$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft File: 95e29289-6f1c-4c2f-84f4-c944e9e54940.mft (raw, json) Hash identifier: N2E24f8l+8BrVI+1TA9bLczKn8qje/TYRFDOc+aJftg= Subject key identifier: 7D:79:69:A7:5A:27:D7:13:D4:0C:1D:30:0E:38:5D:04:EA:16:A4:A0 Authority key identifier: 4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E Certificate issuer: /CN=95e29289-6f1c-4c2f-84f4-c944e9e54940 Certificate serial: 010D0C9F43285849C7BCCDEF16C21BEE8DCAE300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft Manifest number: 010D0C9F4328584073A8378ED965A26DC80B7BBA Signing time: Thu 08 May 2025 02:00:03 +0000 Manifest this update: Thu 08 May 2025 02:00:03 +0000 Manifest next update: Sat 10 May 2025 02:00:00 +0000 Files and hashes: 1: 13c7705c-5068-3193-a68c-a2e387dab614.roa (hash: a6dwtfH68oKKZpHXm8ejCwP5VsN4CcGJUdqiyNzbIXI=) 2: 20e21523-7867-3e6d-bd2a-f4ba5558ced0.roa (hash: cN8R5qC4NlR5uWvhUCzKpCYleWok7iYO4MSTCkC8hSo=) 3: 42017b9c-7ea7-3f9a-8686-04d01900fd20.roa (hash: eE+T381MdR/qQQc8thyoh8V4NGPTtTr8rmOB92XbOok=) 4: 650dd2fc-99af-35a3-81ca-030219a24999.roa (hash: ZJiCv03s2scquqm44dosAwFmuMHEdUjcMiNY3LldOsc=) 5: 95dd5242-3b5c-376f-81d5-8ede1c2277b6.roa (hash: S1crQs1bS3+fVWk1sr+MxbbXeysQXbMkIzdeCnOShtQ=) 6: 95e29289-6f1c-4c2f-84f4-c944e9e54940.crl (hash: o9O81PS55sMOZMa4cnvGL9bzgQ6FxegPSrOc4H7DnEI=) 7: eb6fc912-909b-3236-8ac8-46c73ef2bbbe.roa (hash: yRU2SNT6VHvrw0XGADf1el1PtI+x16YGp615p27f74A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c7:bc:cd:ef:16:c2:1b:ee:8d:ca:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95e29289-6f1c-4c2f-84f4-c944e9e54940 Validity Not Before: May 8 02:00:03 2025 GMT Not After : May 10 02:00:00 2025 GMT Subject: CN=cd53c54a-f1a6-4725-827e-6cfb8a7d6fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1f:47:eb:db:06:9c:ee:72:be:a4:51:42:39: 3d:b3:33:ed:34:ab:ee:a0:39:57:e7:84:fb:c9:8d: 85:bf:25:31:34:3a:ee:32:a8:56:14:d1:87:89:da: 9e:90:2c:63:65:c4:02:0b:89:57:85:20:dd:ce:d1: cc:e4:35:dc:bb:a2:0c:35:db:3c:ea:50:27:16:43: 49:b4:d5:0b:92:15:86:00:3b:b9:f5:cc:1b:03:ef: 6f:a4:84:39:c2:5a:7c:3b:68:ec:c2:38:34:55:33: b0:54:9b:93:90:ee:b8:b2:54:c3:fd:df:b7:5b:c5: 45:e4:a4:2e:b7:17:b1:4f:23:f5:54:5e:6d:a1:55: 08:e8:9f:75:76:83:fa:09:e9:57:d4:dd:58:40:f5: 70:79:c7:58:b6:f9:27:c3:f3:b8:ae:e7:5a:76:2f: 87:81:03:9f:73:06:cb:38:87:d3:fd:a6:cb:1e:1f: 7d:99:15:52:21:a5:de:37:6b:37:f5:b8:87:51:90: 2a:0d:c3:15:71:c0:b6:7d:6e:11:48:f1:80:7e:09: cc:6b:74:e7:29:c4:03:58:43:f0:c7:3e:fb:e2:d7: d6:ee:b0:2c:8a:c3:52:2f:79:5e:81:fa:74:dc:82: 41:08:6b:fb:67:85:60:b4:6f:3c:bc:53:d0:c6:0e: b7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:79:69:A7:5A:27:D7:13:D4:0C:1D:30:0E:38:5D:04:EA:16:A4:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl X509v3 Authority Key Identifier: keyid:4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:2d:de:83:d0:5f:a4:24:11:5f:1d:a9:14:e1:5b:00:5c:74: b1:66:0c:3a:ab:32:3d:1d:30:c8:24:e1:f9:1e:85:da:aa:2b: f5:19:37:16:84:6f:dd:d1:bc:1e:b7:65:7f:f8:9d:d3:c4:3a: 10:35:1d:bf:c5:c8:86:4b:35:fc:73:69:04:06:f6:7a:94:66: 7d:4c:15:e5:eb:ba:0e:e7:86:c3:0c:f7:49:4e:8f:94:56:94: 43:66:57:1e:16:62:0f:b7:52:e3:26:dc:af:8b:a5:3b:b9:78: b1:69:d9:27:14:61:c4:5a:c0:f0:d4:53:7d:e7:a2:b6:2d:19: 00:44:b5:ef:c6:e7:6a:12:58:c6:50:76:75:ee:7e:5e:08:ff: 7f:0c:60:1f:52:1a:c3:8e:01:25:57:02:09:44:f4:a8:40:58: 8c:84:f3:f2:80:78:d1:e8:cc:09:22:88:15:d1:27:0d:0b:cd: 47:18:4e:8c:e4:b9:ae:47:88:ec:8a:40:6b:65:b8:de:f6:df: ba:4f:a2:57:a0:3e:74:19:c3:07:53:1c:0c:ed:ed:75:01:46: 12:15:b7:67:39:ab:b1:dd:f6:a4:2b:50:ef:63:99:35:24:89: 6d:7b:41:7d:f6:ff:a8:43:2e:6e:78:cc:2c:b1:2c:28:7e:ee: a8:e6:3c:0c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnHvM3vFsIb7o3K4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVlMjkyODktNmYxYy00YzJmLTg0ZjQtYzk0NGU5ZTU0 OTQwMB4XDTI1MDUwODAyMDAwM1oXDTI1MDUxMDAyMDAwMFowLzEtMCsGA1UEAxMk Y2Q1M2M1NGEtZjFhNi00NzI1LTgyN2UtNmNmYjhhN2Q2ZmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh9H69sGnO5yvqRRQjk9szPtNKvuoDlX54T7 yY2FvyUxNDruMqhWFNGHidqekCxjZcQCC4lXhSDdztHM5DXcu6IMNds86lAnFkNJ tNULkhWGADu59cwbA+9vpIQ5wlp8O2jswjg0VTOwVJuTkO64slTD/d+3W8VF5KQu txexTyP1VF5toVUI6J91doP6CelX1N1YQPVwecdYtvknw/O4rudadi+HgQOfcwbL OIfT/abLHh99mRVSIaXeN2s39biHUZAqDcMVccC2fW4RSPGAfgnMa3TnKcQDWEPw xz774tfW7rAsisNSL3legfp03IJBCGv7Z4VgtG88vFPQxg63EwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFH15aadaJ9cT1AwdMA44XQTqFqSgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NWUy OTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0ZTllNTQ5NDAvOTVlMjkyODktNmYxYy00 YzJmLTg0ZjQtYzk0NGU5ZTU0OTQwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTVlMjkyODktNmYxYy00YzJmLTg0 ZjQtYzk0NGU5ZTU0OTQwLzk1ZTI5Mjg5LTZmMWMtNGMyZi04NGY0LWM5NDRlOWU1 NDk0MC5jcmwwHwYDVR0jBBgwFoAUTbpFqqu5h2Ol5m+zCcVulzCUmp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85NWUyOTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0 ZTllNTQ5NDAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAELd6D0F+kJBFfHakU4VsA XHSxZgw6qzI9HTDIJOH5HoXaqiv1GTcWhG/d0bwet2V/+J3TxDoQNR2/xciGSzX8 c2kEBvZ6lGZ9TBXl67oO54bDDPdJTo+UVpRDZlceFmIPt1LjJtyvi6U7uXixadkn FGHEWsDw1FN956K2LRkARLXvxudqEljGUHZ17n5eCP9/DGAfUhrDjgElVwIJRPSo QFiMhPPygHjR6MwJIogV0ScNC81HGE6M5LmuR4jsikBrZbje9t+6T6JXoD50GcMH UxwM7e11AUYSFbdnOaux3fakK1DvY5k1JIlte0F99v+oQy5ueMwssSwofu6o5jwM -----END CERTIFICATE-----Generated at Thu May 8 20:42:57 2025 by rpki-client