$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft File: d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft (raw, json) Hash identifier: d5lNO8BTD09AsTiC9Xgwe1HzScltB+LXuQ8dX+xz5VE= Subject key identifier: 14:09:D2:A1:44:FD:10:3B:0B:0A:F6:08:C1:08:2F:70:D9:A7:3B:45 Authority key identifier: 41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 Certificate issuer: /CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Certificate serial: 010D0C9F43285849CE5F2ADDA22E03A243895040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft Manifest number: 010D0C9F4328584073A84F901BB38ADE99836215 Signing time: Sat 10 May 2025 11:02:03 +0000 Manifest this update: Sat 10 May 2025 11:02:03 +0000 Manifest next update: Mon 12 May 2025 11:00:00 +0000 Files and hashes: 1: 1f9b0a21-4e53-3251-bedd-62da810defe6.roa (hash: seKz7X5f8FwYAoliULOtin3eQjWnnZzBijoVLW52Too=) 2: bd3530fc-aba4-30aa-b5ee-4cb67b4e5233.roa (hash: sJPWFMlQGsu5uPs9fc0/jkgdVSeEAbUSz3G1gWDMIcA=) 3: be5ef230-a561-3b1a-b0d0-d8840c8e46bc.roa (hash: 72J2KbPh8YJ90RYIBZdg5R3+PGVYhAfoww3Cyfo1YFQ=) 4: bf1ea0d0-c6c3-3bdf-a20c-a8a939551a91.roa (hash: +kW0nM4J5LmuY3CcNWYOI3ydET8icWokwMs5RO/e194=) 5: d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl (hash: 2TEn6kbWOUF2VBxhmpkFyFxKitZvLUcD0TDoGc9BXfI=) 6: e8ade94f-71c7-3847-9891-9cce69f41ac8.roa (hash: uPeRFoIQF+RThezPDTSByh7CajrH5v4RcNcwdMlcUcM=) 7: f03a9443-1468-3e4e-9fac-80bb32418d00.roa (hash: uim/cu4aoV2qNxwhFt6q2NIMpYbtzO6PGiOhEjerS3w=) 8: f30c9c21-4317-3091-8c73-74cf7dd4b318.roa (hash: esNdqYSRqLdQCtE1KXibfaoTXAR5m8IzdJx5pPrWK4g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:5f:2a:dd:a2:2e:03:a2:43:89:50:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Validity Not Before: May 10 11:02:03 2025 GMT Not After : May 12 11:00:00 2025 GMT Subject: CN=b550dc65-9079-4a8c-aad3-e8ed12a6e376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9a:e9:a7:9c:b4:19:f8:7f:88:8e:bd:b0:b9: dd:3f:86:f8:07:36:7a:a1:3f:44:a4:40:92:ed:d1: 84:98:a7:80:15:0e:22:11:0a:d7:9d:9b:38:ee:3a: 6c:1e:36:82:53:16:28:fe:3f:fd:a3:9e:10:9e:59: 27:62:00:9a:99:d8:cc:65:88:45:52:08:b8:17:41: 36:8e:15:63:88:4e:5e:4e:ac:b0:dc:ee:fa:97:09: 16:88:a3:c6:da:63:97:2e:ab:d3:5a:2c:b7:5b:c9: c9:b2:be:4d:9f:b9:30:11:4e:73:3e:5a:e3:bb:f8: a7:f4:7c:fc:92:ad:79:6e:43:f6:01:07:56:34:3e: 59:ff:27:b9:f0:71:13:01:c5:61:29:87:a4:8b:13: 7d:03:57:a4:b0:25:fc:5d:89:42:02:13:7d:3e:bf: f5:44:1a:5b:aa:b4:c7:48:b2:b3:9d:c2:37:e1:55: cd:d2:bf:0d:a0:93:30:ef:bc:cb:a8:89:c2:7f:f4: 77:92:ab:bf:2b:26:1f:89:b9:12:2c:b8:90:24:dd: c0:b3:ef:f3:ed:4d:89:9b:b1:2f:8f:19:e5:2d:41: 43:dd:a1:82:11:91:38:3e:cf:02:80:4a:e6:a9:02: 4f:eb:24:c2:53:c7:89:3e:58:9f:de:26:c6:21:76: 