$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0afa673e-ceeb-4048-b2ab-93cad45814ac.mft File: 0afa673e-ceeb-4048-b2ab-93cad45814ac.mft (raw, json) Hash identifier: jTeiBpE///oPfMErBrJCcOyt+do8ohCJxbnnKANOicU= Subject key identifier: 69:0D:A8:CF:DA:99:03:8C:7F:45:D2:A1:05:C0:A3:21:C7:2E:BE:D5 Authority key identifier: BD:51:2F:48:B7:00:8C:2C:1B:D8:9A:33:4B:76:4E:B4:58:05:D8:67 Certificate issuer: /CN=0afa673e-ceeb-4048-b2ab-93cad45814ac Certificate serial: 010D0C9F4328584A6000DE1987B3CD4CFA052FB0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0afa673e-ceeb-4048-b2ab-93cad45814ac.mft Manifest number: 010D0C9F432858408445775F932E1F42E100771F Signing time: Tue 01 Jul 2025 15:00:03 +0000 Manifest this update: Tue 01 Jul 2025 15:00:03 +0000 Manifest next update: Fri 04 Jul 2025 15:00:00 +0000 Files and hashes: 1: 0afa673e-ceeb-4048-b2ab-93cad45814ac.crl (hash: gi4ReZ5iBxcQt/QeMm3qufK2ZGOtn7BFwn6abHKCYi4=) 2: 0c95cc7e-347c-343b-9a60-43effbd437ce.roa (hash: Nh/OTrYrfurXT5GLmE+EfupFCbT6T4IGBIRWI9n8Pvw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0afa673e-ceeb-4048-b2ab-93cad45814ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0afa673e-ceeb-4048-b2ab-93cad45814ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:60:00:de:19:87:b3:cd:4c:fa:05:2f:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0afa673e-ceeb-4048-b2ab-93cad45814ac Validity Not Before: Jul 1 15:00:03 2025 GMT Not After : Jul 4 15:00:00 2025 GMT Subject: CN=a113eeb4-9398-4bf7-8298-19299453a440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fa:e3:ac:c3:28:45:16:1d:5b:32:4d:d9:d5: db:85:60:f9:50:2e:d0:06:91:56:c5:d1:a0:bb:ba: 03:98:14:ec:25:75:34:c4:12:95:73:41:ec:8a:b0: a4:bf:81:5f:f8:43:c4:a2:42:e5:d5:e1:98:3b:38: fb:16:05:83:48:b6:da:eb:6a:52:0c:01:31:f6:45: 04:9b:50:89:e8:01:4d:d3:c4:3c:e5:54:4e:e9:29: 6f:fb:58:3b:f6:59:63:fc:0b:36:19:bc:aa:1f:03: 1a:40:83:b3:b5:c5:67:21:6d:fc:fd:25:68:02:17: e7:06:a9:85:8a:6d:3d:28:a0:67:2f:46:c5:4f:a4: 28:16:d8:72:aa:c2:94:4c:63:c4:b9:a1:29:ed:7c: f0:7d:1e:d7:6e:0f:5c:ec:12:f0:3e:9b:16:9a:45: 8e:a2:58:52:1f:bd:8b:68:14:02:a5:73:81:ff:c3: fc:2e:7f:fa:0e:1d:b6:41:4f:56:c2:a7:9d:00:5a: bb:65:86:5e:3a:89:57:f6:a6:65:d3:45:4a:6a:c3: d5:53:56:b4:58:56:45:38:e6:2c:3b:41:de:28:9d: 23:37:bc:a8:d5:dc:89:2f:28:8f:ef:96:d1:8e:da: 72:51:b5:30:e3:a0:29:02:b4:c6:74:55:b7:86:27: 5a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:0D:A8:CF:DA:99:03:8C:7F:45:D2:A1:05:C0:A3:21:C7:2E:BE:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0afa673e-ceeb-4048-b2ab-93cad45814ac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0afa673e-ceeb-4048-b2ab-93cad45814ac.crl