$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/8afd8895-11e9-43d4-bb9f-64042b1d28f6.mft File: 8afd8895-11e9-43d4-bb9f-64042b1d28f6.mft (raw, json) Hash identifier: 6PoH2MSvhdZUsu3d4k6AXubHICTy+QwXjyu0fOarhbE= Subject key identifier: 09:83:B3:7B:01:D3:7C:2E:84:63:F9:03:C8:67:EA:9E:8A:68:27:50 Authority key identifier: 18:95:AE:26:00:EB:E6:A0:60:EA:19:10:7B:59:96:7A:EE:E2:58:17 Certificate issuer: /CN=8afd8895-11e9-43d4-bb9f-64042b1d28f6 Certificate serial: 010D0C9F4328584A60B3995CD95FDA3BC8A8EB80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/8afd8895-11e9-43d4-bb9f-64042b1d28f6.mft Manifest number: 010D0C9F43285842B36BC077BBB98B70A9A449CC Signing time: Tue 01 Jul 2025 21:00:08 +0000 Manifest this update: Tue 01 Jul 2025 21:00:08 +0000 Manifest next update: Fri 04 Jul 2025 21:00:00 +0000 Files and hashes: 1: 032fc1b0-b9ac-3c54-a6cb-bdb642ac00b0.roa (hash: pHarQL6aX1SENF2qwdFgzg7PlRPw5ETBr8J5ZPLjfJ0=) 2: 8afd8895-11e9-43d4-bb9f-64042b1d28f6.crl (hash: qpQldMKMPNi/2OMsT0XJB9oZOwzu6Mp6CAVbhkTE7CA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/8afd8895-11e9-43d4-bb9f-64042b1d28f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/8afd8895-11e9-43d4-bb9f-64042b1d28f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:60:b3:99:5c:d9:5f:da:3b:c8:a8:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8afd8895-11e9-43d4-bb9f-64042b1d28f6 Validity Not Before: Jul 1 21:00:08 2025 GMT Not After : Jul 4 21:00:00 2025 GMT Subject: CN=564bf50a-83f2-4f00-bb1d-0b7e385425b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:80:ef:91:c9:7e:1f:67:2a:d1:e4:fd:0c:ee: ad:0e:e6:a4:ea:50:fd:f7:95:4e:a7:93:6d:bd:8c: 1c:cb:a2:cc:7a:dc:e7:3a:04:25:7c:d4:da:91:8a: d4:f6:ee:d2:47:c3:71:2b:c2:b6:ea:47:bf:45:b6: 4f:c4:0d:ed:91:28:27:1f:ac:c0:f8:3f:c5:c3:a5: ec:b3:61:ff:98:62:6f:52:7a:cb:ad:26:f3:90:51: 73:ac:9e:8f:4d:1d:18:b5:78:f3:38:36:82:00:c1: df:65:b5:8a:b9:62:9b:8d:63:09:94:34:31:82:e4: 63:4a:0b:8a:4e:5d:c9:00:f3:7b:eb:6e:84:cd:3d: 84:30:8c:6a:7e:02:57:39:86:48:4e:e3:6a:a9:f3: 89:0b:96:32:57:a9:e4:8d:bb:36:c9:8f:dc:b0:3f: 0a:b9:d1:f2:fc:13:d6:8a:a6:c0:fa:12:65:6c:ad: 08:d9:d4:73:e5:97:b4:da:32:14:ae:d0:e7:80:2a: e7:cb:76:34:e6:df:f3:52:69:4c:56:e9:f3:26:ca: e7:0c:79:b0:d5:d6:3e:eb:a0:c0:30:37:b1:4e:ad: e3:49:03:4d:ff:ef:ff:eb:c2:7a:47:55:68:b3:10: 35:66:e3:96:38:59:b9:aa:76:eb:ff:36:50:67:c6: fc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:83:B3:7B:01:D3:7C:2E:84:63:F9:03:C8:67:EA:9E:8A:68:27:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/8afd8895-11e9-43d4-bb9f-64042b1d28f6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/8afd8895-11e9-43d4-bb9f-64042b1d28f6.crl