$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/581a8b49-a06e-4497-972f-fd8792bfe9dd.mft File: 581a8b49-a06e-4497-972f-fd8792bfe9dd.mft (raw, json) Hash identifier: XRh7zSFEi/+eBQadhYIWUDhU9PzNvaFcaBik6WXy0aI= Subject key identifier: EF:CB:94:68:50:4F:38:84:2D:47:36:17:C5:D7:0D:42:30:42:38:BD Authority key identifier: 70:5F:04:3F:F0:07:01:E7:30:D4:3C:E7:1B:F9:84:EB:62:53:4A:46 Certificate issuer: /CN=581a8b49-a06e-4497-972f-fd8792bfe9dd Certificate serial: 010D0C9F43285849C88D4CAF0E16FD7F47D321C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/581a8b49-a06e-4497-972f-fd8792bfe9dd.mft Manifest number: 010D0C9F4328584073A84969DC27396999B67DEE Signing time: Thu 08 May 2025 09:00:07 +0000 Manifest this update: Thu 08 May 2025 09:00:07 +0000 Manifest next update: Sat 10 May 2025 09:00:00 +0000 Files and hashes: 1: 0c3f5430-239f-317b-b59b-582d1725d1e6.roa (hash: i4PzcxlSuqnuqX3b8ksWS7YcgvXTxgunTIqtBiGfxXE=) 2: 350a606d-940e-30c5-834b-195460eb8f61.roa (hash: K+/gQ+i8jNrXG8k7tWuQjd46xzkv4DxNaQN4K1G0lKA=) 3: 567679c0-162f-3c85-87b9-979c57a46579.roa (hash: fo7tN+vfoF9AD/cO6pPQcLy5c/pjD8mCIFsawXx8JKw=) 4: 581a8b49-a06e-4497-972f-fd8792bfe9dd.crl (hash: +QzMEoPOr0fMHkRG/noVvDoZ6dkXV6bF6PkhemDPsm8=) 5: 6284af02-d42e-3b40-8748-6bee172ebf9c.roa (hash: lYoW29CUa4Uh3l/T8t+C88TIRXaZso2Z2yetnFbtsTM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/581a8b49-a06e-4497-972f-fd8792bfe9dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/581a8b49-a06e-4497-972f-fd8792bfe9dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c8:8d:4c:af:0e:16:fd:7f:47:d3:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=581a8b49-a06e-4497-972f-fd8792bfe9dd Validity Not Before: May 8 09:00:07 2025 GMT Not After : May 10 09:00:00 2025 GMT Subject: CN=99c19cdd-857c-4e39-8c6b-c1405f173a45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:71:6c:bf:ec:51:ee:4c:8c:3f:62:a5:17:c3: c4:4f:0d:8d:0d:90:e9:1e:85:6d:bf:f0:06:65:84: 46:4a:d7:33:a0:d4:85:61:da:c1:a2:aa:ff:18:67: 89:7c:a5:4b:44:f2:b8:aa:4a:a2:e6:61:16:a3:4c: 68:f3:71:e3:62:f6:3f:3b:b2:40:c3:a1:04:a1:26: ea:78:6e:ee:ae:62:74:c5:71:e4:3e:af:ee:0e:2d: ba:63:e3:82:45:6d:ed:60:57:c3:51:83:df:1a:60: e0:4e:95:41:57:48:ff:3f:59:09:97:41:53:08:c7: 66:6e:8e:42:26:4a:50:31:0c:ea:86:53:b8:8c:c5: a7:ec:ff:ee:30:97:2b:d7:ae:77:73:d3:03:38:3d: 9b:82:11:3b:d4:8e:bb:ab:0d:d0:ea:e1:f1:f5:ca: 18:0a:ba:55:93:fb:d5:1d:46:3a:40:98:89:18:9a: 36:5b:70:3e:54:81:0f:5f:71:dc:e9:76:f0:ba:d5: 18:26:c9:3a:fc:29:d4:ba:e2:b2:ff:01:f5:b7:63: b7:f1:44:ea:93:8d:69:cd:6b:ba:ae:de:17:87:b5: 09:88:d4:04:7c:ae:35:d8:39:b7:89:86:91:3a:0c: ca:22:90:f3:3d:b7:69:38:a3:1a:30:fb:3c:f4:a0: 