$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/a3e00c5c-5e66-4d69-8173-b03c82880bc1.mft File: a3e00c5c-5e66-4d69-8173-b03c82880bc1.mft (raw, json) Hash identifier: KfwhLkv2rQORQjAJ+lggFLvE/IvWZrtqYy2edpt2Xn8= Subject key identifier: 92:BA:22:28:CB:10:19:13:35:A7:EB:7B:DA:39:C1:8A:79:AC:14:F2 Authority key identifier: D4:74:D8:AD:B3:79:80:04:10:A4:04:FA:EC:10:CA:29:C1:49:53:E3 Certificate issuer: /CN=a3e00c5c-5e66-4d69-8173-b03c82880bc1 Certificate serial: 010D0C9F4328584AC033AF9AA7C601B7CC845980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/a3e00c5c-5e66-4d69-8173-b03c82880bc1.mft Manifest number: 010D0C9F4328584073A8366F887A6FEAD30ACF48 Signing time: Tue 05 Aug 2025 02:00:03 +0000 Manifest this update: Tue 05 Aug 2025 02:00:03 +0000 Manifest next update: Fri 08 Aug 2025 02:00:00 +0000 Files and hashes: 1: 2ef613c6-a522-306e-bd8c-fc8133312b16.roa (hash: aEGN2W/oE0oNNgs9Py008FjnEtbDUc5/ngOPWx47wC8=) 2: 467eb60f-e4f8-3d6d-b68d-4c2a254400a1.roa (hash: QRNSYrDahkWpSmGbuRz7odGx4098Z6bRptO4xedJgms=) 3: a3e00c5c-5e66-4d69-8173-b03c82880bc1.crl (hash: uBrJnWbOb/GYWaOCTS02p+BK3/TRp9HtwFS0rKO+TUg=) 4: f40e0e47-941a-3211-9018-ea3a5bb33892.roa (hash: lgr3MMyp7IE+KGck9Cruwl8oDGcSzLCt175fJ4NpL4E=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/a3e00c5c-5e66-4d69-8173-b03c82880bc1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/a3e00c5c-5e66-4d69-8173-b03c82880bc1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:33:af:9a:a7:c6:01:b7:cc:84:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e00c5c-5e66-4d69-8173-b03c82880bc1 Validity Not Before: Aug 5 02:00:03 2025 GMT Not After : Aug 8 02:00:00 2025 GMT Subject: CN=85baff32-76d3-479a-b8fa-242260906449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e9:9d:ca:ea:67:4f:ab:2a:f3:08:e6:d0:b1: 2b:3c:12:21:a0:2d:27:05:6b:e2:0f:51:09:3d:26: 86:1e:c5:4a:2b:8d:8d:c4:da:cc:6c:e8:d0:54:ed: 2e:95:00:10:48:af:85:60:6f:a2:cc:2e:27:79:64: b8:22:ba:55:82:fc:a5:0a:f3:5a:9c:df:b3:a4:38: 83:2f:72:8f:38:58:f9:30:9e:8f:58:d0:2e:24:34: 83:82:61:61:e6:66:e2:5a:ce:07:3e:66:5d:42:71: fa:0d:a3:10:ad:04:97:15:95:86:cd:a6:9e:88:47: de:76:4c:a3:c2:73:54:1a:48:b8:96:89:78:d3:ba: 0e:3d:b1:2b:57:fd:43:5a:56:97:7e:4d:e7:f4:43: f8:3c:d5:89:a0:fb:d9:25:e9:5e:28:e9:88:40:20: 6c:0a:39:0c:8f:69:3d:40:4f:50:3e:03:66:bb:3d: e4:a4:3e:a5:91:af:cb:cc:8d:d3:66:17:fd:d6:8e: fa:e1:a5:8b:a4:2c:b9:a0:11:be:54:81:db:db:13: 1f:d4:10:9f:21:be:c2:66:aa:d3:6e:29:1c:2d:42: 07:13:f3:03:95:8a:d9:36:40:ed:00:6a:bb:09:5a: 9f:4a:c4:06:4d:a9:06:b2:65:48:05:6f:20:d9:a9: 30:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:BA:22:28:CB:10:19:13:35:A7:EB:7B:DA:39:C1:8A:79:AC:14:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/a3e00c5c-5e66-4d69-8173-b03c82880bc1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/a3e00c5c-5e66-4d69-8173-b03c82880bc1.crl