$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft File: 628d865a-2d19-4af1-984a-6c443304d9f0.mft (raw, json) Hash identifier: DmR4+Bc8bJ2VElcRlvD0bo/g0Q4QV7qq+N9HbQKXnHw= Subject key identifier: F7:D4:A0:31:79:87:3E:B6:B7:B1:AF:EE:92:AE:E9:49:6A:38:39:DD Authority key identifier: 25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24 Certificate issuer: /CN=628d865a-2d19-4af1-984a-6c443304d9f0 Certificate serial: 010D0C9F43285849D1BDBF11527C928F7649A080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft Manifest number: 010D0C9F43285847F42C26C6F2A071B9C6A01572 Signing time: Sun 11 May 2025 16:00:03 +0000 Manifest this update: Sun 11 May 2025 16:00:03 +0000 Manifest next update: Tue 13 May 2025 16:00:00 +0000 Files and hashes: 1: 0242e3bb-d361-314e-9397-022ca2fba7a8.roa (hash: iGEj9v0nTIHNIwbkQ70aG+PoWHIpkqxKj4m+mNvh8UY=) 2: 1a9639da-a216-3ece-b327-c09a057856a3.roa (hash: 1yNgglbxA9RyI/mhdsjiqFSk2BlJEGmknt7ZyxHWo6w=) 3: 349d3b72-a194-37a3-95c4-97b0c3e9f593.roa (hash: tYdiOp1+SEY1l6nf98nwWAgbLssZwMzfVhKx4kVGRQs=) 4: 3611eb1d-586a-3087-8c7c-45e34fe9b737.roa (hash: U6cHimryi4j1r+atZ36T/nGTZawSwYWg8ss1+gVlWmY=) 5: 628d865a-2d19-4af1-984a-6c443304d9f0.crl (hash: jitbMKXZK5GiIXKyLHpJ97Gn86LOL6Ko3FuQJ33qtvQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:bd:bf:11:52:7c:92:8f:76:49:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=628d865a-2d19-4af1-984a-6c443304d9f0 Validity Not Before: May 11 16:00:03 2025 GMT Not After : May 13 16:00:00 2025 GMT Subject: CN=068f4814-b42f-4a73-99fa-b07ad053a679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6c:ed:05:62:a5:3f:77:9a:ca:db:e3:07:32: 90:d5:47:a0:9c:20:9a:25:f1:d9:e9:ee:ad:8b:a8: 52:14:a2:38:1b:55:7b:58:6c:36:36:b0:e8:b9:b9: 84:36:11:4d:83:50:30:9a:27:e0:f5:d9:ab:25:28: 3d:30:05:ee:be:76:d0:23:f4:98:be:97:16:8f:63: e7:d9:e9:40:3d:27:42:57:c1:a6:17:5a:49:a0:9d: 40:8d:c6:51:1c:f9:3f:00:4a:d9:7a:9d:d0:4e:5f: 21:6b:f2:c1:00:9c:7f:06:d7:78:7e:cc:51:57:c6: 62:7a:91:5f:07:0a:9f:aa:f2:1c:b1:d2:96:97:89: 9e:ad:b0:e6:d1:ce:ca:b5:b9:d0:01:53:95:ac:19: 8b:51:27:89:df:1c:d0:23:f4:50:23:4f:25:c3:e8: b9:f6:2d:e8:32:7f:34:4e:01:ab:5d:ce:9c:10:4f: e9:4b:33:77:4e:b9:e1:ca:68:db:6e:63:45:e8:f9: 3e:9b:6d:a3:cb:d5:41:e9:ad:ea:4a:43:ce:ba:47: a9:4b:59:d7:87:19:7c:14:fd:78:2e:e5:e0:87:d1: 84:e0:01:54:04:18:b2:ad:8f:72:7d:70:dc:ac:e0: 92:6b:e5:4e:79:e6:91:0c:9b:2d:d6:33:5a:84:ea: 08:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D4:A0:31:79:87:3E:B6:B7:B1:AF:EE:92:AE:E9:49:6A:38:39:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.crl X509v3 Authority