$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/afb3511b-f1b6-44ad-9c36-f6576a5400df.mft File: afb3511b-f1b6-44ad-9c36-f6576a5400df.mft (raw, json) Hash identifier: vljaE2/AO89PGAA92Kqre7xtMeKJkJS7qG6LdW712Ig= Subject key identifier: A1:D5:F0:1E:4C:35:09:FF:92:77:4F:B6:24:47:F5:DE:35:2F:AD:B3 Authority key identifier: 9E:6E:F4:05:1C:0B:C6:DB:08:47:57:A8:A3:7A:7D:59:29:AE:D0:33 Certificate issuer: /CN=afb3511b-f1b6-44ad-9c36-f6576a5400df Certificate serial: 010D0C9F4328584A5D8F82BD8EB8592FF6AE3700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/afb3511b-f1b6-44ad-9c36-f6576a5400df.mft Manifest number: 010D0C9F43285847D8BF5EF10E9318A0E5C7244F Signing time: Mon 30 Jun 2025 18:00:03 +0000 Manifest this update: Mon 30 Jun 2025 18:00:03 +0000 Manifest next update: Wed 02 Jul 2025 18:00:00 +0000 Files and hashes: 1: 0ea62e7e-054c-31d5-bb8d-1005bcac50b2.roa (hash: ctWaE8lhOfCDB7Y+POZwkCXfLTIU9OzURf7cGLcOong=) 2: afb3511b-f1b6-44ad-9c36-f6576a5400df.crl (hash: rbYzal9/wn9ue3+lK8UHrsT6TDPP9wYjKBPqEgr+hGY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/afb3511b-f1b6-44ad-9c36-f6576a5400df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/afb3511b-f1b6-44ad-9c36-f6576a5400df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5d:8f:82:bd:8e:b8:59:2f:f6:ae:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afb3511b-f1b6-44ad-9c36-f6576a5400df Validity Not Before: Jun 30 18:00:03 2025 GMT Not After : Jul 2 18:00:00 2025 GMT Subject: CN=5c44f642-bdb2-4f07-ba36-ccd96066d8b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:69:11:3a:bd:61:52:00:f7:d3:7b:66:2f:e2: ae:bd:69:85:9b:e9:ac:02:49:2e:64:6d:44:e2:f9: 9f:83:48:87:41:1e:e4:33:62:7b:f3:d0:48:cc:bf: 26:6e:75:54:54:b8:ef:83:ef:fa:d8:14:9b:ca:17: 37:3b:e3:38:4a:7b:dc:04:13:76:9d:ec:80:b6:39: a6:db:92:6d:b7:8b:ba:60:f9:86:90:ab:4e:a9:99: 48:db:4e:0d:5b:e9:21:5d:32:8f:00:61:62:96:6a: 12:1f:c8:50:b5:d6:b5:51:24:59:20:20:ff:8d:11: c0:8c:24:5f:3d:4a:e9:ea:28:ed:62:23:49:0e:6f: 65:2b:67:e7:5b:05:3e:fd:a2:b2:d4:78:f3:3d:a8: 9a:3c:d4:f4:58:bf:38:e0:bd:4f:f2:32:8b:c0:06: 70:ca:14:28:40:ab:5a:c8:50:24:3b:17:dc:49:b7: 10:df:94:d1:0f:35:08:9d:63:cd:3e:1e:95:d1:7a: fc:6a:98:a5:69:49:15:a9:9f:26:79:ae:12:9e:d9: 82:cb:4c:3b:24:c9:07:a5:fc:9f:4f:1d:a1:e1:33: 51:53:e8:a8:c3:37:6c:99:87:b4:d6:62:17:b5:9d: cb:ff:e0:f3:18:2a:25:91:b2:8e:67:ed:e9:85:df: 43:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D5:F0:1E:4C:35:09:FF:92:77:4F:B6:24:47:F5:DE:35:2F:AD:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/afb3511b-f1b6-44ad-9c36-f6576a5400df.