$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft File: aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft (raw, json) Hash identifier: nzVLQjEmtIQbU3TuohDTRVP9og8ymq1mZQexZ0RM6j0= Subject key identifier: A5:59:1F:85:27:F1:DE:A2:54:9A:F1:A4:A6:2F:A6:43:5C:AB:60:D7 Authority key identifier: B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA Certificate issuer: /CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Certificate serial: 010D0C9F43285849D0ED58E0979428DF10753874 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft Manifest number: 010D0C9F4328584073A84B5B78FE156D22EF3AB6 Signing time: Sun 11 May 2025 09:00:07 +0000 Manifest this update: Sun 11 May 2025 09:00:07 +0000 Manifest next update: Wed 14 May 2025 09:00:00 +0000 Files and hashes: 1: 2a11ff05-0d1c-3be8-9361-2a091482c21c.roa (hash: OX7NtfjOEXNJuhVjSzEnzRg/m/KVHksGhGfjCN+eQ+U=) 2: 2aa7585f-d51c-30da-a0fb-36d9463654ab.roa (hash: eVzhK/UfUS1TfDlIyTz9t8o+f5P5s4cZMx3Nxjn0SCg=) 3: 3f9a7e2e-2d31-3535-b621-6366e70f54ac.roa (hash: JGsg94NEQG6t7HvOoNmXfsgwIS6i/FCeHEgAC4/GcIA=) 4: aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl (hash: oo94JTWGlLrSWGza//WOG6MH6skBKfzpVrom9uyJDbw=) 5: fc2beedf-cafc-3658-b3dd-125f2ba3d10d.roa (hash: Pjvf2oEjXUBK0RRnpqXIbGviFqxnOSHMLgSHF0wAwjo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d0:ed:58:e0:97:94:28:df:10:75:38:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Validity Not Before: May 11 09:00:07 2025 GMT Not After : May 14 09:00:00 2025 GMT Subject: CN=80107508-b0be-47c8-8d32-e18634db791b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:01:fa:8e:56:1f:c6:5f:50:f5:09:87:5e:fc: 9e:51:9e:e9:57:85:02:ac:b6:f9:02:d5:bd:47:b6: 02:05:15:5b:af:12:1e:36:01:de:f6:b2:e8:18:d7: cd:61:32:73:19:02:3c:14:0a:f3:d0:bc:a4:0c:58: 92:3f:0a:7e:14:a2:59:09:18:94:92:5b:9d:8d:bd: b1:01:de:6b:9f:15:d7:ee:eb:99:c1:59:54:90:0c: a4:f3:9b:81:ff:1c:ce:d8:fc:b5:e7:50:0f:dd:f7: 4a:f8:bc:84:2a:f0:18:bc:5c:92:f1:e7:6a:8c:a3: b1:a6:8e:1a:7c:27:92:5d:0a:ed:39:38:1b:3b:4f: fe:5a:1b:cf:c6:91:ef:d4:a9:91:3f:4a:2a:ca:64: 67:cf:fc:85:7f:a0:2a:b6:34:2b:6e:26:26:0d:5a: 25:23:66:9d:f5:c6:c2:0f:ae:41:18:e3:3f:85:a2: f9:34:9c:e4:24:c4:ce:34:02:13:25:39:13:1e:0c: 39:91:1c:e8:ca:69:bf:dd:c3:fe:ff:76:c5:1e:f8: 40:c0:f2:e7:da:40:90:73:35:73:b9:6f:00:48:22: a6:50:88:65:cb:6c:5c:5d:37:b6:34:2f:42:3b:77: 4c:ef:e5:31:c3:67:2f:02:ed:b4:54:cb:55:77:10: b4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:59:1F:85:27:F1:DE:A2:54:9A:F1:A4:A6:2F:A6:43:5C:AB:60:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl X509v3 Authority Key Identifier: keyid:B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:86:15:88:11:31:46:f9:75:93:ad:08:db:2a:dc:45:fd:ed: 3f:cf:66:34:3d:69:fd:14:72:f0:d8:77:4c:50:f5:c0:a9:c0: 18:71:c5:1c:18:94:73:d5:25:72:d4:6f:01:63:6e:00:ff:a9: 47:9e:e8:76:30:8f:d7:f7:95:21:b3:d1:35:b3:11:96:db:e0: d8:2c:c3:39:2f:0f:a0:6c:22:dd:23:39:53:a1:8f:30:3f:e5: f9:25:58:b4:ca:6b:ba:57:da:41:62:61:16:2d:1e:55:20:cb: fd:cc:e5:79:01:2c:54:98:4f:37:53:d4:c6:ea:fa:0b:2e:b2: 7d:83:00:61:2c:23:f6:c0:4d:52:b7:d4:a8:b5:f9:15:34:ea: 5f:bb:35:c8:cd:a6:9e:d5:f6:66:18:fb:c0:12:60:65:4a:14: 53:e9:e4:8c:01:fc:1d:ba:f5:e8:7e:4e:7d:e8:b1:c1:df:2c: ab:2b:70:bf:da:a1:1c:23:de:c4:d4:50:ab:a7:cc:44:9e:26: 23:b9:a9:ac:13:f2:85:e0:6d:22:01:d8:bf:b8:c3:52:95:3a: 6e:5f:0c:11:72:92:f8:59:b3:58:c0:b0:3c:ac:7f:67:ae:94: b9:57:2f:94:c5:9b:99:dc:f7:9b:ea:77:60:3d:d4:d2:0e:0b: b8:74:03:8a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnQ7Vjgl5Qo3xB1OHQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEyZTM0NGYtMDFhMC00NjFkLTljMGEtMjFkZGJjNzBh YTk5MB4XDTI1MDUxMTA5MDAwN1oXDTI1MDUxNDA5MDAwMFowLzEtMCsGA1UEAxMk ODAxMDc1MDgtYjBiZS00N2M4LThkMzItZTE4NjM0ZGI3OTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QH6jlYfxl9Q9QmHXvyeUZ7pV4UCrLb5AtW9 R7YCBRVbrxIeNgHe9rLoGNfNYTJzGQI8FArz0LykDFiSPwp+FKJZCRiUkludjb2x Ad5rnxXX7uuZwVlUkAyk85uB/xzO2Py151AP3fdK+LyEKvAYvFyS8edqjKOxpo4a fCeSXQrtOTgbO0/+WhvPxpHv1KmRP0oqymRnz/yFf6AqtjQrbiYmDVolI2ad9cbC D65BGOM/haL5NJzkJMTONAITJTkTHgw5kRzoymm/3cP+/3bFHvhAwPLn2kCQczVz uW8ASCKmUIhly2xcXTe2NC9CO3dM7+Uxw2cvAu20VMtVdxC0oQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKVZH4Un8d6iVJrxpKYvpkNcq2DXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJl MzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRkYmM3MGFhOTkvYWEyZTM0NGYtMDFhMC00 NjFkLTljMGEtMjFkZGJjNzBhYTk5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWEyZTM0NGYtMDFhMC00NjFkLTlj MGEtMjFkZGJjNzBhYTk5L2FhMmUzNDRmLTAxYTAtNDYxZC05YzBhLTIxZGRiYzcw YWE5OS5jcmwwHwYDVR0jBBgwFoAUtp5aPIgevwm3Jc8FjMDBLqnEn8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJlMzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRk YmM3MGFhOTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAxhhWIETFG+XWTrQjbKtxF /e0/z2Y0PWn9FHLw2HdMUPXAqcAYccUcGJRz1SVy1G8BY24A/6lHnuh2MI/X95Uh s9E1sxGW2+DYLMM5Lw+gbCLdIzlToY8wP+X5JVi0ymu6V9pBYmEWLR5VIMv9zOV5 ASxUmE83U9TG6voLLrJ9gwBhLCP2wE1St9SotfkVNOpfuzXIzaae1fZmGPvAEmBl ShRT6eSMAfwduvXofk596LHB3yyrK3C/2qEcI97E1FCrp8xEniYjuamsE/KF4G0i Adi/uMNSlTpuXwwRcpL4WbNYwLA8rH9nrpS5Vy+UxZuZ3Peb6ndgPdTSDgu4dAOK -----END CERTIFICATE-----Generated at Sun May 11 21:02:41 2025 by rpki-client