jc=) 4: 52d0dfb0-f716-3523-9842-7e8666069752.roa (hash: nt2K8yG8xPAnnoi+dCxxOL/T1ccinPE7OyGB/H/KegU=) 5: a2d891cb-6de8-4437-8155-3741bf9d4144.crl (hash: imi60dqBN3juxXbwWWANNqYsLxGlXsVKKL1pxcRoG9g=) 6: e2ebf041-a9c7-3a68-89f8-8e2e34b4b4cb.roa (hash: fEMKMGQv0urk0F92G+3KU6gV/CgSjsOh5vatsZ3Rmd4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/a2d891cb-6de8-4437-8155-3741bf9d4144.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/a2d891cb-6de8-4437-8155-3741bf9d4144.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cf:87:f5:c8:de:42:a6:df:bb:85:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2d891cb-6de8-4437-8155-3741bf9d4144 Validity Not Before: May 10 21:00:03 2025 GMT Not After : May 13 21:00:00 2025 GMT Subject: CN=91f82c7d-6b96-41ba-a682-3fa0ac94e0f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d6:d1:86:7e:52:e1:f2:5d:cd:52:a0:12:a7: 1a:90:5b:0e:e9:5a:0d:d2:37:85:3a:9a:c1:97:a4: 6c:74:c0:f4:41:e4:ce:f9:e7:1a:7c:86:35:fc:5d: e0:7b:ca:b0:14:29:56:65:16:8f:9a:ba:6d:71:95: cf:c4:e4:af:86:cb:3d:eb:7b:9c:91:b7:ed:25:4e: a1:09:bc:ec:3a:62:a7:c0:15:0e:c6:bb:d7:87:36: 05:26:03:7d:39:f9:05:15:db:eb:10:8c:e1:4f:ee: e6:f0:bb:cb:b1:14:20:d0:ef:00:f6:30:8b:ea:d4: e0:8d:b0:2a:de:81:37:ea:54:75:69:66:bc:71:07: 9b:f7:b7:f7:55:5f:69:fa:40:37:e7:af:84:22:c2: 0e:ba:1d:d4:2e:0c:9b:b7:e8:0c:43:20:67:c0:3e: e6:22:3f:4e:3a:5e:62:92:65:8e:8f:91:25:29:c3: 19:e7:93:a5:17:b6:30:15:92:19:24:7e:87:9b:4f: 33:e9:79:d4:b7:12:4f:73:98:03:4f:02:d0:1d:f7: e3:0e:e5:1d:30:c5:b1:eb:58:4c:f0:c0:ad:cc:59: 3e:39:a8:e7:a8:f6:ed:c2:d3:9a:16:36:0f:a4:86: 20:ce:8f:4d:ea:e7:94:e4:2d:52:80:3d:e3:a8:4a: 49:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A9:DB:7F:42:73:63:41:3C:CF:5C:CF:FC:AA:9D:1C:88:3D:3D:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/a2d891cb-6de8-4437-8155-3741bf9d4144.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/a2d891cb-6de8-4437-8155-3741bf9d4144.crl X509v3 Authority Key Identifier: keyid:35:18:CE:6D:B2:C6:46:71:A0:E5:1A:1A:37:BE:E2:69:AB:CC:0C:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:83:26:a2:68:c8:7f:c8:3e:96:4e:d9:50:9b:34:b0:ae:ca: 86:d6:40:7b:63:d1:99:9b:c7:76:c3:78:09:c2:5c:ad:cf:d0: aa:89:7d:ae:f7:db:bb:1a:73:9c:e0:84:7b:24:71:08:e3:20: 27:5f:b7:35:0e:66:67:36:cb:22:87:b7:3a:14:7e:a3:04:89: 