$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7/4af28314-8fe0-47ff-83fe-2ca111b759a7.mft File: 4af28314-8fe0-47ff-83fe-2ca111b759a7.mft (raw, json) Hash identifier: VjV3E3pJZc5I6cW5gt2a8oggWjpzZV43Zbvp2aScskk= Subject key identifier: 40:23:61:C2:72:72:11:6E:71:22:93:C5:40:2A:CC:52:41:D6:40:11 Authority key identifier: 03:36:A2:35:7E:18:31:11:23:8D:BE:B0:62:AA:60:0A:E5:CC:3C:21 Certificate issuer: /CN=4af28314-8fe0-47ff-83fe-2ca111b759a7 Certificate serial: 010D0C9F4328584A5FC64C181733F556B6DFF5C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7/4af28314-8fe0-47ff-83fe-2ca111b759a7.mft Manifest number: 010D0C9F4328584073A835573EF608B3E9C7F067 Signing time: Tue 01 Jul 2025 13:02:03 +0000 Manifest this update: Tue 01 Jul 2025 13:02:03 +0000 Manifest next update: Thu 03 Jul 2025 01:00:00 +0000 Files and hashes: 1: 4af28314-8fe0-47ff-83fe-2ca111b759a7.crl (hash: 1X/8IXH4CEeyeRx/Zlrk4XvZsw0C6eYWemAhntO+rP8=) 2: 5920a85d-f3d3-380a-b369-162ca959096d.roa (hash: rC0noAWWYcVPYUirDbz9MQvRgHde36RPHHbci0f2/ok=) 3: 5cc512a3-818f-303a-8c08-f103201a9ab0.roa (hash: BWPGBJJJXp+4jbgjhyEGit4WAI7kOleBjwmwpI2r87c=) 4: c6492204-28f2-37fd-b247-ea6f897ad2f3.roa (hash: sbbiEdNaOy3vx2h+VcAtBOctMuuaW5T0RDVMdNTkgq4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7/4af28314-8fe0-47ff-83fe-2ca111b759a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7/4af28314-8fe0-47ff-83fe-2ca111b759a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c6:4c:18:17:33:f5:56:b6:df:f5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4af28314-8fe0-47ff-83fe-2ca111b759a7 Validity Not Before: Jul 1 13:02:03 2025 GMT Not After : Jul 3 01:00:00 2025 GMT Subject: CN=0c413c9c-0f53-417d-82e2-04415a168e9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b5:8a:a7:b8:e7:55:27:2a:87:02:c0:ee:0a: 34:65:5e:f3:f7:55:8f:4c:30:4a:c4:43:d5:9d:b5: 81:8d:af:f3:5f:94:90:97:1c:bb:25:1f:1d:6a:f0: 37:7d:40:7b:2d:f5:be:31:8f:86:c9:bb:ce:83:67: 4e:fc:4f:e5:68:5b:5f:87:09:54:9c:5e:e5:f2:f3: c3:3c:6d:07:e7:6e:25:16:87:ed:0d:94:a2:e4:a3: 87:e6:aa:f6:45:f5:e5:46:1e:6e:7d:b9:e3:04:d9: 27:78:33:16:d7:d8:05:b2:79:3b:f8:11:29:ca:fa: 47:a5:9c:1a:37:2b:3f:97:5d:04:09:f2:99:7f:5c: d2:fd:30:e0:aa:d4:fb:bc:32:f5:b4:a3:48:86:ed: e0:88:cb:eb:82:78:e4:c3:e9:41:6d:a5:9f:10:d8: a6:65:99:c4:4f:2a:10:7a:27:1c:aa:36:ee:ce:dc: 60:a3:3d:26:70:e1:a0:f5:4a:ee:35:76:82:f0:33: 66:cb:e6:ec:47:87:cb:b4:5d:24:c4:87:be:7a:bf: 8e:ed:7b:4f:82:57:95:f6:6f:8d:7e:08:e5:ea:01: 20:8e:08:77:39:07:73:18:d4:8e:2e:72:a7:b9:0c: 5a:fa:9b:2f:8b:fe:e9:1e:f4:0f:2c:64:0e:84:62: 40:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:23:61:C2:72:72:11:6E:71:22:93:C5:40:2A:CC:52:41:D6:40:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7/4af28314-8fe0-47ff-83fe-2ca111b759a7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7/4af28314-8fe0-47ff-83fe-2ca111b759a7.crl