$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.mft File: aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.mft (raw, json) Hash identifier: 645k/Nmr6gYUgvCT/Hce3rSa9VjjIcz4USTF2T89Hxk= Subject key identifier: BC:C1:1F:26:E0:31:6B:88:EF:7C:8C:5F:DD:92:E6:62:00:6A:75:D8 Authority key identifier: 76:0D:14:91:F7:E0:4E:1E:FA:F0:00:8F:64:2B:3A:8C:9E:0F:CE:46 Certificate issuer: /CN=aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85 Certificate serial: 010D0C9F4328584AEAE463D6AF4208627D0055C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.mft Manifest number: 010D0C9F4328584073A8497872C4F36DBFDFA758 Signing time: Wed 20 Aug 2025 09:00:03 +0000 Manifest this update: Wed 20 Aug 2025 09:00:03 +0000 Manifest next update: Fri 22 Aug 2025 09:00:00 +0000 Files and hashes: 1: 4e7d8a90-78e9-308a-898b-13d40c2410ea.roa (hash: P9QeY+VUdPEuz9g/mNzoQrlcwYRlWO5teM6zuEztoMQ=) 2: aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.crl (hash: mPo6WdPqXJmHMagNDnx54HiqBYhgXa+g0F4IoJthB0Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ea:e4:63:d6:af:42:08:62:7d:00:55:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85 Validity Not Before: Aug 20 09:00:03 2025 GMT Not After : Aug 22 09:00:00 2025 GMT Subject: CN=6c0eae50-0c2e-4fbe-a597-91c36264544c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:65:54:a3:12:46:ef:44:00:6c:5f:10:7d:01: c0:f9:47:d6:d3:02:da:59:2b:34:fa:cf:d6:12:9c: fd:d0:0d:70:d0:e4:40:7b:99:ae:18:b2:6c:89:06: 11:32:6c:b9:45:db:8c:49:43:9f:0a:e6:55:b1:87: 59:ba:72:59:e0:17:25:bd:94:8f:20:69:28:d1:6a: b7:c1:40:8c:76:a4:e5:7c:f6:03:9d:94:4f:3c:2e: b2:67:aa:56:35:c0:9a:77:af:0c:bd:dc:ec:1b:21: ba:cf:23:73:b7:b9:cc:16:fa:46:50:10:fe:ae:fe: bb:4c:ab:30:06:78:92:42:49:ae:05:7a:57:d7:cd: 30:a3:e1:bb:8e:dd:f1:7a:f8:06:b5:fc:c5:9e:52: 4b:77:12:2f:aa:e3:2c:9a:32:92:4c:65:65:f6:6b: 30:c8:1b:58:b4:bb:a1:b9:81:51:66:15:64:b4:83: ba:3d:be:16:b8:0e:ab:32:31:0a:13:ab:6c:e1:5b: 52:b9:37:37:34:26:c0:46:57:f5:bd:8f:6a:57:88: a5:10:cd:bc:bb:d9:2a:85:17:b1:0b:72:ae:99:57: 7e:cb:b9:13:7c:02:fe:a5:d8:86:1f:39:7a:33:7a: 72:c0:4d:21:00:3a:13:7a:58:88:3e:3b:51:27:07: 4b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C1:1F:26:E0:31:6B:88:EF:7C:8C:5F:DD:92:E6:62:00:6A:75:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.crl X509v3 Authority Key Identifier: keyid:76:0D:14:91:F7:E0:4E:1E:FA:F0:00:8F:64:2B:3A:8C:9E:0F:CE:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:7c:ba:73:2c:b3:e7:c0:92:f7:58:56:9e:d4:04:4a:e7:a2: 