$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.mft File: 688a78fa-2d94-478e-900a-a1fec661b769.mft (raw, json) Hash identifier: VRgITFrWmMy2bnMKYWP28rQ3awnyHeOVImHLmjGSdJc= Subject key identifier: AE:C3:D7:99:A9:1E:03:B9:92:D4:A3:C6:F6:21:32:E2:98:30:F9:A2 Authority key identifier: 90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9 Certificate issuer: /CN=688a78fa-2d94-478e-900a-a1fec661b769 Certificate serial: 010D0C9F43285849CE5F2C461A35F6921632C014 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.mft Manifest number: 010D0C9F4328584073A84FFB747306F559FEDF00 Signing time: Sat 10 May 2025 11:02:03 +0000 Manifest this update: Sat 10 May 2025 11:02:03 +0000 Manifest next update: Mon 12 May 2025 11:00:00 +0000 Files and hashes: 1: 4adad03b-afb7-37aa-b32f-c3fc097b8abe.roa (hash: sVkWDiY0ON6pbkwevIZ8gFdchuZZM2Mej5vM4jefGEs=) 2: 688a78fa-2d94-478e-900a-a1fec661b769.crl (hash: xPpLan55n9pOW+8C7X5Q3bYDk5muXTlZHXm8lqFkMFw=) 3: 79809976-9df9-3d91-b7e8-6a3afaeac18d.roa (hash: WTJbgqfnZTtNelAiSe5MJo9Ixw2inUB0CtJ6JuUiv0E=) 4: 84b980dc-1b89-371a-8343-16c5dac99a40.roa (hash: Dw0/ZFcYOYemjS4zy0gVBDVVpXJKuvbms5bgcV5oMOY=) 5: 8f41887f-e02f-3b1f-9011-a36a71b35c82.roa (hash: zUn3EJo9ZL9iTfhIn3q3QwxJf9AYtZPs5LzmU3Lp7OE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:5f:2c:46:1a:35:f6:92:16:32:c0:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688a78fa-2d94-478e-900a-a1fec661b769 Validity Not Before: May 10 11:02:03 2025 GMT Not After : May 12 11:00:00 2025 GMT Subject: CN=e474e8dc-7344-45ad-8cf1-c90293492607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b7:11:1d:20:b6:32:f0:d7:79:cc:95:b2:09: 54:d1:92:5a:dd:94:61:18:35:10:1a:b2:1c:54:57: 78:d6:c1:26:93:73:da:7c:cc:cd:4a:aa:0e:35:da: ed:34:ef:e1:2f:27:ce:3e:c6:a6:e1:be:aa:62:4b: 2c:7b:11:14:ca:a0:4b:87:6a:5f:60:a6:b3:a7:99: 78:af:01:00:f7:1e:b5:56:d1:20:85:31:87:ac:b0: d7:26:e1:99:f9:31:e4:57:37:f3:23:e5:1a:c2:58: 63:94:3e:a3:e4:d8:b8:59:2e:7d:a6:fa:19:96:13: 5a:a8:6a:c3:a0:a1:34:e1:84:8c:cd:92:85:58:99: 20:6c:a8:a1:9a:c6:27:36:52:b6:5a:71:97:4f:f9: 77:f3:8c:e8:35:bc:8c:ce:b7:64:0d:86:74:6a:e4: 18:91:5d:f1:0a:7c:8c:f7:f8:42:90:da:2a:63:3e: 75:19:d9:2e:9c:eb:fd:c1:dd:49:7c:92:84:8c:8d: e6:f0:36:94:be:ad:59:72:cb:57:61:93:ee:69:44: 9b:61:15:e6:b4:7b:44:2f:01:e6:ca:20:55:01:1d: 6d:ab:48:81:6b:0b:6f:61:69:f3:f9:86:63:d9:62: 40:e2:02:67:46:62:b2:9c:fe:f9:c7:a3:be:f6:7d: dd:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C3:D7:99:A9:1E:03:B9:92:D4:A3:C6:F6:21:32:E2:98:30:F9:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl X509v3 Authority