$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.mft File: d49742e8-8d0c-4209-b76f-403554b0e6b4.mft (raw, json) Hash identifier: p1uqYWo7dfmyd/ffDzkCpxMFWlbWxbM/WE7W1BzwqLA= Subject key identifier: 75:7F:8B:BB:79:1F:49:E1:06:E8:F4:55:58:ED:E4:53:B0:C8:11:E8 Authority key identifier: C9:74:C2:38:62:75:65:D4:F6:77:35:94:E6:36:CC:97:CE:F2:0B:EC Certificate issuer: /CN=d49742e8-8d0c-4209-b76f-403554b0e6b4 Certificate serial: 010D0C9F43285849CDAB8B500C25CA852A938380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.mft Manifest number: 010D0C9F432858424A43FBF1F4F0126262137EE9 Signing time: Sat 10 May 2025 05:00:07 +0000 Manifest this update: Sat 10 May 2025 05:00:07 +0000 Manifest next update: Mon 12 May 2025 05:00:00 +0000 Files and hashes: 1: a27fc621-5c02-326c-81ae-c9e9e2c669d6.roa (hash: pX/hvs5tKQ00nHiNQnGipubQFPmpgnb6HzjABGCfo+k=) 2: d49742e8-8d0c-4209-b76f-403554b0e6b4.crl (hash: yLOJV2wD2weq///zeM/DJz0vCHaMt1pAZk3cd2KgSFE=) 3: e13672b6-1e87-3520-9ff8-5f83f40e054b.roa (hash: JA2koHSKSerWU7PuEZ8wPvIVv6wkGDRaVXIAMflacuc=) 4: ea9c383f-126b-3df7-ba3c-19fc5c239b09.roa (hash: ZjEu+tL/iJr+JaN9isXiESk3ngMmBxm92iRIWFbVbBQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cd:ab:8b:50:0c:25:ca:85:2a:93:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d49742e8-8d0c-4209-b76f-403554b0e6b4 Validity Not Before: May 10 05:00:07 2025 GMT Not After : May 12 05:00:00 2025 GMT Subject: CN=587c417e-31a4-46ce-af53-55e1bdb5d7f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1f:cb:f1:3a:6f:c2:bc:d6:2b:91:33:5a:0d: 51:f5:ef:02:be:d4:ab:e3:a8:2c:5f:de:e4:c3:34: 0f:60:e3:0d:a4:2c:b5:7a:8c:4a:40:d4:cb:2a:9f: 89:72:ff:93:e9:6c:de:a7:e6:29:b3:00:22:3b:8e: 9d:64:5d:fd:52:9b:eb:d5:7b:3f:11:50:ac:c3:39: bb:a6:04:09:7d:80:37:cb:09:6f:56:a6:e7:ac:c9: 0d:fb:86:ad:04:cd:e7:fa:62:df:fd:90:5b:b3:47: ab:36:43:fe:8b:1e:21:5a:5c:ea:be:e7:ec:e8:0c: f9:16:11:ec:53:7d:c7:0d:e2:40:d3:8d:d0:7d:bc: 0b:4a:0b:8d:2f:f1:63:94:94:a0:10:f5:9b:1d:27: 2d:34:de:89:5a:ef:19:a8:5d:bc:f1:83:c2:fd:09: 59:5f:3a:54:79:a6:97:7c:26:7a:78:d1:aa:8e:c7: 9c:08:f7:6e:d8:04:72:09:c2:ec:29:e1:6a:94:cb: c2:42:a2:3e:26:11:7a:15:40:2a:27:ed:c9:3e:e6: ab:56:04:cd:cb:bc:78:e5:be:ea:36:e3:12:e6:db: ad:eb:23:97:0d:5c:36:48:66:67:20:51:2d:da:f6: 66:82:eb:dd:ff:fe:d7:61:30:81:93:12:fe:b4:11: 00:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:7F:8B:BB:79:1F:49:E1:06:E8:F4:55:58:ED:E4:53:B0:C8:11:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.crl X509v3 Authority Key Identifier: keyid:C9:74:C2:38:62:75:65:D4:F6:77:35:94:E6:36:CC:97:CE:F2:0B:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:d4:32:64:0c:bd:dc:c8:e1:6f:3a:18:d7:4a:d3:de:65:d6: 17:ce:9f:be:9e:b3:7e:c4:b7:f5:dd:de:6b:50:b7:d0:a2:91: 16:dc:fa:9d:f1:59:7e:e0:59:7b:af:a9:39:38:95:96:8e:b7: 1b:18:63:d1:84:1e:d4:c3:34:9d:15:1c:df:61:8d:56:51:c7: 8e:ea:02:23:e3:63:ab:f9:33:e5:f4:63:c7:00:0e:fd:6f:2e: b9:ac:26:d0:76:1c:ce:cf:8e:f2:0c:9a:a3:d2:48:df:a6:f1: b7:d0:74:ba:83:3c:57:93:da:10:02:6d:58:ad:01:50:6f:ef: 5a:ad:c1:53:2a:6e:5b:0f:02:a9:49:ba:47:2b:dc:2b:33:43: b1:ff:e2:56:72:d4:a6:69:5c:b8:65:16:1d:00:95:f2:49:0e: e9:9b:4c:d6:3f:81:a0:d4:b6:f2:4f:d9:8a:77:19:08:5b:9e: 12:49:b6:94:ff:a1:d3:c5:84:a5:d4:16:bf:63:02:d2:a0:d0: 24:d5:eb:96:68:a7:f1:33:6b:be:ac:0f:71:91:10:e6:29:fa: 35:6a:b6:e5:b8:53:6e:28:d3:7e:67:37:0b:1d:9a:27:b3:93: b7:a2:0c:59:50:73:1a:4e:98:fa:b2:b5:72:46:47:0b:2c:1a: 43:dd:9d:f6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnNq4tQDCXKhSqTg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ5NzQyZTgtOGQwYy00MjA5LWI3NmYtNDAzNTU0YjBl NmI0MB4XDTI1MDUxMDA1MDAwN1oXDTI1MDUxMjA1MDAwMFowLzEtMCsGA1UEAxMk NTg3YzQxN2UtMzFhNC00NmNlLWFmNTMtNTVlMWJkYjVkN2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh/L8TpvwrzWK5EzWg1R9e8CvtSr46gsX97k wzQPYOMNpCy1eoxKQNTLKp+Jcv+T6Wzep+YpswAiO46dZF39Upvr1Xs/EVCswzm7 pgQJfYA3ywlvVqbnrMkN+4atBM3n+mLf/ZBbs0erNkP+ix4hWlzqvufs6Az5FhHs U33HDeJA043QfbwLSguNL/FjlJSgEPWbHSctNN6JWu8ZqF288YPC/QlZXzpUeaaX fCZ6eNGqjsecCPdu2ARyCcLsKeFqlMvCQqI+JhF6FUAqJ+3JPuarVgTNy7x45b7q NuMS5tut6yOXDVw2SGZnIFEt2vZmguvd//7XYTCBkxL+tBEANwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHV/i7t5H0nhBuj0VVjt5FOwyBHoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDk3 NDJlOC04ZDBjLTQyMDktYjc2Zi00MDM1NTRiMGU2YjQvZDQ5NzQyZTgtOGQwYy00 MjA5LWI3NmYtNDAzNTU0YjBlNmI0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ5NzQyZTgtOGQwYy00MjA5LWI3 NmYtNDAzNTU0YjBlNmI0L2Q0OTc0MmU4LThkMGMtNDIwOS1iNzZmLTQwMzU1NGIw ZTZiNC5jcmwwHwYDVR0jBBgwFoAUyXTCOGJ1ZdT2dzWU5jbMl87yC+wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDk3NDJlOC04ZDBjLTQyMDktYjc2Zi00MDM1 NTRiMGU2YjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAx1DJkDL3cyOFvOhjXStPe ZdYXzp++nrN+xLf13d5rULfQopEW3Pqd8Vl+4Fl7r6k5OJWWjrcbGGPRhB7UwzSd FRzfYY1WUceO6gIj42Or+TPl9GPHAA79by65rCbQdhzOz47yDJqj0kjfpvG30HS6 gzxXk9oQAm1YrQFQb+9arcFTKm5bDwKpSbpHK9wrM0Ox/+JWctSmaVy4ZRYdAJXy SQ7pm0zWP4Gg1LbyT9mKdxkIW54SSbaU/6HTxYSl1Ba/YwLSoNAk1euWaKfxM2u+ rA9xkRDmKfo1arbluFNuKNN+ZzcLHZons5O3ogxZUHMaTpj6srVyRkcLLBpD3Z32 -----END CERTIFICATE-----Generated at Sun May 11 05:29:32 2025 by rpki-client