$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft File: 0af21de0-2cae-45f7-b42c-9598c4271ef0.mft (raw, json) Hash identifier: 5UkmzlK5Ky3VhKYkATSRsk/cI7tAKz/khvLYNjoBc2w= Subject key identifier: 57:34:6E:95:C7:D9:58:4C:74:4E:B6:DB:B7:0C:B9:41:01:0F:23:D6 Authority key identifier: 91:47:0C:DB:DF:CB:1A:CF:B9:BE:2F:82:97:00:77:8C:96:E5:2D:64 Certificate issuer: /CN=0af21de0-2cae-45f7-b42c-9598c4271ef0 Certificate serial: 010D0C9F4328584A6BFC15AC84FDDC77381451C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft Manifest number: 010D0C9F4328584200D9C72B5C6113CC8D1607D7 Signing time: Sat 05 Jul 2025 22:00:08 +0000 Manifest this update: Sat 05 Jul 2025 22:00:08 +0000 Manifest next update: Tue 08 Jul 2025 22:00:00 +0000 Files and hashes: 1: 0af21de0-2cae-45f7-b42c-9598c4271ef0.crl (hash: sn1gpLVPKFTk7/oxsM3VBAHxhSybQrxAlzFU7QI2TRE=) 2: 4552c21f-8d05-3fbb-9242-1de377b08109.roa (hash: 3pMGbUQzVZyldf5LpYAQeB6oOULLlXoZu0KUN3PGkZQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6b:fc:15:ac:84:fd:dc:77:38:14:51:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0af21de0-2cae-45f7-b42c-9598c4271ef0 Validity Not Before: Jul 5 22:00:08 2025 GMT Not After : Jul 8 22:00:00 2025 GMT Subject: CN=850e89c8-351e-4989-a47d-ccf30e605bf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:46:47:48:41:16:bc:6c:b7:63:4d:5b:6e:b4: fa:be:93:a1:b9:c7:1a:b9:5b:0f:76:6a:cf:c7:9d: b3:3a:66:9e:52:69:6a:a9:bf:ab:7b:10:6e:17:65: e1:38:4d:98:6d:26:7b:f2:3d:80:3e:f2:52:12:e9: 9a:af:9a:1a:88:b3:ef:90:e3:af:a8:37:38:0a:31: d6:3a:87:80:f7:ad:fd:a8:a0:82:22:0f:df:97:61: 29:52:b4:9a:ef:15:9f:9b:66:9c:66:7b:21:0a:35: f9:ed:29:d7:2c:02:e1:80:6e:72:66:6c:81:e6:a1: 1e:96:85:d9:76:d8:21:d6:c5:a6:21:9d:d3:f7:50: b0:6d:30:4e:32:7b:85:4c:34:c6:12:a1:d7:47:65: 5a:a7:37:0c:06:7d:22:5e:3d:79:fe:38:7a:ca:d1: 3a:af:41:ba:5f:ea:fe:f2:d7:fb:67:10:af:78:de: 57:7e:76:88:91:18:50:ec:cb:d3:36:eb:94:0a:fd: c4:af:9a:90:a0:63:fb:5a:15:1e:fd:ab:e7:e9:8c: 50:35:37:c0:db:33:0e:61:26:42:05:0c:09:89:e7: 5e:2c:ae:22:95:b6:3c:85:40:18:79:d1:60:6e:b0: bb:51:67:91:01:dd:75:9c:3d:5a:ac:24:4f:50:16: 51:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:34:6E:95:C7:D9:58:4C:74:4E:B6:DB:B7:0C:B9:41:01:0F:23:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.crl X509v3 Authority Key Identifier: keyid:91:47:0C:DB:DF:CB:1A:CF:B9:BE:2F:82:97:00:77:8C:96:E5:2D:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:45:0b:65:41:f7:0a:2d:74:e0:62:07:d6:43:cc:be:63:c3: 