$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af9c6cb-8307-40ca-9481-3e0e8c06de32/4af9c6cb-8307-40ca-9481-3e0e8c06de32.mft File: 4af9c6cb-8307-40ca-9481-3e0e8c06de32.mft (raw, json) Hash identifier: vP8u0VeOHKm0jbf7DrsfreBZYGQ0VQZUIcDf2lwPNvs= Subject key identifier: 22:1B:B9:18:A4:38:F7:D0:A4:72:DF:24:F7:39:1D:70:BB:52:F5:AE Authority key identifier: ED:29:5A:6E:F1:FC:6B:00:64:48:D6:41:1E:AE:57:92:FE:F4:B8:E2 Certificate issuer: /CN=4af9c6cb-8307-40ca-9481-3e0e8c06de32 Certificate serial: 010D0C9F4328584AB66E4D29B4A8ECDA10DB7140 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af9c6cb-8307-40ca-9481-3e0e8c06de32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af9c6cb-8307-40ca-9481-3e0e8c06de32/4af9c6cb-8307-40ca-9481-3e0e8c06de32.mft Manifest number: 010D0C9F432858496D107E71F8B7FEC54AB37178 Signing time: Fri 01 Aug 2025 14:00:03 +0000 Manifest this update: Fri 01 Aug 2025 14:00:03 +0000 Manifest next update: Mon 04 Aug 2025 14:00:00 +0000 Files and hashes: 1: 4af9c6cb-8307-40ca-9481-3e0e8c06de32.crl (hash: bJ/ZhfjvwYl9uqPXhyiKbOLDJCVan6Y9Fwtqyus6lrs=) 2: ed2a1a9a-b826-3dbe-abba-9d3151f6fb92.roa (hash: WgfkJbK0aD5jIOsvxVT5KWiulzoAYitC+reHK0v4Jt8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af9c6cb-8307-40ca-9481-3e0e8c06de32/4af9c6cb-8307-40ca-9481-3e0e8c06de32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af9c6cb-8307-40ca-9481-3e0e8c06de32/4af9c6cb-8307-40ca-9481-3e0e8c06de32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af9c6cb-8307-40ca-9481-3e0e8c06de32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 03 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:6e:4d:29:b4:a8:ec:da:10:db:71:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4af9c6cb-8307-40ca-9481-3e0e8c06de32 Validity Not Before: Aug 1 14:00:03 2025 GMT Not After : Aug 4 14:00:00 2025 GMT Subject: CN=e8e02db0-a20c-49cc-8df0-da98ea18a820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:cd:92:8b:aa:e4:3f:0f:1e:a1:97:2a:38:91: 1c:d1:52:00:1b:af:a4:2a:de:83:17:9b:4e:61:5e: 2e:dc:e8:ec:4c:a5:d8:38:f8:2f:74:e3:7c:e7:66: 05:08:6c:16:ac:63:9f:04:55:64:b4:5b:34:49:34: 0b:ad:f5:57:73:46:6e:5c:9b:a9:3b:ea:9b:98:06: 16:23:2d:c9:55:42:f5:ad:ed:b8:76:59:07:a8:3a: 5d:1b:1d:dd:85:c0:9c:0e:4d:f4:f6:ca:e4:e7:d5: a2:31:f7:ca:a6:16:dd:34:5a:3b:f3:9c:b5:e9:e5: ac:fc:ac:82:9e:89:f5:a5:21:ac:68:e9:99:09:e1: 7c:01:98:85:4a:83:e7:37:55:6b:65:01:5b:eb:3c: 57:cf:f8:cc:bc:34:57:62:6f:58:03:e8:58:c9:70: a3:61:54:23:2d:ca:fc:93:37:58:85:01:d7:ad:3c: f0:30:32:69:f5:b8:20:92:d9:41:8f:62:d2:da:99: f1:c9:40:0c:d8:b0:31:d9:b2:b8:ae:69:5d:10:eb: 31:75:14:75:88:78:4d:4a:08:08:d9:a6:2b:c1:d8: c8:9e:c2:cc:6c:69:87:a7:e0:71:58:53:41:65:0c: cf:53:2e:de:7a:32:a8:ee:7f:a8:7a:88:4f:6b:26: fd:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:1B:B9:18:A4:38:F7:D0:A4:72:DF:24:F7:39:1D:70:BB:52:F5:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af9c6cb-8307-40ca-9481-3e0e8c06de32/4af9c6cb-8307-40ca-9481-3e0e8c06de32.