$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.mft File: af121a54-266e-447b-8176-bfcd1dc7867c.mft (raw, json) Hash identifier: 2nePTO8o1+NVJYOF05gffWLyDSsPCSbloMpJHh+vTF8= Subject key identifier: 6B:68:1D:D5:E6:5D:53:A7:52:E5:CE:7A:44:11:4C:2F:84:AE:1A:DB Authority key identifier: 32:75:5C:C5:49:C0:69:09:D2:34:6E:3D:E4:13:8B:5C:5F:FC:E5:BD Certificate issuer: /CN=af121a54-266e-447b-8176-bfcd1dc7867c Certificate serial: 010D0C9F43285849AD90A6AAF99E0794DB4DD480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.mft Manifest number: 010D0C9F43285845726B239107AE1661CDA1AE0B Signing time: Mon 28 Apr 2025 17:00:03 +0000 Manifest this update: Mon 28 Apr 2025 17:00:03 +0000 Manifest next update: Thu 01 May 2025 17:00:00 +0000 Files and hashes: 1: 04922686-2f93-3d22-92a4-035fa202dc47.roa (hash: ZNOZ2Bh3Nt06yMML8PlAZ4ZUTHm4cbZ/sG0ubvDeJKs=) 2: 4165bfa9-bcad-3306-ad9b-3e539ede1d16.roa (hash: xXYjjE4JDhIGBQ45BZcanFYi4XWP3I+52JthujuC6yM=) 3: a92f0c61-a86f-3ac6-af95-e4e2e24ab693.roa (hash: zGnuViKQLMqThFj0lhu9Bd6S6QC3Mms2UaIA35gMCTk=) 4: af121a54-266e-447b-8176-bfcd1dc7867c.crl (hash: HUqEWVEwZ4IEh6xB8d4hfu092mBwoCCGb2FtElGoPjw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:90:a6:aa:f9:9e:07:94:db:4d:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af121a54-266e-447b-8176-bfcd1dc7867c Validity Not Before: Apr 28 17:00:03 2025 GMT Not After : May 1 17:00:00 2025 GMT Subject: CN=5df852ca-ff31-4ceb-bb7e-8264a7e044c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2d:49:fb:6d:6f:b3:6b:48:85:ec:76:c8:4a: f9:db:6c:32:74:78:9f:bc:15:74:c8:5c:9f:2d:d0: ff:65:c0:2a:ec:a1:7a:cf:b8:2a:61:76:c1:ee:a8: f3:19:f4:5d:6e:66:d2:f8:f5:49:ce:1d:82:ac:db: c5:f2:1a:97:32:3e:c5:4c:64:63:da:ba:45:ba:9f: 7a:09:9c:7b:ae:3f:08:31:53:42:6d:bf:d8:d2:26: 7e:92:65:79:a5:03:3b:9b:53:e7:78:de:05:55:2e: ab:69:32:e0:f3:04:60:d7:2c:47:c3:24:fe:97:ec: 80:d8:af:13:de:b4:95:b0:f8:b1:57:e3:cd:fb:7f: 71:47:14:ed:18:b5:7d:29:79:cc:12:f7:9c:4b:87: 07:86:14:9b:ec:70:2a:9e:c1:49:99:65:f2:10:61: 02:45:38:03:df:58:d7:c3:ce:fd:4a:38:b3:64:8c: 21:ed:72:e5:62:c9:d6:31:7e:f9:92:7d:48:39:fd: 71:78:f8:f9:ab:a3:66:88:6a:eb:b4:eb:fc:ac:62: 62:43:3b:85:d9:d4:38:c0:41:a7:9a:2f:ac:af:c5: aa:74:d6:89:33:00:b6:92:d0:04:3b:c4:6b:ff:d6: 01:c2:c2:36:f2:79:de:c9:b7:b3:b1:0c:10:08:f8: 56:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:68:1D:D5:E6:5D:53:A7:52:E5:CE:7A:44:11:4C:2F:84:AE:1A:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c/af121a54-266e-447b-8176-bfcd1dc7867c.crl X509v3 Authority Key Identifier: keyid:32:75:5C:C5:49:C0:69:09:D2:34:6E:3D:E4:13:8B:5C:5F:FC:E5:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/af121a54-266e-447b-8176-bfcd1dc7867c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:40:6b:be:c9:7a:b9:0d:10:7b:67:b8:99:03:a5:0b:55:cc: a0:dd:37:fc:40:9e:07:bb:ae:6c:a1:47:0e:d9:7f:cc:7a:91: be:85:e9:06:9b:70:3d:49:75:cd:e9:12:37:3d:bf:a8:18:1b: 61:2b:89:21:97:99:2c:2a:60:c6:13:75:ab:ff:08:a1:e6:f3: 7f:bb:0a:7c:98:dd:47:bf:24:f2:73:13:e4:19:25:87:37:ad: 9b:cf:7d:ff:1f:13:c5:6e:5f:47:7c:66:dd:a4:f8:b5:90:e1: 0d:92:67:45:9f:56:82:b3:b0:05:33:38:fa:72:bc:c2:c3:d0: c9:88:d9:26:16:9d:43:80:1f:66:51:10:23:61:4c:84:72:4b: c2:a4:80:b2:f1:29:d4:1a:e3:9a:e8:76:ec:61:d4:9f:58:50: ef:b7:83:c8:84:00:7f:f9:ed:46:92:b7:95:e6:0d:3f:22:fb: 82:a4:b9:65:d5:ac:76:3e:cf:d9:a1:ac:91:b2:cf:5b:c5:b4: 35:96:e8:8a:9c:57:1a:45:30:57:04:e2:6c:d5:ca:ce:2f:b1: 25:7c:1e:51:95:95:d7:dd:12:0b:cd:64:be:88:2c:11:2f:79: e7:d2:c2:b3:f7:ce:d9:19:99:a5:7a:3e:0f:d9:14:ca:45:e8: f3:03:66:29 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmtkKaq+Z4HlNtN1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWYxMjFhNTQtMjY2ZS00NDdiLTgxNzYtYmZjZDFkYzc4 NjdjMB4XDTI1MDQyODE3MDAwM1oXDTI1MDUwMTE3MDAwMFowLzEtMCsGA1UEAxMk NWRmODUyY2EtZmYzMS00Y2ViLWJiN2UtODI2NGE3ZTA0NGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnS1J+21vs2tIhex2yEr522wydHifvBV0yFyf LdD/ZcAq7KF6z7gqYXbB7qjzGfRdbmbS+PVJzh2CrNvF8hqXMj7FTGRj2rpFup96 CZx7rj8IMVNCbb/Y0iZ+kmV5pQM7m1PneN4FVS6raTLg8wRg1yxHwyT+l+yA2K8T 3rSVsPixV+PN+39xRxTtGLV9KXnMEvecS4cHhhSb7HAqnsFJmWXyEGECRTgD31jX w879SjizZIwh7XLlYsnWMX75kn1IOf1xePj5q6NmiGrrtOv8rGJiQzuF2dQ4wEGn mi+sr8WqdNaJMwC2ktAEO8Rr/9YBwsI28nneybezsQwQCPhWGQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGtoHdXmXVOnUuXOekQRTC+ErhrbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hZjEy MWE1NC0yNjZlLTQ0N2ItODE3Ni1iZmNkMWRjNzg2N2MvYWYxMjFhNTQtMjY2ZS00 NDdiLTgxNzYtYmZjZDFkYzc4NjdjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWYxMjFhNTQtMjY2ZS00NDdiLTgx NzYtYmZjZDFkYzc4NjdjL2FmMTIxYTU0LTI2NmUtNDQ3Yi04MTc2LWJmY2QxZGM3 ODY3Yy5jcmwwHwYDVR0jBBgwFoAUMnVcxUnAaQnSNG495BOLXF/85b0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hZjEyMWE1NC0yNjZlLTQ0N2ItODE3Ni1iZmNk MWRjNzg2N2MuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCDQGu+yXq5DRB7Z7iZA6UL Vcyg3Tf8QJ4Hu65soUcO2X/MepG+hekGm3A9SXXN6RI3Pb+oGBthK4khl5ksKmDG E3Wr/wih5vN/uwp8mN1HvyTycxPkGSWHN62bz33/HxPFbl9HfGbdpPi1kOENkmdF n1aCs7AFMzj6crzCw9DJiNkmFp1DgB9mURAjYUyEckvCpICy8SnUGuOa6HbsYdSf WFDvt4PIhAB/+e1GkreV5g0/IvuCpLll1ax2Ps/ZoayRss9bxbQ1luiKnFcaRTBX BOJs1crOL7ElfB5RlZXX3RILzWS+iCwRL3nn0sKz987ZGZmlej4P2RTKRejzA2Yp -----END CERTIFICATE-----Generated at Mon Apr 28 22:41:51 2025 by rpki-client