X509v3 Authority Key Identifier: keyid:03:36:A2:35:7E:18:31:11:23:8D:BE:B0:62:AA:60:0A:E5:CC:3C:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4af28314-8fe0-47ff-83fe-2ca111b759a7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:8f:1d:4c:71:26:d9:02:53:23:bc:6c:72:37:cc:d9:75:01: 84:25:0e:b8:37:4b:0b:79:34:c8:56:32:ba:a3:44:4d:83:66: fa:cd:8f:88:b3:6b:ba:4b:f0:09:f0:cd:24:d6:db:e5:36:10: 84:35:4c:75:dd:42:96:1f:5e:64:a8:09:00:ec:39:48:9e:e5: 70:3e:d6:e3:84:87:a1:b3:e4:5a:67:6d:30:89:1a:41:5e:ca: c3:0b:d7:92:5b:29:cc:fb:ab:01:34:8a:7a:8c:65:c8:bd:25: a8:db:db:bc:eb:ca:15:b3:9a:47:6a:0e:10:23:41:12:c7:7b: 80:cb:aa:b3:4a:3a:fd:e0:5f:44:b1:29:63:71:64:cc:88:76: a6:bf:74:b7:f6:31:9b:48:d2:d0:e0:b2:7f:f6:9a:1f:bb:5e: 09:bf:e8:e6:8e:68:81:45:d4:3d:72:18:61:ba:b9:8b:55:05: 1e:62:dc:2c:81:e5:79:95:3f:22:b3:aa:d3:de:4f:77:f0:f3: d5:d0:2d:ae:ca:57:d0:0a:2a:7e:7c:12:ca:76:9f:bf:fa:44: e9:77:f9:66:cb:d9:88:cd:bf:bc:92:b6:81:95:d8:ff:95:fd: 7a:83:cf:db:48:f3:55:c6:58:db:6a:39:67:83:c1:da:dd:42: 1d:0f:1e:c6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpfxkwYFzP1Vrbf9cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFmMjgzMTQtOGZlMC00N2ZmLTgzZmUtMmNhMTExYjc1 OWE3MB4XDTI1MDcwMTEzMDIwM1oXDTI1MDcwMzAxMDAwMFowLzEtMCsGA1UEAxMk MGM0MTNjOWMtMGY1My00MTdkLTgyZTItMDQ0MTVhMTY4ZTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7WKp7jnVScqhwLA7go0ZV7z91WPTDBKxEPV nbWBja/zX5SQlxy7JR8davA3fUB7LfW+MY+GybvOg2dO/E/laFtfhwlUnF7l8vPD PG0H524lFoftDZSi5KOH5qr2RfXlRh5ufbnjBNkneDMW19gFsnk7+BEpyvpHpZwa Nys/l10ECfKZf1zS/TDgqtT7vDL1tKNIhu3giMvrgnjkw+lBbaWfENimZZnETyoQ eiccqjbuztxgoz0mcOGg9UruNXaC8DNmy+bsR4fLtF0kxIe+er+O7XtPgleV9m+N fgjl6gEgjgh3OQdzGNSOLnKnuQxa+psvi/7pHvQPLGQOhGJAsQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEAjYcJychFucSKTxUAqzFJB1kARMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80YWYy ODMxNC04ZmUwLTQ3ZmYtODNmZS0yY2ExMTFiNzU5YTcvNGFmMjgzMTQtOGZlMC00 N2ZmLTgzZmUtMmNhMTExYjc1OWE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGFmMjgzMTQtOGZlMC00N2ZmLTgz ZmUtMmNhMTExYjc1OWE3LzRhZjI4MzE0LThmZTAtNDdmZi04M2ZlLTJjYTExMWI3 NTlhNy5jcmwwHwYDVR0jBBgwFoAUAzaiNX4YMREjjb6wYqpgCuXMPCEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80YWYyODMxNC04ZmUwLTQ3ZmYtODNmZS0yY2Ex MTFiNzU5YTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBIjx1McSbZAlMjvGxyN8zZ dQGEJQ64N0sLeTTIVjK6o0RNg2b6zY+Is2u6S/AJ8M0k1tvlNhCENUx13UKWH15k qAkA7DlInuVwPtbjhIehs+RaZ20wiRpBXsrDC9eSWynM+6sBNIp6jGXIvSWo29u8 68oVs5pHag4QI0ESx3uAy6qzSjr94F9EsSljcWTMiHamv3S39jGbSNLQ4LJ/9pof u14Jv+jmjmiBRdQ9chhhurmLVQUeYtwsgeV5lT8is6rT3k938PPV0C2uylfQCip+ fBLKdp+/+kTpd/lmy9mIzb+8kraBldj/lf16g8/bSPNVxljbajlng8Ha3UIdDx7G -----END CERTIFICATE-----Generated at Tue Jul 1 18:26:45 2025 by rpki-client