$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.mft File: 1a8794d9-eb16-4b3c-b869-96971b72a93b.mft (raw, json) Hash identifier: 5rD012li+k+trEQjv/IMkEO0Sqfirh+XSYNfLMCkf6w= Subject key identifier: 3F:29:07:4D:A8:97:5D:C1:B1:A6:DA:10:F5:E0:2E:4E:07:3B:BE:DC Authority key identifier: 58:64:AB:A8:B6:C6:F4:68:6F:87:CE:88:5F:F1:87:CC:7B:DF:DB:2D Certificate issuer: /CN=1a8794d9-eb16-4b3c-b869-96971b72a93b Certificate serial: 010D0C9F43285849CDE71C50C3347E60029C4F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.mft Manifest number: 010D0C9F4328584073A843E7CFB37A94E46CAC42 Signing time: Sat 10 May 2025 07:00:07 +0000 Manifest this update: Sat 10 May 2025 07:00:07 +0000 Manifest next update: Mon 12 May 2025 07:00:00 +0000 Files and hashes: 1: 1a8794d9-eb16-4b3c-b869-96971b72a93b.crl (hash: QmokJMtKqaCrJD8Y7/clrW9JnPx8pGlby95q626I92s=) 2: 67aa11e0-08b1-3729-8732-afed74543a62.roa (hash: wpIna7fGJrzKaSNl/ayHMhtvNf6KS/xpyYcsIlK5b2w=) 3: b529d2af-47b9-3c02-92c0-0e879bd78302.roa (hash: TvNgHo+0ngFEUSfmX/DRo4F5IZU3nf0peBXbKjqI5o4=) 4: ed0b605e-d662-35e3-ad2b-6aa473eb9547.roa (hash: LtuRlT4zJ+QdMblj2Jb8Oqt/44CJbvGVK47RWw9Mx2w=) 5: f258fef8-0d1c-37f1-a943-db2e6b236d6d.roa (hash: KNVMZJVM9WBszXjWBt/JkJjfC2HhGZ0DP73BfAsjN/k=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cd:e7:1c:50:c3:34:7e:60:02:9c:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a8794d9-eb16-4b3c-b869-96971b72a93b Validity Not Before: May 10 07:00:07 2025 GMT Not After : May 12 07:00:00 2025 GMT Subject: CN=b8d01596-1f14-4568-9066-4656bfb02d7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c8:29:35:6f:0c:c7:49:6d:c4:f9:ac:e8:2d: 6a:d3:34:b8:56:1e:6f:13:6c:6e:48:3d:ce:eb:6b: b7:fc:f3:a9:a4:5c:c2:81:c5:49:95:d0:b7:52:43: 5c:79:d0:7e:58:e6:0f:48:e7:4b:2e:95:80:38:a0: a1:ae:70:e2:c6:3e:f0:f9:0a:a7:d9:b5:2d:e7:cb: 86:5c:66:98:9e:bc:e1:98:91:4f:4b:46:f4:24:b9: 82:42:0e:46:9f:ae:b1:60:4a:2e:51:51:92:d4:29: 0f:c4:c3:64:ad:34:ea:6e:5b:85:6e:28:82:1c:13: d4:97:96:9a:fc:85:2b:6c:53:97:4b:d4:88:43:ee: 05:16:23:66:fc:b2:ac:58:12:5b:1b:10:9c:55:97: 9c:b9:f6:f8:be:e9:06:a4:71:4f:0e:4a:15:5b:0c: 47:92:89:e2:87:7b:b3:7e:be:1b:c8:e0:eb:eb:59: aa:8a:99:ea:4d:b3:fb:b6:8f:d3:34:41:6c:f5:7d: 71:76:d8:7b:d7:08:67:2e:e3:c7:30:de:8e:5e:c5: 5a:ae:bc:cb:dd:45:28:21:2f:c0:58:d6:f7:19:e8: 91:89:df:de:1a:fe:72:58:6e:21:8c:4e:27:2a:73: 41:49:08:ef:0f:ac:26:a1:f5:89:b8:a9:8a:4d:55: 97:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:29:07:4D:A8:97:5D:C1:B1:A6:DA:10:F5:E0:2E:4E:07:3B:BE:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.crl X509v3 Authority Key Identifier: keyid:58:64:AB:A8:B6:C6:F4:68:6F:87:CE:88:5F:F1:87:CC:7B:DF:DB:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:44:54:bf:d0:8a:f6:5f:1a:f1:77:9b:fc:5d:08:cf:cf:64: 49:19:9b:03:1f:25:4c:00:23:59:4a:1d:6c:a0:60:e5:1d:7f: eb:de:3b:d8:ae:a7:5c:4f:4d:2c:d0:17:11:be:5e:ab:fa:f6: bf:bf:f1:5b:08:6f:7d:02:39:87:7b:79:8b:86:45:27:ac:f6: 81:69:da:7c:35:22:cc:b2:be:8e:86:89:99:b8:98:c6:00:01: 5d:31:bf:58:21:90:30:fe:49:f3:d2:08:02:c9:b4:54:1f:0e: ea:2c:d6:ab:e3:da:fa:70:7c:f9:3f:55:0b:1e:2b:fa:14:f8: 7a:ce:d3:fd:8e:d2:9f:81:e2:92:55:40:eb:52:20:9b:ef:90: f9:93:fe:58:af:62:8c:d4:5a:56:a7:ea:df:87:7e:e8:6e:f4: f8:ba:0b:51:47:ad:b2:a5:cc:a7:40:38:6d:ed:1c:12:3c:99: 9c:56:f2:98:c9:34:83:5f:28:f8:a4:ef:6e:a6:cd:9f:b1:df: d5:ea:a0:e1:3a:bd:ee:ea:62:6e:62:6b:50:fc:ad:99:61:91: f4:a0:5d:2e:71:13:7f:05:3d:84:e7:d8:50:38:37:13:bf:43: 75:e6:2d:1f:cf:2e:de:13:43:a3:0a:e7:f1:b8:d3:3b:7d:e7: 43:3e:9b:6b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnN5xxQwzR+YAKcTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE4Nzk0ZDktZWIxNi00YjNjLWI4NjktOTY5NzFiNzJh OTNiMB4XDTI1MDUxMDA3MDAwN1oXDTI1MDUxMjA3MDAwMFowLzEtMCsGA1UEAxMk YjhkMDE1OTYtMWYxNC00NTY4LTkwNjYtNDY1NmJmYjAyZDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cgpNW8Mx0ltxPms6C1q0zS4Vh5vE2xuSD3O 62u3/POppFzCgcVJldC3UkNcedB+WOYPSOdLLpWAOKChrnDixj7w+Qqn2bUt58uG XGaYnrzhmJFPS0b0JLmCQg5Gn66xYEouUVGS1CkPxMNkrTTqbluFbiiCHBPUl5aa /IUrbFOXS9SIQ+4FFiNm/LKsWBJbGxCcVZecufb4vukGpHFPDkoVWwxHkonih3uz fr4byODr61mqipnqTbP7to/TNEFs9X1xdth71whnLuPHMN6OXsVarrzL3UUoIS/A WNb3GeiRid/eGv5yWG4hjE4nKnNBSQjvD6wmofWJuKmKTVWXCQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFD8pB02ol13BsabaEPXgLk4HO77cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xYTg3 OTRkOS1lYjE2LTRiM2MtYjg2OS05Njk3MWI3MmE5M2IvMWE4Nzk0ZDktZWIxNi00 YjNjLWI4NjktOTY5NzFiNzJhOTNiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWE4Nzk0ZDktZWIxNi00YjNjLWI4 NjktOTY5NzFiNzJhOTNiLzFhODc5NGQ5LWViMTYtNGIzYy1iODY5LTk2OTcxYjcy YTkzYi5jcmwwHwYDVR0jBBgwFoAUWGSrqLbG9Ghvh86IX/GHzHvf2y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xYTg3OTRkOS1lYjE2LTRiM2MtYjg2OS05Njk3 MWI3MmE5M2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCiRFS/0Ir2Xxrxd5v8XQjP z2RJGZsDHyVMACNZSh1soGDlHX/r3jvYrqdcT00s0BcRvl6r+va/v/FbCG99AjmH e3mLhkUnrPaBadp8NSLMsr6OhomZuJjGAAFdMb9YIZAw/knz0ggCybRUHw7qLNar 49r6cHz5P1ULHiv6FPh6ztP9jtKfgeKSVUDrUiCb75D5k/5Yr2KM1FpWp+rfh37o bvT4ugtRR62ypcynQDht7RwSPJmcVvKYyTSDXyj4pO9ups2fsd/V6qDhOr3u6mJu YmtQ/K2ZYZH0oF0ucRN/BT2E59hQODcTv0N15i0fzy7eE0OjCufxuNM7fedDPptr -----END CERTIFICATE-----Generated at Sun May 11 05:25:54 2025 by rpki-client