6f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:09:D2:A1:44:FD:10:3B:0B:0A:F6:08:C1:08:2F:70:D9:A7:3B:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl X509v3 Authority Key Identifier: keyid:41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:e5:d5:ac:99:8d:5c:7f:de:82:31:3c:d8:1c:b1:d7:f5:4b: 6f:a3:53:1b:f6:92:76:99:2c:4c:d5:00:e4:06:5c:fe:5f:ce: ac:2a:3a:4e:5c:47:c3:d4:e3:64:29:26:91:0b:81:0d:ce:f3: 15:94:fb:74:60:e1:76:da:a2:ab:31:fc:28:94:85:44:a2:fe: 2e:04:55:53:85:9f:94:d5:2f:5c:b7:70:cd:98:aa:08:eb:ca: 17:e9:e8:1a:67:04:8d:aa:2c:32:bb:4a:d6:08:6c:b1:bb:68: 98:49:12:c2:2b:fb:56:d2:30:41:c6:0a:6c:c2:ce:b2:88:29: 98:1f:a1:3f:25:07:3e:1f:13:b9:2d:fe:f3:24:34:d3:bf:3d: 55:60:6f:64:51:de:7e:64:d2:5f:cb:7f:2f:c1:7d:4f:f8:88: 2d:b3:14:9b:ac:89:1d:bd:bf:cc:34:0c:09:20:6b:70:f0:fa: 6f:16:48:aa:65:7e:bc:f7:38:f9:ab:e6:e9:53:3a:1a:37:b9: cc:81:9e:bb:cf:9e:2a:1a:d1:c5:35:b9:e4:43:bd:08:33:2e: 2a:3f:e2:92:15:59:ce:e5:69:a0:f9:f4:2a:20:ef:76:6a:8d: 52:52:38:48:a4:a4:43:ee:a0:e3:a9:43:d5:24:68:2f:d8:b9: c6:9e:92:f3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnOXyrdoi4DokOJUEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU4OWYzZTQtMjcwMS00OGY1LTljNmItN2VhOGQwNzFl Y2U3MB4XDTI1MDUxMDExMDIwM1oXDTI1MDUxMjExMDAwMFowLzEtMCsGA1UEAxMk YjU1MGRjNjUtOTA3OS00YThjLWFhZDMtZThlZDEyYTZlMzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJrpp5y0Gfh/iI69sLndP4b4BzZ6oT9EpECS 7dGEmKeAFQ4iEQrXnZs47jpsHjaCUxYo/j/9o54QnlknYgCamdjMZYhFUgi4F0E2 jhVjiE5eTqyw3O76lwkWiKPG2mOXLqvTWiy3W8nJsr5Nn7kwEU5zPlrju/in9Hz8 kq15bkP2AQdWND5Z/ye58HETAcVhKYekixN9A1eksCX8XYlCAhN9Pr/1RBpbqrTH SLKzncI34VXN0r8NoJMw77zLqInCf/R3kqu/KyYfibkSLLiQJN3As+/z7U2Jm7Ev jxnlLUFD3aGCEZE4Ps8CgErmqQJP6yTCU8eJPlif3ibGIXZvAwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBQJ0qFE/RA7Cwr2CMEIL3DZpztFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNTg5 ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4ZDA3MWVjZTcvZDU4OWYzZTQtMjcwMS00 OGY1LTljNmItN2VhOGQwNzFlY2U3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDU4OWYzZTQtMjcwMS00OGY1LTlj NmItN2VhOGQwNzFlY2U3L2Q1ODlmM2U0LTI3MDEtNDhmNS05YzZiLTdlYThkMDcx ZWNlNy5jcmwwHwYDVR0jBBgwFoAUQbmkG8YihK7ly7p7M2I7+iT7/yIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNTg5ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4 ZDA3MWVjZTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBH5dWsmY1cf96CMTzYHLHX 9Utvo1Mb9pJ2mSxM1QDkBlz+X86sKjpOXEfD1ONkKSaRC4ENzvMVlPt0YOF22qKr MfwolIVEov4uBFVThZ+U1S9ct3DNmKoI68oX6egaZwSNqiwyu0rWCGyxu2iYSRLC K/tW0jBBxgpsws6yiCmYH6E/JQc+HxO5Lf7zJDTTvz1VYG9kUd5+ZNJfy38vwX1P +IgtsxSbrIkdvb/MNAwJIGtw8PpvFkiqZX689zj5q+bpUzoaN7nMgZ67z54qGtHF NbnkQ70IMy4qP+KSFVnO5Wmg+fQqIO92ao1SUjhIpKRD7qDjqUPVJGgv2LnGnpLz -----END CERTIFICATE-----Generated at Sun May 11 05:30:28 2025 by rpki-client