$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af9c6cb-8307-40ca-9481-3e0e8c06de32/4af9c6cb-8307-40ca-9481-3e0e8c06de32.mft File: 4af9c6cb-8307-40ca-9481-3e0e8c06de32.mft (raw, json) Hash identifier: yArxQrC6inLCKVm92E0rRvXpZNPqrMRabSPnnCEWl64= Subject key identifier: 36:03:3C:4E:4C:3F:F1:AD:BB:93:39:9B:61:D4:17:9D:23:A3:DC:7E Authority key identifier: ED:29:5A:6E:F1:FC:6B:00:64:48:D6:41:1E:AE:57:92:FE:F4:B8:E2 Certificate issuer: /CN=4af9c6cb-8307-40ca-9481-3e0e8c06de32 Certificate serial: 010D0C9F4328584A62ADD29AB1044DB9958B7180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af9c6cb-8307-40ca-9481-3e0e8c06de32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af9c6cb-8307-40ca-9481-3e0e8c06de32/4af9c6cb-8307-40ca-9481-3e0e8c06de32.mft Manifest number: 010D0C9F432858496D107E71F8B7FEC54AB37159 Signing time: Wed 02 Jul 2025 14:00:08 +0000 Manifest this update: Wed 02 Jul 2025 14:00:08 +0000 Manifest next update: Sat 05 Jul 2025 14:00:00 +0000 Files and hashes: 1: 4af9c6cb-8307-40ca-9481-3e0e8c06de32.crl (hash: 5tgvXgvQJHfFZf1AjKPd9UYSLDOFiVighPeKGBzj/Nk=) 2: ed2a1a9a-b826-3dbe-abba-9d3151f6fb92.roa (hash: WgfkJbK0aD5jIOsvxVT5KWiulzoAYitC+reHK0v4Jt8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af9c6cb-8307-40ca-9481-3e0e8c06de32/4af9c6cb-8307-40ca-9481-3e0e8c06de32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af9c6cb-8307-40ca-9481-3e0e8c06de32/4af9c6cb-8307-40ca-9481-3e0e8c06de32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af9c6cb-8307-40ca-9481-3e0e8c06de32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:ad:d2:9a:b1:04:4d:b9:95:8b:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4af9c6cb-8307-40ca-9481-3e0e8c06de32 Validity Not Before: Jul 2 14:00:08 2025 GMT Not After : Jul 5 14:00:00 2025 GMT Subject: CN=044434f9-872a-43af-9b9a-8ae1a13d3ff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c6:e6:61:fa:6b:c9:c6:08:a5:03:4d:02:fc: 31:41:93:8a:95:a0:21:ca:44:cf:40:5a:d8:00:e6: 3f:0f:15:a2:c7:e5:ca:19:de:04:56:1d:f3:43:54: db:c6:94:27:ca:3f:3a:60:18:d8:77:43:16:07:5d: 82:3a:27:da:c9:76:30:72:39:7e:24:a2:f8:4d:34: 57:a8:e4:33:72:65:7e:68:13:15:73:30:fe:d8:cb: 85:0a:53:d8:17:b0:6c:c7:29:7f:1b:0b:d2:a4:28: 6d:ad:52:ce:89:9b:a0:9a:51:62:71:5e:74:e5:02: 6a:a6:64:f0:6e:d6:e4:41:4d:53:79:9a:ed:27:56: 7f:d7:13:30:70:af:f9:1a:d0:60:9d:8c:27:35:e4: d8:9b:98:8b:d3:11:25:32:0b:d7:ed:2f:67:02:49: 7f:4f:3c:f0:fa:42:8e:15:fc:10:b2:69:ca:ff:44: ea:98:22:b6:68:2c:e1:c3:8e:fd:e0:f6:52:bd:67: 57:55:84:8c:93:68:ba:bc:7a:bd:33:8b:f2:59:ab: 5e:e3:2d:54:f5:77:71:f0:28:a3:ae:ed:4c:fc:07: 8f:1e:a3:31:c0:26:14:4c:f2:b2:23:2b:20:56:d2: d0:52:78:d3:50:46:6c:96:99:38:34:0d:6f:6a:20: b5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:03:3C:4E:4C:3F:F1:AD:BB:93:39:9B:61:D4:17:9D:23:A3:DC:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af9c6cb-8307-40ca-9481-3e0e8c06de32/4af9c6cb-8307-40ca-9481-3e0e8c06de32.