Key Identifier: keyid:25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:71:de:9b:c4:86:7c:18:e3:f0:0d:e6:de:cf:c5:69:d6:cb: 5f:40:54:a0:37:2c:15:d6:f3:14:b7:a4:00:2f:9b:45:b2:b8: c7:cb:6e:27:48:91:fa:9c:8b:d9:85:a6:8b:f3:68:87:73:bc: a3:a5:4d:0d:20:e1:36:82:b5:97:65:c5:a7:fb:05:ad:62:3a: a5:be:c4:21:73:59:d9:26:b2:79:67:0b:93:6d:b2:77:e8:d9: 5d:7a:52:2b:05:33:b2:d0:dc:7f:96:cb:3d:54:95:9f:c8:49: 26:91:c3:ed:06:28:e0:3d:cc:77:46:7c:7f:aa:b4:66:bb:1f: a3:78:29:be:6f:66:d6:99:ba:d0:77:4f:8f:29:1e:0f:90:9a: ba:f8:db:fd:af:c5:01:03:27:e3:c6:59:41:c7:2c:49:c8:54: 3a:2a:6b:10:dd:2d:2f:e0:42:d3:e9:61:82:2c:fb:d6:fe:42: 1b:18:b3:23:76:dc:13:e3:b8:11:26:18:eb:95:78:f8:50:16: 86:72:83:64:7d:1a:1c:51:0d:19:01:e1:ef:2b:9a:7f:71:a8: ef:78:05:dc:f9:4c:7c:30:8b:a1:f1:90:73:5c:59:1c:75:bc: 8f:00:37:dd:5b:b4:c6:80:d8:d8:df:79:9f:f2:ce:06:ce:5c: d9:85:12:39 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnRvb8RUnySj3ZJoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjI4ZDg2NWEtMmQxOS00YWYxLTk4NGEtNmM0NDMzMDRk OWYwMB4XDTI1MDUxMTE2MDAwM1oXDTI1MDUxMzE2MDAwMFowLzEtMCsGA1UEAxMk MDY4ZjQ4MTQtYjQyZi00YTczLTk5ZmEtYjA3YWQwNTNhNjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmztBWKlP3eaytvjBzKQ1UegnCCaJfHZ6e6t i6hSFKI4G1V7WGw2NrDoubmENhFNg1Awmifg9dmrJSg9MAXuvnbQI/SYvpcWj2Pn 2elAPSdCV8GmF1pJoJ1AjcZRHPk/AErZep3QTl8ha/LBAJx/Btd4fsxRV8ZiepFf BwqfqvIcsdKWl4merbDm0c7KtbnQAVOVrBmLUSeJ3xzQI/RQI08lw+i59i3oMn80 TgGrXc6cEE/pSzN3TrnhymjbbmNF6Pk+m22jy9VB6a3qSkPOukepS1nXhxl8FP14 LuXgh9GE4AFUBBiyrY9yfXDcrOCSa+VOeeaRDJst1jNahOoIoQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPfUoDF5hz62t7Gv7pKu6UlqODndMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82Mjhk ODY1YS0yZDE5LTRhZjEtOTg0YS02YzQ0MzMwNGQ5ZjAvNjI4ZDg2NWEtMmQxOS00 YWYxLTk4NGEtNmM0NDMzMDRkOWYwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjI4ZDg2NWEtMmQxOS00YWYxLTk4 NGEtNmM0NDMzMDRkOWYwLzYyOGQ4NjVhLTJkMTktNGFmMS05ODRhLTZjNDQzMzA0 ZDlmMC5jcmwwHwYDVR0jBBgwFoAUJYu8/Mz4Vjaea43uldPRD0mYCCQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MjhkODY1YS0yZDE5LTRhZjEtOTg0YS02YzQ0 MzMwNGQ5ZjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBecd6bxIZ8GOPwDebez8Vp 1stfQFSgNywV1vMUt6QAL5tFsrjHy24nSJH6nIvZhaaL82iHc7yjpU0NIOE2grWX ZcWn+wWtYjqlvsQhc1nZJrJ5ZwuTbbJ36NldelIrBTOy0Nx/lss9VJWfyEkmkcPt BijgPcx3Rnx/qrRmux+jeCm+b2bWmbrQd0+PKR4PkJq6+Nv9r8UBAyfjxllBxyxJ yFQ6KmsQ3S0v4ELT6WGCLPvW/kIbGLMjdtwT47gRJhjrlXj4UBaGcoNkfRocUQ0Z AeHvK5p/cajveAXc+Ux8MIuh8ZBzXFkcdbyPADfdW7TGgNjY33mf8s4GzlzZhRI5 -----END CERTIFICATE-----Generated at Mon May 12 00:18:16 2025 by rpki-client