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af9c6cb-8307-40ca-9481-3e0e8c06de32/4af9c6cb-8307-40ca-9481-3e0e8c06de32.crl X509v3 Authority Key Identifier: keyid:ED:29:5A:6E:F1:FC:6B:00:64:48:D6:41:1E:AE:57:92:FE:F4:B8:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af9c6cb-8307-40ca-9481-3e0e8c06de32.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:57:0c:c3:45:3a:23:f4:56:57:9d:9e:70:d3:50:6e:10:68: 4b:49:18:f1:76:5f:e6:3b:50:ad:56:51:53:9e:22:87:ae:7f: de:b0:4f:7d:33:49:c5:82:f3:95:3f:4b:1b:2d:e5:51:29:79: 4b:c5:0b:55:ca:03:d6:15:37:67:b5:e8:56:83:d5:f7:c1:6b: 4d:99:60:44:e8:51:48:59:dc:d0:24:7d:44:86:b5:23:ca:cc: 69:59:81:d0:c0:6f:6e:da:4a:61:3d:00:2a:16:df:8c:be:f6: d0:cb:75:28:55:f9:58:37:a4:bd:39:1b:4c:15:5a:02:5d:6b: cd:49:52:c8:40:42:f1:6e:bb:81:6c:62:6b:43:3c:0d:8d:cf: 0e:64:4b:ab:c0:99:e2:53:c0:ff:18:70:cb:8a:cc:8e:ba:d6: db:90:fe:c4:89:0e:82:3a:36:e1:96:ed:8f:1d:00:bf:aa:87: 0d:03:6d:3a:bc:8f:37:7b:ea:b1:7a:8b:af:41:a6:a0:75:04: a8:3e:32:b4:0e:e9:24:73:69:0f:01:cb:48:86:85:d3:d9:89: 7c:73:2b:0c:bc:17:9c:f3:fc:5e:f8:05:ab:8c:50:3f:ba:63: 36:61:3d:dc:72:a2:b0:a3:48:df:d6:4e:ba:33:7d:b8:e0:eb: f0:1b:15:d3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEq2bk0ptKjs2hDbcUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFmOWM2Y2ItODMwNy00MGNhLTk0ODEtM2UwZThjMDZk ZTMyMB4XDTI1MDgwMTE0MDAwM1oXDTI1MDgwNDE0MDAwMFowLzEtMCsGA1UEAxMk ZThlMDJkYjAtYTIwYy00OWNjLThkZjAtZGE5OGVhMThhODIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk82Si6rkPw8eoZcqOJEc0VIAG6+kKt6DF5tO YV4u3OjsTKXYOPgvdON852YFCGwWrGOfBFVktFs0STQLrfVXc0ZuXJupO+qbmAYW Iy3JVUL1re24dlkHqDpdGx3dhcCcDk309srk59WiMffKphbdNFo785y16eWs/KyC non1pSGsaOmZCeF8AZiFSoPnN1VrZQFb6zxXz/jMvDRXYm9YA+hYyXCjYVQjLcr8 kzdYhQHXrTzwMDJp9bggktlBj2LS2pnxyUAM2LAx2bK4rmldEOsxdRR1iHhNSggI 2aYrwdjInsLMbGmHp+BxWFNBZQzPUy7eejKo7n+oeohPayb94wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCIbuRikOPfQpHLfJPc5HXC7UvWuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80YWY5 YzZjYi04MzA3LTQwY2EtOTQ4MS0zZTBlOGMwNmRlMzIvNGFmOWM2Y2ItODMwNy00 MGNhLTk0ODEtM2UwZThjMDZkZTMyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNGFmOWM2Y2ItODMwNy00MGNhLTk0 ODEtM2UwZThjMDZkZTMyLzRhZjljNmNiLTgzMDctNDBjYS05NDgxLTNlMGU4YzA2 ZGUzMi5jcmwwHwYDVR0jBBgwFoAU7SlabvH8awBkSNZBHq5Xkv70uOIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80YWY5YzZjYi04MzA3LTQwY2EtOTQ4MS0zZTBl OGMwNmRlMzIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBMVwzDRToj9FZXnZ5w01Bu EGhLSRjxdl/mO1CtVlFTniKHrn/esE99M0nFgvOVP0sbLeVRKXlLxQtVygPWFTdn tehWg9X3wWtNmWBE6FFIWdzQJH1EhrUjysxpWYHQwG9u2kphPQAqFt+MvvbQy3Uo VflYN6S9ORtMFVoCXWvNSVLIQELxbruBbGJrQzwNjc8OZEurwJniU8D/GHDLisyO utbbkP7EiQ6COjbhlu2PHQC/qocNA206vI83e+qxeouvQaagdQSoPjK0Dukkc2kP ActIhoXT2Yl8cysMvBec8/xe+AWrjFA/umM2YT3ccqKwo0jf1k66M3244OvwGxXT -----END CERTIFICATE-----Generated at Sat Aug 2 05:36:52 2025 by rpki-client