$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e/5bab7542-1747-4199-9e18-f75a006e302e.mft File: 5bab7542-1747-4199-9e18-f75a006e302e.mft (raw, json) Hash identifier: BDkrwmElXn/q0CVbh4SaLrzuupl7MC616+opFuQl/QY= Subject key identifier: B8:7F:BB:BD:9D:E9:13:0C:91:59:39:C5:E0:55:C7:A1:30:BF:1B:74 Authority key identifier: 51:79:4D:4F:C2:A9:14:50:50:03:18:22:69:6E:5B:19:AE:36:CB:1C Certificate issuer: /CN=5bab7542-1747-4199-9e18-f75a006e302e Certificate serial: 010D0C9F43285849D32317AB7FDAF55C5974A400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e/5bab7542-1747-4199-9e18-f75a006e302e.mft Manifest number: 010D0C9F4328584073A83C23632A8343A5BC0FF1 Signing time: Mon 12 May 2025 04:00:03 +0000 Manifest this update: Mon 12 May 2025 04:00:03 +0000 Manifest next update: Wed 14 May 2025 04:00:00 +0000 Files and hashes: 1: 25942820-2287-398f-ae47-ec5cbf6917de.roa (hash: SQNekr8WEYZ2hZupzndFZs1ATQPlbaPmuTkKiycg6Kg=) 2: 5bab7542-1747-4199-9e18-f75a006e302e.crl (hash: 9Lts4k4SU+KPrgm1VVvqiyu9S1cDqgrUe4z7VIoq7cM=) 3: 90cd6e4f-014a-3df3-87ff-754e127ae5c1.roa (hash: vSxqmPblH2GjTD/jAu6nY/VlWxACr6LqXhg9FmnMFT8=) 4: d805f6ad-8e60-35ab-b3f8-63d00f83e6c8.roa (hash: mBLAZ29KlV5GYg1Vufz+Gzmcya9XEeUfjUgufO/bjMY=) 5: e1767964-d236-3000-b921-aed84f6b7086.roa (hash: SYuu4oCGYg79ypbAQbC1NQZsGQyOPCnTJlWHIi8HRGM=) 6: ef6cfd92-2c5c-3eb8-9cdf-fbab6b92459b.roa (hash: GKu1L4m8G6KUr/EdMu2EaN++6aOmYFdIfYt1tgzXnDY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e/5bab7542-1747-4199-9e18-f75a006e302e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e/5bab7542-1747-4199-9e18-f75a006e302e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d3:23:17:ab:7f:da:f5:5c:59:74:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bab7542-1747-4199-9e18-f75a006e302e Validity Not Before: May 12 04:00:03 2025 GMT Not After : May 14 04:00:00 2025 GMT Subject: CN=7f11ad84-9a4d-461a-b9bb-b7b3dfc86edc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:3e:be:19:41:89:99:1e:69:4e:2a:0b:dc:d9: 30:0a:4b:03:0d:20:92:fb:dc:e8:9a:d9:47:a9:72: 75:5e:6d:04:00:b6:e3:1b:57:0b:ec:82:3e:cd:fe: 4a:38:9f:8f:42:8b:bf:df:fd:a8:b7:9d:33:de:c3: 1b:50:5e:2f:23:ef:e1:ac:f0:73:b2:a4:9d:0f:1b: 36:43:6e:34:fd:5b:9e:da:db:aa:96:87:f7:cd:11: 73:07:ba:38:92:7e:97:fd:28:12:eb:6a:09:49:44: 14:f1:42:0a:60:69:e5:d3:6f:7c:4e:b7:9f:d9:fa: dd:6c:8e:e1:a3:76:56:3c:0e:99:55:36:14:e6:06: 19:8a:e2:f5:fe:23:20:16:9c:95:df:db:22:72:15: 2b:9d:46:34:1b:6d:86:22:2c:ee:47:5c:8d:3c:bc: c1:e1:98:42:fe:3d:ed:c6:f8:08:af:eb:ea:b0:da: 2f:75:a6:e3:11:93:97:5c:61:68:7e:b8:78:4b:cf: 66:cd:16:04:3e:c9:1f:40:b8:bb:be:4d:50:14:d1: b6:9c:14:7d:f4:29:f8:ba:26:b9:f4:3e:8b:96:76: fb:66:86:7f:a1:1b:8e:97:3f:8f:01:06:1e:73:5c: 76:d2:38:cc:6a:2a:85:80:7f:db:33:79:8c:d7:90: