$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.mft File: a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.mft (raw, json) Hash identifier: eIYfp62wWc9RQ4DTHOrmgefOJONInDhs/zq0aY+TCfU= Subject key identifier: 85:DE:76:F4:E5:57:6B:30:FC:CB:C3:C4:85:0F:AB:25:63:AF:EA:6F Authority key identifier: 27:26:87:9C:23:23:76:52:E8:25:F4:9A:C6:24:3A:FF:A6:E6:4E:2F Certificate issuer: /CN=a8b84e2b-afbe-4b35-b005-e0dfca2e23d8 Certificate serial: 010D0C9F43285849C174C6B6F7186B6D5B9F2980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.mft Manifest number: 010D0C9F4328584505F2AF5ED59DA37E568717C6 Signing time: Mon 05 May 2025 20:00:03 +0000 Manifest this update: Mon 05 May 2025 20:00:03 +0000 Manifest next update: Thu 08 May 2025 20:00:00 +0000 Files and hashes: 1: 3bcfb33e-cbd6-3e45-954d-61ac30126a69.roa (hash: 0M8g7g+Uu58xpAXVd/RRqJcbXMWC3kbIa7eC+h0DTF8=) 2: a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.crl (hash: MKActK1jUfLSsEEXaGfkU+9+azu8LtNe0dPZ5Wts+UY=) 3: bb62e037-28c9-3670-9fc9-341fc40d906c.roa (hash: 6dnsWl95VEFWrwX04XQQVDiM8H9pqSrWhEarPTwlXz0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c1:74:c6:b6:f7:18:6b:6d:5b:9f:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8b84e2b-afbe-4b35-b005-e0dfca2e23d8 Validity Not Before: May 5 20:00:03 2025 GMT Not After : May 8 20:00:00 2025 GMT Subject: CN=7b2395b4-1c69-4991-986c-9963e76efa09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:21:07:06:68:7a:6f:f2:f6:81:dd:c7:94:14: ac:b1:9e:f8:83:f5:77:ce:88:5f:8e:26:56:97:41: b8:b6:0e:db:80:f6:24:56:51:75:7b:d7:96:06:da: 15:bc:df:47:d3:5e:36:31:03:86:91:60:86:f2:07: 3f:b5:e3:85:3f:7d:7e:52:fa:df:0a:4e:c9:4f:fc: e4:aa:0a:1a:bd:ac:20:1b:5b:4d:19:c0:78:81:60: 67:28:81:6a:e8:43:88:0e:59:dc:f6:11:04:f7:b0: eb:7d:16:f5:66:a0:2c:d8:5f:69:2f:9a:9d:78:7e: ea:06:1f:ce:8f:05:02:2f:fa:94:fa:5e:3e:d0:da: b4:38:35:7f:76:ce:39:40:16:e3:71:65:56:49:19: 8b:2f:ce:23:54:1e:07:89:57:c7:34:ff:19:9e:01: cb:46:cd:44:ac:83:da:c2:ab:7f:61:7b:1c:34:4a: 50:8c:6d:6c:db:24:16:c0:b0:c9:d3:27:53:2b:3d: 04:81:65:fb:af:b7:10:de:bf:25:dd:e2:4f:d0:19: c1:f5:8e:cd:9e:41:75:de:9f:09:38:d1:4f:79:d2: 33:86:ea:e4:b6:c5:fd:62:55:e6:c3:f8:0c:7f:16: 7a:7b:92:74:99:54:e1:fa:22:76:0c:af:43:82:4e: 1b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:DE:76:F4:E5:57:6B:30:FC:CB:C3:C4:85:0F:AB:25:63:AF:EA:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.crl X509v3 Authority Key Identifier: keyid:27:26:87:9C:23:23:76:52:E8:25:F4:9A:C6:24:3A:FF:A6:E6:4E:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:ff:ea:93:86:10:97:ed:06:bb:44:2a:3b:b4:f1:9f:4b:e5: c1:ba:32:8b:b2:59:1a:b9:34:9d:94:54:a2:d6:b3:73:50:57: c7:34:b4:91:1f:f3:e0:53:75:ff:68:43:09:c1:1f:a6:ab:9b: 80:2c:54:29:2d:ff:32:60:22:51:5c:f3:1e:83:d1:a8:d3:46: 14:45:c8:a9:49:14:c7:00:f7:52:f0:6d:07:14:81:dc:78:42: eb:68:32:55:21:19:db:63:a3:6b:36:dd:3b:40:8c:ab:57:b3: 5c:a4:2c:7b:65:f8:25:42:80:ae:72:f1:97:dc:82:34:0b:cf: a3:a1:36:1d:64:1d:a8:1b:d1:4e:6d:6e:c1:f9:7c:4f:f4:6e: 5c:ef:93:8e:77:8b:ff:19:8e:df:68:88:48:0d:1e:f3:8c:64: cd:36:01:99:63:cf:a6:27:c8:2a:f9:72:51:d3:24:7e:d3:14: db:f6:0a:38:e5:60:f7:f1:52:c1:1f:8d:50:fa:61:a8:83:4a: 05:d5:de:45:33:a1:e6:80:2b:52:5f:b0:2e:c6:3e:c5:f2:ea: e2:bc:69:58:38:85:a1:16:3a:b0:03:de:99:8e:2f:de:01:66: 03:cd:04:63:64:2c:fb:8b:a0:5d:97:8f:93:9a:2c:e8:99:ee: e1:e3:96:8c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnBdMa29xhrbVufKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYThiODRlMmItYWZiZS00YjM1LWIwMDUtZTBkZmNhMmUy M2Q4MB4XDTI1MDUwNTIwMDAwM1oXDTI1MDUwODIwMDAwMFowLzEtMCsGA1UEAxMk N2IyMzk1YjQtMWM2OS00OTkxLTk4NmMtOTk2M2U3NmVmYTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSEHBmh6b/L2gd3HlBSssZ74g/V3zohfjiZW l0G4tg7bgPYkVlF1e9eWBtoVvN9H0142MQOGkWCG8gc/teOFP31+UvrfCk7JT/zk qgoavawgG1tNGcB4gWBnKIFq6EOIDlnc9hEE97DrfRb1ZqAs2F9pL5qdeH7qBh/O jwUCL/qU+l4+0Nq0ODV/ds45QBbjcWVWSRmLL84jVB4HiVfHNP8ZngHLRs1ErIPa wqt/YXscNEpQjG1s2yQWwLDJ0ydTKz0EgWX7r7cQ3r8l3eJP0BnB9Y7NnkF13p8J ONFPedIzhurktsX9YlXmw/gMfxZ6e5J0mVTh+iJ2DK9Dgk4bwQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIXedvTlV2sw/MvDxIUPqyVjr+pvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hOGI4 NGUyYi1hZmJlLTRiMzUtYjAwNS1lMGRmY2EyZTIzZDgvYThiODRlMmItYWZiZS00 YjM1LWIwMDUtZTBkZmNhMmUyM2Q4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYThiODRlMmItYWZiZS00YjM1LWIw MDUtZTBkZmNhMmUyM2Q4L2E4Yjg0ZTJiLWFmYmUtNGIzNS1iMDA1LWUwZGZjYTJl MjNkOC5jcmwwHwYDVR0jBBgwFoAUJyaHnCMjdlLoJfSaxiQ6/6bmTi8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hOGI4NGUyYi1hZmJlLTRiMzUtYjAwNS1lMGRm Y2EyZTIzZDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAT/+qThhCX7Qa7RCo7tPGf S+XBujKLslkauTSdlFSi1rNzUFfHNLSRH/PgU3X/aEMJwR+mq5uALFQpLf8yYCJR XPMeg9Go00YURcipSRTHAPdS8G0HFIHceELraDJVIRnbY6NrNt07QIyrV7NcpCx7 ZfglQoCucvGX3II0C8+joTYdZB2oG9FObW7B+XxP9G5c75OOd4v/GY7faIhIDR7z jGTNNgGZY8+mJ8gq+XJR0yR+0xTb9go45WD38VLBH41Q+mGog0oF1d5FM6HmgCtS X7Auxj7F8urivGlYOIWhFjqwA96Zji/eAWYDzQRjZCz7i6Bdl4+Tmizome7h45aM -----END CERTIFICATE-----Generated at Tue May 6 10:10:09 2025 by rpki-client