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/afb3511b-f1b6-44ad-9c36-f6576a5400df.crl X509v3 Authority Key Identifier: keyid:9E:6E:F4:05:1C:0B:C6:DB:08:47:57:A8:A3:7A:7D:59:29:AE:D0:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:27:a7:7c:19:8b:b2:6e:2f:82:e0:fd:71:b9:2a:77:1e:57: 85:64:ab:4e:c0:92:0c:3d:dc:9b:45:55:f4:8f:02:97:bb:07: 7f:45:6c:b9:60:2e:4d:20:65:eb:4a:73:84:f4:ea:fc:cf:e3: f3:80:d1:73:ba:e2:cb:2b:83:7a:d0:a0:7b:20:5d:f5:ef:db: 57:b3:75:d2:d3:c4:33:0e:ab:0d:a7:19:19:6b:ff:b0:66:e6: af:f5:6e:d2:79:23:3b:fe:ba:e2:94:c6:d8:f1:4d:9b:31:4b: 8f:f3:66:93:df:69:dd:62:da:a9:ff:01:98:ec:33:04:90:3e: 1d:1a:00:aa:67:89:f0:81:9b:8f:5f:14:0d:9d:c9:16:d2:c4: e1:fc:1d:2a:5a:02:f8:8a:3d:1e:98:92:87:67:d9:d3:bb:65: 36:8d:e6:49:7f:96:54:76:2b:e3:f6:23:a1:f8:f3:ee:21:56: e2:3d:cf:e9:cc:9e:b4:cb:1d:a7:73:30:37:ff:60:11:e6:09: 7b:d2:fb:e9:51:2d:aa:b9:6d:e7:e5:a8:30:b0:4a:42:a2:50: 66:79:9b:88:89:92:2d:38:24:da:63:64:42:1f:eb:f8:36:e5: 55:2b:f5:9a:72:00:56:c2:5d:a1:9f:70:81:6a:91:e2:02:cf: 27:de:0d:40 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpdj4K9jrhZL/auNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZiMzUxMWItZjFiNi00NGFkLTljMzYtZjY1NzZhNTQw MGRmMB4XDTI1MDYzMDE4MDAwM1oXDTI1MDcwMjE4MDAwMFowLzEtMCsGA1UEAxMk NWM0NGY2NDItYmRiMi00ZjA3LWJhMzYtY2NkOTYwNjZkOGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWkROr1hUgD303tmL+KuvWmFm+msAkkuZG1E 4vmfg0iHQR7kM2J789BIzL8mbnVUVLjvg+/62BSbyhc3O+M4SnvcBBN2neyAtjmm 25Jtt4u6YPmGkKtOqZlI204NW+khXTKPAGFilmoSH8hQtda1USRZICD/jRHAjCRf PUrp6ijtYiNJDm9lK2fnWwU+/aKy1HjzPaiaPNT0WL844L1P8jKLwAZwyhQoQKta yFAkOxfcSbcQ35TRDzUInWPNPh6V0Xr8apilaUkVqZ8mea4SntmCy0w7JMkHpfyf Tx2h4TNRU+iowzdsmYe01mIXtZ3L/+DzGColkbKOZ+3phd9D2wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKHV8B5MNQn/kndPtiRH9d41L62zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZmIz NTExYi1mMWI2LTQ0YWQtOWMzNi1mNjU3NmE1NDAwZGYvYWZiMzUxMWItZjFiNi00 NGFkLTljMzYtZjY1NzZhNTQwMGRmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWZiMzUxMWItZjFiNi00NGFkLTlj MzYtZjY1NzZhNTQwMGRmL2FmYjM1MTFiLWYxYjYtNDRhZC05YzM2LWY2NTc2YTU0 MDBkZi5jcmwwHwYDVR0jBBgwFoAUnm70BRwLxtsIR1eoo3p9WSmu0DMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZmIzNTExYi1mMWI2LTQ0YWQtOWMzNi1mNjU3 NmE1NDAwZGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB9J6d8GYuybi+C4P1xuSp3 HleFZKtOwJIMPdybRVX0jwKXuwd/RWy5YC5NIGXrSnOE9Or8z+PzgNFzuuLLK4N6 0KB7IF3179tXs3XS08QzDqsNpxkZa/+wZuav9W7SeSM7/rrilMbY8U2bMUuP82aT 32ndYtqp/wGY7DMEkD4dGgCqZ4nwgZuPXxQNnckW0sTh/B0qWgL4ij0emJKHZ9nT u2U2jeZJf5ZUdivj9iOh+PPuIVbiPc/pzJ60yx2nczA3/2AR5gl70vvpUS2quW3n 5agwsEpColBmeZuIiZItOCTaY2RCH+v4NuVVK/WacgBWwl2hn3CBapHiAs8n3g1A -----END CERTIFICATE-----Generated at Mon Jun 30 22:30:45 2025 by rpki-client