$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.mft File: a1bd9d43-c127-4a9e-b038-0c436c5d905d.mft (raw, json) Hash identifier: CJ8vc0JHxKsvOvGIlunAATvov2bUTYzELZikjPjFN7o= Subject key identifier: 2E:68:79:7A:3A:59:BE:67:F0:B7:A2:F2:23:B9:2A:08:FB:3A:84:85 Authority key identifier: 44:56:B0:0C:C3:6F:6E:82:D5:8A:0A:1C:2A:77:45:78:E6:33:A0:F2 Certificate issuer: /CN=a1bd9d43-c127-4a9e-b038-0c436c5d905d Certificate serial: 010D0C9F43285849C19298B12FC6891A90793590 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.mft Manifest number: 010D0C9F43285843E950AA0F557A5B5938B606C7 Signing time: Mon 05 May 2025 21:00:07 +0000 Manifest this update: Mon 05 May 2025 21:00:07 +0000 Manifest next update: Thu 08 May 2025 21:00:00 +0000 Files and hashes: 1: 06a28e78-d98f-3c71-bf8b-ae64a6fe22ea.roa (hash: N3mO+4j2dGzFVcvjTtcGbw8v7R/CP5kuIOwh4HiM74I=) 2: 4f00197c-82ad-39dc-96d1-b0d2703738e7.roa (hash: i2vrIea7ATzMi/7B4mCNCtD1h3O9/zmjTqzHIPmNln0=) 3: a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl (hash: KitHvEQubXQV5kiS4aWOp0hTaljhPnGlu6qs3S0KxMU=) 4: d3f55b78-b0db-358b-92ae-a01f4943931a.roa (hash: JoxVKlyH/KA1BV+I3dNZfg4lGpmk3aNbDrn7uW59q54=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c1:92:98:b1:2f:c6:89:1a:90:79:35:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1bd9d43-c127-4a9e-b038-0c436c5d905d Validity Not Before: May 5 21:00:07 2025 GMT Not After : May 8 21:00:00 2025 GMT Subject: CN=e7421ac1-d08e-4887-a999-a78977f78900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:17:16:c4:1e:c9:27:80:38:f4:5c:f8:46:82: b6:48:6d:b4:d9:ed:6f:bd:89:2f:bc:11:ec:1f:b6: 73:5c:bb:24:e9:d0:68:2f:cc:74:8a:20:32:22:a2: 18:5e:dc:29:84:33:61:cc:84:a7:e1:f9:7a:6d:6c: 49:9d:73:a9:19:ff:51:d0:77:e7:1b:d3:f3:4e:e6: 51:d0:b9:4d:d8:06:f7:e5:37:bd:c2:d6:fa:77:e6: 68:d9:de:8f:69:e6:1b:2e:f4:e7:69:c7:6b:25:e6: 82:cd:9f:43:4d:50:db:20:7c:6b:5b:9e:09:12:ff: 53:bb:9a:4a:83:a4:a2:6e:4f:ae:ae:7f:60:fe:da: 81:cb:1b:ad:24:c7:59:58:e4:a5:0c:4f:6f:cb:00: ba:43:41:7c:17:37:28:f8:ad:f6:d5:fe:4b:15:59: 96:20:e6:cb:b6:b7:f4:49:70:f2:ba:29:dc:73:59: 0c:03:b5:c5:8c:f7:1d:87:6f:d1:68:a8:2a:8a:50: 3b:59:41:77:60:62:8a:69:de:b7:68:97:e3:7b:d1: 9c:15:29:05:b7:b5:d5:1d:5f:a0:2d:32:c4:db:b4: 63:b0:34:e2:fb:e2:b3:f4:25:5f:22:27:30:a8:db: 33:10:1d:c9:b7:46:e2:22:bd:8f:83:78:56:1d:7d: 05:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:68:79:7A:3A:59:BE:67:F0:B7:A2:F2:23:B9:2A:08:FB:3A:84:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl X509v3 Authority Key Identifier: keyid:44:56:B0:0C:C3:6F:6E:82:D5:8A:0A:1C:2A:77:45:78:E6:33:A0:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:d1:bd:d9:95:14:82:32:d9:de:d3:5d:e3:ab:21:c2:61:0a: 7c:01:b7:3c:c9:cf:f5:97:ce:53:fd:ff:c3:eb:0d:65:c7:e8: 1c:fd:6e:32:2a:e8:25:cb:80:52:4a:ec:1e:e6:92:06:2a:ea: cd:9c:1a:12:a1:32:55:fc:63:10:55:fb:7d:b2:58:41:9a:86: 0c:d5:0d:82:66:d9:a7:94:c3:16:2d:85:af:20:0b:89:f6:b9: a0:b7:09:a2:61:0e:31:a0:21:28:26:c1:58:9d:ed:5e:39:6e: b3:88:ea:49:7d:c8:ef:4a:b2:87:46:91:9d:61:90:dd:11:09: 76:a7:d7:99:03:cc:94:56:95:43:0f:e5:f7:d8:78:f5:5f:67: 28:3f:92:a2:bc:14:00:a9:fc:f0:b9:05:fc:83:17:e8:16:13: 8e:1d:15:7f:0a:5a:8a:75:26:c2:71:19:c8:9e:d0:b2:90:7e: 0b:e9:31:04:7c:89:39:ad:36:63:20:58:2c:78:8e:ed:46:e6: 29:41:b3:a6:89:0b:d6:53:98:6f:6f:64:05:96:78:a9:3b:e0: 93:4b:de:26:3f:14:d2:8e:76:fb:b3:da:78:47:22:88:af:30: e5:ca:a5:ae:8e:35:a0:0b:6a:e0:3b:7d:d6:6f:0a:14:0d:29: 06:e9:75:59 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnBkpixL8aJGpB5NZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFiZDlkNDMtYzEyNy00YTllLWIwMzgtMGM0MzZjNWQ5 MDVkMB4XDTI1MDUwNTIxMDAwN1oXDTI1MDUwODIxMDAwMFowLzEtMCsGA1UEAxMk ZTc0MjFhYzEtZDA4ZS00ODg3LWE5OTktYTc4OTc3Zjc4OTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhcWxB7JJ4A49Fz4RoK2SG202e1vvYkvvBHs H7ZzXLsk6dBoL8x0iiAyIqIYXtwphDNhzISn4fl6bWxJnXOpGf9R0HfnG9PzTuZR 0LlN2Ab35Te9wtb6d+Zo2d6PaeYbLvTnacdrJeaCzZ9DTVDbIHxrW54JEv9Tu5pK g6Sibk+urn9g/tqByxutJMdZWOSlDE9vywC6Q0F8Fzco+K321f5LFVmWIObLtrf0 SXDyuincc1kMA7XFjPcdh2/RaKgqilA7WUF3YGKKad63aJfje9GcFSkFt7XVHV+g LTLE27RjsDTi++Kz9CVfIicwqNszEB3Jt0biIr2Pg3hWHX0FXwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFC5oeXo6Wb5n8Lei8iO5Kgj7OoSFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMWJk OWQ0My1jMTI3LTRhOWUtYjAzOC0wYzQzNmM1ZDkwNWQvYTFiZDlkNDMtYzEyNy00 YTllLWIwMzgtMGM0MzZjNWQ5MDVkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTFiZDlkNDMtYzEyNy00YTllLWIw MzgtMGM0MzZjNWQ5MDVkL2ExYmQ5ZDQzLWMxMjctNGE5ZS1iMDM4LTBjNDM2YzVk OTA1ZC5jcmwwHwYDVR0jBBgwFoAURFawDMNvboLVigocKndFeOYzoPIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMWJkOWQ0My1jMTI3LTRhOWUtYjAzOC0wYzQz NmM1ZDkwNWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC40b3ZlRSCMtne013jqyHC YQp8Abc8yc/1l85T/f/D6w1lx+gc/W4yKugly4BSSuwe5pIGKurNnBoSoTJV/GMQ Vft9slhBmoYM1Q2CZtmnlMMWLYWvIAuJ9rmgtwmiYQ4xoCEoJsFYne1eOW6ziOpJ fcjvSrKHRpGdYZDdEQl2p9eZA8yUVpVDD+X32Hj1X2coP5KivBQAqfzwuQX8gxfo FhOOHRV/ClqKdSbCcRnIntCykH4L6TEEfIk5rTZjIFgseI7tRuYpQbOmiQvWU5hv b2QFlnipO+CTS94mPxTSjnb7s9p4RyKIrzDlyqWujjWgC2rgO33WbwoUDSkG6XVZ -----END CERTIFICATE-----Generated at Tue May 6 17:47:06 2025 by rpki-client