e3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:7F:BB:BD:9D:E9:13:0C:91:59:39:C5:E0:55:C7:A1:30:BF:1B:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e/5bab7542-1747-4199-9e18-f75a006e302e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e/5bab7542-1747-4199-9e18-f75a006e302e.crl X509v3 Authority Key Identifier: keyid:51:79:4D:4F:C2:A9:14:50:50:03:18:22:69:6E:5B:19:AE:36:CB:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:bf:26:74:e8:3f:27:ef:56:f1:8f:f5:6e:d0:26:ac:62:35: 1b:b2:1f:19:f4:2f:1c:b6:2c:c7:ce:6c:d7:cc:eb:a2:db:10: 94:86:b8:c7:02:4e:15:d7:86:0f:04:73:63:d3:00:0f:d8:cb: c5:a1:2b:02:95:e1:c9:a4:73:c8:86:67:b4:6d:7f:fa:bc:b4: c9:99:1c:d6:4a:1e:4d:34:dd:76:1e:bd:18:0f:a4:75:d3:d1: e0:ed:3c:87:3e:9d:7b:0c:7c:b7:4f:ee:76:1f:c5:31:38:b9: d5:35:a8:d1:cf:b2:8d:51:14:b2:61:70:bd:2c:12:b5:40:67: 5d:2f:a2:a2:98:ab:1a:98:66:fd:91:e2:d0:14:0d:5f:cf:7d: fe:02:08:7e:c8:f3:48:65:de:2d:6b:84:d7:d2:b4:cc:ef:f2: 47:26:8b:d7:31:f2:f4:e7:2d:09:c3:e8:a3:87:c0:2e:b6:43: dd:a3:3e:96:80:75:50:b7:b4:90:62:3c:f2:7e:af:e7:85:87: cc:ef:83:96:a1:7b:2e:de:e7:80:00:31:76:4b:6f:9d:8c:28: 83:be:ff:0e:28:26:53:ec:0b:53:53:d3:cb:49:52:79:57:f1: b0:f1:07:3d:4c:d9:e0:d2:e8:a3:62:c7:a3:db:32:8f:3a:db: 91:ee:32:e8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnTIxerf9r1XFl0pAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWJhYjc1NDItMTc0Ny00MTk5LTllMTgtZjc1YTAwNmUz MDJlMB4XDTI1MDUxMjA0MDAwM1oXDTI1MDUxNDA0MDAwMFowLzEtMCsGA1UEAxMk N2YxMWFkODQtOWE0ZC00NjFhLWI5YmItYjdiM2RmYzg2ZWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhD6+GUGJmR5pTioL3NkwCksDDSCS+9zomtlH qXJ1Xm0EALbjG1cL7II+zf5KOJ+PQou/3/2ot50z3sMbUF4vI+/hrPBzsqSdDxs2 Q240/Vue2tuqlof3zRFzB7o4kn6X/SgS62oJSUQU8UIKYGnl0298Tref2frdbI7h o3ZWPA6ZVTYU5gYZiuL1/iMgFpyV39sichUrnUY0G22GIizuR1yNPLzB4ZhC/j3t xvgIr+vqsNovdabjEZOXXGFofrh4S89mzRYEPskfQLi7vk1QFNG2nBR99Cn4uia5 9D6Llnb7ZoZ/oRuOlz+PAQYec1x20jjMaiqFgH/bM3mM15DjLwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLh/u72d6RMMkVk5xeBVx6Ewvxt0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YmFi NzU0Mi0xNzQ3LTQxOTktOWUxOC1mNzVhMDA2ZTMwMmUvNWJhYjc1NDItMTc0Ny00 MTk5LTllMTgtZjc1YTAwNmUzMDJlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWJhYjc1NDItMTc0Ny00MTk5LTll MTgtZjc1YTAwNmUzMDJlLzViYWI3NTQyLTE3NDctNDE5OS05ZTE4LWY3NWEwMDZl MzAyZS5jcmwwHwYDVR0jBBgwFoAUUXlNT8KpFFBQAxgiaW5bGa42yxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YmFiNzU0Mi0xNzQ3LTQxOTktOWUxOC1mNzVh MDA2ZTMwMmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAzvyZ06D8n71bxj/Vu0Cas YjUbsh8Z9C8ctizHzmzXzOui2xCUhrjHAk4V14YPBHNj0wAP2MvFoSsCleHJpHPI hme0bX/6vLTJmRzWSh5NNN12Hr0YD6R109Hg7TyHPp17DHy3T+52H8UxOLnVNajR z7KNURSyYXC9LBK1QGddL6KimKsamGb9keLQFA1fz33+Agh+yPNIZd4ta4TX0rTM 7/JHJovXMfL05y0Jw+ijh8AutkPdoz6WgHVQt7SQYjzyfq/nhYfM74OWoXsu3ueA ADF2S2+djCiDvv8OKCZT7AtTU9PLSVJ5V/Gw8Qc9TNng0uijYsej2zKPOtuR7jLo -----END CERTIFICATE-----Generated at Mon May 12 23:04:47 2025 by rpki-client