$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.mft File: aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.mft (raw, json) Hash identifier: JwifdW8KbxevKj8roVe4SmNMfytR7idvwhx0cwwkALw= Subject key identifier: 2F:A9:EE:60:ED:33:B8:A2:A1:D4:3F:48:3E:B6:9F:08:FF:61:24:D1 Authority key identifier: 76:0D:14:91:F7:E0:4E:1E:FA:F0:00:8F:64:2B:3A:8C:9E:0F:CE:46 Certificate issuer: /CN=aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85 Certificate serial: 010D0C9F4328584ABB6EC4AB3F476426E30B7840 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.mft Manifest number: 010D0C9F4328584073A8497872C4F36DBFDFA746 Signing time: Sun 03 Aug 2025 09:00:03 +0000 Manifest this update: Sun 03 Aug 2025 09:00:03 +0000 Manifest next update: Wed 06 Aug 2025 09:00:00 +0000 Files and hashes: 1: 4e7d8a90-78e9-308a-898b-13d40c2410ea.roa (hash: P9QeY+VUdPEuz9g/mNzoQrlcwYRlWO5teM6zuEztoMQ=) 2: aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.crl (hash: Fw4H8Eo0nSBYiqsUKhS5esMSyxYGEA3S92AOU11bpqg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bb:6e:c4:ab:3f:47:64:26:e3:0b:78:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85 Validity Not Before: Aug 3 09:00:03 2025 GMT Not After : Aug 6 09:00:00 2025 GMT Subject: CN=61a662ff-9398-4ad7-8d2f-c0c8a60d5928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b6:0f:db:ee:8b:0c:53:02:82:55:9a:cc:9b: 0a:e3:66:45:26:98:36:9c:ef:ed:e1:66:3d:b8:15: 51:6b:61:b0:f5:27:99:51:12:94:c1:10:f1:6d:c2: 58:88:af:19:ac:3d:37:b1:42:bd:a5:de:91:82:78: 1a:20:71:1d:b4:95:54:1d:fa:8a:6b:f1:67:f1:0d: ea:74:57:11:5a:0b:b9:2f:89:5b:e4:29:af:a4:cc: b0:40:50:20:ca:61:6d:a8:40:09:91:a3:fa:82:f4: 5f:3f:81:f0:35:f4:0c:09:b6:70:1e:71:dd:e8:f7: cd:4a:45:a3:9f:1f:f0:c5:4b:50:e8:35:e7:f8:6e: 40:d2:1c:84:a2:2b:7c:e1:22:e9:ae:d0:be:00:0a: 62:1f:17:92:c7:00:f9:93:03:d0:e3:4c:12:3c:06: 65:0d:c8:8b:a4:2c:98:39:aa:34:8b:cb:81:47:e3: 43:41:17:48:b5:ef:b1:b0:46:32:b9:a2:97:91:95: 0f:11:18:7a:31:98:7d:f6:37:fd:bb:94:d9:2a:7a: 8b:6f:f0:da:6e:3d:79:90:42:5c:93:0c:91:fb:e1: f1:f8:b9:b1:21:28:8c:a8:b8:dd:1d:f3:0c:aa:d2: 4c:1d:89:b1:47:fa:c5:cb:ed:ba:fb:cd:4c:7e:17: 44:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A9:EE:60:ED:33:B8:A2:A1:D4:3F:48:3E:B6:9F:08:FF:61:24:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.crl X509v3 Authority Key Identifier: keyid:76:0D:14:91:F7:E0:4E:1E:FA:F0:00:8F:64:2B:3A:8C:9E:0F:CE:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:23:b2:0e:e3:cb:99:04:6c:f8:4e:4b:3e:54:a1:29:20:3b: 