$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft File: af651adf-a795-466a-9b0b-afaaea21402a.mft (raw, json) Hash identifier: Hq1akYfMagP/v3nroul7eZaF/czCZFj3pBOhNhXX9Tc= Subject key identifier: 8F:05:5D:15:26:2F:B8:2C:DE:C6:A8:D6:83:CC:71:A1:CA:6A:25:0B Authority key identifier: 40:AC:EF:9E:70:07:E0:29:23:FB:44:12:B1:D4:51:1E:1F:AA:93:78 Certificate issuer: /CN=af651adf-a795-466a-9b0b-afaaea21402a Certificate serial: 010D0C9F4328584A62E95753BF357889220E6D60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft Manifest number: 010D0C9F43285849B5E8BF14CBBF349B41F87B4F Signing time: Wed 02 Jul 2025 16:00:03 +0000 Manifest this update: Wed 02 Jul 2025 16:00:03 +0000 Manifest next update: Sat 05 Jul 2025 16:00:00 +0000 Files and hashes: 1: af651adf-a795-466a-9b0b-afaaea21402a.crl (hash: X9a0a0HzshArzaSrZKf40zhFEld7+nWVSQ5nPzdNC5E=) 2: caaf1c7c-ecf1-3764-9608-b6a213e3bd7c.roa (hash: qbrZTQiUExZt2lhbQoRkA2jZsCUDpqixCjP1j9vZ4mY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:e9:57:53:bf:35:78:89:22:0e:6d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af651adf-a795-466a-9b0b-afaaea21402a Validity Not Before: Jul 2 16:00:03 2025 GMT Not After : Jul 5 16:00:00 2025 GMT Subject: CN=809de1f8-68a4-4ca1-be78-bd2bb011c4db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:75:0e:23:6c:d9:d4:92:00:23:8a:d9:a1:22: 14:5d:48:4b:2d:7f:d7:64:93:b0:03:b9:97:9b:8b: 4b:6e:99:2e:db:1c:1e:b4:f2:96:06:67:98:a9:a8: 3f:a3:3c:75:5e:63:ac:78:44:2f:f7:6d:47:aa:3e: 66:cb:e4:b7:60:04:c6:8d:80:69:59:31:59:ac:b4: ac:86:fc:e7:b8:b7:3b:45:cd:1a:aa:06:5a:13:67: c6:d3:38:5c:67:ed:00:4c:df:33:4e:05:b6:c8:15: 94:e8:3d:b1:06:d6:5f:f9:c8:c0:9b:d0:5e:bc:d2: b3:88:d1:0b:99:da:79:a0:97:f0:ea:30:78:18:96: 08:f4:fa:cf:77:ae:9b:40:b0:c6:9a:99:83:f5:53: 25:cd:85:2f:94:4b:ca:76:05:ac:f0:98:98:e9:df: fa:2e:8d:58:dd:f3:87:d2:d0:93:8a:48:e1:10:a5: 69:11:73:dd:c6:8d:45:52:6d:3a:7f:93:f1:a5:7b: 56:09:b2:c1:8c:d0:e5:d2:c3:37:ae:70:4e:c5:91: 68:cb:a5:c4:79:cf:29:86:07:8d:00:70:03:b2:de: b0:ee:ec:24:2c:17:16:90:ce:6a:84:2c:e5:9c:da: 1a:f2:99:45:48:75:c1:2d:88:54:c2:83:c6:ab:a8: 1d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:05:5D:15:26:2F:B8:2C:DE:C6:A8:D6:83:CC:71:A1:CA:6A:25:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.crl X509v3 Authority Key Identifier: keyid:40:AC:EF:9E:70:07:E0:29:23:FB:44:12:B1:D4:51:1E:1F:AA:93:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:a0:74:cd:37:0f:e4:f8:d7:c3:b1:39:29:85:61:2d:7b:37: e6:53:f0:a5:c0:36:27:ae:36:44:b7:bc:76:bc:6a:da:88:3a: 19:3e:b3:a1:d4:bf:9d:39:90:7d:44:33:3c:94:41:42:80:5e: 6a:a7:54:47:e9:96:9a:db:47:fc:cb:8a:ad:78:0f:ed:90:95: d3:4b:7a:6b:86:13:ad:9a:ea:5d:6a:a5:5e:d5:ed:6b:55:b0: 85:01:a4:d9:17:3d:77:c8:3c:62:48:87:a1:d4:3d:15:3e:13: ca:62:60:cf:3c:6b:2c:74:01:ff:94:cc:d7:05:e4:89:dd:c7: 94:8f:00:04:d5:ec:e2:07:67:64:24:58:f4:67:a0:27:82:38: 0c:d6:f4:bb:47:cc:1a:9c:4e:f5:35:48:33:ec:bc:17:bd:03: 79:1d:50:40:fc:23:66:ff:c0:d8:b0:75:aa:cb:6b:3a:05:13: 0d:64:70:db:d8:de:1e:c0:c3:f1:a3:85:8c:9e:18:6a:52:79: 30:70:fb:de:8b:55:0b:01:d8:c4:5b:05:01:f4:fa:b9:26:0b: 64:06:71:18:0b:fe:cf:5a:e4:55:6c:53:ba:94:1c:1a:be:7c: 5d:af:f1:eb:df:0e:ed:a9:ac:f5:8b:fb:97:af:fe:75:c3:f2: 49:32:5e:3d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpi6VdTvzV4iSIObWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY2NTFhZGYtYTc5NS00NjZhLTliMGItYWZhYWVhMjE0 MDJhMB4XDTI1MDcwMjE2MDAwM1oXDTI1MDcwNTE2MDAwMFowLzEtMCsGA1UEAxMk ODA5ZGUxZjgtNjhhNC00Y2ExLWJlNzgtYmQyYmIwMTFjNGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXUOI2zZ1JIAI4rZoSIUXUhLLX/XZJOwA7mX m4tLbpku2xwetPKWBmeYqag/ozx1XmOseEQv921Hqj5my+S3YATGjYBpWTFZrLSs hvznuLc7Rc0aqgZaE2fG0zhcZ+0ATN8zTgW2yBWU6D2xBtZf+cjAm9BevNKziNEL mdp5oJfw6jB4GJYI9PrPd66bQLDGmpmD9VMlzYUvlEvKdgWs8JiY6d/6Lo1Y3fOH 0tCTikjhEKVpEXPdxo1FUm06f5PxpXtWCbLBjNDl0sM3rnBOxZFoy6XEec8phgeN AHADst6w7uwkLBcWkM5qhCzlnNoa8plFSHXBLYhUwoPGq6gdlwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFI8FXRUmL7gs3sao1oPMcaHKaiULMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hZjY1 MWFkZi1hNzk1LTQ2NmEtOWIwYi1hZmFhZWEyMTQwMmEvYWY2NTFhZGYtYTc5NS00 NjZhLTliMGItYWZhYWVhMjE0MDJhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWY2NTFhZGYtYTc5NS00NjZhLTli MGItYWZhYWVhMjE0MDJhL2FmNjUxYWRmLWE3OTUtNDY2YS05YjBiLWFmYWFlYTIx NDAyYS5jcmwwHwYDVR0jBBgwFoAUQKzvnnAH4Ckj+0QSsdRRHh+qk3gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hZjY1MWFkZi1hNzk1LTQ2NmEtOWIwYi1hZmFh ZWEyMTQwMmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAXoHTNNw/k+NfDsTkphWEt ezfmU/ClwDYnrjZEt7x2vGraiDoZPrOh1L+dOZB9RDM8lEFCgF5qp1RH6Zaa20f8 y4qteA/tkJXTS3prhhOtmupdaqVe1e1rVbCFAaTZFz13yDxiSIeh1D0VPhPKYmDP PGssdAH/lMzXBeSJ3ceUjwAE1eziB2dkJFj0Z6AngjgM1vS7R8wanE71NUgz7LwX vQN5HVBA/CNm/8DYsHWqy2s6BRMNZHDb2N4ewMPxo4WMnhhqUnkwcPvei1ULAdjE WwUB9Pq5JgtkBnEYC/7PWuRVbFO6lBwavnxdr/Hr3w7tqaz1i/uXr/51w/JJMl49 -----END CERTIFICATE-----Generated at Thu Jul 3 13:17:50 2025 by rpki-client