X509v3 Authority Key Identifier: keyid:18:95:AE:26:00:EB:E6:A0:60:EA:19:10:7B:59:96:7A:EE:E2:58:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:00:f3:e8:dc:c8:ed:bb:ee:08:cd:12:88:fa:7c:b5:6a:fd: 93:29:46:42:d5:9c:77:54:6a:30:78:21:54:d8:d3:26:19:46: 5d:86:c0:1f:c6:c0:df:8d:6c:90:10:62:7f:32:75:14:46:76: 3f:36:ae:01:28:ca:30:c9:c9:aa:89:56:c2:8f:7d:77:d6:b7: 93:dd:e2:3e:21:dd:6e:a3:8e:11:f6:d5:0c:b6:0b:ca:98:1c: ab:81:24:df:ec:be:02:91:73:90:c0:d7:01:bc:e0:de:4c:b9: 4e:64:13:2c:1b:53:17:c7:e3:03:50:2c:52:0b:22:ca:b8:71: 67:09:54:98:eb:4e:1a:42:ad:ef:ed:02:29:a1:30:da:25:ec: 08:1f:18:a7:a6:cb:18:8d:fc:a2:9b:ed:d2:f7:d3:06:6f:d8: 16:2d:5e:f4:bb:96:dd:14:3d:b4:39:69:32:76:42:e6:19:ba: 72:be:82:32:1a:af:02:1a:61:f3:f7:ef:47:98:12:0e:d4:9a: b4:47:1f:ae:ca:35:24:20:c6:a3:c1:bb:e9:f9:63:7b:d0:5b: 36:8a:39:74:66:20:c7:02:fe:5b:8d:b3:ea:b2:ae:a5:70:0b: 31:db:59:04:75:31:80:75:2c:a7:9a:c6:a8:af:7c:4e:48:82: ac:4b:ae:a0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpgs5lc2V/aO8io64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFmZDg4OTUtMTFlOS00M2Q0LWJiOWYtNjQwNDJiMWQy OGY2MB4XDTI1MDcwMTIxMDAwOFoXDTI1MDcwNDIxMDAwMFowLzEtMCsGA1UEAxMk NTY0YmY1MGEtODNmMi00ZjAwLWJiMWQtMGI3ZTM4NTQyNWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIDvkcl+H2cq0eT9DO6tDuak6lD995VOp5Nt vYwcy6LMetznOgQlfNTakYrU9u7SR8NxK8K26ke/RbZPxA3tkSgnH6zA+D/Fw6Xs s2H/mGJvUnrLrSbzkFFzrJ6PTR0YtXjzODaCAMHfZbWKuWKbjWMJlDQxguRjSguK Tl3JAPN7626EzT2EMIxqfgJXOYZITuNqqfOJC5YyV6nkjbs2yY/csD8KudHy/BPW iqbA+hJlbK0I2dRz5Ze02jIUrtDngCrny3Y05t/zUmlMVunzJsrnDHmw1dY+66DA MDexTq3jSQNN/+//68J6R1VosxA1ZuOWOFm5qnbr/zZQZ8b8TQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAmDs3sB03wuhGP5A8hn6p6KaCdQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84YWZk ODg5NS0xMWU5LTQzZDQtYmI5Zi02NDA0MmIxZDI4ZjYvOGFmZDg4OTUtMTFlOS00 M2Q0LWJiOWYtNjQwNDJiMWQyOGY2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOGFmZDg4OTUtMTFlOS00M2Q0LWJi OWYtNjQwNDJiMWQyOGY2LzhhZmQ4ODk1LTExZTktNDNkNC1iYjlmLTY0MDQyYjFk MjhmNi5jcmwwHwYDVR0jBBgwFoAUGJWuJgDr5qBg6hkQe1mWeu7iWBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi84YWZkODg5NS0xMWU5LTQzZDQtYmI5Zi02NDA0 MmIxZDI4ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBgAPPo3Mjtu+4IzRKI+ny1 av2TKUZC1Zx3VGoweCFU2NMmGUZdhsAfxsDfjWyQEGJ/MnUURnY/Nq4BKMowycmq iVbCj3131reT3eI+Id1uo44R9tUMtgvKmByrgSTf7L4CkXOQwNcBvODeTLlOZBMs G1MXx+MDUCxSCyLKuHFnCVSY604aQq3v7QIpoTDaJewIHxinpssYjfyim+3S99MG b9gWLV70u5bdFD20OWkydkLmGbpyvoIyGq8CGmHz9+9HmBIO1Jq0Rx+uyjUkIMaj wbvp+WN70Fs2ijl0ZiDHAv5bjbPqsq6lcAsx21kEdTGAdSynmsaor3xOSIKsS66g -----END CERTIFICATE-----Generated at Tue Jul 1 23:25:46 2025 by rpki-client