$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft File: af651adf-a795-466a-9b0b-afaaea21402a.mft (raw, json) Hash identifier: v+gVeMMnNRkJ8kTCMTxTOpotjB26+GPEcLG+nQBX9fw= Subject key identifier: EB:08:E6:21:DB:CA:F9:2A:67:0A:BE:39:79:98:10:6D:C8:01:BC:10 Authority key identifier: 40:AC:EF:9E:70:07:E0:29:23:FB:44:12:B1:D4:51:1E:1F:AA:93:78 Certificate issuer: /CN=af651adf-a795-466a-9b0b-afaaea21402a Certificate serial: 010D0C9F4328584A3BD3CA95D78E8AA7160D5780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft Manifest number: 010D0C9F43285849B5E8BF14CBBF349B41F87B41 Signing time: Wed 18 Jun 2025 16:00:07 +0000 Manifest this update: Wed 18 Jun 2025 16:00:07 +0000 Manifest next update: Sat 21 Jun 2025 16:00:00 +0000 Files and hashes: 1: af651adf-a795-466a-9b0b-afaaea21402a.crl (hash: egDGEMXjeNcYfBbaN/XrdERFL4arQ8TjMhIY4B+2PME=) 2: caaf1c7c-ecf1-3764-9608-b6a213e3bd7c.roa (hash: qbrZTQiUExZt2lhbQoRkA2jZsCUDpqixCjP1j9vZ4mY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:d3:ca:95:d7:8e:8a:a7:16:0d:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af651adf-a795-466a-9b0b-afaaea21402a Validity Not Before: Jun 18 16:00:07 2025 GMT Not After : Jun 21 16:00:00 2025 GMT Subject: CN=3fceabdd-9681-421b-88a7-6c08c6609453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:54:59:e5:9b:01:7c:9d:74:93:80:e0:33:5f: ca:4b:d2:57:16:bc:95:7e:91:fe:08:50:da:93:3c: d6:99:c8:6c:a4:03:03:3b:df:49:f9:1e:3b:63:d7: be:47:d0:68:fa:2b:5b:32:f6:b9:e1:06:99:d6:9e: 64:17:a6:05:1e:4b:9d:42:1a:0a:4c:7e:11:b4:43: ec:2c:2e:9c:ca:b1:6a:4f:cb:19:fd:ae:3f:e4:bd: 58:67:90:74:ee:3c:e1:5f:8e:80:b7:fb:68:ec:74: d8:e3:45:44:66:c4:5d:46:8b:0a:2e:74:b4:98:0f: 4e:ab:74:f6:ad:f1:ad:f8:6d:67:56:39:b5:e9:0b: 57:c3:5f:af:50:00:5d:c8:59:fc:dc:60:e5:3e:86: 27:10:dc:2c:73:8f:ef:ab:6d:de:1f:fd:16:ce:0d: 47:b3:7f:cc:e7:55:e6:4e:9a:d1:4d:68:91:ed:5b: 5a:64:1a:41:78:36:8d:20:42:b5:d1:1d:42:51:b2: 4d:a5:94:f8:f7:e9:51:77:31:e0:72:d9:7f:c7:f3: b9:b5:8e:ee:10:35:73:c0:c2:8d:ca:8c:0f:43:f3: 9a:53:29:53:c2:0e:98:2e:8b:3b:83:02:dd:da:30: f8:35:40:7c:3e:a5:34:00:b5:da:ea:87:b2:53:ff: 0a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:08:E6:21:DB:CA:F9:2A:67:0A:BE:39:79:98:10:6D:C8:01:BC:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.crl X509v3 Authority Key Identifier: keyid:40:AC:EF:9E:70:07:E0:29:23:FB:44:12:B1:D4:51:1E:1F:AA:93:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:2b:1c:e9:d1:22:71:38:4f:2b:ab:dc:19:b3:53:0e:b8:89: 