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af9c6cb-8307-40ca-9481-3e0e8c06de32/4af9c6cb-8307-40ca-9481-3e0e8c06de32.crl X509v3 Authority Key Identifier: keyid:ED:29:5A:6E:F1:FC:6B:00:64:48:D6:41:1E:AE:57:92:FE:F4:B8:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af9c6cb-8307-40ca-9481-3e0e8c06de32.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:8b:ea:17:a7:80:2c:88:c5:d3:6a:f9:57:f9:98:f1:f6:3a: b4:36:df:b8:2f:a6:23:a1:b2:2f:dd:07:ce:54:e6:8a:70:0b: a2:23:34:08:84:27:da:95:6b:94:ea:eb:5f:66:30:33:71:9d: 2c:e4:42:c6:09:84:fa:8b:8d:8d:d8:89:97:2f:10:d6:b3:4d: 46:48:10:dc:70:81:db:00:cb:e2:81:f2:fc:24:06:e2:de:df: 5c:d9:e3:2f:ad:14:1f:e9:28:06:4e:10:d0:e4:2a:21:89:64: d8:4a:3e:52:d2:9c:75:83:1e:e4:03:4e:e3:b0:24:d4:b1:59: b9:4f:43:f5:70:07:35:75:16:ea:80:2a:dd:7c:ce:94:2a:69: 31:51:1b:57:51:cb:21:d1:9b:d1:71:e5:df:3f:b7:4b:a6:1f: a9:cc:d0:e0:69:a1:c4:25:69:1a:a8:4f:9d:c8:85:98:8f:4c: 67:a4:6b:35:3a:3e:36:3a:5e:e5:92:cd:f0:06:59:99:bc:26: 43:dc:43:24:e4:04:db:05:14:d2:f6:e1:74:bb:cb:d1:c2:0e: 6c:1d:cb:99:92:12:4d:3a:27:01:c8:8e:72:50:41:be:c0:b9: e3:23:0a:ea:2e:79:4b:61:f7:65:f2:88:f9:bf:79:15:f6:81: 92:5c:d5:f5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpirdKasQRNuZWLcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFmOWM2Y2ItODMwNy00MGNhLTk0ODEtM2UwZThjMDZk ZTMyMB4XDTI1MDcwMjE0MDAwOFoXDTI1MDcwNTE0MDAwMFowLzEtMCsGA1UEAxMk MDQ0NDM0ZjktODcyYS00M2FmLTliOWEtOGFlMWExM2QzZmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcbmYfprycYIpQNNAvwxQZOKlaAhykTPQFrY AOY/DxWix+XKGd4EVh3zQ1TbxpQnyj86YBjYd0MWB12COifayXYwcjl+JKL4TTRX qOQzcmV+aBMVczD+2MuFClPYF7Bsxyl/GwvSpChtrVLOiZugmlFicV505QJqpmTw btbkQU1TeZrtJ1Z/1xMwcK/5GtBgnYwnNeTYm5iL0xElMgvX7S9nAkl/Tzzw+kKO FfwQsmnK/0TqmCK2aCzhw4794PZSvWdXVYSMk2i6vHq9M4vyWate4y1U9Xdx8Cij ru1M/AePHqMxwCYUTPKyIysgVtLQUnjTUEZslpk4NA1vaiC1TQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDYDPE5MP/Gtu5M5m2HUF50jo9x+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80YWY5 YzZjYi04MzA3LTQwY2EtOTQ4MS0zZTBlOGMwNmRlMzIvNGFmOWM2Y2ItODMwNy00 MGNhLTk0ODEtM2UwZThjMDZkZTMyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNGFmOWM2Y2ItODMwNy00MGNhLTk0 ODEtM2UwZThjMDZkZTMyLzRhZjljNmNiLTgzMDctNDBjYS05NDgxLTNlMGU4YzA2 ZGUzMi5jcmwwHwYDVR0jBBgwFoAU7SlabvH8awBkSNZBHq5Xkv70uOIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80YWY5YzZjYi04MzA3LTQwY2EtOTQ4MS0zZTBl OGMwNmRlMzIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCAi+oXp4AsiMXTavlX+Zjx 9jq0Nt+4L6YjobIv3QfOVOaKcAuiIzQIhCfalWuU6utfZjAzcZ0s5ELGCYT6i42N 2ImXLxDWs01GSBDccIHbAMvigfL8JAbi3t9c2eMvrRQf6SgGThDQ5CohiWTYSj5S 0px1gx7kA07jsCTUsVm5T0P1cAc1dRbqgCrdfM6UKmkxURtXUcsh0ZvRceXfP7dL ph+pzNDgaaHEJWkaqE+dyIWYj0xnpGs1Oj42Ol7lks3wBlmZvCZD3EMk5ATbBRTS 9uF0u8vRwg5sHcuZkhJNOicByI5yUEG+wLnjIwrqLnlLYfdl8oj5v3kV9oGSXNX1 -----END CERTIFICATE-----Generated at Thu Jul 3 01:11:06 2025 by rpki-client