$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/1a4a4def-a575-48e1-87d5-56942434422a.mft File: 1a4a4def-a575-48e1-87d5-56942434422a.mft (raw, json) Hash identifier: pKZdMXSbngJEJB4MfyibifIPOv4d/WjoRbImOnaGNw4= Subject key identifier: E4:2C:FC:F0:29:E7:AE:52:47:97:CC:26:0B:00:F6:EE:3A:DE:DC:21 Authority key identifier: 05:6E:18:DE:54:9A:DE:FE:A9:3F:7C:8A:E8:72:D2:89:2F:26:2F:49 Certificate issuer: /CN=1a4a4def-a575-48e1-87d5-56942434422a Certificate serial: 010D0C9F43285849CC4634829DB02212AFE34A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/1a4a4def-a575-48e1-87d5-56942434422a.mft Manifest number: 010D0C9F43285847EC1E7D5A33AFC72D3F90B1FD Signing time: Fri 09 May 2025 17:00:07 +0000 Manifest this update: Fri 09 May 2025 17:00:07 +0000 Manifest next update: Mon 12 May 2025 17:00:00 +0000 Files and hashes: 1: 1a4a4def-a575-48e1-87d5-56942434422a.crl (hash: CBZ0mrIiHGGQUaYnFtxntdPHWDBHQlk4KBmgFbvR5Wo=) 2: 233688fe-a33c-3a81-9597-da16bac00035.roa (hash: OKI0+0Idl3uhQpshUfeoYepIzkglZ88VApMuEUhouaI=) 3: 7cfe87a7-39a6-3b1d-86bc-7ce644a92427.roa (hash: vsoCF2TsBojWT0vSjEh7AWum7jO5Gwb35PhnmgNN1aI=) 4: bc7b5153-4728-3649-bc82-4499eb9a7abb.roa (hash: YAjso7gd5y8BShiu+ITAMoT6L7SaOlZxnctYiPiODhM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/1a4a4def-a575-48e1-87d5-56942434422a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/1a4a4def-a575-48e1-87d5-56942434422a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cc:46:34:82:9d:b0:22:12:af:e3:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4a4def-a575-48e1-87d5-56942434422a Validity Not Before: May 9 17:00:07 2025 GMT Not After : May 12 17:00:00 2025 GMT Subject: CN=2c653c1f-ca1e-4b15-8a85-9215b1ec346d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e2:73:42:00:33:21:0c:b9:7c:37:47:8e:71: 4f:b6:fa:65:78:07:ad:e8:d2:05:6c:63:0a:c5:7f: e1:e9:33:8f:d4:35:fb:06:d3:74:c6:39:a8:ea:8a: 23:71:83:ec:ba:03:d1:b0:fd:53:0c:56:d8:fc:87: ec:74:91:5b:2f:50:45:4e:92:3f:36:8a:97:15:9e: 5a:25:2b:c8:ee:a9:d5:ee:d5:cb:55:a8:a8:ab:8a: 51:5d:28:b3:3c:8f:e7:7d:f0:a3:10:1e:d2:91:e8: 4b:24:30:c5:7a:fa:08:48:5f:30:9d:c8:e7:89:a3: 6d:d7:7d:c9:4b:86:e6:5a:0d:73:62:0f:f8:87:0c: 8a:8d:fc:ac:98:8f:38:f5:dd:7b:e1:1a:59:d8:76: 30:6b:e2:27:af:8e:a9:5b:03:de:99:93:66:ae:6f: fb:5d:d5:81:7e:32:2e:c7:1c:45:1b:38:0f:8b:9d: 1f:7f:c5:24:52:fd:45:04:65:54:86:76:56:6e:d0: 31:3d:79:d3:69:86:1d:55:4e:f6:1a:c1:fd:f8:49: 38:a1:36:5f:1f:04:eb:bc:48:40:b4:bf:e4:95:19: 65:c9:70:0f:fd:ec:4a:d0:ba:01:be:78:57:30:97: fd:44:33:7c:cd:20:c4:bd:ce:f8:1f:76:bd:06:62: 3a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:2C:FC:F0:29:E7:AE:52:47:97:CC:26:0B:00:F6:EE:3A:DE:DC:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/1a4a4def-a575-48e1-87d5-56942434422a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/1a4a4def-a575-48e1-87d5-56942434422a.crl