$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.mft File: aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.mft (raw, json) Hash identifier: LbucUxLFvMaNwD08epSAnscRcYVEY1uG4NhyQfWMacA= Subject key identifier: 82:AC:07:78:29:0D:40:5F:A6:2D:1D:1D:99:D6:20:63:6D:C2:C6:C4 Authority key identifier: 76:0D:14:91:F7:E0:4E:1E:FA:F0:00:8F:64:2B:3A:8C:9E:0F:CE:46 Certificate issuer: /CN=aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85 Certificate serial: 010D0C9F43285849A9D7C2E699574C1DA5640580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.mft Manifest number: 010D0C9F4328584073A8497872C4F36DBFDFA6E0 Signing time: Sun 27 Apr 2025 09:00:07 +0000 Manifest this update: Sun 27 Apr 2025 09:00:07 +0000 Manifest next update: Wed 30 Apr 2025 09:00:00 +0000 Files and hashes: 1: 4e7d8a90-78e9-308a-898b-13d40c2410ea.roa (hash: syhLIAJxcer5qIUojO6Tph0UB5IDlpoOdtcln8VWo/A=) 2: 8956d2d3-1e70-322b-bf4b-1f6845bdfd5a.roa (hash: Tgv9XVzyWTgTeQWptdvoLK58sZk6kv1W89VeDeHc1L0=) 3: aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.crl (hash: IXwqMN7rk16fA6EfFtnz/gFsitrK+BQrBZR1ll5gjbw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a9:d7:c2:e6:99:57:4c:1d:a5:64:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85 Validity Not Before: Apr 27 09:00:07 2025 GMT Not After : Apr 30 09:00:00 2025 GMT Subject: CN=d32e5b53-30a8-4b7f-ae43-06e743ff0cce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:db:a9:f5:20:79:ee:30:00:38:8c:83:b2:94: 0c:f4:4a:27:81:71:0d:f1:1b:18:1d:b7:2e:b6:d6: cd:e2:67:af:80:d3:3d:56:2b:df:d3:94:70:08:33: 47:6c:04:c1:22:22:62:1e:53:ab:cd:72:d9:e1:4c: 4a:8b:f0:a1:e9:2e:1b:3a:83:b7:f5:47:c6:18:61: cd:51:35:75:fc:e2:fa:9e:d3:04:c3:fc:b2:a1:f7: 16:db:11:2f:7d:42:c4:4c:c1:ab:b7:27:37:a2:5f: 6f:15:35:63:ce:c8:32:96:d1:77:0d:96:89:a5:7c: e0:51:5e:e7:19:45:8e:93:8c:50:92:4e:ca:e1:cc: 37:cb:b8:81:0e:fc:75:a6:35:2a:5e:31:02:73:f6: 6b:4c:a3:be:2f:28:14:4c:58:4f:44:fd:97:a3:3c: e7:25:79:09:b3:6b:c3:86:19:fb:ec:c6:dd:81:b7: 19:ab:49:ad:11:e7:6b:1a:ab:0e:1b:a0:89:1e:c0: 1b:88:96:44:c6:41:e8:34:c1:bb:65:ae:65:5e:ee: e4:81:11:12:a4:a1:c3:ba:db:d9:47:f0:1f:e2:35: 67:1d:1f:fc:cb:af:5b:95:7d:cb:3a:e3:72:5b:f9: e2:9b:57:0a:df:14:a5:1c:73:e0:94:8f:cb:e6:29: 60:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:AC:07:78:29:0D:40:5F:A6:2D:1D:1D:99:D6:20:63:6D:C2:C6:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.crl X509v3 Authority Key Identifier: keyid:76:0D:14:91:F7:E0:4E:1E:FA:F0:00:8F:64:2B:3A:8C:9E:0F:CE:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:ad:a9:60:cf:dc:51:37:25:33:36:e7:ce:6a:15:52:e7:5c: 