$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/afb3511b-f1b6-44ad-9c36-f6576a5400df.mft File: afb3511b-f1b6-44ad-9c36-f6576a5400df.mft (raw, json) Hash identifier: VFkxcNopUPbet6Bwxo7Oikw2ixsoLPMZL1Tn9uiE8dQ= Subject key identifier: 23:E2:10:C5:85:09:2A:F2:25:70:A3:FA:D6:99:2D:F3:57:0F:8E:E1 Authority key identifier: 9E:6E:F4:05:1C:0B:C6:DB:08:47:57:A8:A3:7A:7D:59:29:AE:D0:33 Certificate issuer: /CN=afb3511b-f1b6-44ad-9c36-f6576a5400df Certificate serial: 010D0C9F43285849CC63F091A24B5AA57CCAA800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/afb3511b-f1b6-44ad-9c36-f6576a5400df.mft Manifest number: 010D0C9F43285847D8BF5EF10E9318A0E5C7241B Signing time: Fri 09 May 2025 18:00:03 +0000 Manifest this update: Fri 09 May 2025 18:00:03 +0000 Manifest next update: Sun 11 May 2025 18:00:00 +0000 Files and hashes: 1: 0ea62e7e-054c-31d5-bb8d-1005bcac50b2.roa (hash: ctWaE8lhOfCDB7Y+POZwkCXfLTIU9OzURf7cGLcOong=) 2: afb3511b-f1b6-44ad-9c36-f6576a5400df.crl (hash: C8Q/rZrtZ9fJpSBEN+axsJ7wG7zL1IGkeOjH++JFSXw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/afb3511b-f1b6-44ad-9c36-f6576a5400df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/afb3511b-f1b6-44ad-9c36-f6576a5400df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cc:63:f0:91:a2:4b:5a:a5:7c:ca:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afb3511b-f1b6-44ad-9c36-f6576a5400df Validity Not Before: May 9 18:00:03 2025 GMT Not After : May 11 18:00:00 2025 GMT Subject: CN=fa08cfdd-12a1-4a2b-912c-7b76bdfdd0b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e9:c0:87:e3:7f:09:f4:36:06:16:6e:d9:b4: 17:80:ca:bf:c6:60:fc:39:dd:2d:50:70:52:c9:98: 94:0c:6f:39:4b:64:96:ea:90:98:ca:6d:e6:75:92: 27:a4:92:d7:ab:bb:05:6f:35:9f:91:26:5d:70:0a: fa:a3:da:b3:0a:b9:30:fd:88:7f:84:66:a3:ad:4a: c8:10:0e:7e:6d:66:35:2b:84:c9:19:c4:dd:98:90: 56:0f:58:09:87:9e:25:37:e5:0e:da:c0:66:2f:09: b1:9a:b9:ea:c7:a1:43:ae:ed:5f:ef:5b:d2:65:7b: 98:d4:34:92:1e:6a:be:18:40:8f:40:b8:95:0e:c6: e9:86:95:79:26:31:4d:14:e7:e3:4c:2b:4e:d6:03: cf:ee:75:c8:92:90:41:d2:3b:65:bc:d4:5b:e9:c7: 29:79:6d:e5:a4:16:40:78:97:03:77:68:54:93:5f: da:5b:ef:94:ba:18:d2:9a:d3:7a:a6:e6:b8:24:72: 78:94:88:0b:a6:ba:6c:12:72:ed:f0:c5:ae:7c:d3: 1e:42:8e:b3:65:30:d7:e4:8e:14:14:73:4a:4f:f9: 34:90:43:63:29:a8:30:05:48:11:38:ed:de:a6:df: b6:67:bf:52:60:3c:05:5b:49:f4:28:4f:0b:1c:0d: 09:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E2:10:C5:85:09:2A:F2:25:70:A3:FA:D6:99:2D:F3:57:0F:8E:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/afb3511b-f1b6-44ad-9c36-f6576a5400df.