2b:77:2b:64:aa:85:0e:26:62:14:7b:de:20:0f:b6:02:aa:03: f6:c2:d6:38:5d:0b:ac:d2:76:f9:4b:62:e0:ae:fd:a9:78:c9: f5:3d:a3:bb:8c:74:87:a7:f5:ee:78:c7:e7:db:88:96:15:19: 16:3f:32:54:60:6f:32:c5:be:40:fe:c5:fb:63:20:35:7f:b7: 4c:d5:5a:e6:36:05:02:73:51:20:65:6d:6d:d2:a9:aa:b1:f1: 98:3e:f3:4d:38:cd:5b:38:2a:46:dc:5b:41:48:ba:58:50:e5: d8:3a:fc:eb:d3:55:3c:e6:b7:23:5a:12:e9:a9:cb:20:3c:cf: c0:3e:7e:20:3e:ad:03:3a:55:5e:d2:70:f1:66:e6:58:3d:8c: ea:7f:bd:33:8d:1a:d8:ac:9d:c4:ad:98:6a:ae:21:5b:77:4f: e7:8c:04:08:e8:63:5e:0f:f4:fe:c5:25:87:8e:c4:b8:ee:32: 3a:4e:c4:38:7d:ea:75:47:3a:d6:a2:a0:3e:e5:49:d9:31:49: ed:fa:2d:5a:20:98:ed:24:7e:cc:b3:05:a9:a4:7e:ca:33:45: 83:51:32:b1:d3:c1:fa:70:e3:29:f1:6c:70:d2:f2:ed:17:65: 5d:35:c5:90 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpr/BWshP3cdzgUUcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFmMjFkZTAtMmNhZS00NWY3LWI0MmMtOTU5OGM0Mjcx ZWYwMB4XDTI1MDcwNTIyMDAwOFoXDTI1MDcwODIyMDAwMFowLzEtMCsGA1UEAxMk ODUwZTg5YzgtMzUxZS00OTg5LWE0N2QtY2NmMzBlNjA1YmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0ZHSEEWvGy3Y01bbrT6vpOhuccauVsPdmrP x52zOmaeUmlqqb+rexBuF2XhOE2YbSZ78j2APvJSEumar5oaiLPvkOOvqDc4CjHW OoeA9639qKCCIg/fl2EpUrSa7xWfm2acZnshCjX57SnXLALhgG5yZmyB5qEeloXZ dtgh1sWmIZ3T91CwbTBOMnuFTDTGEqHXR2VapzcMBn0iXj15/jh6ytE6r0G6X+r+ 8tf7ZxCveN5XfnaIkRhQ7MvTNuuUCv3Er5qQoGP7WhUe/avn6YxQNTfA2zMOYSZC BQwJiedeLK4ilbY8hUAYedFgbrC7UWeRAd11nD1arCRPUBZRfQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFc0bpXH2VhMdE6227cMuUEBDyPWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYWYy MWRlMC0yY2FlLTQ1ZjctYjQyYy05NTk4YzQyNzFlZjAvMGFmMjFkZTAtMmNhZS00 NWY3LWI0MmMtOTU5OGM0MjcxZWYwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGFmMjFkZTAtMmNhZS00NWY3LWI0 MmMtOTU5OGM0MjcxZWYwLzBhZjIxZGUwLTJjYWUtNDVmNy1iNDJjLTk1OThjNDI3 MWVmMC5jcmwwHwYDVR0jBBgwFoAUkUcM29/LGs+5vi+ClwB3jJblLWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYWYyMWRlMC0yY2FlLTQ1ZjctYjQyYy05NTk4 YzQyNzFlZjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBqRQtlQfcKLXTgYgfWQ8y+ Y8MrdytkqoUOJmIUe94gD7YCqgP2wtY4XQus0nb5S2Lgrv2peMn1PaO7jHSHp/Xu eMfn24iWFRkWPzJUYG8yxb5A/sX7YyA1f7dM1VrmNgUCc1EgZW1t0qmqsfGYPvNN OM1bOCpG3FtBSLpYUOXYOvzr01U85rcjWhLpqcsgPM/APn4gPq0DOlVe0nDxZuZY PYzqf70zjRrYrJ3ErZhqriFbd0/njAQI6GNeD/T+xSWHjsS47jI6TsQ4fep1RzrW oqA+5UnZMUnt+i1aIJjtJH7MswWppH7KM0WDUTKx08H6cOMp8Wxw0vLtF2VdNcWQ -----END CERTIFICATE-----Generated at Sun Jul 6 07:29:58 2025 by rpki-client