$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.mft File: 9bd0a861-f835-4585-9517-e1dba949c123.mft (raw, json) Hash identifier: WB1zb9R0Z3eabKBvSoMuZ3qzP2JBDyA1X6UDbTF63YE= Subject key identifier: FF:1A:EC:00:25:B1:E1:8F:D1:0B:8F:13:77:F5:87:EE:EE:23:2A:F6 Authority key identifier: E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16 Certificate issuer: /CN=9bd0a861-f835-4585-9517-e1dba949c123 Certificate serial: 010D0C9F43285849CE7C0033F5ED491AC763A558 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.mft Manifest number: 010D0C9F4328584073A854438D0E56BC1233124D Signing time: Sat 10 May 2025 12:00:07 +0000 Manifest this update: Sat 10 May 2025 12:00:07 +0000 Manifest next update: Mon 12 May 2025 12:00:00 +0000 Files and hashes: 1: 248dd090-9420-37f9-9305-b5cd56b24a28.roa (hash: CsR5NiFEAXNvE6DG0JA/AJgJSGWQvabccJiuAWFgpwk=) 2: 35a4a280-a419-3d31-a496-90f9731524db.roa (hash: WcYFhmOYW9Kk8gU/DNtEA82nZcDf6zG+Nb83p4D32Ng=) 3: 9bd0a861-f835-4585-9517-e1dba949c123.crl (hash: svei7JrhtQcyM0L+eW5FmDp97aKGj+0Brx8MRrL47cE=) 4: b63f0ff7-15b0-3e74-af0a-9a007f546dfd.roa (hash: E0zfLrgO8L/mE7WDww6FJfj81wueLKNU9l8ZufQF9VA=) 5: c729c319-c3d5-351e-acdc-5c7a20ff6a0d.roa (hash: vFCotdZLKzjf6GP6cPXvqfVxtqtDE2GGVuO+qNX8sGw=) 6: e059b6f4-fe4e-3d54-80af-7a74c0f90ef3.roa (hash: R6ni7E6K/VcgO/aYMlUfGixdOKqztPnk3E/Fbqk05Ns=) 7: fd669d54-47cf-37c7-8689-7511d01f5bb0.roa (hash: Jafqgr8HXD8UqBJo6mAUcWtNXDDWyTFAOW76yjezjmo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:7c:00:33:f5:ed:49:1a:c7:63:a5:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd0a861-f835-4585-9517-e1dba949c123 Validity Not Before: May 10 12:00:07 2025 GMT Not After : May 12 12:00:00 2025 GMT Subject: CN=ed6ac80e-bb7f-4ecf-b0d4-c214047d623a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f8:ff:60:af:2a:25:38:fd:fa:aa:85:a1:d8: 58:48:6e:fb:da:76:96:dd:d7:36:68:09:cd:64:29: b4:a4:1d:31:d3:4b:b9:9b:cd:31:c3:42:a7:61:9a: 8c:b4:1c:2c:30:c1:df:ea:17:6d:dd:56:43:3e:53: c3:5a:65:c8:e9:3b:49:90:96:51:50:0a:65:68:41: 8e:72:b3:33:49:7f:90:71:7d:74:e5:9e:12:46:a6: 0a:91:16:af:5c:11:e6:eb:59:7f:a9:86:51:fb:5e: 95:cc:43:47:08:60:a9:5d:7c:2c:d6:65:fe:aa:d1: 1a:c4:a7:6b:b7:29:3e:2e:67:09:e8:0b:76:76:78: fa:37:34:28:9e:a4:c5:4d:8e:f5:72:6a:5d:9e:2d: cc:2f:fb:5b:1f:97:c7:05:9b:85:55:c3:99:3a:45: 06:33:f8:37:d2:7b:42:62:b0:b3:bb:f4:ce:57:8a: 6f:87:91:76:b1:2e:2b:2f:5c:cf:5b:d8:46:6c:a9: b1:90:49:e9:e9:24:12:e4:e3:0e:03:1f:8b:77:9c: 17:16:a4:73:75:40:89:f6:f4:7e:59:9f:fa:e2:1d: bd:85:ae:2a:b0:2a:3a:f5:b9:b2:17:8f:9b:fd:ff: 1b:8c:96:ed:8e:d8:7a:1e:6d:e1:33:dd:e1:ba:07: 