Key Identifier: keyid:90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:c5:fb:72:8c:7c:d1:44:bd:a2:b0:08:15:b5:8f:f4:b4:ce: 66:d7:56:d6:cc:11:6a:1e:0b:54:55:53:c6:ab:c3:c9:85:98: ee:31:f7:14:e3:4f:62:15:63:01:ce:26:27:c7:1e:ab:57:d6: 5f:63:4f:ab:4c:37:4e:09:0a:ea:e5:f0:d9:27:3a:b4:12:d5: 6a:40:16:e7:9e:4e:d8:de:b0:b0:43:21:93:11:aa:cd:b6:af: e8:01:49:aa:8f:74:a3:c5:55:fa:1b:64:0b:c9:a2:61:ad:18: 41:da:bc:d7:d9:fc:52:e7:ea:72:3f:c8:25:50:c7:49:b0:21: a7:7e:80:31:b6:31:9c:56:9f:d6:42:3e:7b:14:08:b0:e8:32: d7:e9:db:1a:1d:6d:8b:73:da:00:66:a2:13:f3:ba:23:cb:bc: 6f:3a:ff:b5:8a:ff:17:64:48:55:6d:86:dc:1e:08:9e:b4:c2: db:f2:73:76:74:1f:5f:a6:24:3e:e9:ff:de:23:a0:c4:24:93: 71:af:d2:8d:58:40:a6:ab:e0:8d:a6:4a:0a:bd:2e:06:30:09: e0:63:2a:bc:1b:9b:7f:d0:9b:f5:4c:be:2e:72:a9:89:57:65: fe:48:4d:29:ca:6b:44:82:d0:b6:4d:25:b6:e9:38:7a:c7:83: b6:e6:73:15 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnOXyxGGjX2khYywBQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg4YTc4ZmEtMmQ5NC00NzhlLTkwMGEtYTFmZWM2NjFi NzY5MB4XDTI1MDUxMDExMDIwM1oXDTI1MDUxMjExMDAwMFowLzEtMCsGA1UEAxMk ZTQ3NGU4ZGMtNzM0NC00NWFkLThjZjEtYzkwMjkzNDkyNjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbcRHSC2MvDXecyVsglU0ZJa3ZRhGDUQGrIc VFd41sEmk3PafMzNSqoONdrtNO/hLyfOPsam4b6qYkssexEUyqBLh2pfYKazp5l4 rwEA9x61VtEghTGHrLDXJuGZ+THkVzfzI+UawlhjlD6j5Ni4WS59pvoZlhNaqGrD oKE04YSMzZKFWJkgbKihmsYnNlK2WnGXT/l384zoNbyMzrdkDYZ0auQYkV3xCnyM 9/hCkNoqYz51GdkunOv9wd1JfJKEjI3m8DaUvq1ZcstXYZPuaUSbYRXmtHtELwHm yiBVAR1tq0iBawtvYWnz+YZj2WJA4gJnRmKynP75x6O+9n3dlwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFK7D15mpHgO5ktSjxvYhMuKYMPmiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ODhh NzhmYS0yZDk0LTQ3OGUtOTAwYS1hMWZlYzY2MWI3NjkvNjg4YTc4ZmEtMmQ5NC00 NzhlLTkwMGEtYTFmZWM2NjFiNzY5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjg4YTc4ZmEtMmQ5NC00NzhlLTkw MGEtYTFmZWM2NjFiNzY5LzY4OGE3OGZhLTJkOTQtNDc4ZS05MDBhLWExZmVjNjYx Yjc2OS5jcmwwHwYDVR0jBBgwFoAUkFvoLBBymwQG9cpaFkwist9khrkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ODhhNzhmYS0yZDk0LTQ3OGUtOTAwYS1hMWZl YzY2MWI3NjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAyxftyjHzRRL2isAgVtY/0 tM5m11bWzBFqHgtUVVPGq8PJhZjuMfcU409iFWMBziYnxx6rV9ZfY0+rTDdOCQrq 5fDZJzq0EtVqQBbnnk7Y3rCwQyGTEarNtq/oAUmqj3SjxVX6G2QLyaJhrRhB2rzX 2fxS5+pyP8glUMdJsCGnfoAxtjGcVp/WQj57FAiw6DLX6dsaHW2Lc9oAZqIT87oj y7xvOv+1iv8XZEhVbYbcHgietMLb8nN2dB9fpiQ+6f/eI6DEJJNxr9KNWECmq+CN pkoKvS4GMAngYyq8G5t/0Jv1TL4ucqmJV2X+SE0pymtEgtC2TSW26Th6x4O25nMV -----END CERTIFICATE-----Generated at Sun May 11 11:47:18 2025 by rpki-client