$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft File: cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft (raw, json) Hash identifier: cAA7vUYzQfvcnt1puixNoIR9wY4dWbsTHatEajmB3Bc= Subject key identifier: 45:6C:BA:61:3D:D8:45:40:E4:B5:04:5C:62:BA:E1:40:32:E0:6F:52 Authority key identifier: C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 Certificate issuer: /CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Certificate serial: 010D0C9F43285849BE15349CC89A08BFFF256400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft Manifest number: 010D0C9F4328584073A85AE22C63106D5EA59085 Signing time: Sun 04 May 2025 15:00:03 +0000 Manifest this update: Sun 04 May 2025 15:00:03 +0000 Manifest next update: Tue 06 May 2025 15:00:00 +0000 Files and hashes: 1: 2b6966be-0a30-3097-a99a-d635fb439733.roa (hash: flEV3NHh39P+VNAZOzjLpyE7rxY07wNQvQVlLCaLzcc=) 2: 3cd4923c-6128-376c-8446-baffa366fd39.roa (hash: 7UTY+1dR/QdzZZPqKP5YuGkOy8w/k152wn+r9oQkBcg=) 3: 46f4f84a-f747-3caa-bbd0-70571cbedb0d.roa (hash: amBaQx/JCO39ea6eM2e3RQe4cLB0g2fH69dimSx89Y0=) 4: 54b09de8-f12c-3e32-8666-1505aecbce63.roa (hash: zCKaxM2WDeftxo0y/poBIQnqAbhaNM9cU+5K3ZLj9f4=) 5: a0241a87-ee63-3ca4-8762-01bd022707da.roa (hash: UmjlAjznIlgmRYyoa5DW5eZ3x+Vn2nsJjtfzwirNMDw=) 6: cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl (hash: fSnW6m2tIr86JQjU2ixdp0QdjRCCflGenxo5C4XG7SA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:be:15:34:9c:c8:9a:08:bf:ff:25:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Validity Not Before: May 4 15:00:03 2025 GMT Not After : May 6 15:00:00 2025 GMT Subject: CN=46db8f65-cef4-4654-83d3-14ab67ca29fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:67:fc:e8:04:b8:1d:a1:31:1b:7c:29:73:cb: 5c:76:06:dc:3b:f7:d2:14:e0:49:b2:73:4e:15:fc: ed:55:88:ec:57:92:f2:d6:14:1b:8f:81:94:4d:60: 88:fa:16:3d:0b:85:36:3f:ed:85:20:2a:c3:8f:88: c5:00:8f:96:df:ce:c8:35:88:9c:55:8a:8b:27:d6: b3:71:3f:20:9c:d8:f2:44:8c:c3:69:d2:7c:fa:9b: d6:f4:9f:60:1b:c9:81:34:50:e2:08:88:ce:22:97: 0d:95:4b:df:7c:98:8d:75:74:fd:84:63:48:86:a7: 13:f2:44:14:0c:f1:63:0f:57:b6:ad:a1:4b:2c:f0: d9:50:b3:1e:51:ce:e5:a0:a5:6f:16:a4:af:fa:29: fd:f8:4e:94:a5:f1:f7:b0:97:e9:cd:6b:ae:f3:46: 02:5a:98:65:69:eb:5c:02:cf:7a:8e:76:03:58:54: 57:13:eb:51:37:0b:72:e3:28:7e:95:86:b9:c0:99: 02:fb:f4:cd:07:9b:f6:89:15:68:16:ec:64:8a:a5: f5:72:9a:29:cf:c7:77:e3:05:3e:81:25:a3:30:df: d7:00:cb:4b:8f:c1:62:86:b9:96:e0:34:6e:26:be: dc:b3:62:a1:3a:27:fe:f7:a9:88:31:29:de:4e:f0: 99:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:6C:BA:61:3D:D8:45:40:E4:B5:04:5C:62:BA:E1:40:32:E0:6F:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl