$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.mft File: 3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.mft (raw, json) Hash identifier: ECZ/EAMOHnekcCXhARRqT2fftzflsZv9+cMvfIyBdPA= Subject key identifier: 32:9B:5E:6A:DB:C2:E8:43:64:68:D6:60:0C:2F:C5:BA:CF:34:A4:94 Authority key identifier: 09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8 Certificate issuer: /CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7 Certificate serial: 010D0C9F43285849CDE71BD530D44D93A2FD3480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.mft Manifest number: 010D0C9F4328584073A845ECF7A33162CC78BF4B Signing time: Sat 10 May 2025 07:00:07 +0000 Manifest this update: Sat 10 May 2025 07:00:07 +0000 Manifest next update: Mon 12 May 2025 07:00:00 +0000 Files and hashes: 1: 2b564fbb-5489-3a5e-a3a8-b51618764307.roa (hash: D8bH/TWGzs6hGxFe5mOg7CKNfmhTjlM0AFh6npjfmto=) 2: 3d204eac-8de5-3fca-995d-20b34553b459.roa (hash: x7nQICbC0XtKfe12m1alNEniaXCyAvRJ4l8/R3vWNr0=) 3: 3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl (hash: 5EKj8rJZPkMjjS4tmyO+m2ynB174rzWu7QI3CYAeVbM=) 4: 3fa3109f-9542-3991-a9da-fea12f42beb3.roa (hash: 9PKG0SYXONkpNeqqFmDBHniSzJoYKb3x65W5QvIqWyQ=) 5: 5d8c78b7-687e-392b-97b9-ee57e34dd94e.roa (hash: 9ff9N21MShYmP+PKUAEH1A4ol8Ni02bCNOeR3dEu9pY=) 6: 74168fc4-19c5-3549-abc7-a40124cbc34c.roa (hash: pwD/b3s5Cug1Q/eS5XdmJGf7hXb5P+Nzz+w8gPHiGN8=) 7: 80ad4e79-4976-3549-912a-b86c6056835c.roa (hash: Bv9UOM0Gm5g71ovAUqZ/7XC6fIf9JoJTW2D8Knj7oYo=) 8: 882d0ec4-8387-38e3-93e9-e4806eb2a252.roa (hash: 6jYkQMAleVslDrLXJr9nSXnkNXmTMidEVVuZP0B3410=) 9: bf924dbd-34bc-3c73-9911-e6e933405f1e.roa (hash: le0PxjHo0Zy7TxPigryC0TMxk3ldYY1tKGEJ3OMe3GM=) 10: e0accc93-63d1-3c21-b64c-4277eccbb948.roa (hash: iK5XdxoTx3bOaJvh9/OU4ornOMKPv52Fh++T6e31+ro=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cd:e7:1b:d5:30:d4:4d:93:a2:fd:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7 Validity Not Before: May 10 07:00:07 2025 GMT Not After : May 12 07:00:00 2025 GMT Subject: CN=baacccdd-294b-4d82-a556-7145cc727b12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:be:0e:40:fd:23:0f:53:43:49:5d:c7:c0:c5: c1:97:17:73:bc:d6:d2:dc:e1:cb:62:75:52:76:14: ef:5d:45:5e:3d:a8:ea:de:96:ef:bc:cf:7d:ae:53: 3c:b3:6d:06:63:e8:96:ae:db:8f:ed:17:2d:e0:68: bc:f2:51:57:1a:a0:a4:a5:64:39:db:da:96:4d:9b: 48:61:17:9f:14:ec:51:3d:7f:11:c1:85:93:77:c7: 38:c1:03:6f:d5:8e:13:da:23:d6:79:18:9a:f6:65: 81:7b:a7:b9:05:d1:1b:64:aa:0b:87:5b:84:c5:92: 9c:92:7e:80:33:fd:5e:ea:39:65:b3:bf:9a:4e:0d: ef:ab:78:01:b4:05:1c:17:a3:7e:78:d1:63:3d:ef: 7d:52:46:49:bc:64:38:38:12:89:d0:c3:47:5e:48: 60:40:ac:8d:b4:1a:83:5c:e0:49:7e:29:f9:4a:43: ff:0a:1d:ba:1e:3b:24:2c:53:2f:74:dc:ea:a8:2f: bd:06:1c:70:f3:bc:42:36:f0:f3:df:7e:ea:4b:31: 7d:4c:fc:e1:6e:64:71:57:c1:93:6f:bf:e2:9c:4f: