$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/9d295acd-c538-4740-8f21-9eca736b29d5.mft File: 9d295acd-c538-4740-8f21-9eca736b29d5.mft (raw, json) Hash identifier: ZdHegGcd2AeJfFm05C+jkcEt5LZHeCBF1cMuUVBgFDM= Subject key identifier: 64:12:CB:A2:D0:FE:97:72:86:13:85:9D:FE:9E:AF:CC:0B:45:58:2A Authority key identifier: 42:03:5D:B9:00:BA:0A:9F:E5:9B:F0:A7:55:C0:87:D8:26:02:C2:D9 Certificate issuer: /CN=9d295acd-c538-4740-8f21-9eca736b29d5 Certificate serial: 010D0C9F43285849C70A2E446FE7685281BDCD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/9d295acd-c538-4740-8f21-9eca736b29d5.mft Manifest number: 010D0C9F432858492AB8D0A4293292F4656B047C Signing time: Wed 07 May 2025 20:00:07 +0000 Manifest this update: Wed 07 May 2025 20:00:07 +0000 Manifest next update: Sat 10 May 2025 20:00:00 +0000 Files and hashes: 1: 7b0ac27c-3a94-3e0d-b88e-c8fada10fb83.roa (hash: kzG+tzKmxzOqd+9jbs78JIvAO2mXNa6h+3zwNbcFcus=) 2: 9d295acd-c538-4740-8f21-9eca736b29d5.crl (hash: SOzdtYiWnKbDFIkuB/M1JrerprPvzoa6ftgd05336zY=) 3: fd4c00b7-96e4-37b1-999c-f48fdf2b836b.roa (hash: Ohani+JutuGrx7NcOcz2LBIQg3F09s6k4Kp3gKqCyFQ=) 4: fde6a4c4-7399-3879-b40c-270da587b12a.roa (hash: BfyBLMB8RAc/ScFgD+8uhXyafW4l34g4FoefVZ09U0w=) 5: feb4fec0-897c-378b-9c38-ab144c9a32cd.roa (hash: APweRDFbFqcsF+cAfkvTL2niDPpMfORjAye23id5k5c=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/9d295acd-c538-4740-8f21-9eca736b29d5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/9d295acd-c538-4740-8f21-9eca736b29d5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c7:0a:2e:44:6f:e7:68:52:81:bd:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d295acd-c538-4740-8f21-9eca736b29d5 Validity Not Before: May 7 20:00:07 2025 GMT Not After : May 10 20:00:00 2025 GMT Subject: CN=05e4510f-4c84-4f65-8cc8-484a73a2f860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:60:64:33:72:31:77:fd:89:83:99:41:37:ac: 39:a4:6c:a7:78:97:24:91:5d:eb:d8:7d:c9:23:e3: b9:d7:a1:4e:64:03:a3:37:e9:fd:a5:a9:35:06:17: 83:57:f3:7a:79:57:52:9c:f1:22:62:f3:71:5c:d1: cd:16:2c:a0:1b:e2:4a:4e:19:de:3c:85:a1:98:ca: 7f:e2:ec:a6:e6:b4:4e:3d:18:cf:d7:f7:0f:3f:35: b7:87:9f:cd:d8:93:ab:8d:51:4b:6c:35:dd:bd:64: dd:f2:2d:97:a4:25:55:b3:ef:9b:09:2f:46:85:48: 87:52:b4:07:e8:5c:77:3c:ad:25:d0:51:b2:ad:ad: 98:43:b3:df:7b:ad:32:fd:65:db:fa:82:5c:9b:a0: 5f:ef:3d:30:82:02:00:78:69:4e:32:3e:ec:57:6b: f8:f3:dc:9e:91:0c:5f:7c:69:be:c3:45:99:e4:97: 30:8f:58:4b:3c:9a:ad:ce:9e:1c:bf:8f:25:40:6b: fa:f0:fe:46:dc:2e:41:56:67:29:04:7d:4a:26:aa: 93:b6:69:bf:86:7d:cf:7b:63:0d:ed:6e:8d:f9:ae: a4:b3:40:d1:cf:7c:da:5a:1a:86:1c:26:d4:47:e0: 0e:04:32:b4:aa:bc:6a:01:ef:f0:65:d7:44:76:bd: dd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:12:CB:A2:D0:FE:97:72:86:13:85:9D:FE:9E:AF:CC:0B:45:58:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/9d295acd-c538-4740-8f21-9eca736b29d5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/9d295acd-c538-4740-8f21-9eca736b29d5.crl X509v3 Authority Key Identifier: keyid:42:03:5D:B9:00:BA:0A:9F:E5:9B:F0:A7:55:C0:87:D8:26:02:C2:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:38:cb:f0:ef:b7:ab:0f:61:67:6b:d0:2c:3c:2b:99:2a:e4: 8a:c5:4d:20:da:c3:ef:87:f6:12:13:b2:ce:bf:2d:45:83:c3: ba:c7:7b:99:60:35:bb:de:bb:fb:76:75:a1:33:d2:67:1e:a0: 8e:14:4a:de:75:4b:fc:6d:6b:0e:83:dc:4b:39:30:ec:b2:3e: 80:04:b9:2f:d5:7f:d6:58:c9:52:95:08:03:0b:7a:ea:c6:d3: 39:b4:61:1e:94:72:03:28:9c:40:c8:dd:ff:b1:47:28:f7:12: 3d:6a:e6:25:44:24:84:59:64:0c:da:21:a5:24:25:5a:1c:e7: ee:dd:72:a6:07:c3:dd:89:ef:14:d1:2d:3f:fd:ba:00:5c:82: c9:f9:27:fb:26:ac:a8:b8:64:a3:34:6e:6f:f1:dc:d7:7b:2b: 78:ec:d4:8f:8e:ca:b5:76:e3:95:9b:6c:dd:0f:c1:9f:b5:4d: 0e:d3:c7:6e:30:ec:0e:f0:9f:a6:32:4e:71:7c:71:a0:29:5e: 54:a7:26:9e:c2:ba:d5:64:fc:2e:52:04:6e:26:59:64:14:7a: be:6c:fe:47:ae:20:02:35:4f:eb:c2:90:5d:0b:46:33:96:59: a9:db:93:44:23:02:34:a7:e4:4d:34:be:cf:11:d1:65:54:2f: 85:a8:ce:28 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnHCi5Eb+doUoG9zYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQyOTVhY2QtYzUzOC00NzQwLThmMjEtOWVjYTczNmIy OWQ1MB4XDTI1MDUwNzIwMDAwN1oXDTI1MDUxMDIwMDAwMFowLzEtMCsGA1UEAxMk MDVlNDUxMGYtNGM4NC00ZjY1LThjYzgtNDg0YTczYTJmODYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGBkM3Ixd/2Jg5lBN6w5pGyneJckkV3r2H3J I+O516FOZAOjN+n9pak1BheDV/N6eVdSnPEiYvNxXNHNFiygG+JKThnePIWhmMp/ 4uym5rROPRjP1/cPPzW3h5/N2JOrjVFLbDXdvWTd8i2XpCVVs++bCS9GhUiHUrQH 6Fx3PK0l0FGyra2YQ7Pfe60y/WXb+oJcm6Bf7z0wggIAeGlOMj7sV2v489yekQxf fGm+w0WZ5Jcwj1hLPJqtzp4cv48lQGv68P5G3C5BVmcpBH1KJqqTtmm/hn3Pe2MN 7W6N+a6ks0DRz3zaWhqGHCbUR+AOBDK0qrxqAe/wZddEdr3d7QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGQSy6LQ/pdyhhOFnf6er8wLRVgqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85ZDI5 NWFjZC1jNTM4LTQ3NDAtOGYyMS05ZWNhNzM2YjI5ZDUvOWQyOTVhY2QtYzUzOC00 NzQwLThmMjEtOWVjYTczNmIyOWQ1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWQyOTVhY2QtYzUzOC00NzQwLThm MjEtOWVjYTczNmIyOWQ1LzlkMjk1YWNkLWM1MzgtNDc0MC04ZjIxLTllY2E3MzZi MjlkNS5jcmwwHwYDVR0jBBgwFoAUQgNduQC6Cp/lm/CnVcCH2CYCwtkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85ZDI5NWFjZC1jNTM4LTQ3NDAtOGYyMS05ZWNh NzM2YjI5ZDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAfOMvw77erD2Fna9AsPCuZ KuSKxU0g2sPvh/YSE7LOvy1Fg8O6x3uZYDW73rv7dnWhM9JnHqCOFEredUv8bWsO g9xLOTDssj6ABLkv1X/WWMlSlQgDC3rqxtM5tGEelHIDKJxAyN3/sUco9xI9auYl RCSEWWQM2iGlJCVaHOfu3XKmB8Pdie8U0S0//boAXILJ+Sf7JqyouGSjNG5v8dzX eyt47NSPjsq1duOVm2zdD8GftU0O08duMOwO8J+mMk5xfHGgKV5UpyaewrrVZPwu UgRuJllkFHq+bP5HriACNU/rwpBdC0Yzllmp25NEIwI0p+RNNL7PEdFlVC+FqM4o -----END CERTIFICATE-----Generated at Thu May 8 21:34:12 2025 by rpki-client