22:ec:f2:c0:0e:2f:ee:df:38:1d:7d:c3:d5:0d:76:97:a1:2d: df:77:a0:eb:bf:c2:69:0e:ea:ed:f7:8c:b0:d2:c1:e7:79:9e: 76:39:76:d3:9c:15:e8:b4:72:0d:89:0d:44:9f:fb:66:1a:d8: 31:6b:0f:1f:ef:d3:f9:b2:17:aa:d2:a9:cc:69:14:3c:8b:4e: 91:ca:c5:f4:70:bc:59:3c:32:02:42:85:a6:97:68:ca:0c:81: b7:9d:f7:5a:f8:65:e4:8e:3d:e5:aa:9e:c7:f8:1e:5c:bb:bb: 8c:f1:fd:38:f6:3b:0e:45:11:99:b0:01:2f:92:0b:8d:b4:90: 23:c6:41:d7:8e:df:17:c7:a3:5e:ab:96:e9:60:6f:ad:dc:09: b9:07:78:3d:22:68:dd:9a:67:8d:91:cc:1c:7f:94:0b:10:c0: b1:d0:e2:68:af:d6:16:64:34:88:b1:31:f7:fc:56:5d:94:e9: 34:77:e0:ab:4c:b7:ee:51:60:16:66:69:f3:b1:e8:93:bc:c3: ce:76:55:f0:d3:35:23:26:87:4c:d1:9d:4f:18:2f:a0:ba:25: 23:c1:00:f6:00:b5:a0:6a:b5:e4:0a:65:96:9c:d6:a8:e9:dc: d2:d4:56:24 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmp18LmmVdMHaVkBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmOWEzZmMtM2E4Yy00N2U0LTkxZmEtZDc4MDhiMDZh ZTg1MB4XDTI1MDQyNzA5MDAwN1oXDTI1MDQzMDA5MDAwMFowLzEtMCsGA1UEAxMk ZDMyZTViNTMtMzBhOC00YjdmLWFlNDMtMDZlNzQzZmYwY2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtup9SB57jAAOIyDspQM9EongXEN8RsYHbcu ttbN4mevgNM9Vivf05RwCDNHbATBIiJiHlOrzXLZ4UxKi/Ch6S4bOoO39UfGGGHN UTV1/OL6ntMEw/yyofcW2xEvfULETMGrtyc3ol9vFTVjzsgyltF3DZaJpXzgUV7n GUWOk4xQkk7K4cw3y7iBDvx1pjUqXjECc/ZrTKO+LygUTFhPRP2XozznJXkJs2vD hhn77MbdgbcZq0mtEedrGqsOG6CJHsAbiJZExkHoNMG7Za5lXu7kgRESpKHDutvZ R/Af4jVnHR/8y69blX3LOuNyW/nim1cK3xSlHHPglI/L5ilg3wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIKsB3gpDUBfpi0dHZnWIGNtwsbEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWY5 YTNmYy0zYThjLTQ3ZTQtOTFmYS1kNzgwOGIwNmFlODUvYWFmOWEzZmMtM2E4Yy00 N2U0LTkxZmEtZDc4MDhiMDZhZTg1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFmOWEzZmMtM2E4Yy00N2U0LTkx ZmEtZDc4MDhiMDZhZTg1L2FhZjlhM2ZjLTNhOGMtNDdlNC05MWZhLWQ3ODA4YjA2 YWU4NS5jcmwwHwYDVR0jBBgwFoAUdg0UkffgTh768ACPZCs6jJ4PzkYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWY5YTNmYy0zYThjLTQ3ZTQtOTFmYS1kNzgw OGIwNmFlODUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDJralgz9xRNyUzNufOahVS 51wi7PLADi/u3zgdfcPVDXaXoS3fd6Drv8JpDurt94yw0sHneZ52OXbTnBXotHIN iQ1En/tmGtgxaw8f79P5sheq0qnMaRQ8i06RysX0cLxZPDICQoWml2jKDIG3nfda +GXkjj3lqp7H+B5cu7uM8f049jsORRGZsAEvkguNtJAjxkHXjt8Xx6Neq5bpYG+t 3Am5B3g9ImjdmmeNkcwcf5QLEMCx0OJor9YWZDSIsTH3/FZdlOk0d+CrTLfuUWAW ZmnzseiTvMPOdlXw0zUjJodM0Z1PGC+guiUjwQD2ALWgarXkCmWWnNao6dzS1FYk -----END CERTIFICATE-----Generated at Mon Apr 28 05:31:06 2025 by rpki-client