$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/47ebfec0-de9f-4253-8391-0bb6095c8f7c/47ebfec0-de9f-4253-8391-0bb6095c8f7c.mft File: 47ebfec0-de9f-4253-8391-0bb6095c8f7c.mft (raw, json) Hash identifier: qb4L+MC0C0g0sPurDXPtEVJKfRxdwFZP4yAZA/Jmwa0= Subject key identifier: 74:AF:C2:26:82:20:17:33:FA:EC:29:1C:2B:7A:A8:3E:03:94:06:1B Authority key identifier: 14:B1:65:46:D5:84:9B:8E:BC:81:4C:47:84:7B:83:03:B9:4C:46:E5 Certificate issuer: /CN=47ebfec0-de9f-4253-8391-0bb6095c8f7c Certificate serial: 010D0C9F43285849C280CFE0A835301BDBC29D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/47ebfec0-de9f-4253-8391-0bb6095c8f7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/47ebfec0-de9f-4253-8391-0bb6095c8f7c/47ebfec0-de9f-4253-8391-0bb6095c8f7c.mft Manifest number: 010D0C9F4328584912A2AF7A878B77B360EDB8C0 Signing time: Tue 06 May 2025 05:00:07 +0000 Manifest this update: Tue 06 May 2025 05:00:07 +0000 Manifest next update: Thu 08 May 2025 05:00:00 +0000 Files and hashes: 1: 22d4ca19-cb6c-3cb9-ba08-8dbfa0c6ac89.roa (hash: XbK2MXSw/CS+b5nTgj4R7l3PfXa6bDVwfaPyDSjRfSo=) 2: 47ebfec0-de9f-4253-8391-0bb6095c8f7c.crl (hash: 2qDxYXsc1A01gsKspTTTuKYL1M2yk9/p9FmMFNu+G1k=) 3: e601058c-5974-3a51-a610-ced957e767ca.roa (hash: jFEVOZNy7/ZvOuNH+Nb1zTFdvq8wN3lmm3rxmzC62pY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/47ebfec0-de9f-4253-8391-0bb6095c8f7c/47ebfec0-de9f-4253-8391-0bb6095c8f7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/47ebfec0-de9f-4253-8391-0bb6095c8f7c/47ebfec0-de9f-4253-8391-0bb6095c8f7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/47ebfec0-de9f-4253-8391-0bb6095c8f7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:80:cf:e0:a8:35:30:1b:db:c2:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47ebfec0-de9f-4253-8391-0bb6095c8f7c Validity Not Before: May 6 05:00:07 2025 GMT Not After : May 8 05:00:00 2025 GMT Subject: CN=bbc7bf16-7d50-422d-8674-661961a81c44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:86:49:43:a2:87:62:b3:4b:f3:49:e4:46:a2: c9:bb:62:bb:fb:96:e0:19:fc:51:7d:c7:98:ad:82: 8b:76:e9:59:be:bf:0a:d4:dd:76:76:e5:bb:38:e7: 26:f3:8d:07:cb:ad:c2:34:b1:c9:65:20:d5:c6:bd: 7b:8a:eb:d9:5e:b5:a8:d9:10:d9:05:8e:5e:ca:4f: 35:5b:6d:1d:da:69:a9:44:1d:8f:a2:1e:6a:1a:0f: e8:a1:9d:35:a8:06:0a:d7:50:49:d9:a3:fb:51:7d: 0c:ba:b5:4c:6e:84:98:1a:dd:d6:4a:43:c4:79:57: 1f:bc:66:1e:19:fe:47:df:6e:b0:d1:17:84:bd:f7: b4:29:9a:c0:d3:50:e5:fb:2d:39:3a:a8:86:a7:f3: fd:32:3d:0a:c9:95:04:1e:0c:80:44:b8:33:bc:d3: 30:ff:00:e3:66:ef:97:57:9d:a9:b4:81:40:81:5e: f3:02:cb:c8:cc:38:78:6a:57:ea:bc:45:ba:fe:f9: ba:69:bb:8f:e8:a8:66:27:99:04:02:64:5b:89:64: bb:6d:03:eb:a1:33:cc:6a:f0:12:d0:9e:e8:0d:33: 03:cf:9d:f2:f7:94:27:bb:7f:2c:a0:65:12:31:14: 73:ec:d8:d0:a7:b7:ac:f4:25:b3:d5:19:6c:73:8d: 67:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:AF:C2:26:82:20:17:33:FA:EC:29:1C:2B:7A:A8:3E:03:94:06:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/47ebfec0-de9f-4253-8391-0bb6095c8f7c/47ebfec0-de9f-4253-8391-0bb6095c8f7c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/47ebfec0-de9f-4253-8391-0bb6095c8f7c/47ebfec0-de9f-4253-8391-0bb6095c8f7c.crl X509v3 Authority Key Identifier: keyid:14:B1:65:46:D5:84:9B:8E:BC:81:4C:47:84:7B:83:03:B9:4C:46:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/47ebfec0-de9f-4253-8391-0bb6095c8f7c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:b8:67:b1:71:ed:db:82:a6:0f:e1:11:a0:c7:7c:3f:f1:06: 50:96:58:06:a3:fb:5e:74:43:44:94:5c:e7:f6:31:81:80:5b: f2:51:e9:79:8e:81:79:c6:4d:99:6a:71:90:47:9f:cb:ea:af: 32:71:c3:b3:b6:32:66:2d:c0:cc:ea:9b:eb:9c:b0:14:11:f0: 71:a3:04:70:29:75:fa:d1:fd:91:5b:a6:df:8d:b6:a3:07:2d: 89:84:fb:bd:59:25:71:02:59:f2:0d:33:8d:94:f7:7c:bf:92: f3:c2:c3:bf:85:ad:e8:74:23:81:31:c7:cd:7f:c2:49:be:68: b4:05:68:96:4a:2e:aa:29:1b:07:d6:3d:69:55:6f:24:66:fb: 76:b2:ea:a5:c8:65:66:ea:5d:af:49:ce:9e:8c:5d:ab:c6:3c: 84:94:cf:f6:69:28:69:e4:8f:4c:5d:78:f9:98:f5:a9:76:e1: fc:e6:b7:52:5b:1e:8a:ad:ad:82:f6:be:82:fd:92:e1:eb:05: f8:ce:80:56:f5:69:02:74:2a:ea:09:35:1d:f3:e1:69:47:ce: 1a:c3:07:b4:dd:c6:e3:51:1d:9f:1a:7e:da:c0:cf:cb:16:40: b5:46:c7:96:2b:8b:8c:2a:31:5f:46:38:22:3b:b5:45:23:1b: 78:f3:79:13 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnCgM/gqDUwG9vCnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDdlYmZlYzAtZGU5Zi00MjUzLTgzOTEtMGJiNjA5NWM4 ZjdjMB4XDTI1MDUwNjA1MDAwN1oXDTI1MDUwODA1MDAwMFowLzEtMCsGA1UEAxMk YmJjN2JmMTYtN2Q1MC00MjJkLTg2NzQtNjYxOTYxYTgxYzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4ZJQ6KHYrNL80nkRqLJu2K7+5bgGfxRfceY rYKLdulZvr8K1N12duW7OOcm840Hy63CNLHJZSDVxr17iuvZXrWo2RDZBY5eyk81 W20d2mmpRB2Poh5qGg/ooZ01qAYK11BJ2aP7UX0MurVMboSYGt3WSkPEeVcfvGYe Gf5H326w0ReEvfe0KZrA01Dl+y05OqiGp/P9Mj0KyZUEHgyARLgzvNMw/wDjZu+X V52ptIFAgV7zAsvIzDh4alfqvEW6/vm6abuP6KhmJ5kEAmRbiWS7bQProTPMavAS 0J7oDTMDz53y95Qnu38soGUSMRRz7NjQp7es9CWz1Rlsc41nEwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHSvwiaCIBcz+uwpHCt6qD4DlAYbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80N2Vi ZmVjMC1kZTlmLTQyNTMtODM5MS0wYmI2MDk1YzhmN2MvNDdlYmZlYzAtZGU5Zi00 MjUzLTgzOTEtMGJiNjA5NWM4ZjdjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNDdlYmZlYzAtZGU5Zi00MjUzLTgz OTEtMGJiNjA5NWM4ZjdjLzQ3ZWJmZWMwLWRlOWYtNDI1My04MzkxLTBiYjYwOTVj OGY3Yy5jcmwwHwYDVR0jBBgwFoAUFLFlRtWEm468gUxHhHuDA7lMRuUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80N2ViZmVjMC1kZTlmLTQyNTMtODM5MS0wYmI2 MDk1YzhmN2MuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBmuGexce3bgqYP4RGgx3w/ 8QZQllgGo/tedENElFzn9jGBgFvyUel5joF5xk2ZanGQR5/L6q8yccOztjJmLcDM 6pvrnLAUEfBxowRwKXX60f2RW6bfjbajBy2JhPu9WSVxAlnyDTONlPd8v5LzwsO/ ha3odCOBMcfNf8JJvmi0BWiWSi6qKRsH1j1pVW8kZvt2suqlyGVm6l2vSc6ejF2r xjyElM/2aShp5I9MXXj5mPWpduH85rdSWx6Kra2C9r6C/ZLh6wX4zoBW9WkCdCrq CTUd8+FpR84awwe03cbjUR2fGn7awM/LFkC1RseWK4uMKjFfRjgiO7VFIxt483kT -----END CERTIFICATE-----Generated at Wed May 7 02:56:25 2025 by rpki-client