20:34:b4:a5:87:ac:95:b6:c4:b8:6c:fc:eb:c0:12:4c:3f:d7: 0e:6c:d5:f1:e3:1a:84:53:45:89:35:ce:f3:f1:5f:52:d0:8f: d8:66:01:89:87:1e:a6:b9:74:78:bb:06:d2:47:6a:19:d6:0a: 33:3f:eb:96:b1:65:ee:db:06:41:2f:ba:5d:5d:40:b5:5e:9a: 73:5c:26:06:07:d2:00:61:4b:fc:f5:08:b6:7b:82:f8:f0:c2: 06:d8:8a:1a:49:5f:ed:b7:3a:8b:32:29:33:b3:af:4e:e9:19: 13:de:0a:3e:90:6d:f3:fe:9e:1e:89:79:1c:90:29:e8:49:95: 47:9e:71:58:41:48:33:a5:9d:59:25:68:27:03:7d:41:66:e1: 2a:f7:37:8e:11:1a:13:77:3f:13:2e:5b:92:03:a5:5f:bb:09: 2a:4d:32:da:ac:a5:8f:13:db:f8:82:ab:51:a6:27:b1:03:b0: 5e:2e:02:d6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnPh/XI3kKm37uFzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJkODkxY2ItNmRlOC00NDM3LTgxNTUtMzc0MWJmOWQ0 MTQ0MB4XDTI1MDUxMDIxMDAwM1oXDTI1MDUxMzIxMDAwMFowLzEtMCsGA1UEAxMk OTFmODJjN2QtNmI5Ni00MWJhLWE2ODItM2ZhMGFjOTRlMGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztbRhn5S4fJdzVKgEqcakFsO6VoN0jeFOprB l6RsdMD0QeTO+ecafIY1/F3ge8qwFClWZRaPmrptcZXPxOSvhss963uckbftJU6h CbzsOmKnwBUOxrvXhzYFJgN9OfkFFdvrEIzhT+7m8LvLsRQg0O8A9jCL6tTgjbAq 3oE36lR1aWa8cQeb97f3VV9p+kA356+EIsIOuh3ULgybt+gMQyBnwD7mIj9OOl5i kmWOj5ElKcMZ55OlF7YwFZIZJH6Hm08z6XnUtxJPc5gDTwLQHffjDuUdMMWx61hM 8MCtzFk+OajnqPbtwtOaFjYPpIYgzo9N6ueU5C1SgD3jqEpJZwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJWp239Cc2NBPM9cz/yqnRyIPT2mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hMmQ4 OTFjYi02ZGU4LTQ0MzctODE1NS0zNzQxYmY5ZDQxNDQvYTJkODkxY2ItNmRlOC00 NDM3LTgxNTUtMzc0MWJmOWQ0MTQ0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYTJkODkxY2ItNmRlOC00NDM3LTgx NTUtMzc0MWJmOWQ0MTQ0L2EyZDg5MWNiLTZkZTgtNDQzNy04MTU1LTM3NDFiZjlk NDE0NC5jcmwwHwYDVR0jBBgwFoAUNRjObbLGRnGg5RoaN77iaavMDJwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hMmQ4OTFjYi02ZGU4LTQ0MzctODE1NS0zNzQx YmY5ZDQxNDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDRgyaiaMh/yD6WTtlQmzSw rsqG1kB7Y9GZm8d2w3gJwlytz9CqiX2u99u7GnOc4IR7JHEI4yAnX7c1DmZnNssi h7c6FH6jBIkgNLSlh6yVtsS4bPzrwBJMP9cObNXx4xqEU0WJNc7z8V9S0I/YZgGJ hx6muXR4uwbSR2oZ1gozP+uWsWXu2wZBL7pdXUC1XppzXCYGB9IAYUv89Qi2e4L4 8MIG2IoaSV/ttzqLMikzs69O6RkT3go+kG3z/p4eiXkckCnoSZVHnnFYQUgzpZ1Z JWgnA31BZuEq9zeOERoTdz8TLluSA6VfuwkqTTLarKWPE9v4gqtRpiexA7BeLgLW -----END CERTIFICATE-----Generated at Sun May 11 13:32:06 2025 by rpki-client