X509v3 Authority Key Identifier: keyid:05:6E:18:DE:54:9A:DE:FE:A9:3F:7C:8A:E8:72:D2:89:2F:26:2F:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:b9:96:f6:4f:8d:62:d3:0e:95:8b:d2:af:b3:9c:93:cd:9a: d7:fd:e2:09:13:df:c8:94:32:e3:9e:34:d9:dc:c8:a4:f8:80: d8:85:29:c3:62:b9:a8:0c:0a:a8:55:f6:c2:57:c1:ee:65:91: d4:a3:c9:eb:65:c8:f0:26:4c:24:97:d4:c3:92:aa:07:cf:07: 64:c4:65:1a:70:c3:94:42:03:97:e0:b9:64:52:b3:6d:50:3d: 7b:c9:b9:bc:ce:6a:e2:c5:0b:fd:00:73:f7:ba:13:d0:42:6d: 4a:96:93:1d:17:20:50:cd:c5:d3:e2:fc:8a:5e:8d:f8:f5:2e: 8e:26:2b:7b:f2:6d:99:00:ff:ef:9d:71:74:74:db:cd:4b:6a: fb:16:ee:bf:70:57:d8:83:20:90:04:14:ea:d0:7f:bc:11:95: 23:f8:c4:f1:b5:b3:58:60:2e:a5:59:52:a4:de:e7:5d:07:a0: 4b:0c:a1:ee:3b:c7:bb:c8:19:b4:4c:5b:e1:69:34:09:2a:f2: de:a1:3f:11:2f:ae:ad:fe:39:90:6f:a1:f1:21:b4:21:a4:1c: bb:d4:90:f1:9b:36:ce:5f:f1:0a:b3:5b:16:d5:f1:af:35:e3: 89:30:26:e6:ab:cb:dc:fb:55:85:d6:b3:67:ce:f9:dd:71:e5: c8:7b:86:be -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnMRjSCnbAiEq/jSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE0YTRkZWYtYTU3NS00OGUxLTg3ZDUtNTY5NDI0MzQ0 MjJhMB4XDTI1MDUwOTE3MDAwN1oXDTI1MDUxMjE3MDAwMFowLzEtMCsGA1UEAxMk MmM2NTNjMWYtY2ExZS00YjE1LThhODUtOTIxNWIxZWMzNDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+JzQgAzIQy5fDdHjnFPtvpleAet6NIFbGMK xX/h6TOP1DX7BtN0xjmo6oojcYPsugPRsP1TDFbY/IfsdJFbL1BFTpI/NoqXFZ5a JSvI7qnV7tXLVaioq4pRXSizPI/nffCjEB7SkehLJDDFevoISF8wncjniaNt133J S4bmWg1zYg/4hwyKjfysmI849d174RpZ2HYwa+Inr46pWwPemZNmrm/7XdWBfjIu xxxFGzgPi50ff8UkUv1FBGVUhnZWbtAxPXnTaYYdVU72GsH9+Ek4oTZfHwTrvEhA tL/klRllyXAP/exK0LoBvnhXMJf9RDN8zSDEvc74H3a9BmI6JwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOQs/PAp565SR5fMJgsA9u463twhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xYTRh NGRlZi1hNTc1LTQ4ZTEtODdkNS01Njk0MjQzNDQyMmEvMWE0YTRkZWYtYTU3NS00 OGUxLTg3ZDUtNTY5NDI0MzQ0MjJhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWE0YTRkZWYtYTU3NS00OGUxLTg3 ZDUtNTY5NDI0MzQ0MjJhLzFhNGE0ZGVmLWE1NzUtNDhlMS04N2Q1LTU2OTQyNDM0 NDIyYS5jcmwwHwYDVR0jBBgwFoAUBW4Y3lSa3v6pP3yK6HLSiS8mL0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xYTRhNGRlZi1hNTc1LTQ4ZTEtODdkNS01Njk0 MjQzNDQyMmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBVuZb2T41i0w6Vi9Kvs5yT zZrX/eIJE9/IlDLjnjTZ3Mik+IDYhSnDYrmoDAqoVfbCV8HuZZHUo8nrZcjwJkwk l9TDkqoHzwdkxGUacMOUQgOX4LlkUrNtUD17ybm8zmrixQv9AHP3uhPQQm1KlpMd FyBQzcXT4vyKXo349S6OJit78m2ZAP/vnXF0dNvNS2r7Fu6/cFfYgyCQBBTq0H+8 EZUj+MTxtbNYYC6lWVKk3uddB6BLDKHuO8e7yBm0TFvhaTQJKvLeoT8RL66t/jmQ b6HxIbQhpBy71JDxmzbOX/EKs1sW1fGvNeOJMCbmq8vc+1WF1rNnzvndceXIe4a+ -----END CERTIFICATE-----Generated at Sat May 10 17:40:31 2025 by rpki-client