58:c3:6c:27:db:08:1f:aa:72:01:d9:0c:b8:04:65:f5:6b:17: 74:74:6c:f7:d9:b5:57:7b:17:77:28:f7:66:e9:f7:67:08:84: e5:5e:9f:da:f2:92:ad:da:92:27:69:20:97:93:88:2a:a0:e9: d1:9f:d7:c6:48:bd:b6:a1:0e:c0:e7:98:5d:7b:90:62:8c:60: 16:c8:d6:33:0f:21:a0:f4:82:07:75:8e:d6:e9:2c:6a:62:a7: f7:0d:57:d5:f0:31:e9:4a:dc:77:b4:ab:0a:18:53:53:fe:0b: 7b:99:04:43:16:df:f9:e3:34:1d:13:04:79:1b:fa:94:aa:f7: 7d:67:c3:6d:15:5e:61:e1:34:ef:04:de:cf:e5:6e:df:7a:55: b6:b0:aa:89:5a:1c:9b:1f:78:86:d7:4f:09:15:d9:63:d7:1d: 31:c5:cf:ac:b2:f4:de:99:95:f3:43:3c:07:6e:9b:2e:21:39: 21:94:f8:61:4e:38:8c:42:fe:4c:4d:f0:47:3c:06:fa:f8:ad: f2:b6:61:39:61:b6:07:75:7d:12:54:1c:6d:e6:f7:1f:d8:b9: c3:2b:90:fc:e1:47:2c:93:39:14:f4:79:31:d5:9c:37:a6:bc: a1:a6:6c:b4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEq7bsSrP0dkJuMLeEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmOWEzZmMtM2E4Yy00N2U0LTkxZmEtZDc4MDhiMDZh ZTg1MB4XDTI1MDgwMzA5MDAwM1oXDTI1MDgwNjA5MDAwMFowLzEtMCsGA1UEAxMk NjFhNjYyZmYtOTM5OC00YWQ3LThkMmYtYzBjOGE2MGQ1OTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLYP2+6LDFMCglWazJsK42ZFJpg2nO/t4WY9 uBVRa2Gw9SeZURKUwRDxbcJYiK8ZrD03sUK9pd6RgngaIHEdtJVUHfqKa/Fn8Q3q dFcRWgu5L4lb5CmvpMywQFAgymFtqEAJkaP6gvRfP4HwNfQMCbZwHnHd6PfNSkWj nx/wxUtQ6DXn+G5A0hyEoit84SLprtC+AApiHxeSxwD5kwPQ40wSPAZlDciLpCyY Oao0i8uBR+NDQRdIte+xsEYyuaKXkZUPERh6MZh99jf9u5TZKnqLb/Dabj15kEJc kwyR++Hx+LmxISiMqLjdHfMMqtJMHYmxR/rFy+26+81MfhdEGQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFC+p7mDtM7iiodQ/SD62nwj/YSTRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWY5 YTNmYy0zYThjLTQ3ZTQtOTFmYS1kNzgwOGIwNmFlODUvYWFmOWEzZmMtM2E4Yy00 N2U0LTkxZmEtZDc4MDhiMDZhZTg1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFmOWEzZmMtM2E4Yy00N2U0LTkx ZmEtZDc4MDhiMDZhZTg1L2FhZjlhM2ZjLTNhOGMtNDdlNC05MWZhLWQ3ODA4YjA2 YWU4NS5jcmwwHwYDVR0jBBgwFoAUdg0UkffgTh768ACPZCs6jJ4PzkYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWY5YTNmYy0zYThjLTQ3ZTQtOTFmYS1kNzgw OGIwNmFlODUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDCI7IO48uZBGz4Tks+VKEp IDtYw2wn2wgfqnIB2Qy4BGX1axd0dGz32bVXexd3KPdm6fdnCITlXp/a8pKt2pIn aSCXk4gqoOnRn9fGSL22oQ7A55hde5BijGAWyNYzDyGg9IIHdY7W6SxqYqf3DVfV 8DHpStx3tKsKGFNT/gt7mQRDFt/54zQdEwR5G/qUqvd9Z8NtFV5h4TTvBN7P5W7f elW2sKqJWhybH3iG108JFdlj1x0xxc+ssvTemZXzQzwHbpsuITkhlPhhTjiMQv5M TfBHPAb6+K3ytmE5YbYHdX0SVBxt5vcf2LnDK5D84UcskzkU9Hkx1Zw3pryhpmy0 -----END CERTIFICATE-----Generated at Mon Aug 4 11:00:18 2025 by rpki-client