$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.mft File: af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.mft (raw, json) Hash identifier: nuYoONOG1S3LSM48L2KV5s3Z7bOIjtEK9sJuqbIH5R0= Subject key identifier: 5C:30:06:26:53:B2:4B:A4:80:A8:52:0F:CA:54:92:4D:48:4F:DF:FB Authority key identifier: B2:BB:D7:45:02:8D:36:D6:C2:33:7F:4D:48:8C:43:47:21:60:07:BF Certificate issuer: /CN=af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3 Certificate serial: 010D0C9F43285849ADE9F93A00E2CCA9B1710E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.mft Manifest number: 010D0C9F4328584073A827BBB999690E7E00A2FB Signing time: Mon 28 Apr 2025 20:00:03 +0000 Manifest this update: Mon 28 Apr 2025 20:00:03 +0000 Manifest next update: Thu 01 May 2025 20:00:00 +0000 Files and hashes: 1: 1c87c1c9-331a-3524-9f44-1bc4e33059d8.roa (hash: 77oAbjLqQAgFDmGJo/Jd4425ldgsLDJdnVARChboCxY=) 2: 51fde72b-c272-3d7a-83d9-5542508c0f35.roa (hash: sN+H5P59AKTMEF7ximMJrgIurITfpHWonGAUus8H39s=) 3: 897074be-6233-32df-a4ab-14bb263538b9.roa (hash: D98HAoWvbMp8o0aYR5xKg9NOGggdHJVWerbrshJJLgM=) 4: af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.crl (hash: cnYk3cvydbPHy+O5bpKsjFIIMSkMUPOTnIDZRbX1rO4=) 5: f9874a22-9a02-398f-86a6-217e95468149.roa (hash: k15ZxBVpFFA6gM6QORHSQ5VmXicJMNZ0UsS/Sv7E30Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:e9:f9:3a:00:e2:cc:a9:b1:71:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3 Validity Not Before: Apr 28 20:00:03 2025 GMT Not After : May 1 20:00:00 2025 GMT Subject: CN=c5dc5fb0-7f3a-429c-add3-cc0f2ec9ab43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8a:b2:d7:41:e1:f9:c7:94:3a:f2:78:45:18: cd:7d:9f:46:ba:a0:d1:90:e4:a0:27:00:07:b4:5e: 69:da:1e:e3:9e:02:aa:bf:6c:30:1c:a7:38:cf:f7: 98:05:6b:66:0f:c3:f8:ff:b6:29:bc:84:27:14:bc: c0:a6:d1:c2:6d:31:c3:fb:dd:ab:e0:89:47:a6:75: b5:60:da:59:c6:51:08:1a:01:17:66:b6:e0:90:24: fc:7f:8b:8e:58:ec:56:2c:63:e0:c6:fa:9a:1e:76: 41:40:1c:b5:0f:ae:04:64:8d:7d:0e:96:f2:32:ec: 44:67:31:aa:c0:74:7b:2a:0d:37:16:50:c0:4b:3e: 75:ee:4a:df:f2:5c:32:59:c9:c6:a8:ec:19:21:fb: e2:e7:a8:be:4a:58:36:cd:ff:0f:c2:97:2c:ea:7b: 90:b1:c0:30:7d:b0:84:ef:fc:62:e6:6b:97:7c:c7: 10:60:55:10:63:d4:c7:5e:77:7e:28:c0:a4:57:35: 4c:84:92:be:f9:5d:ce:61:64:19:45:7b:79:20:b8: 20:2f:b4:f1:5c:80:b4:fd:19:92:c8:62:e3:6d:e7: 8b:4f:bc:83:6f:f8:e3:c9:6e:e0:72:38:d6:32:ac: fb:25:12:9c:5b:ac:05:72:4f:7c:08:2e:c8:ad:46: 67:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:30:06:26:53:B2:4B:A4:80:A8:52:0F:CA:54:92:4D:48:4F:DF:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.crl X509v3 Authority Key Identifier: keyid:B2:BB:D7:45:02:8D:36:D6:C2:33:7F:4D:48:8C:43:47:21:60:07:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:fd:56:a8:7a:ac:79:1d:21:48:3e:8d:86:2f:ac:6c:ea:6f: a2:43:f8:65:35:8d:a6:33:1f:d1:b3:da:84:ee:c2:9c:13:80: e0:36:c4:e6:bf:b4:a0:cd:8c:fb:2c:28:f2:28:08:8b:2f:13: 19:ec:be:28:f3:ae:04:fe:07:6f:cd:3d:91:57:4f:71:cc:b2: 43:8a:fc:72:d7:63:eb:f4:e7:f8:e4:2b:81:23:dc:2d:b2:f3: 04:16:4e:ec:b5:9b:94:78:03:40:18:17:24:73:dd:18:a4:34: 4a:7b:18:60:6e:31:2c:03:c6:a1:be:27:41:4e:c9:fd:89:a6: 1f:22:ea:65:44:bb:9c:06:73:2f:b4:de:05:4d:32:74:b0:5b: 62:8e:d1:b2:3a:b1:eb:ae:ce:c6:ef:fd:be:74:2e:e0:46:c8: f4:f6:89:47:8f:60:b2:d8:bd:00:35:1c:0b:4f:d5:d1:7a:3f: fa:3e:07:91:d5:7d:2d:78:dd:38:32:1b:eb:ea:93:86:b8:aa: 78:84:87:f5:fc:36:d8:bf:14:41:3c:c8:b5:29:33:b3:2e:35: 04:f8:a9:39:56:fe:6a:e0:54:7b:a0:c3:f6:e7:05:7e:69:f2: ff:5c:28:b0:93:be:f4:9e:eb:a1:ae:b8:c7:64:23:fe:c7:44: 41:79:a6:43 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmt6fk6AOLMqbFxDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY0YmM1YzMtOWVmNC00ZGEzLTlmY2YtNGVjNmRhYmJm YmMzMB4XDTI1MDQyODIwMDAwM1oXDTI1MDUwMTIwMDAwMFowLzEtMCsGA1UEAxMk YzVkYzVmYjAtN2YzYS00MjljLWFkZDMtY2MwZjJlYzlhYjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoqy10Hh+ceUOvJ4RRjNfZ9GuqDRkOSgJwAH tF5p2h7jngKqv2wwHKc4z/eYBWtmD8P4/7YpvIQnFLzAptHCbTHD+92r4IlHpnW1 YNpZxlEIGgEXZrbgkCT8f4uOWOxWLGPgxvqaHnZBQBy1D64EZI19DpbyMuxEZzGq wHR7Kg03FlDASz517krf8lwyWcnGqOwZIfvi56i+Slg2zf8Pwpcs6nuQscAwfbCE 7/xi5muXfMcQYFUQY9THXnd+KMCkVzVMhJK++V3OYWQZRXt5ILggL7TxXIC0/RmS yGLjbeeLT7yDb/jjyW7gcjjWMqz7JRKcW6wFck98CC7IrUZnpQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFwwBiZTskukgKhSD8pUkk1IT9/7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZjRi YzVjMy05ZWY0LTRkYTMtOWZjZi00ZWM2ZGFiYmZiYzMvYWY0YmM1YzMtOWVmNC00 ZGEzLTlmY2YtNGVjNmRhYmJmYmMzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWY0YmM1YzMtOWVmNC00ZGEzLTlm Y2YtNGVjNmRhYmJmYmMzL2FmNGJjNWMzLTllZjQtNGRhMy05ZmNmLTRlYzZkYWJi ZmJjMy5jcmwwHwYDVR0jBBgwFoAUsrvXRQKNNtbCM39NSIxDRyFgB78wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZjRiYzVjMy05ZWY0LTRkYTMtOWZjZi00ZWM2 ZGFiYmZiYzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCo/Vaoeqx5HSFIPo2GL6xs 6m+iQ/hlNY2mMx/Rs9qE7sKcE4DgNsTmv7SgzYz7LCjyKAiLLxMZ7L4o864E/gdv zT2RV09xzLJDivxy12Pr9Of45CuBI9wtsvMEFk7stZuUeANAGBckc90YpDRKexhg bjEsA8ahvidBTsn9iaYfIuplRLucBnMvtN4FTTJ0sFtijtGyOrHrrs7G7/2+dC7g Rsj09olHj2Cy2L0ANRwLT9XRej/6PgeR1X0teN04Mhvr6pOGuKp4hIf1/DbYvxRB PMi1KTOzLjUE+Kk5Vv5q4FR7oMP25wV+afL/XCiwk770nuuhrrjHZCP+x0RBeaZD -----END CERTIFICATE-----Generated at Tue Apr 29 17:06:29 2025 by rpki-client