$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.mft File: 3a033ee1-5d03-497a-8120-3969593cdf7e.mft (raw, json) Hash identifier: cnjOpA2POayMcRDxKGplP+BjCQ7iiH74yPr8xoo1YUE= Subject key identifier: FB:9F:0E:15:29:78:BA:29:68:D1:DC:1F:56:0B:F4:68:D8:79:5C:43 Authority key identifier: F8:10:57:08:22:D1:4D:24:0B:47:33:71:7E:77:77:21:75:97:18:07 Certificate issuer: /CN=3a033ee1-5d03-497a-8120-3969593cdf7e Certificate serial: 010D0C9F4328584ABC3F405670D26938D410E1E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.mft Manifest number: 010D0C9F4328584534EC3BF001B4FD74E4080008 Signing time: Sun 03 Aug 2025 16:00:08 +0000 Manifest this update: Sun 03 Aug 2025 16:00:08 +0000 Manifest next update: Tue 05 Aug 2025 16:00:00 +0000 Files and hashes: 1: 3a033ee1-5d03-497a-8120-3969593cdf7e.crl (hash: BIK1piDmMm2moiKbQQxXmayNp4vfSdRDRJOIhURZ9ns=) 2: 9a8d9685-4393-3f04-898b-1b075a4b6c59.roa (hash: uZmTWWmaRkLZHvU+a1IryGhroPpyk5uYqTGzh0X6CuE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bc:3f:40:56:70:d2:69:38:d4:10:e1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a033ee1-5d03-497a-8120-3969593cdf7e Validity Not Before: Aug 3 16:00:08 2025 GMT Not After : Aug 5 16:00:00 2025 GMT Subject: CN=86a53424-f409-4d6f-8aec-50c9e303eb10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ea:c4:de:ca:38:89:b6:67:37:ed:83:ec:bc: c8:d3:7b:e4:91:4e:a1:f2:1e:35:60:ad:f7:de:8c: c2:3d:ef:72:ab:02:0e:70:4f:08:b6:ee:b7:4a:4c: 0a:f1:4b:ca:4f:f1:87:1f:fa:ed:34:83:80:f0:09: 2f:8e:9c:b1:80:0d:7a:0c:6c:be:ee:e0:af:da:58: 71:a7:1c:2c:42:2b:40:37:1d:21:50:3c:f6:fd:e5: 41:3e:3e:29:18:10:a7:6a:1c:34:d9:66:25:de:50: b9:35:48:0a:d0:6c:cd:7a:fb:79:37:7e:3f:b7:84: 05:dc:c0:e7:e9:ea:f2:8f:ef:5d:27:18:56:b0:03: 0c:85:af:18:ac:31:17:34:34:ea:ae:64:8b:45:a1: 57:dc:6c:31:0d:e7:80:62:c8:85:6b:0f:4c:02:cb: 88:4d:48:85:5a:33:f7:12:c0:a3:96:e7:10:84:d2: 1c:dc:ac:71:45:7b:37:6f:87:b4:48:85:ae:45:03: 38:56:0d:3d:4c:c6:7f:3b:47:5a:b8:10:1d:25:79: d7:e9:d5:32:77:f9:79:7f:66:b0:5e:38:ec:a4:4b: 42:88:68:e5:be:20:fe:e6:e8:6e:21:5b:71:47:bc: 85:b5:7e:c7:71:f4:50:91:12:d4:63:13:fd:7d:ed: 89:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:9F:0E:15:29:78:BA:29:68:D1:DC:1F:56:0B:F4:68:D8:79:5C:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.crl X509v3 Authority Key Identifier: keyid:F8:10:57:08:22:D1:4D:24:0B:47:33:71:7E:77:77:21:75:97:18:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:97:10:97:99:99:a1:42:ef:c0:e5:ef:ac:1f:bd:b5:5b:66: ba:46:8b:b6:b9:89:6c:19:04:07:a2:a2:81:fd:ff:fc:be:42: 35:38:11:f7:b0:d6:55:e0:eb:03:49:a6:bf:25:c0:30:cb:22: 29:fc:27:ef:49:c0:22:b3:9c:5a:61:1a:d2:e3:88:77:97:a4: 11:10:56:f8:41:94:80:c8:12:f0:48:0f:ed:c6:3a:af:8a:c3: d6:a3:c9:10:11:01:28:0b:17:4b:b3:ce:64:89:76:91:e6:39: 8d:c2:09:d9:ec:e8:42:8a:dd:39:b0:da:82:67:20:3e:0c:a0: 10:05:04:0c:9a:6d:67:1a:1a:d0:4d:bd:7c:56:ae:a7:56:78: 1d:72:3d:e3:1a:4f:72:62:9f:f0:be:16:6d:34:59:d0:93:73: 01:c7:c8:7d:60:76:9a:24:1a:a5:3c:c6:6b:45:69:ce:a9:be: d8:78:0d:b8:93:ff:93:a8:7f:45:b4:99:6d:ee:a2:93:92:d1: 20:f8:92:8c:07:5b:0f:76:09:a5:03:84:89:83:f5:e4:df:67: 6b:e4:cb:c7:38:ff:29:38:08:37:af:36:82:3d:11:cc:e9:77: 27:8b:84:1f:61:ae:10:9d:45:fd:3d:09:5e:9f:43:18:2a:ec: 3a:cb:2a:87 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEq8P0BWcNJpONQQ4eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2EwMzNlZTEtNWQwMy00OTdhLTgxMjAtMzk2OTU5M2Nk ZjdlMB4XDTI1MDgwMzE2MDAwOFoXDTI1MDgwNTE2MDAwMFowLzEtMCsGA1UEAxMk ODZhNTM0MjQtZjQwOS00ZDZmLThhZWMtNTBjOWUzMDNlYjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxurE3so4ibZnN+2D7LzI03vkkU6h8h41YK33 3ozCPe9yqwIOcE8Itu63SkwK8UvKT/GHH/rtNIOA8AkvjpyxgA16DGy+7uCv2lhx pxwsQitANx0hUDz2/eVBPj4pGBCnahw02WYl3lC5NUgK0GzNevt5N34/t4QF3MDn 6eryj+9dJxhWsAMMha8YrDEXNDTqrmSLRaFX3GwxDeeAYsiFaw9MAsuITUiFWjP3 EsCjlucQhNIc3KxxRXs3b4e0SIWuRQM4Vg09TMZ/O0dauBAdJXnX6dUyd/l5f2aw XjjspEtCiGjlviD+5uhuIVtxR7yFtX7HcfRQkRLUYxP9fe2JiQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPufDhUpeLopaNHcH1YL9GjYeVxDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYTAz M2VlMS01ZDAzLTQ5N2EtODEyMC0zOTY5NTkzY2RmN2UvM2EwMzNlZTEtNWQwMy00 OTdhLTgxMjAtMzk2OTU5M2NkZjdlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2EwMzNlZTEtNWQwMy00OTdhLTgx MjAtMzk2OTU5M2NkZjdlLzNhMDMzZWUxLTVkMDMtNDk3YS04MTIwLTM5Njk1OTNj ZGY3ZS5jcmwwHwYDVR0jBBgwFoAU+BBXCCLRTSQLRzNxfnd3IXWXGAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYTAzM2VlMS01ZDAzLTQ5N2EtODEyMC0zOTY5 NTkzY2RmN2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAXlxCXmZmhQu/A5e+sH721 W2a6Rou2uYlsGQQHoqKB/f/8vkI1OBH3sNZV4OsDSaa/JcAwyyIp/CfvScAis5xa YRrS44h3l6QREFb4QZSAyBLwSA/txjqvisPWo8kQEQEoCxdLs85kiXaR5jmNwgnZ 7OhCit05sNqCZyA+DKAQBQQMmm1nGhrQTb18Vq6nVngdcj3jGk9yYp/wvhZtNFnQ k3MBx8h9YHaaJBqlPMZrRWnOqb7YeA24k/+TqH9FtJlt7qKTktEg+JKMB1sPdgml A4SJg/Xk32dr5MvHOP8pOAg3rzaCPRHM6Xcni4QfYa4QnUX9PQlen0MYKuw6yyqH -----END CERTIFICATE-----Generated at Mon Aug 4 16:07:07 2025 by rpki-client