6c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:CB:94:68:50:4F:38:84:2D:47:36:17:C5:D7:0D:42:30:42:38:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/581a8b49-a06e-4497-972f-fd8792bfe9dd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/581a8b49-a06e-4497-972f-fd8792bfe9dd.crl X509v3 Authority Key Identifier: keyid:70:5F:04:3F:F0:07:01:E7:30:D4:3C:E7:1B:F9:84:EB:62:53:4A:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:cb:ad:b5:39:11:48:75:b3:ba:bb:ea:c9:f9:58:11:f4:1f: f5:a1:ad:73:53:d1:c1:18:b2:31:50:e0:78:38:09:16:f1:c0: 9a:19:ad:6e:a3:fd:66:00:44:7f:ae:66:f2:45:59:01:81:6b: a6:9e:c4:b8:84:d1:06:10:4d:7e:09:b9:4f:18:36:4c:1f:d9: 57:0c:cf:e1:db:bb:53:52:82:00:e7:16:45:94:a8:b5:02:28: 9c:43:1f:dd:50:8e:20:64:dd:50:5e:d2:9d:6f:46:da:c2:27: b2:88:63:c3:85:0c:e8:b7:85:94:93:40:fd:54:a7:3e:00:c2: f6:aa:80:91:ae:6c:df:a2:11:70:09:cf:17:14:92:ec:be:37: df:e2:dc:37:de:11:c7:1d:4d:f8:de:be:e2:51:38:d3:31:84: 3c:1d:ff:fa:fe:70:2d:8a:1c:ba:9f:59:e0:c9:90:d3:49:f0: ab:e1:f5:fd:cc:dd:ec:bb:d2:00:b5:b7:d7:9e:d6:ee:78:6a: 85:a0:c9:3a:87:b2:a1:02:f4:24:ce:b7:16:2f:b7:82:60:c4: 31:c8:0b:7a:86:a9:c0:cb:f2:94:5f:8f:9e:5b:3d:42:99:95: 46:1a:ff:88:f5:24:b1:da:58:39:5b:dc:e2:da:78:d8:21:65: dd:9c:da:73 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnIjUyvDhb9f0fTIcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTgxYThiNDktYTA2ZS00NDk3LTk3MmYtZmQ4NzkyYmZl OWRkMB4XDTI1MDUwODA5MDAwN1oXDTI1MDUxMDA5MDAwMFowLzEtMCsGA1UEAxMk OTljMTljZGQtODU3Yy00ZTM5LThjNmItYzE0MDVmMTczYTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHFsv+xR7kyMP2KlF8PETw2NDZDpHoVtv/AG ZYRGStczoNSFYdrBoqr/GGeJfKVLRPK4qkqi5mEWo0xo83HjYvY/O7JAw6EEoSbq eG7urmJ0xXHkPq/uDi26Y+OCRW3tYFfDUYPfGmDgTpVBV0j/P1kJl0FTCMdmbo5C JkpQMQzqhlO4jMWn7P/uMJcr1653c9MDOD2bghE71I67qw3Q6uHx9coYCrpVk/vV HUY6QJiJGJo2W3A+VIEPX3Hc6XbwutUYJsk6/CnUuuKy/wH1t2O38UTqk41pzWu6 rt4Xh7UJiNQEfK412Dm3iYaROgzKIpDzPbdpOKMaMPs89KBsBwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFO/LlGhQTziELUc2F8XXDUIwQji9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ODFh OGI0OS1hMDZlLTQ0OTctOTcyZi1mZDg3OTJiZmU5ZGQvNTgxYThiNDktYTA2ZS00 NDk3LTk3MmYtZmQ4NzkyYmZlOWRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTgxYThiNDktYTA2ZS00NDk3LTk3 MmYtZmQ4NzkyYmZlOWRkLzU4MWE4YjQ5LWEwNmUtNDQ5Ny05NzJmLWZkODc5MmJm ZTlkZC5jcmwwHwYDVR0jBBgwFoAUcF8EP/AHAecw1DznG/mE62JTSkYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81ODFhOGI0OS1hMDZlLTQ0OTctOTcyZi1mZDg3 OTJiZmU5ZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA1y621ORFIdbO6u+rJ+VgR 9B/1oa1zU9HBGLIxUOB4OAkW8cCaGa1uo/1mAER/rmbyRVkBgWumnsS4hNEGEE1+ CblPGDZMH9lXDM/h27tTUoIA5xZFlKi1AiicQx/dUI4gZN1QXtKdb0bawieyiGPD hQzot4WUk0D9VKc+AML2qoCRrmzfohFwCc8XFJLsvjff4tw33hHHHU343r7iUTjT MYQ8Hf/6/nAtihy6n1ngyZDTSfCr4fX9zN3su9IAtbfXntbueGqFoMk6h7KhAvQk zrcWL7eCYMQxyAt6hqnAy/KUX4+eWz1CmZVGGv+I9SSx2lg5W9zi2njYIWXdnNpz -----END CERTIFICATE-----Generated at Fri May 9 00:05:21 2025 by rpki-client