31:56:fe:30:ec:65:4c:8a:4c:bd:80:00:7b:41:6a:1a:2e:87: 3a:79:0f:a9:04:9a:db:97:34:db:7c:61:76:3c:ca:10:b6:61: 68:66:e8:7b:e0:08:45:27:bc:0b:09:cb:af:db:38:09:6c:01: 0c:3a:5e:78:8d:7b:7c:5a:b3:02:a6:18:8e:7a:c4:18:98:4a: 2c:f2:54:06:9e:88:ae:0d:07:d1:0a:69:9e:bf:14:23:c3:0a: a0:bb:cf:30:e5:c3:c6:9d:42:e7:19:3d:e1:98:a6:bb:b1:6e: bf:9a:b2:f2:54:de:06:1a:63:38:09:e9:36:30:9a:b3:bb:60: 1c:04:7d:98:09:f6:d3:89:2e:02:43:5c:fc:ef:fe:47:a4:2e: 80:bd:64:7b:8d:55:be:96:c6:c8:cd:60:1b:c8:ae:27:cf:bb: 8f:65:fc:f1:cc:03:60:5a:65:75:4a:a3:3e:ef:73:d8:c2:34: be:08:67:d1:39:d8:fc:ad:d1:8e:43:e5:6d:8e:b5:07:69:8b: ba:e8:5a:e4:e0:72:95:e5:0f:24:22:82:8b:6b:01:ae:ef:4a: ef:cf:30:9d:17:61:4e:c5:94:39:c0:b2:00:29:8a:17:9a:24: f2:ff:c4:d1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErq5GPWr0IIYn0AVcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmOWEzZmMtM2E4Yy00N2U0LTkxZmEtZDc4MDhiMDZh ZTg1MB4XDTI1MDgyMDA5MDAwM1oXDTI1MDgyMjA5MDAwMFowLzEtMCsGA1UEAxMk NmMwZWFlNTAtMGMyZS00ZmJlLWE1OTctOTFjMzYyNjQ1NDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGVUoxJG70QAbF8QfQHA+UfW0wLaWSs0+s/W Epz90A1w0ORAe5muGLJsiQYRMmy5RduMSUOfCuZVsYdZunJZ4BclvZSPIGko0Wq3 wUCMdqTlfPYDnZRPPC6yZ6pWNcCad68MvdzsGyG6zyNzt7nMFvpGUBD+rv67TKsw BniSQkmuBXpX180wo+G7jt3xevgGtfzFnlJLdxIvquMsmjKSTGVl9mswyBtYtLuh uYFRZhVktIO6Pb4WuA6rMjEKE6ts4VtSuTc3NCbARlf1vY9qV4ilEM28u9kqhRex C3KumVd+y7kTfAL+pdiGHzl6M3pywE0hADoTeliIPjtRJwdLfwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLzBHybgMWuI73yMX92S5mIAanXYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWY5 YTNmYy0zYThjLTQ3ZTQtOTFmYS1kNzgwOGIwNmFlODUvYWFmOWEzZmMtM2E4Yy00 N2U0LTkxZmEtZDc4MDhiMDZhZTg1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFmOWEzZmMtM2E4Yy00N2U0LTkx ZmEtZDc4MDhiMDZhZTg1L2FhZjlhM2ZjLTNhOGMtNDdlNC05MWZhLWQ3ODA4YjA2 YWU4NS5jcmwwHwYDVR0jBBgwFoAUdg0UkffgTh768ACPZCs6jJ4PzkYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWY5YTNmYy0zYThjLTQ3ZTQtOTFmYS1kNzgw OGIwNmFlODUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA/fLpzLLPnwJL3WFae1ARK 56IxVv4w7GVMiky9gAB7QWoaLoc6eQ+pBJrblzTbfGF2PMoQtmFoZuh74AhFJ7wL Ccuv2zgJbAEMOl54jXt8WrMCphiOesQYmEos8lQGnoiuDQfRCmmevxQjwwqgu88w 5cPGnULnGT3hmKa7sW6/mrLyVN4GGmM4Cek2MJqzu2AcBH2YCfbTiS4CQ1z87/5H pC6AvWR7jVW+lsbIzWAbyK4nz7uPZfzxzANgWmV1SqM+73PYwjS+CGfROdj8rdGO Q+VtjrUHaYu66Frk4HKV5Q8kIoKLawGu70rvzzCdF2FOxZQ5wLIAKYoXmiTy/8TR -----END CERTIFICATE-----Generated at Wed Aug 20 15:25:11 2025 by rpki-client