f5:24:4f:fc:03:80:38:9f:8a:5b:04:78:24:6a:5c: 75:d6:62:a2:67:88:09:ff:5b:a3:d2:3d:4d:46:6c: 05:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:9B:5E:6A:DB:C2:E8:43:64:68:D6:60:0C:2F:C5:BA:CF:34:A4:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl X509v3 Authority Key Identifier: keyid:09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:21:e2:ac:40:c9:a8:63:4a:a6:05:ba:21:1b:8e:69:39:b8: 28:ad:b0:35:4e:5f:b1:db:ed:bc:5d:f4:bb:04:1e:13:34:2b: 40:94:d0:c5:e9:fc:44:be:8c:0a:92:93:1f:ce:fd:c4:35:bc: 91:b1:39:33:5c:07:a6:a0:02:92:6b:78:ce:83:06:4e:8b:5c: ad:45:9d:c1:0d:da:a5:ae:c2:11:b1:ac:fc:22:d4:8f:37:43: 4e:97:57:62:74:8d:88:9d:7b:68:d6:78:99:02:40:79:ad:50: 36:32:a4:b6:9d:de:54:ab:a1:43:c4:fd:ed:3e:3b:49:af:58: 23:36:66:ee:00:e4:15:65:ed:50:e2:80:d2:29:34:55:65:99: 0d:31:3d:45:ee:84:1a:8a:98:35:8e:7b:2b:f9:0d:72:ef:23: 8d:3e:77:b0:44:d0:87:2a:01:bb:25:5a:e2:e6:21:61:39:14: eb:e7:78:62:3e:da:13:3d:18:f2:91:3b:2c:1d:8e:62:5e:aa: dc:5f:b9:eb:6f:c8:1d:8e:41:7d:58:ca:17:fe:40:b9:fa:da: 19:88:55:01:2e:6a:8e:e6:87:74:17:73:f1:e9:04:28:b9:39: 87:3b:42:89:a9:1e:c3:0c:e3:7c:60:cb:e2:d6:7e:31:00:b4: a9:58:b9:f4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnN5xvVMNRNk6L9NIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VlNzIwZGUtYzMyMi00YmI1LWI4Y2QtYzdhM2YyM2I5 MmQ3MB4XDTI1MDUxMDA3MDAwN1oXDTI1MDUxMjA3MDAwMFowLzEtMCsGA1UEAxMk YmFhY2NjZGQtMjk0Yi00ZDgyLWE1NTYtNzE0NWNjNzI3YjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjr4OQP0jD1NDSV3HwMXBlxdzvNbS3OHLYnVS dhTvXUVePajq3pbvvM99rlM8s20GY+iWrtuP7Rct4Gi88lFXGqCkpWQ529qWTZtI YRefFOxRPX8RwYWTd8c4wQNv1Y4T2iPWeRia9mWBe6e5BdEbZKoLh1uExZKckn6A M/1e6jlls7+aTg3vq3gBtAUcF6N+eNFjPe99UkZJvGQ4OBKJ0MNHXkhgQKyNtBqD XOBJfin5SkP/Ch26HjskLFMvdNzqqC+9Bhxw87xCNvDz337qSzF9TPzhbmRxV8GT b7/inE/1JE/8A4A4n4pbBHgkalx11mKiZ4gJ/1uj0j1NRmwFRwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDKbXmrbwuhDZGjWYAwvxbrPNKSUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zZWU3 MjBkZS1jMzIyLTRiYjUtYjhjZC1jN2EzZjIzYjkyZDcvM2VlNzIwZGUtYzMyMi00 YmI1LWI4Y2QtYzdhM2YyM2I5MmQ3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2VlNzIwZGUtYzMyMi00YmI1LWI4 Y2QtYzdhM2YyM2I5MmQ3LzNlZTcyMGRlLWMzMjItNGJiNS1iOGNkLWM3YTNmMjNi OTJkNy5jcmwwHwYDVR0jBBgwFoAUCeWmFW+MnUDiNV/P2g31BT5Sb+gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zZWU3MjBkZS1jMzIyLTRiYjUtYjhjZC1jN2Ez ZjIzYjkyZDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCgIeKsQMmoY0qmBbohG45p ObgorbA1Tl+x2+28XfS7BB4TNCtAlNDF6fxEvowKkpMfzv3ENbyRsTkzXAemoAKS a3jOgwZOi1ytRZ3BDdqlrsIRsaz8ItSPN0NOl1didI2InXto1niZAkB5rVA2MqS2 nd5Uq6FDxP3tPjtJr1gjNmbuAOQVZe1Q4oDSKTRVZZkNMT1F7oQaipg1jnsr+Q1y 7yONPnewRNCHKgG7JVri5iFhORTr53hiPtoTPRjykTssHY5iXqrcX7nrb8gdjkF9 WMoX/kC5+toZiFUBLmqO5od0F3Px6QQouTmHO0KJqR7DDON8YMvi1n4xALSpWLn0 -----END CERTIFICATE-----Generated at Sun May 11 05:17:24 2025 by rpki-client