$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.mft File: d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.mft (raw, json) Hash identifier: EKv8CcfOgNLeE8DJzo5UCCIPPDqXGx0nieX1GfssAc0= Subject key identifier: 1D:E9:E7:8F:AB:BD:BB:80:CE:EB:A9:95:56:6C:47:49:04:74:13:E9 Authority key identifier: 0B:72:93:6A:9C:83:B5:E3:6C:B7:76:E3:59:21:8A:61:87:56:CE:E6 Certificate issuer: /CN=d8d99f8b-a85a-41e9-89b4-612c6b9c10a8 Certificate serial: 010D0C9F43285849BE8C577A55790937EF03B650 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.mft Manifest number: 010D0C9F432858432001FC8475620A7BBB343586 Signing time: Sun 04 May 2025 19:00:07 +0000 Manifest this update: Sun 04 May 2025 19:00:07 +0000 Manifest next update: Tue 06 May 2025 19:00:00 +0000 Files and hashes: 1: 04bcb534-109e-3dec-a653-5e03796d1436.roa (hash: tJbuKM6xVAkJ52ugi2Mn8RKK9VWqhGChYFgIu8bsSIE=) 2: 22be48d5-f877-34f2-a9e9-e415ed6320a6.roa (hash: 2Xnf2UMNATbn4iIISdl7ZU7WjgW6G8+0sG2MFFlJq7w=) 3: 4746b8a5-f35c-35b1-a271-73593688ddac.roa (hash: 9dtvlyR5FxTFikuI04Vrbgu9z9fehMZ4Jbn9ENfLYDk=) 4: 877255b8-cb33-3803-8908-41e712168981.roa (hash: dAi2G27zgssHLE+W9mXWAoc95A4o44F4ouwrknQkGPI=) 5: d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.crl (hash: 1gmc7JSJNwCsvVam/vh617lT3oPgs6gXc+OIgrV81qU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:be:8c:57:7a:55:79:09:37:ef:03:b6:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8d99f8b-a85a-41e9-89b4-612c6b9c10a8 Validity Not Before: May 4 19:00:07 2025 GMT Not After : May 6 19:00:00 2025 GMT Subject: CN=b444e76b-9db0-4def-aae2-20b0b213cf23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:93:56:d3:ef:b2:b6:83:c9:b0:57:51:8e:3b: 13:64:35:31:76:d0:49:82:c4:21:9c:b5:fb:ff:87: 90:86:ed:10:75:d4:00:9c:59:45:6e:e9:a1:f2:89: aa:27:55:f5:9e:10:b3:b0:55:75:97:8a:17:e5:5f: 85:fa:fd:c1:e4:e4:d7:34:97:62:19:73:57:05:17: 1a:88:0c:85:30:e6:76:b4:85:9e:3e:02:a7:ce:0a: 5e:ed:d7:3f:cd:bc:49:db:12:f9:fd:e3:bc:db:30: 4e:e1:66:29:6d:b9:d7:c3:d4:11:0b:79:8a:3c:8c: d4:b5:1e:f1:bc:84:5f:ab:e5:3f:3c:1f:f5:4c:9e: af:4b:4a:d2:68:94:f1:36:49:5b:10:2d:63:ae:12: 8a:52:97:77:8e:47:fb:30:46:17:5b:70:98:3c:6f: 36:96:38:5c:29:0d:5b:58:cd:09:2c:55:23:03:33: 66:e9:f6:a8:eb:c7:f6:20:ca:90:90:87:08:61:9b: 23:6d:59:d5:ac:0b:3d:dc:a5:10:8c:6d:a3:74:2a: 2a:6f:ef:a4:41:f5:d2:79:7e:27:ef:22:6b:f9:93: 18:4c:b8:90:03:96:33:44:29:a7:bb:0d:72:1a:49: 76:2d:d9:28:98:d7:56:66:d7:7f:7b:b3:1d:a5:ab: 06:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E9:E7:8F:AB:BD:BB:80:CE:EB:A9:95:56:6C:47:49:04:74:13:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.crl X509v3 Authority Key