$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft File: 3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft (raw, json) Hash identifier: d1upbP0kkySam3c0/e2zV/DeZ1G1ZTAt+MkKohT29h0= Subject key identifier: B1:FD:22:8D:50:B1:2F:B3:5C:BF:F2:C9:4F:D2:81:9A:89:3A:11:73 Authority key identifier: 0A:AA:92:08:33:0F:0A:CE:C8:0E:39:69:7F:E1:85:63:D1:49:4A:50 Certificate issuer: /CN=3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7 Certificate serial: 010D0C9F4328584ABC989040E99BE4E2E3689420 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft Manifest number: 010D0C9F43285844D615D248DD853730ADA3FA2D Signing time: Sun 03 Aug 2025 19:00:03 +0000 Manifest this update: Sun 03 Aug 2025 19:00:03 +0000 Manifest next update: Tue 05 Aug 2025 19:00:00 +0000 Files and hashes: 1: 3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.crl (hash: pallFCpyK9AnB/Rm+6N3aJbMGjHK7B2AHGChjUyuqfg=) 2: 7dae22f8-939a-3a54-b81c-8890233bc71a.roa (hash: fI5YMHTaJSO1aGA0rokef+OBxkfA7F8ZiPhubQ0usBg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bc:98:90:40:e9:9b:e4:e2:e3:68:94:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7 Validity Not Before: Aug 3 19:00:03 2025 GMT Not After : Aug 5 19:00:00 2025 GMT Subject: CN=d41f9ffa-d64c-42cc-8f94-de7e20417aac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ce:98:fb:d6:4d:77:3d:e0:64:92:90:b3:d7: 1a:d3:21:74:d7:bd:23:e6:76:16:63:ad:da:fb:e4: 9a:30:d2:2a:df:70:f6:41:15:30:0d:07:91:41:f6: 19:7e:c8:53:bb:46:75:23:a8:a0:96:5d:6b:8b:e1: ff:c4:24:b8:88:4c:40:58:14:ad:52:82:1a:c6:83: 39:30:a6:5d:02:d1:9f:12:15:3a:d6:0c:b7:6f:d0: 91:62:dc:c0:94:af:c0:4e:8f:0e:60:d5:fc:aa:19: cc:1d:eb:6a:c1:13:d9:2c:69:eb:87:6a:67:46:62: fc:a9:29:b8:1b:75:b8:7c:ae:0b:5f:12:6f:7a:33: 3d:a1:49:f0:15:e5:43:26:23:0a:c4:34:ad:ce:6f: 81:45:04:45:df:e1:5b:e1:89:72:e3:ce:76:83:8c: 4d:86:6e:0d:51:48:dc:ef:61:06:f2:4a:35:d8:62: d2:10:5e:b6:a1:31:0d:19:cf:68:28:b1:0f:2f:e9: 62:44:1a:8f:84:fa:18:07:b8:71:36:aa:13:ac:59: 31:b6:10:ad:58:82:0b:51:6a:72:cd:c5:b0:39:0f: b3:cd:81:87:81:cd:09:62:19:d3:97:97:cf:4b:60: d6:4f:69:93:4c:14:f5:67:0c:5d:57:51:f4:03:c1: 4b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:FD:22:8D:50:B1:2F:B3:5C:BF:F2:C9:4F:D2:81:9A:89:3A:11:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.crl X509v3 Authority Key Identifier: keyid:0A:AA:92:08:33:0F:0A:CE:C8:0E:39:69:7F:E1:85:63:D1:49:4A:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:2e:35:e6:4e:4d:6f:ff:43:7e:c4:ea:f1:d7:be:14:d7:bb: 