$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft File: af651adf-a795-466a-9b0b-afaaea21402a.mft (raw, json) Hash identifier: McsD4/BNvjgfC0Y7BcA4HpyQodDypS/kOfbf8gP1ge8= Subject key identifier: B5:3B:7C:EB:7B:68:6C:F4:FB:2E:48:49:8D:9A:68:70:A3:32:D2:7F Authority key identifier: 40:AC:EF:9E:70:07:E0:29:23:FB:44:12:B1:D4:51:1E:1F:AA:93:78 Certificate issuer: /CN=af651adf-a795-466a-9b0b-afaaea21402a Certificate serial: 010D0C9F4328584AF414F09EC5C7813F8DCD6900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft Manifest number: 010D0C9F43285849B5E8BF14CBBF349B41F87B85 Signing time: Sat 23 Aug 2025 16:00:08 +0000 Manifest this update: Sat 23 Aug 2025 16:00:08 +0000 Manifest next update: Tue 26 Aug 2025 16:00:00 +0000 Files and hashes: 1: af651adf-a795-466a-9b0b-afaaea21402a.crl (hash: RXQ7fhdpEXiD5rLZpFazKOqom3rc1c8fba6AqxBKoQ0=) 2: caaf1c7c-ecf1-3764-9608-b6a213e3bd7c.roa (hash: rYSnvG1xI1B9VsHhHrYksRRYnjlNGg0zO43O0ISzKvA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f4:14:f0:9e:c5:c7:81:3f:8d:cd:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af651adf-a795-466a-9b0b-afaaea21402a Validity Not Before: Aug 23 16:00:08 2025 GMT Not After : Aug 26 16:00:00 2025 GMT Subject: CN=a8e0828d-bbdb-4a9b-a109-28edea1728fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b2:b6:b6:35:4c:fe:14:d5:42:a8:e8:c4:b2: 32:02:db:26:63:b0:29:50:b6:5b:2b:5d:d5:e5:51: 96:7a:38:4e:c5:89:ae:93:8c:97:44:2e:d9:05:21: c0:9d:b5:c3:b2:d3:82:a5:e8:a8:d4:f2:cd:0b:32: ad:63:f4:9d:fc:01:4a:f0:5b:fc:c1:8c:09:87:f3: 28:b4:9b:79:17:b4:c3:6a:dd:53:e6:61:af:14:6f: d4:86:5d:c5:d6:df:08:17:2e:91:4f:e6:0b:5c:92: 03:98:38:f0:02:04:da:4c:10:90:8e:d8:a9:86:d4: 04:d9:9f:c6:ae:ae:8b:a8:e7:e0:85:47:19:60:5d: 40:67:63:ad:d0:c6:1f:3a:f1:a6:3e:4f:6f:de:e1: ac:51:92:b0:3e:87:a8:2c:e8:b2:46:45:c1:e3:a0: 00:1e:8f:4f:5d:0c:d7:ce:4e:e1:21:d8:eb:e2:f9: dd:b4:2e:6f:13:1c:c3:0e:e5:4b:50:7a:98:66:fc: ee:d4:22:45:86:ba:56:ad:7c:08:48:94:05:d8:d9: 80:df:a0:2a:b1:28:26:d8:43:7b:d1:f2:44:80:e0: 50:31:99:99:26:b4:12:28:03:7e:d9:6f:e6:cd:09: e5:f1:a9:c3:6c:c0:e8:77:df:33:37:ad:df:95:7d: 32:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:3B:7C:EB:7B:68:6C:F4:FB:2E:48:49:8D:9A:68:70:A3:32:D2:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.crl X509v3 Authority Key Identifier: keyid:40:AC:EF:9E:70:07:E0:29:23:FB:44:12:B1:D4:51:1E:1F:AA:93:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:b0:3f:99:66:02:5d:81:2e:2e:20:93:6c:ca:22:fd:84:b2: b4:5c:2b:87:7b:13:af:80:e7:94:b3:e5:c4:14:1b:8c:fe:15: fa:77:bd:25:70:ec:a0:e0:9a:49:18:8e:82:71:e5:f9:e4:cc: 32:86:10:b9:4c:e9:5e:d1:f2:36:25:c5:02:0a:cf:4c:9b:62: 66:ad:1b:39:de:05:05:b3:a8:7b:29:00:3f:d4:29:f7:63:91: ec:e2:43:fa:95:a9:f3:bd:26:5d:78:3a:bc:b4:d8:e4:35:7e: 6c:e4:65:7c:92:66:20:c5:c1:88:6d:b4:8f:28:13:08:34:bd: e7:a8:de:93:5d:46:a4:1d:b6:f5:a2:4d:ee:0b:d3:c7:6c:4e: 9f:1b:65:5e:29:74:cf:ea:14:81:f6:61:97:ee:ca:1e:26:6b: fb:c3:f4:6c:87:bb:6b:16:3c:8c:0d:1e:40:c8:8f:4d:11:65: 51:18:d5:56:11:0d:30:a7:ff:8a:96:ce:80:d4:59:4b:41:a0: c4:bf:ca:e8:e5:44:87:39:0c:e9:c3:41:38:9d:14:25:da:16: 29:d8:ef:08:9e:62:fe:75:30:33:e8:db:4c:ca:99:8a:1b:c0: 0c:56:43:48:0f:9e:e6:27:2a:96:6e:0a:c6:6d:dd:6f:39:c8: 73:f2:97:39 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr0FPCexceBP43NaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY2NTFhZGYtYTc5NS00NjZhLTliMGItYWZhYWVhMjE0 MDJhMB4XDTI1MDgyMzE2MDAwOFoXDTI1MDgyNjE2MDAwMFowLzEtMCsGA1UEAxMk YThlMDgyOGQtYmJkYi00YTliLWExMDktMjhlZGVhMTcyOGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7K2tjVM/hTVQqjoxLIyAtsmY7ApULZbK13V 5VGWejhOxYmuk4yXRC7ZBSHAnbXDstOCpeio1PLNCzKtY/Sd/AFK8Fv8wYwJh/Mo tJt5F7TDat1T5mGvFG/Uhl3F1t8IFy6RT+YLXJIDmDjwAgTaTBCQjtiphtQE2Z/G rq6LqOfghUcZYF1AZ2Ot0MYfOvGmPk9v3uGsUZKwPoeoLOiyRkXB46AAHo9PXQzX zk7hIdjr4vndtC5vExzDDuVLUHqYZvzu1CJFhrpWrXwISJQF2NmA36AqsSgm2EN7 0fJEgOBQMZmZJrQSKAN+2W/mzQnl8anDbMDod98zN63flX0yrwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLU7fOt7aGz0+y5ISY2aaHCjMtJ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hZjY1 MWFkZi1hNzk1LTQ2NmEtOWIwYi1hZmFhZWEyMTQwMmEvYWY2NTFhZGYtYTc5NS00 NjZhLTliMGItYWZhYWVhMjE0MDJhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWY2NTFhZGYtYTc5NS00NjZhLTli MGItYWZhYWVhMjE0MDJhL2FmNjUxYWRmLWE3OTUtNDY2YS05YjBiLWFmYWFlYTIx NDAyYS5jcmwwHwYDVR0jBBgwFoAUQKzvnnAH4Ckj+0QSsdRRHh+qk3gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hZjY1MWFkZi1hNzk1LTQ2NmEtOWIwYi1hZmFh ZWEyMTQwMmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBssD+ZZgJdgS4uIJNsyiL9 hLK0XCuHexOvgOeUs+XEFBuM/hX6d70lcOyg4JpJGI6CceX55MwyhhC5TOle0fI2 JcUCCs9Mm2JmrRs53gUFs6h7KQA/1Cn3Y5Hs4kP6lanzvSZdeDq8tNjkNX5s5GV8 kmYgxcGIbbSPKBMINL3nqN6TXUakHbb1ok3uC9PHbE6fG2VeKXTP6hSB9mGX7soe Jmv7w/Rsh7trFjyMDR5AyI9NEWVRGNVWEQ0wp/+Kls6A1FlLQaDEv8ro5USHOQzp w0E4nRQl2hYp2O8InmL+dTAz6NtMypmKG8AMVkNID57mJyqWbgrGbd1vOchz8pc5 -----END CERTIFICATE-----Generated at Sat Aug 23 23:37:13 2025 by rpki-client