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/afb3511b-f1b6-44ad-9c36-f6576a5400df.crl X509v3 Authority Key Identifier: keyid:9E:6E:F4:05:1C:0B:C6:DB:08:47:57:A8:A3:7A:7D:59:29:AE:D0:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:42:12:e3:1d:55:51:a0:62:52:37:30:30:d3:75:76:53:ce: 2c:ba:8a:6d:0d:d2:f1:db:4b:d6:62:46:63:91:0f:ef:96:ec: 12:9a:98:3a:1c:28:4f:3c:99:0f:94:09:02:df:9f:00:5c:1d: d4:22:35:d5:85:27:bf:d2:de:e1:29:66:c9:9d:cc:a0:43:58: 61:9c:bf:c8:f2:3e:b1:9d:26:16:68:3d:0b:ed:86:26:1a:28: 46:4f:cf:a5:fe:80:62:bc:c3:9b:45:c8:e7:ad:f5:53:d9:99: 41:64:72:cc:f8:0b:74:bf:4b:14:8c:9b:8a:fe:1f:e5:8b:b0: 9b:fc:b0:b7:4a:61:9e:22:b1:53:35:d6:8c:cc:d6:df:4f:9f: 54:62:7b:c0:0a:de:43:be:23:78:b7:d8:21:bf:3a:0a:35:45: 50:ed:33:52:04:07:76:cb:f5:da:c0:11:17:e6:17:10:37:eb: 26:bb:21:93:ff:fa:20:01:4d:04:d0:f5:d1:1f:71:c9:7b:02: 6c:ab:20:3b:13:95:de:2a:c8:77:e9:0f:2d:3a:62:8f:11:c7: 91:f4:9f:a5:57:7a:fd:1a:6b:8b:4d:f8:5f:95:7e:82:b4:24: 36:3f:9f:73:71:c7:b0:46:a1:cf:f3:1e:3a:a7:e0:86:f3:b8: 21:79:7d:01 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnMY/CRoktapXzKqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZiMzUxMWItZjFiNi00NGFkLTljMzYtZjY1NzZhNTQw MGRmMB4XDTI1MDUwOTE4MDAwM1oXDTI1MDUxMTE4MDAwMFowLzEtMCsGA1UEAxMk ZmEwOGNmZGQtMTJhMS00YTJiLTkxMmMtN2I3NmJkZmRkMGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOnAh+N/CfQ2BhZu2bQXgMq/xmD8Od0tUHBS yZiUDG85S2SW6pCYym3mdZInpJLXq7sFbzWfkSZdcAr6o9qzCrkw/Yh/hGajrUrI EA5+bWY1K4TJGcTdmJBWD1gJh54lN+UO2sBmLwmxmrnqx6FDru1f71vSZXuY1DSS Hmq+GECPQLiVDsbphpV5JjFNFOfjTCtO1gPP7nXIkpBB0jtlvNRb6ccpeW3lpBZA eJcDd2hUk1/aW++UuhjSmtN6pua4JHJ4lIgLprpsEnLt8MWufNMeQo6zZTDX5I4U FHNKT/k0kENjKagwBUgROO3ept+2Z79SYDwFW0n0KE8LHA0JAQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCPiEMWFCSryJXCj+taZLfNXD47hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZmIz NTExYi1mMWI2LTQ0YWQtOWMzNi1mNjU3NmE1NDAwZGYvYWZiMzUxMWItZjFiNi00 NGFkLTljMzYtZjY1NzZhNTQwMGRmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWZiMzUxMWItZjFiNi00NGFkLTlj MzYtZjY1NzZhNTQwMGRmL2FmYjM1MTFiLWYxYjYtNDRhZC05YzM2LWY2NTc2YTU0 MDBkZi5jcmwwHwYDVR0jBBgwFoAUnm70BRwLxtsIR1eoo3p9WSmu0DMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZmIzNTExYi1mMWI2LTQ0YWQtOWMzNi1mNjU3 NmE1NDAwZGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCFQhLjHVVRoGJSNzAw03V2 U84suoptDdLx20vWYkZjkQ/vluwSmpg6HChPPJkPlAkC358AXB3UIjXVhSe/0t7h KWbJncygQ1hhnL/I8j6xnSYWaD0L7YYmGihGT8+l/oBivMObRcjnrfVT2ZlBZHLM +At0v0sUjJuK/h/li7Cb/LC3SmGeIrFTNdaMzNbfT59UYnvACt5DviN4t9ghvzoK NUVQ7TNSBAd2y/XawBEX5hcQN+smuyGT//ogAU0E0PXRH3HJewJsqyA7E5XeKsh3 6Q8tOmKPEceR9J+lV3r9GmuLTfhflX6CtCQ2P59zccewRqHP8x46p+CG87gheX0B -----END CERTIFICATE-----Generated at Sat May 10 17:55:16 2025 by rpki-client