$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.mft File: af121a54-266e-447b-8176-bfcd1dc7867c.mft (raw, json) Hash identifier: f6cW5F+14asfnu8DZ2ziyadNckVWDAu0q+HEtEEKh+w= Subject key identifier: 33:4D:C9:F0:9A:F5:60:B5:4A:74:C5:B9:86:D2:A8:8B:5B:9B:D9:9B Authority key identifier: 32:75:5C:C5:49:C0:69:09:D2:34:6E:3D:E4:13:8B:5C:5F:FC:E5:BD Certificate issuer: /CN=af121a54-266e-447b-8176-bfcd1dc7867c Certificate serial: 010D0C9F43285849CF10D8A52A75EF06182B1A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.mft Manifest number: 010D0C9F43285845726B239107AE1661CDA1AE17 Signing time: Sat 10 May 2025 17:00:03 +0000 Manifest this update: Sat 10 May 2025 17:00:03 +0000 Manifest next update: Tue 13 May 2025 17:00:00 +0000 Files and hashes: 1: 04922686-2f93-3d22-92a4-035fa202dc47.roa (hash: ZNOZ2Bh3Nt06yMML8PlAZ4ZUTHm4cbZ/sG0ubvDeJKs=) 2: 4165bfa9-bcad-3306-ad9b-3e539ede1d16.roa (hash: xXYjjE4JDhIGBQ45BZcanFYi4XWP3I+52JthujuC6yM=) 3: a92f0c61-a86f-3ac6-af95-e4e2e24ab693.roa (hash: zGnuViKQLMqThFj0lhu9Bd6S6QC3Mms2UaIA35gMCTk=) 4: af121a54-266e-447b-8176-bfcd1dc7867c.crl (hash: w2G8bFQ9NWpzcX8dVsTP40s3ZvyQaHIKxcZ+Qyq32lg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cf:10:d8:a5:2a:75:ef:06:18:2b:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af121a54-266e-447b-8176-bfcd1dc7867c Validity Not Before: May 10 17:00:03 2025 GMT Not After : May 13 17:00:00 2025 GMT Subject: CN=9eb4cd5e-bd78-4552-9b70-462420191921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e1:fa:72:8f:dd:d5:4a:64:b4:2e:7f:1c:34: 4c:e9:8b:d9:f1:f2:77:6e:70:83:60:7b:8d:37:c4: fd:29:34:c1:11:91:a5:7e:23:e9:5d:fb:12:6c:26: af:54:70:2f:3d:15:15:60:37:1f:6b:ed:93:71:e4: a1:25:0a:9b:31:90:06:06:5e:8c:b5:60:a8:53:8b: 97:47:07:a2:e1:fb:20:92:2b:ed:be:d7:5e:12:10: 80:3e:c7:93:04:a7:e7:f1:2b:31:cc:7c:36:4d:c4: 5f:9f:01:95:bc:c5:ff:f3:90:e1:90:83:5b:a8:ee: 5e:16:b8:3b:e7:67:6a:c0:ca:be:d4:de:0e:5a:82: e5:64:7d:90:f7:66:aa:8f:b2:91:16:28:8f:95:ea: 92:fe:b5:f6:1e:0f:0e:34:78:7f:b6:ad:35:75:e4: 4c:15:d3:8f:9d:d5:fc:0d:dc:cf:3a:f6:a5:58:47: 35:35:5d:61:6c:d1:e1:2c:68:fa:94:4d:64:95:53: 74:0d:d2:73:42:18:2e:df:16:55:82:20:82:82:4a: 2f:ae:53:52:02:ec:52:b2:c8:f5:99:0b:3b:d1:3d: 1e:a7:d5:fd:28:9e:53:f1:cc:2c:df:dd:72:1d:65: a1:63:c4:a4:ab:91:06:9c:7f:9c:57:fc:95:e4:ba: 6d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:4D:C9:F0:9A:F5:60:B5:4A:74:C5:B9:86:D2:A8:8B:5B:9B:D9:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.crl X509v3 Authority Key Identifier: keyid:32:75:5C:C5:49:C0:69:09:D2:34:6E:3D:E4:13:8B:5C:5F:FC:E5:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:3c:f9:d9:0e:c1:9a:99:97:39:24:d8:6d:2a:27:f2:d2:48: 16:37:af:5f:65:7c:53:81:1b:02:e9:0a:f4:b5:5a:be:3b:08: cc:22:a3:df:0e:c1:81:a8:f6:8a:73:00:2f:03:07:7f:e1:5e: 55:b8:de:5a:4f:36:f6:2a:bd:1e:eb:3f:8b:71:14:af:0b:26: 38:94:f2:ab:28:99:a2:e2:03:22:ce:ee:ed:4c:fd:34:fa:34: cf:bc:92:ad:5f:09:d5:2a:8d:1a:1e:14:5e:ea:7d:ca:d4:b8: 65:f7:3e:d5:2d:f7:27:a4:ec:9b:42:b7:96:71:69:e6:ab:91: f7:e8:68:9a:af:33:65:a4:01:e6:5e:62:16:e7:51:84:77:32: 07:07:27:5b:96:ba:c1:5c:89:10:46:95:f4:02:ff:e6:d6:22: 68:ff:ed:fb:3d:68:98:d7:53:bd:8d:af:1e:05:0e:a6:69:7f: 3e:2d:77:28:33:bd:1c:14:79:79:23:f2:d5:de:c3:34:2a:d6: 9b:40:fb:76:97:67:be:22:aa:6f:7c:bd:71:f7:f1:ca:62:8f: b4:e3:a1:a5:0f:dd:2a:63:63:33:e9:c6:f1:7b:76:55:e3:14: 24:7b:b9:8e:c1:86:10:81:dd:bd:fa:f8:dd:c4:ec:1c:71:c8: bc:7d:0e:1c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnPENilKnXvBhgrGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWYxMjFhNTQtMjY2ZS00NDdiLTgxNzYtYmZjZDFkYzc4 NjdjMB4XDTI1MDUxMDE3MDAwM1oXDTI1MDUxMzE3MDAwMFowLzEtMCsGA1UEAxMk OWViNGNkNWUtYmQ3OC00NTUyLTliNzAtNDYyNDIwMTkxOTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieH6co/d1UpktC5/HDRM6YvZ8fJ3bnCDYHuN N8T9KTTBEZGlfiPpXfsSbCavVHAvPRUVYDcfa+2TceShJQqbMZAGBl6MtWCoU4uX Rwei4fsgkivtvtdeEhCAPseTBKfn8SsxzHw2TcRfnwGVvMX/85DhkINbqO5eFrg7 52dqwMq+1N4OWoLlZH2Q92aqj7KRFiiPleqS/rX2Hg8ONHh/tq01deRMFdOPndX8 DdzPOvalWEc1NV1hbNHhLGj6lE1klVN0DdJzQhgu3xZVgiCCgkovrlNSAuxSssj1 mQs70T0ep9X9KJ5T8cws391yHWWhY8Skq5EGnH+cV/yV5LptawIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDNNyfCa9WC1SnTFuYbSqItbm9mbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hZjEy MWE1NC0yNjZlLTQ0N2ItODE3Ni1iZmNkMWRjNzg2N2MvYWYxMjFhNTQtMjY2ZS00 NDdiLTgxNzYtYmZjZDFkYzc4NjdjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWYxMjFhNTQtMjY2ZS00NDdiLTgx NzYtYmZjZDFkYzc4NjdjL2FmMTIxYTU0LTI2NmUtNDQ3Yi04MTc2LWJmY2QxZGM3 ODY3Yy5jcmwwHwYDVR0jBBgwFoAUMnVcxUnAaQnSNG495BOLXF/85b0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hZjEyMWE1NC0yNjZlLTQ0N2ItODE3Ni1iZmNk MWRjNzg2N2MuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQABPPnZDsGamZc5JNhtKify 0kgWN69fZXxTgRsC6Qr0tVq+OwjMIqPfDsGBqPaKcwAvAwd/4V5VuN5aTzb2Kr0e 6z+LcRSvCyY4lPKrKJmi4gMizu7tTP00+jTPvJKtXwnVKo0aHhRe6n3K1Lhl9z7V LfcnpOybQreWcWnmq5H36GiarzNlpAHmXmIW51GEdzIHBydblrrBXIkQRpX0Av/m 1iJo/+37PWiY11O9ja8eBQ6maX8+LXcoM70cFHl5I/LV3sM0KtabQPt2l2e+Iqpv fL1x9/HKYo+046GlD90qY2Mz6cbxe3ZV4xQke7mOwYYQgd29+vjdxOwccci8fQ4c -----END CERTIFICATE-----Generated at Sat May 10 21:22:45 2025 by rpki-client