10:e2:4d:9e:87:94:18:e2:12:b1:45:56:8b:6a:e2:e0:9b:23: dc:26:13:e3:d7:6b:9d:af:7d:0a:af:5f:eb:11:d3:e9:d7:c2: 52:db:ad:dc:ea:d4:67:4c:e0:60:ca:f3:95:e9:de:d0:34:81: aa:c0:3a:36:a8:b9:ac:a9:6b:4e:e8:a9:04:6b:8b:22:c2:3b: 37:ba:33:d4:a8:fd:3a:d2:d8:4e:af:20:3b:ed:87:c1:e6:88: e1:82:e2:23:c9:a0:62:cb:a6:47:98:63:8b:d6:ce:01:09:68: 1e:38:e7:e5:4c:af:2a:cb:2c:8a:e0:18:c5:db:f3:f6:08:69: 19:a6:4b:cb:f5:e7:79:2f:a0:d5:30:9d:3c:74:e9:1d:f8:0d: 94:7e:c7:01:2d:7f:ec:e1:b9:77:e3:bb:bf:fb:7c:03:b1:7d: db:0f:71:09:1f:0d:fd:8a:0e:5a:ec:83:fe:7e:34:ec:c6:32: 8e:02:af:d7:b4:2c:d4:64:3d:24:0f:43:bc:4d:ad:19:08:51: 11:59:3e:51:57:36:96:6a:23:6c:a9:c0:15:87:1c:f5:7b:c3: c3:84:a0:76:d9:58:76:6d:a4:82:41:8d:ee:c0:86:c0:ac:86: 31:29:16:78 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEq8mJBA6Zvk4uNolCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2YyZDM3OGQtMjBlMS00YjVmLTg1YjktZThjNGNiYTVk NWQ3MB4XDTI1MDgwMzE5MDAwM1oXDTI1MDgwNTE5MDAwMFowLzEtMCsGA1UEAxMk ZDQxZjlmZmEtZDY0Yy00MmNjLThmOTQtZGU3ZTIwNDE3YWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo86Y+9ZNdz3gZJKQs9ca0yF0170j5nYWY63a ++SaMNIq33D2QRUwDQeRQfYZfshTu0Z1I6igll1ri+H/xCS4iExAWBStUoIaxoM5 MKZdAtGfEhU61gy3b9CRYtzAlK/ATo8OYNX8qhnMHetqwRPZLGnrh2pnRmL8qSm4 G3W4fK4LXxJvejM9oUnwFeVDJiMKxDStzm+BRQRF3+Fb4Yly4852g4xNhm4NUUjc 72EG8ko12GLSEF62oTENGc9oKLEPL+liRBqPhPoYB7hxNqoTrFkxthCtWIILUWpy zcWwOQ+zzYGHgc0JYhnTl5fPS2DWT2mTTBT1ZwxdV1H0A8FLTQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLH9Io1QsS+zXL/yyU/SgZqJOhFzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZjJk Mzc4ZC0yMGUxLTRiNWYtODViOS1lOGM0Y2JhNWQ1ZDcvM2YyZDM3OGQtMjBlMS00 YjVmLTg1YjktZThjNGNiYTVkNWQ3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2YyZDM3OGQtMjBlMS00YjVmLTg1 YjktZThjNGNiYTVkNWQ3LzNmMmQzNzhkLTIwZTEtNGI1Zi04NWI5LWU4YzRjYmE1 ZDVkNy5jcmwwHwYDVR0jBBgwFoAUCqqSCDMPCs7IDjlpf+GFY9FJSlAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZjJkMzc4ZC0yMGUxLTRiNWYtODViOS1lOGM0 Y2JhNWQ1ZDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBKLjXmTk1v/0N+xOrx174U 17sQ4k2eh5QY4hKxRVaLauLgmyPcJhPj12udr30Kr1/rEdPp18JS263c6tRnTOBg yvOV6d7QNIGqwDo2qLmsqWtO6KkEa4siwjs3ujPUqP060thOryA77YfB5ojhguIj yaBiy6ZHmGOL1s4BCWgeOOflTK8qyyyK4BjF2/P2CGkZpkvL9ed5L6DVMJ08dOkd +A2UfscBLX/s4bl347u/+3wDsX3bD3EJHw39ig5a7IP+fjTsxjKOAq/XtCzUZD0k D0O8Ta0ZCFERWT5RVzaWaiNsqcAVhxz1e8PDhKB22Vh2baSCQY3uwIbArIYxKRZ4 -----END CERTIFICATE-----Generated at Mon Aug 4 11:14:10 2025 by rpki-client