X509v3 Authority Key Identifier: keyid:C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:c6:c0:1d:cc:84:ac:61:23:00:fd:e5:f8:37:b7:69:66:4d: 39:5f:dc:9f:6c:32:e0:72:5d:e1:ed:3b:45:16:23:ae:b3:aa: dc:d7:58:1a:c1:0d:2f:ec:ba:72:cf:dc:85:84:82:54:a6:78: f6:38:b2:8b:c1:ed:7e:64:2b:fc:21:30:2a:51:a3:52:4b:a3: 60:03:42:6b:34:c3:68:62:49:07:d8:06:a9:16:53:d1:35:7c: 54:a9:ac:38:b3:c5:63:0e:75:74:ee:75:8b:6d:49:15:c2:36: b3:aa:49:87:f6:1d:57:25:55:ed:af:5d:69:81:9a:3d:a9:6f: 2c:e5:17:aa:ce:b1:6b:bc:3f:11:b8:e9:d7:2c:5f:fa:32:52: ef:27:4a:6a:53:c3:f4:3c:6e:40:82:f8:26:83:16:c0:ba:b4: 03:33:9a:59:51:79:5f:36:d4:e1:81:85:68:b5:c9:e6:35:de: 2d:a2:ad:1b:b2:02:4e:6d:b6:72:3d:0a:17:44:83:e8:45:81: bf:f6:b9:cc:cb:d0:51:88:52:20:f6:a5:8c:15:80:33:7b:93: 07:07:57:81:c2:f8:48:fe:24:f0:8f:b3:9a:c6:58:03:e1:45: 91:8f:53:c7:1d:9d:4d:8c:f3:c5:f0:13:85:13:1d:fb:01:86: 6d:c5:a1:79 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEm+FTScyJoIv/8lZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwOWUxOTEtMWNiNy00NjUwLTk1ZDYtNGUyNGMwYWVj NjlkMB4XDTI1MDUwNDE1MDAwM1oXDTI1MDUwNjE1MDAwMFowLzEtMCsGA1UEAxMk NDZkYjhmNjUtY2VmNC00NjU0LTgzZDMtMTRhYjY3Y2EyOWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2f86AS4HaExG3wpc8tcdgbcO/fSFOBJsnNO FfztVYjsV5Ly1hQbj4GUTWCI+hY9C4U2P+2FICrDj4jFAI+W387INYicVYqLJ9az cT8gnNjyRIzDadJ8+pvW9J9gG8mBNFDiCIjOIpcNlUvffJiNdXT9hGNIhqcT8kQU DPFjD1e2raFLLPDZULMeUc7loKVvFqSv+in9+E6UpfH3sJfpzWuu80YCWphlaetc As96jnYDWFRXE+tRNwty4yh+lYa5wJkC+/TNB5v2iRVoFuxkiqX1cpopz8d34wU+ gSWjMN/XAMtLj8FihrmW4DRuJr7cs2KhOif+96mIMSneTvCZlQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEVsumE92EVA5LUEXGK64UAy4G9SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5 ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0YzBhZWM2OWQvY2YwOWUxOTEtMWNiNy00 NjUwLTk1ZDYtNGUyNGMwYWVjNjlkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2YwOWUxOTEtMWNiNy00NjUwLTk1 ZDYtNGUyNGMwYWVjNjlkL2NmMDllMTkxLTFjYjctNDY1MC05NWQ2LTRlMjRjMGFl YzY5ZC5jcmwwHwYDVR0jBBgwFoAUxw2n13KjMMiPALmYFa7pcm0DGqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0 YzBhZWM2OWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCJxsAdzISsYSMA/eX4N7dp Zk05X9yfbDLgcl3h7TtFFiOus6rc11gawQ0v7Lpyz9yFhIJUpnj2OLKLwe1+ZCv8 ITAqUaNSS6NgA0JrNMNoYkkH2AapFlPRNXxUqaw4s8VjDnV07nWLbUkVwjazqkmH 9h1XJVXtr11pgZo9qW8s5ReqzrFrvD8RuOnXLF/6MlLvJ0pqU8P0PG5AgvgmgxbA urQDM5pZUXlfNtThgYVotcnmNd4toq0bsgJObbZyPQoXRIPoRYG/9rnMy9BRiFIg 9qWMFYAze5MHB1eBwvhI/iTwj7OaxlgD4UWRj1PHHZ1NjPPF8BOFEx37AYZtxaF5 -----END CERTIFICATE-----Generated at Mon May 5 14:38:58 2025 by rpki-client