Identifier: keyid:0B:72:93:6A:9C:83:B5:E3:6C:B7:76:E3:59:21:8A:61:87:56:CE:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:6c:ca:d6:24:59:b0:00:24:71:f6:6f:53:a6:e5:4e:26:80: 65:1a:99:bc:fd:1b:c7:e9:50:7c:a2:cf:0a:10:66:7e:ee:09: 62:b5:7d:73:5a:67:0a:ec:3b:5d:f5:ec:d7:8b:15:e2:bd:ae: 05:05:4e:67:f2:a4:ed:97:be:d5:31:d1:00:c2:5a:5b:c0:4b: 50:a5:31:30:0a:fb:17:b7:86:1f:27:30:dd:52:e6:17:14:ce: 00:ee:72:a6:85:6e:46:4e:50:3a:6b:10:0d:d6:e7:4e:24:d5: c8:16:10:f7:94:00:84:2d:06:f3:b5:d2:f3:23:48:74:be:d9: ea:4a:e3:6f:01:cb:f3:0a:fd:f1:7c:4c:ed:3e:06:60:4a:c9: b7:85:60:f3:e6:4d:30:89:f1:9a:3a:cd:fe:cc:c7:16:8c:0c: 23:7d:c6:0e:b5:8b:5f:f1:68:e8:43:13:16:4f:8b:06:5f:e6: 5b:b4:51:d9:9f:90:f1:9f:ea:47:65:83:4f:e6:6d:af:63:7e: 64:31:d5:f5:83:f8:fc:5f:eb:36:7b:57:16:20:ce:71:08:e2: 5c:3a:fb:5b:5b:a8:38:26:a1:33:e6:88:59:e4:66:ab:66:2b: fe:13:ad:06:c2:54:7c:b5:46:17:7e:c2:db:a7:4a:cd:54:dd: 03:36:a1:b1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEm+jFd6VXkJN+8DtlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDhkOTlmOGItYTg1YS00MWU5LTg5YjQtNjEyYzZiOWMx MGE4MB4XDTI1MDUwNDE5MDAwN1oXDTI1MDUwNjE5MDAwMFowLzEtMCsGA1UEAxMk YjQ0NGU3NmItOWRiMC00ZGVmLWFhZTItMjBiMGIyMTNjZjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppNW0++ytoPJsFdRjjsTZDUxdtBJgsQhnLX7 /4eQhu0QddQAnFlFbumh8omqJ1X1nhCzsFV1l4oX5V+F+v3B5OTXNJdiGXNXBRca iAyFMOZ2tIWePgKnzgpe7dc/zbxJ2xL5/eO82zBO4WYpbbnXw9QRC3mKPIzUtR7x vIRfq+U/PB/1TJ6vS0rSaJTxNklbEC1jrhKKUpd3jkf7MEYXW3CYPG82ljhcKQ1b WM0JLFUjAzNm6fao68f2IMqQkIcIYZsjbVnVrAs93KUQjG2jdCoqb++kQfXSeX4n 7yJr+ZMYTLiQA5YzRCmnuw1yGkl2LdkomNdWZtd/e7MdpasGDQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFB3p54+rvbuAzuuplVZsR0kEdBPpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kOGQ5 OWY4Yi1hODVhLTQxZTktODliNC02MTJjNmI5YzEwYTgvZDhkOTlmOGItYTg1YS00 MWU5LTg5YjQtNjEyYzZiOWMxMGE4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDhkOTlmOGItYTg1YS00MWU5LTg5 YjQtNjEyYzZiOWMxMGE4L2Q4ZDk5ZjhiLWE4NWEtNDFlOS04OWI0LTYxMmM2Yjlj MTBhOC5jcmwwHwYDVR0jBBgwFoAUC3KTapyDteNst3bjWSGKYYdWzuYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kOGQ5OWY4Yi1hODVhLTQxZTktODliNC02MTJj NmI5YzEwYTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCRbMrWJFmwACRx9m9TpuVO JoBlGpm8/RvH6VB8os8KEGZ+7glitX1zWmcK7Dtd9ezXixXiva4FBU5n8qTtl77V MdEAwlpbwEtQpTEwCvsXt4YfJzDdUuYXFM4A7nKmhW5GTlA6axAN1udOJNXIFhD3 lACELQbztdLzI0h0vtnqSuNvAcvzCv3xfEztPgZgSsm3hWDz5k0wifGaOs3+zMcW jAwjfcYOtYtf8WjoQxMWT4sGX+ZbtFHZn5Dxn+pHZYNP5m2vY35kMdX1g/j8X+s2 e1cWIM5xCOJcOvtbW6g4JqEz5ohZ5GarZiv+E60GwlR8tUYXfsLbp0rNVN0DNqGx -----END CERTIFICATE-----Generated at Mon May 5 04:01:33 2025 by rpki-client