94:97:53:f0:dd:7a:60:02:07:36:97:26:e7:2d:91:3b:b1:ff: 95:77:c1:47:91:ff:d7:1f:3e:d3:7c:19:34:52:16:58:99:61: fa:76:1f:ed:c5:8f:ad:eb:26:74:be:24:3d:9a:43:96:4c:3a: 68:30:b1:82:11:19:00:4a:6b:e5:f8:a8:0a:b8:74:ea:e2:6f: ee:cb:67:e7:b1:a1:3e:1d:98:c3:ee:3b:ad:de:f7:b2:0b:2c: dd:d5:9b:05:ca:44:0b:2d:3c:fd:ff:f0:89:f8:4e:1b:92:47: d8:c5:5b:f7:6a:6a:c2:0a:95:c7:d6:26:b1:e5:c2:05:f8:07: 0b:48:1f:77:b5:ec:7f:5c:e2:d1:35:1e:a6:ab:7e:71:b5:ba: b8:e1:97:6e:ec:ea:ed:fb:15:c7:c0:90:b0:42:8b:7b:52:94: 60:e9:95:1c:46:90:93:05:b0:98:f1:c8:fb:5f:e4:ca:6f:56: 62:70:20:0f:33:a6:17:c4:4f:64:4e:d4:1a:08:35:2b:b2:91: 2c:c2:8c:35:a7:93:61:92:05:1c:4d:dd:f2:b3:36:fa:7d:41: 6e:4e:6c:45:57:27:9f:f0:dd:f3:5e:b8:bc:91:29:47:f3:c8: ff:55:25:92 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEo708qV146KpxYNV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY2NTFhZGYtYTc5NS00NjZhLTliMGItYWZhYWVhMjE0 MDJhMB4XDTI1MDYxODE2MDAwN1oXDTI1MDYyMTE2MDAwMFowLzEtMCsGA1UEAxMk M2ZjZWFiZGQtOTY4MS00MjFiLTg4YTctNmMwOGM2NjA5NDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1RZ5ZsBfJ10k4DgM1/KS9JXFryVfpH+CFDa kzzWmchspAMDO99J+R47Y9e+R9Bo+itbMva54QaZ1p5kF6YFHkudQhoKTH4RtEPs LC6cyrFqT8sZ/a4/5L1YZ5B07jzhX46At/to7HTY40VEZsRdRosKLnS0mA9Oq3T2 rfGt+G1nVjm16QtXw1+vUABdyFn83GDlPoYnENwsc4/vq23eH/0Wzg1Hs3/M51Xm TprRTWiR7VtaZBpBeDaNIEK10R1CUbJNpZT49+lRdzHgctl/x/O5tY7uEDVzwMKN yowPQ/OaUylTwg6YLos7gwLd2jD4NUB8PqU0ALXa6oeyU/8KJQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOsI5iHbyvkqZwq+OXmYEG3IAbwQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hZjY1 MWFkZi1hNzk1LTQ2NmEtOWIwYi1hZmFhZWEyMTQwMmEvYWY2NTFhZGYtYTc5NS00 NjZhLTliMGItYWZhYWVhMjE0MDJhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWY2NTFhZGYtYTc5NS00NjZhLTli MGItYWZhYWVhMjE0MDJhL2FmNjUxYWRmLWE3OTUtNDY2YS05YjBiLWFmYWFlYTIx NDAyYS5jcmwwHwYDVR0jBBgwFoAUQKzvnnAH4Ckj+0QSsdRRHh+qk3gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hZjY1MWFkZi1hNzk1LTQ2NmEtOWIwYi1hZmFh ZWEyMTQwMmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCLKxzp0SJxOE8rq9wZs1MO uImUl1Pw3XpgAgc2lybnLZE7sf+Vd8FHkf/XHz7TfBk0UhZYmWH6dh/txY+t6yZ0 viQ9mkOWTDpoMLGCERkASmvl+KgKuHTq4m/uy2fnsaE+HZjD7jut3veyCyzd1ZsF ykQLLTz9//CJ+E4bkkfYxVv3amrCCpXH1iax5cIF+AcLSB93tex/XOLRNR6mq35x tbq44Zdu7Ort+xXHwJCwQot7UpRg6ZUcRpCTBbCY8cj7X+TKb1ZicCAPM6YXxE9k TtQaCDUrspEswow1p5NhkgUcTd3yszb6fUFuTmxFVyef8N3zXri8kSlH88j/VSWS -----END CERTIFICATE-----Generated at Thu Jun 19 09:17:49 2025 by rpki-client