X509v3 Authority Key Identifier: keyid:BD:51:2F:48:B7:00:8C:2C:1B:D8:9A:33:4B:76:4E:B4:58:05:D8:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:26:44:71:24:c4:51:02:39:e0:6f:24:62:39:de:77:69:a4: f1:49:27:c5:4c:34:5f:ba:5b:f9:14:fe:5f:d3:6d:bd:5c:09: 02:c4:61:c1:73:e7:ed:45:1a:0c:e8:24:73:75:16:34:21:92: 41:5d:f2:1a:6e:dc:25:c6:83:f6:12:09:17:2f:bd:04:d1:b2: a1:4d:5f:5c:3a:2d:81:3a:b1:f2:dd:84:e0:ad:f1:74:d5:f0: 77:b7:53:55:74:18:af:66:c2:00:3b:e0:71:8d:3a:c2:e8:31: e6:c6:54:cc:81:33:9f:9e:cb:75:f0:80:6f:22:21:2d:de:03: fb:95:28:06:00:a9:95:0a:f6:6e:1f:77:ff:0d:8c:67:e7:04: 19:44:17:2e:59:88:6e:91:4c:74:f6:d9:9c:2d:d8:87:99:59: 4f:05:70:31:24:f0:85:2e:50:d3:6b:b1:9a:6f:90:4c:ae:57: ed:70:e6:62:33:9e:2f:7f:39:da:3d:27:71:09:4e:ae:92:32: 4a:e4:be:92:e6:92:29:a5:a0:67:00:de:3e:d0:e0:c6:38:0d: 94:29:77:df:47:a2:11:fa:6d:02:37:0a:93:ef:05:95:13:4a: 79:ac:81:30:a0:18:ac:ab:a8:79:17:30:94:51:ec:06:af:2a: 9e:ef:0e:01 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpgAN4Zh7PNTPoFL7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFmYTY3M2UtY2VlYi00MDQ4LWIyYWItOTNjYWQ0NTgx NGFjMB4XDTI1MDcwMTE1MDAwM1oXDTI1MDcwNDE1MDAwMFowLzEtMCsGA1UEAxMk YTExM2VlYjQtOTM5OC00YmY3LTgyOTgtMTkyOTk0NTNhNDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvrjrMMoRRYdWzJN2dXbhWD5UC7QBpFWxdGg u7oDmBTsJXU0xBKVc0HsirCkv4Ff+EPEokLl1eGYOzj7FgWDSLba62pSDAEx9kUE m1CJ6AFN08Q85VRO6Slv+1g79llj/As2GbyqHwMaQIOztcVnIW38/SVoAhfnBqmF im09KKBnL0bFT6QoFthyqsKUTGPEuaEp7XzwfR7Xbg9c7BLwPpsWmkWOolhSH72L aBQCpXOB/8P8Ln/6Dh22QU9WwqedAFq7ZYZeOolX9qZl00VKasPVU1a0WFZFOOYs O0HeKJ0jN7yo1dyJLyiP75bRjtpyUbUw46ApArTGdFW3hidaRQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGkNqM/amQOMf0XSoQXAoyHHLr7VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYWZh NjczZS1jZWViLTQwNDgtYjJhYi05M2NhZDQ1ODE0YWMvMGFmYTY3M2UtY2VlYi00 MDQ4LWIyYWItOTNjYWQ0NTgxNGFjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGFmYTY3M2UtY2VlYi00MDQ4LWIy YWItOTNjYWQ0NTgxNGFjLzBhZmE2NzNlLWNlZWItNDA0OC1iMmFiLTkzY2FkNDU4 MTRhYy5jcmwwHwYDVR0jBBgwFoAUvVEvSLcAjCwb2JozS3ZOtFgF2GcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYWZhNjczZS1jZWViLTQwNDgtYjJhYi05M2Nh ZDQ1ODE0YWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAFJkRxJMRRAjngbyRiOd53 aaTxSSfFTDRfulv5FP5f0229XAkCxGHBc+ftRRoM6CRzdRY0IZJBXfIabtwlxoP2 EgkXL70E0bKhTV9cOi2BOrHy3YTgrfF01fB3t1NVdBivZsIAO+BxjTrC6DHmxlTM gTOfnst18IBvIiEt3gP7lSgGAKmVCvZuH3f/DYxn5wQZRBcuWYhukUx09tmcLdiH mVlPBXAxJPCFLlDTa7Gab5BMrlftcOZiM54vfznaPSdxCU6ukjJK5L6S5pIppaBn AN4+0ODGOA2UKXffR6IR+m0CNwqT7wWVE0p5rIEwoBisq6h5FzCUUewGryqe7w4B -----END CERTIFICATE-----Generated at Wed Jul 2 00:44:21 2025 by rpki-client