$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft File: aa912e91-41d3-4894-893c-8de4f94175f9.mft (raw, json) Hash identifier: E/QoWPmHHehn3F0n8gvB4ywPaIzDvx15H4UHKltdTtw= Subject key identifier: 23:2F:43:6F:4A:CF:97:25:9D:18:13:51:F9:67:49:1E:32:F3:B5:52 Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 Certificate issuer: /CN=aa912e91-41d3-4894-893c-8de4f94175f9 Certificate serial: 010D0C9F43285849BEC7DACC0E2FE2805E3F3580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft Manifest number: 010D0C9F4328584073A82612B62F47807E021E11 Signing time: Sun 04 May 2025 21:00:03 +0000 Manifest this update: Sun 04 May 2025 21:00:03 +0000 Manifest next update: Wed 07 May 2025 21:00:00 +0000 Files and hashes: 1: 37677602-0a43-34e8-9622-a4ac56d7d1e8.roa (hash: vv9n1CgHjrk2J0EChzWJzWV8HQSwhKT06SFQAgYkqf4=) 2: 3f1d5e08-9a57-3b1f-a2d9-9da03cd8aaab.roa (hash: pvaHqsWSRYrT88Pp6vnPAm9js+0A0WoyF9MwBSpTtjg=) 3: 41901fb9-e852-38fe-9a4b-13a788c646db.roa (hash: vcaaI5PJgZrTHe7dYuNbcehBmYxgoWT4n1u5+SOu+vU=) 4: 589e3e61-8fae-384e-99a0-011c39c08dbb.roa (hash: gTxS5SKTRik98sGboYEGVPOZUTraYb8xSSLPkDYvpCs=) 5: 973a96a2-0162-35e7-90db-f4882fddf92f.roa (hash: Krccf6DFP+mMU+1Vjt3Szfrr7EuGga0UKqICzkui87E=) 6: aa912e91-41d3-4894-893c-8de4f94175f9.crl (hash: /gTr1Ol08xHcKSOU1zZVIcEYM42+uYNpAEW2AA1YBJ4=) 7: f890b188-b610-38a0-89b0-8a1a62d249f7.roa (hash: caVQ7L6v5ybKwZrDikrZF8HnBi282D8zMp2vvD4ektE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:be:c7:da:cc:0e:2f:e2:80:5e:3f:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9 Validity Not Before: May 4 21:00:03 2025 GMT Not After : May 7 21:00:00 2025 GMT Subject: CN=cb974b7c-c8ae-4f2b-9bb9-b6a877f62131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4d:02:30:9b:99:f2:b8:38:8f:45:ff:0f:ca: 7c:56:22:6d:2b:11:9a:09:ac:0d:1e:b4:64:1a:e5: 75:11:57:e7:05:6f:c7:8e:61:fa:28:b2:1a:67:a5: 8a:df:0f:46:68:33:97:53:77:42:ac:ea:1c:4a:d5: 41:e6:03:36:04:b8:be:82:9c:74:bb:14:50:15:8f: be:d6:24:b3:03:c6:e6:94:ab:69:63:83:b2:2f:13: ea:c9:d0:1b:11:fc:fd:49:ba:0e:6a:f5:6a:34:ab: f3:15:d0:b7:c8:8b:46:bf:0e:4b:a3:e2:d1:95:bb: 51:df:0a:3f:dc:9c:10:5f:d9:6b:d7:40:25:d6:b5: 87:e5:4a:e4:78:dc:43:52:ff:9e:89:cd:9d:cb:10: 3c:a4:3f:08:48:2d:60:19:06:13:10:36:96:54:e7: 3a:67:61:ad:79:99:30:f9:8a:09:ba:fa:09:a1:05: 8b:7a:c1:fe:f3:3f:84:98:0b:51:53:1d:5b:e6:52: 3f:60:c0:d7:0b:47:c9:b5:3a:1d:db:c9:20:24:3f: c9:1b:ff:2c:63:2f:43:4c:1b:63:44:bd:e9:cf:8d: f8:81:cb:c4:ac:ef:81:21:18:8c:8d:85:6d:50:92: e8:01:64:fc:1c:73:e4:2d:5d:a7:13:ea:25:de:36: a2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:2F:43:6F:4A:CF:97:25:9D:18:13:51:F9:67:49:1E:32:F3:B5:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl X509v3 Authority Key Identifier: keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:2d:16:b1:67:50:3b:2c:f5:44:84:55:ee:ee:37:9c:ea:1f: fb:fa:56:59:f2:3e:7c:c9:49:e0:e5:96:44:81:d5:38:8b:ab: 26:67:71:f7:cf:36:e4:7d:cf:2d:31:2e:93:76:25:ce:7c:4e: 3a:1c:08:31:f9:5f:d4:fe:b3:b1:95:03:4e:72:fb:e7:b3:28: a9:a2:62:65:6e:bd:34:50:ce:d4:e5:7c:6e:cf:19:c2:91:86: 3a:70:b2:47:77:20:9d:00:58:f0:0b:e0:7c:db:b7:84:be:cb: 88:fe:f7:ac:a9:35:f0:c3:a0:f8:40:ca:81:70:b5:8d:10:01: 86:0b:86:f9:f1:9c:ee:0f:6a:b9:58:fc:a6:ae:4b:0e:1d:0e: 46:3e:66:7e:db:0c:b5:3c:a1:cb:64:37:06:66:9e:f3:58:0b: 22:41:e3:f2:19:35:02:cf:17:c2:83:a1:45:60:55:65:1f:ca: ff:6d:6b:8b:c9:7c:56:e8:ac:98:19:5c:75:2f:2a:e1:8d:ee: 87:2d:90:4a:c7:5a:be:af:cd:2a:66:33:d7:88:87:33:5f:01: 56:c8:68:ef:5c:4e:6e:ba:63:52:8a:11:cc:2a:a7:77:36:cc: 7f:ab:ae:29:a9:0e:3f:7b:a1:a2:d1:14:12:fd:cd:cf:70:01: bd:12:f2:d9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEm+x9rMDi/igF4/NYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5MTJlOTEtNDFkMy00ODk0LTg5M2MtOGRlNGY5NDE3 NWY5MB4XDTI1MDUwNDIxMDAwM1oXDTI1MDUwNzIxMDAwMFowLzEtMCsGA1UEAxMk Y2I5NzRiN2MtYzhhZS00ZjJiLTliYjktYjZhODc3ZjYyMTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjU0CMJuZ8rg4j0X/D8p8ViJtKxGaCawNHrRk GuV1EVfnBW/HjmH6KLIaZ6WK3w9GaDOXU3dCrOocStVB5gM2BLi+gpx0uxRQFY++ 1iSzA8bmlKtpY4OyLxPqydAbEfz9SboOavVqNKvzFdC3yItGvw5Lo+LRlbtR3wo/ 3JwQX9lr10Al1rWH5UrkeNxDUv+eic2dyxA8pD8ISC1gGQYTEDaWVOc6Z2GteZkw +YoJuvoJoQWLesH+8z+EmAtRUx1b5lI/YMDXC0fJtTod28kgJD/JG/8sYy9DTBtj RL3pz434gcvErO+BIRiMjYVtUJLoAWT8HHPkLV2nE+ol3jaiyQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCMvQ29Kz5clnRgTUflnSR4y87VSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkx MmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0Zjk0MTc1ZjkvYWE5MTJlOTEtNDFkMy00 ODk0LTg5M2MtOGRlNGY5NDE3NWY5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWE5MTJlOTEtNDFkMy00ODk0LTg5 M2MtOGRlNGY5NDE3NWY5L2FhOTEyZTkxLTQxZDMtNDg5NC04OTNjLThkZTRmOTQx NzVmOS5jcmwwHwYDVR0jBBgwFoAUdlSJQRe9cfU+RIev65h/bbYl5lUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkxMmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0 Zjk0MTc1ZjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBKLRaxZ1A7LPVEhFXu7jec 6h/7+lZZ8j58yUng5ZZEgdU4i6smZ3H3zzbkfc8tMS6TdiXOfE46HAgx+V/U/rOx lQNOcvvnsyipomJlbr00UM7U5XxuzxnCkYY6cLJHdyCdAFjwC+B827eEvsuI/ves qTXww6D4QMqBcLWNEAGGC4b58ZzuD2q5WPymrksOHQ5GPmZ+2wy1PKHLZDcGZp7z WAsiQePyGTUCzxfCg6FFYFVlH8r/bWuLyXxW6KyYGVx1Lyrhje6HLZBKx1q+r80q ZjPXiIczXwFWyGjvXE5uumNSihHMKqd3Nsx/q64pqQ4/e6Gi0RQS/c3PcAG9EvLZ -----END CERTIFICATE-----Generated at Mon May 5 07:00:50 2025 by rpki-client