$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.mft File: 3bc8e9cb-88ee-455e-b012-1b1abfca72ab.mft (raw, json) Hash identifier: yy1JJv1dr4hiA5wvMdbzJLBmtKdw2yYO8hh57hlRux4= Subject key identifier: B1:CB:8E:1F:D3:2F:A5:ED:D0:98:44:1F:03:46:46:D9:44:46:AC:3D Authority key identifier: 84:AD:69:95:E5:C7:F4:14:66:20:C8:C7:68:96:BA:C7:52:17:0D:14 Certificate issuer: /CN=3bc8e9cb-88ee-455e-b012-1b1abfca72ab Certificate serial: 010D0C9F4328584ABE3971FB3BE10015A35B3180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.mft Manifest number: 010D0C9F4328584073A8498F3F05E22DFBDA9645 Signing time: Mon 04 Aug 2025 09:00:03 +0000 Manifest this update: Mon 04 Aug 2025 09:00:03 +0000 Manifest next update: Wed 06 Aug 2025 09:00:00 +0000 Files and hashes: 1: 3bc8e9cb-88ee-455e-b012-1b1abfca72ab.crl (hash: yjRzUVDaqotkfOxgtSJctH8g3nkh1sA/a2rpC37ANyU=) 2: d9e1ae26-257a-3a0b-b46e-049aa014cc17.roa (hash: G1mTPq4hkxIKpJANtEYTfydfYlZOGZNoIJwZMWqM1Ho=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:be:39:71:fb:3b:e1:00:15:a3:5b:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bc8e9cb-88ee-455e-b012-1b1abfca72ab Validity Not Before: Aug 4 09:00:03 2025 GMT Not After : Aug 6 09:00:00 2025 GMT Subject: CN=86dcb57a-6a56-490d-af8a-e8fdd87d19fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ff:90:bd:4e:ca:38:2a:2c:56:db:18:f0:c4: d0:da:0d:89:0a:0e:29:a8:92:93:0d:7d:cb:fb:6e: d9:1d:06:1f:b4:08:41:00:18:b0:f6:e2:83:f6:c2: b0:bc:cd:14:ab:92:f4:ea:d1:f3:29:54:43:d4:8e: c0:f9:c2:1e:ec:56:3d:37:1b:4b:3d:ea:77:f8:dd: 05:b9:e7:2f:57:fb:64:0e:b7:93:b6:87:de:dd:ac: 94:d3:9a:04:fc:fb:38:0f:19:57:41:3e:9e:94:f7: 23:61:b5:3c:46:d3:b1:d2:94:72:2a:19:12:3c:08: 8f:ac:e0:77:51:9f:f9:3d:5e:6e:c2:84:fa:12:8c: b3:ba:f4:f8:d2:51:15:f7:7a:64:f0:e5:62:35:e2: 1f:2a:0a:97:6c:2b:82:74:3a:9d:44:c7:c6:9f:29: 6e:55:5f:76:4b:18:b6:ef:e4:61:14:09:58:8f:7c: 48:23:12:cc:0b:cd:92:be:98:35:aa:c4:82:0f:2a: c4:81:a7:7d:0c:98:ab:40:b2:cc:14:93:1c:de:65: 16:0f:16:20:d0:85:5e:72:99:ce:3b:c3:7a:79:a1: 27:91:e6:a9:2b:4b:b4:54:49:8f:6c:0d:9e:f1:2b: 37:c5:56:6d:40:03:e2:50:b7:17:92:3e:ee:bc:a7: 2b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:CB:8E:1F:D3:2F:A5:ED:D0:98:44:1F:03:46:46:D9:44:46:AC:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.crl X509v3 Authority Key Identifier: keyid:84:AD:69:95:E5:C7:F4:14:66:20:C8:C7:68:96:BA:C7:52:17:0D:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:2f:3d:a7:7e:2f:a6:a0:a7:54:d1:f0:65:2a:f4:15:e5:bb: aa:2f:07:a7:18:6c:4b:e7:30:39:17:c6:24:10:b4:47:60:33: e7:60:2d:63:63:ac:32:99:42:0c:2d:17:9e:fc:df:28:e3:70: 19:eb:3e:95:3f:f7:f6:1b:11:ef:41:65:9c:4a:67:90:f0:e3: 08:ff:2f:cd:e5:75:e9:10:ae:0f:0e:49:9f:63:23:e2:60:95: af:c2:ce:fa:34:c4:74:89:ae:6e:51:fc:47:b9:66:6e:86:5d: 82:f7:19:56:8d:94:59:d6:4f:fd:b0:a5:53:35:9d:ba:44:f4: b4:cb:4c:4d:4f:01:05:26:61:6b:16:3c:91:ba:3c:43:38:75: b6:99:e7:04:12:74:82:d6:69:ff:bb:41:6c:da:cf:08:2d:7c: b2:89:3b:f0:a8:6d:6c:58:eb:59:83:0a:7d:67:a7:75:97:04: 72:45:6b:6c:36:48:50:25:d6:b3:72:51:88:7b:14:7e:f8:7d: b3:c1:c5:d9:9a:6b:01:d3:21:7d:79:f4:7b:dc:cc:0e:82:df: 6d:cd:79:ca:1a:4d:a4:17:bf:33:28:68:fa:28:8c:e6:8d:4e: 69:a8:ec:30:3b:97:8b:2b:df:c2:a6:67:64:43:de:d6:ad:16: 44:d4:05:14 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEq+OXH7O+EAFaNbMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JjOGU5Y2ItODhlZS00NTVlLWIwMTItMWIxYWJmY2E3 MmFiMB4XDTI1MDgwNDA5MDAwM1oXDTI1MDgwNjA5MDAwMFowLzEtMCsGA1UEAxMk ODZkY2I1N2EtNmE1Ni00OTBkLWFmOGEtZThmZGQ4N2QxOWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/+QvU7KOCosVtsY8MTQ2g2JCg4pqJKTDX3L +27ZHQYftAhBABiw9uKD9sKwvM0Uq5L06tHzKVRD1I7A+cIe7FY9NxtLPep3+N0F uecvV/tkDreTtofe3ayU05oE/Ps4DxlXQT6elPcjYbU8RtOx0pRyKhkSPAiPrOB3 UZ/5PV5uwoT6EoyzuvT40lEV93pk8OViNeIfKgqXbCuCdDqdRMfGnyluVV92Sxi2 7+RhFAlYj3xIIxLMC82Svpg1qsSCDyrEgad9DJirQLLMFJMc3mUWDxYg0IVecpnO O8N6eaEnkeapK0u0VEmPbA2e8Ss3xVZtQAPiULcXkj7uvKcrpwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLHLjh/TL6Xt0JhEHwNGRtlERqw9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYmM4 ZTljYi04OGVlLTQ1NWUtYjAxMi0xYjFhYmZjYTcyYWIvM2JjOGU5Y2ItODhlZS00 NTVlLWIwMTItMWIxYWJmY2E3MmFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2JjOGU5Y2ItODhlZS00NTVlLWIw MTItMWIxYWJmY2E3MmFiLzNiYzhlOWNiLTg4ZWUtNDU1ZS1iMDEyLTFiMWFiZmNh NzJhYi5jcmwwHwYDVR0jBBgwFoAUhK1pleXH9BRmIMjHaJa6x1IXDRQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYmM4ZTljYi04OGVlLTQ1NWUtYjAxMi0xYjFh YmZjYTcyYWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBmLz2nfi+moKdU0fBlKvQV 5buqLwenGGxL5zA5F8YkELRHYDPnYC1jY6wymUIMLRee/N8o43AZ6z6VP/f2GxHv QWWcSmeQ8OMI/y/N5XXpEK4PDkmfYyPiYJWvws76NMR0ia5uUfxHuWZuhl2C9xlW jZRZ1k/9sKVTNZ26RPS0y0xNTwEFJmFrFjyRujxDOHW2mecEEnSC1mn/u0Fs2s8I LXyyiTvwqG1sWOtZgwp9Z6d1lwRyRWtsNkhQJdazclGIexR++H2zwcXZmmsB0yF9 efR73MwOgt9tzXnKGk2kF78zKGj6KIzmjU5pqOwwO5eLK9/CpmdkQ97WrRZE1AUU -----END CERTIFICATE-----Generated at Mon Aug 4 11:17:58 2025 by rpki-client