X509v3 Authority Key Identifier: keyid:D4:74:D8:AD:B3:79:80:04:10:A4:04:FA:EC:10:CA:29:C1:49:53:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:ce:16:c0:5e:13:ef:d9:7b:45:78:53:a5:d9:78:47:09:db: 1a:94:bb:d7:4e:3b:c2:d6:83:0f:0a:07:6c:82:ce:85:42:4e: e7:70:cc:e8:6e:55:24:3e:5e:2c:e4:cd:9d:cc:60:1d:99:ce: 8a:ad:75:57:d0:11:a9:47:76:60:ff:77:67:11:ba:b4:4c:7b: 0a:05:cf:5d:02:0f:cf:b1:85:8c:4a:34:05:31:68:b6:d5:4e: 26:d1:be:0c:4a:f5:7c:2b:9c:1e:b3:9c:6e:70:e1:3e:92:81: 28:20:cd:e6:8e:00:ed:cd:2a:e5:15:79:3d:06:c3:1b:7a:96: f1:4f:e7:36:1a:1f:63:98:c5:74:72:8b:24:d2:a4:56:74:c5: a5:14:4b:1f:c8:c9:b5:65:8a:3c:ae:83:a7:0b:6e:72:60:d6: 85:ea:ac:ce:4d:31:7c:8c:df:5f:6c:d6:ac:5e:41:8c:51:87: f0:c4:7e:9f:d7:b5:bd:72:e4:b7:b9:b2:f5:3c:9e:1a:44:77: 76:82:0b:34:5a:cd:6e:13:66:f4:02:ef:b5:e0:b7:be:69:ca: 59:77:45:8b:a7:41:49:de:90:07:62:d2:d9:db:c8:dc:65:9e: bd:3f:59:b6:b2:e1:e1:1f:de:32:df:21:38:0b:88:79:88:8d: fe:1b:45:4e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErAM6+ap8YBt8yEWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNlMDBjNWMtNWU2Ni00ZDY5LTgxNzMtYjAzYzgyODgw YmMxMB4XDTI1MDgwNTAyMDAwM1oXDTI1MDgwODAyMDAwMFowLzEtMCsGA1UEAxMk ODViYWZmMzItNzZkMy00NzlhLWI4ZmEtMjQyMjYwOTA2NDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOmdyupnT6sq8wjm0LErPBIhoC0nBWviD1EJ PSaGHsVKK42NxNrMbOjQVO0ulQAQSK+FYG+izC4neWS4IrpVgvylCvNanN+zpDiD L3KPOFj5MJ6PWNAuJDSDgmFh5mbiWs4HPmZdQnH6DaMQrQSXFZWGzaaeiEfedkyj wnNUGki4lol407oOPbErV/1DWlaXfk3n9EP4PNWJoPvZJeleKOmIQCBsCjkMj2k9 QE9QPgNmuz3kpD6lka/LzI3TZhf91o764aWLpCy5oBG+VIHb2xMf1BCfIb7CZqrT bikcLUIHE/MDlYrZNkDtAGq7CVqfSsQGTakGsmVIBW8g2akwswIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJK6IijLEBkTNafre9o5wYp5rBTyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hM2Uw MGM1Yy01ZTY2LTRkNjktODE3My1iMDNjODI4ODBiYzEvYTNlMDBjNWMtNWU2Ni00 ZDY5LTgxNzMtYjAzYzgyODgwYmMxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTNlMDBjNWMtNWU2Ni00ZDY5LTgx NzMtYjAzYzgyODgwYmMxL2EzZTAwYzVjLTVlNjYtNGQ2OS04MTczLWIwM2M4Mjg4 MGJjMS5jcmwwHwYDVR0jBBgwFoAU1HTYrbN5gAQQpAT67BDKKcFJU+MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hM2UwMGM1Yy01ZTY2LTRkNjktODE3My1iMDNj ODI4ODBiYzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQATzhbAXhPv2XtFeFOl2XhH CdsalLvXTjvC1oMPCgdsgs6FQk7ncMzoblUkPl4s5M2dzGAdmc6KrXVX0BGpR3Zg /3dnEbq0THsKBc9dAg/PsYWMSjQFMWi21U4m0b4MSvV8K5wes5xucOE+koEoIM3m jgDtzSrlFXk9BsMbepbxT+c2Gh9jmMV0cosk0qRWdMWlFEsfyMm1ZYo8roOnC25y YNaF6qzOTTF8jN9fbNasXkGMUYfwxH6f17W9cuS3ubL1PJ4aRHd2ggs0Ws1uE2b0 Au+14Le+acpZd0WLp0FJ3pAHYtLZ28jcZZ69P1m2suHhH94y3yE4C4h5iI3+G0VO -----END CERTIFICATE-----Generated at Tue Aug 5 08:19:22 2025 by rpki-client