7d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:1A:EC:00:25:B1:E1:8F:D1:0B:8F:13:77:F5:87:EE:EE:23:2A:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl X509v3 Authority Key Identifier: keyid:E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:03:13:99:9c:db:03:95:34:0d:74:d1:ba:0b:f0:e7:78:f9: 8b:36:45:d8:94:18:6f:9c:f0:73:67:6d:2a:41:1e:73:08:3b: 1e:ea:53:74:18:25:f5:85:7b:51:46:2e:19:4e:9d:be:ce:35: 00:79:88:96:7f:0b:10:1b:bc:2d:69:2a:c1:ba:45:ea:b3:91: f7:3c:0b:16:4f:c8:39:0f:b7:00:e5:25:94:4e:2a:23:7c:9d: d5:c0:ed:d4:c8:2d:d5:81:2e:b0:09:46:d6:87:c6:61:a2:77: 5e:21:71:60:b0:a8:d9:e7:69:78:f6:06:f0:95:30:d0:2f:c1: 2f:5d:ec:d4:de:f7:cb:22:da:15:94:6c:b9:42:b4:31:7b:47: f0:ca:3d:5d:bd:8b:8b:5a:5d:b6:6d:62:dc:f5:76:71:c8:32: 8c:07:58:ec:95:5e:e3:c7:88:a5:96:f6:b6:58:9c:3d:69:f8: ad:18:ea:f8:7e:5b:23:a0:87:b0:6c:17:f9:4f:13:30:71:23: 8b:83:01:d2:3a:90:87:de:7b:1b:bd:a1:57:e0:c0:12:0b:3f: 5d:bc:7c:15:82:d4:c0:f8:81:be:b5:69:02:3c:a1:68:4e:b5: 4e:e8:85:85:e4:df:74:43:37:d9:18:cb:7f:18:ab:42:a5:4b: 6f:79:d4:55 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnOfAAz9e1JGsdjpVgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJkMGE4NjEtZjgzNS00NTg1LTk1MTctZTFkYmE5NDlj MTIzMB4XDTI1MDUxMDEyMDAwN1oXDTI1MDUxMjEyMDAwMFowLzEtMCsGA1UEAxMk ZWQ2YWM4MGUtYmI3Zi00ZWNmLWIwZDQtYzIxNDA0N2Q2MjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPj/YK8qJTj9+qqFodhYSG772naW3dc2aAnN ZCm0pB0x00u5m80xw0KnYZqMtBwsMMHf6hdt3VZDPlPDWmXI6TtJkJZRUAplaEGO crMzSX+QcX105Z4SRqYKkRavXBHm61l/qYZR+16VzENHCGCpXXws1mX+qtEaxKdr tyk+LmcJ6At2dnj6NzQonqTFTY71cmpdni3ML/tbH5fHBZuFVcOZOkUGM/g30ntC YrCzu/TOV4pvh5F2sS4rL1zPW9hGbKmxkEnp6SQS5OMOAx+Ld5wXFqRzdUCJ9vR+ WZ/64h29ha4qsCo69bmyF4+b/f8bjJbtjth6Hm3hM93hugd9cQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFP8a7AAlseGP0QuPE3f1h+7uIyr2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YmQw YTg2MS1mODM1LTQ1ODUtOTUxNy1lMWRiYTk0OWMxMjMvOWJkMGE4NjEtZjgzNS00 NTg1LTk1MTctZTFkYmE5NDljMTIzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWJkMGE4NjEtZjgzNS00NTg1LTk1 MTctZTFkYmE5NDljMTIzLzliZDBhODYxLWY4MzUtNDU4NS05NTE3LWUxZGJhOTQ5 YzEyMy5jcmwwHwYDVR0jBBgwFoAU5LcXAHA6BDXEY3u/qUeRKvFBvBYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YmQwYTg2MS1mODM1LTQ1ODUtOTUxNy1lMWRi YTk0OWMxMjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCMAxOZnNsDlTQNdNG6C/Dn ePmLNkXYlBhvnPBzZ20qQR5zCDse6lN0GCX1hXtRRi4ZTp2+zjUAeYiWfwsQG7wt aSrBukXqs5H3PAsWT8g5D7cA5SWUTiojfJ3VwO3UyC3VgS6wCUbWh8ZhondeIXFg sKjZ52l49gbwlTDQL8EvXezU3vfLItoVlGy5QrQxe0fwyj1dvYuLWl22bWLc9XZx yDKMB1jslV7jx4illva2WJw9afitGOr4flsjoIewbBf5TxMwcSOLgwHSOpCH3nsb vaFX4MASCz9dvHwVgtTA+IG+tWkCPKFoTrVO6IWF5N90QzfZGMt/GKtCpUtvedRV -----END CERTIFICATE-----Generated at Sun May 11 09:03:43 2025 by rpki-client