$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/a3398dc1-de03-4844-957b-e882d7878ae2.mft File: a3398dc1-de03-4844-957b-e882d7878ae2.mft (raw, json) Hash identifier: P42yQYHZRPEzUqYA90E/FStL1q3mGyU+fGbc6VMiEU8= Subject key identifier: B7:6A:01:4A:83:86:9D:A3:B9:43:5F:F6:22:09:0B:9D:FE:F0:34:F4 Authority key identifier: 42:C5:92:1E:2A:8A:06:BD:75:6A:02:22:DD:CE:30:A6:AB:D9:5D:52 Certificate issuer: /CN=a3398dc1-de03-4844-957b-e882d7878ae2 Certificate serial: 010D0C9F4328584AC3B1150159DAE5FD486BCE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/a3398dc1-de03-4844-957b-e882d7878ae2.mft Manifest number: 010D0C9F4328584073A8471614A6B3775D4E4547 Signing time: Wed 06 Aug 2025 08:00:08 +0000 Manifest this update: Wed 06 Aug 2025 08:00:08 +0000 Manifest next update: Fri 08 Aug 2025 08:00:00 +0000 Files and hashes: 1: 74fe514f-f282-3fdf-b82d-5a7c858132a2.roa (hash: f0Yyf25oZcbVqdbvSq4qbR1Lt8/veFpsIYgv2wCPCz0=) 2: a3398dc1-de03-4844-957b-e882d7878ae2.crl (hash: 8B4QZCYTpWzWVN6Qhf5Uv9ji09Ivi2B4OJgf+DlIjds=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/a3398dc1-de03-4844-957b-e882d7878ae2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/a3398dc1-de03-4844-957b-e882d7878ae2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c3:b1:15:01:59:da:e5:fd:48:6b:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3398dc1-de03-4844-957b-e882d7878ae2 Validity Not Before: Aug 6 08:00:08 2025 GMT Not After : Aug 8 08:00:00 2025 GMT Subject: CN=1831f3be-6121-40aa-8341-caf1f0e39a6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9f:a8:0e:ba:0a:c8:bc:00:ab:0d:77:23:32: fd:a7:f6:29:d7:b2:62:c6:34:61:68:f0:99:3c:be: b7:a3:86:ce:d3:ae:3f:a3:df:d1:85:55:2a:a3:57: ce:4c:a9:f5:56:cc:c9:19:24:fd:50:d5:86:12:8f: bd:05:1d:da:a1:f6:e0:9c:06:45:9d:05:9b:30:13: 9f:bd:37:89:22:22:07:fb:39:59:d4:6b:ef:31:96: 69:f9:05:29:c9:6c:43:5e:8a:eb:3e:b7:fb:b4:b5: c6:8e:02:bb:45:47:7e:f6:f0:ee:05:aa:ea:ad:1f: 71:13:ce:07:cc:d5:e5:08:55:a3:79:84:05:86:f0: 27:cd:d0:51:c8:b0:e6:3d:a6:01:19:31:b0:5d:84: 50:f1:ae:0f:ee:db:ab:10:c9:f8:6a:c9:b8:73:52: 06:1f:64:15:f5:36:82:20:71:8d:aa:4b:79:e8:20: 14:3f:16:0e:59:82:e1:4c:39:4c:f3:32:d9:c2:5e: a5:4d:76:68:d8:f6:4c:3d:90:e1:2c:fe:d9:c0:33: 9c:e4:28:8c:46:2f:50:c3:59:c7:7b:85:56:f2:f1: ec:e2:85:fb:ab:57:ab:7e:95:2c:9b:88:ee:06:77: 04:36:ab:4f:24:d8:bd:00:4e:56:95:c9:1c:38:d1: ce:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:6A:01:4A:83:86:9D:A3:B9:43:5F:F6:22:09:0B:9D:FE:F0:34:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/a3398dc1-de03-4844-957b-e882d7878ae2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/a3398dc1-de03-4844-957b-e882d7878ae2.crl X509v3 Authority Key Identifier: keyid:42:C5:92:1E:2A:8A:06:BD:75:6A:02:22:DD:CE:30:A6:AB:D9:5D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:74:23:22:9c:e5:55:f1:69:08:b0:2f:fa:d7:1c:61:71:90: 89:1c:c3:3e:06:2d:41:1d:0d:89:3a:36:39:14:43:bf:f9:14: 83:5f:66:9d:51:eb:c8:a5:e7:36:96:2e:ea:bf:75:c1:ad:e6: 88:29:41:04:5e:21:d0:9d:0d:10:a1:06:9c:b8:32:48:34:5a: 53:3d:1f:9b:f3:f7:e5:d2:c2:2c:c2:c6:99:72:bd:f0:4c:37: d1:fb:e0:a4:02:a1:2a:eb:a0:96:ea:0e:bd:4f:13:98:1b:b7: 0c:bc:7c:69:50:c9:d1:0f:7d:88:5f:74:67:47:78:d0:86:67: da:9a:de:c2:9d:53:60:17:cd:61:c0:32:4c:e3:cc:eb:13:44: 32:d1:05:2e:a5:0e:f9:ac:23:04:62:18:cb:8e:c7:fd:6d:8c: ec:48:35:e6:11:3f:06:50:54:67:32:13:60:2f:29:ee:e4:2a: 06:cd:48:80:75:d4:b1:76:21:a8:d4:bb:62:b8:c7:db:c5:ef: 39:e0:24:3e:e9:a4:23:12:18:38:b9:b8:b3:d7:83:71:14:b5: 6b:80:79:b7:59:15:cc:94:be:b8:96:28:cb:24:c9:bb:bf:c2: 79:8b:71:93:e5:c5:bb:c5:60:e4:0a:ed:6a:87:43:04:6a:71: ba:62:6a:da -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErDsRUBWdrl/UhrzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMzOThkYzEtZGUwMy00ODQ0LTk1N2ItZTg4MmQ3ODc4 YWUyMB4XDTI1MDgwNjA4MDAwOFoXDTI1MDgwODA4MDAwMFowLzEtMCsGA1UEAxMk MTgzMWYzYmUtNjEyMS00MGFhLTgzNDEtY2FmMWYwZTM5YTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmp+oDroKyLwAqw13IzL9p/Yp17JixjRhaPCZ PL63o4bO064/o9/RhVUqo1fOTKn1VszJGST9UNWGEo+9BR3aofbgnAZFnQWbMBOf vTeJIiIH+zlZ1GvvMZZp+QUpyWxDXorrPrf7tLXGjgK7RUd+9vDuBarqrR9xE84H zNXlCFWjeYQFhvAnzdBRyLDmPaYBGTGwXYRQ8a4P7turEMn4asm4c1IGH2QV9TaC IHGNqkt56CAUPxYOWYLhTDlM8zLZwl6lTXZo2PZMPZDhLP7ZwDOc5CiMRi9Qw1nH e4VW8vHs4oX7q1erfpUsm4juBncENqtPJNi9AE5WlckcONHOxQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLdqAUqDhp2juUNf9iIJC53+8DT0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMzM5 OGRjMS1kZTAzLTQ4NDQtOTU3Yi1lODgyZDc4NzhhZTIvYTMzOThkYzEtZGUwMy00 ODQ0LTk1N2ItZTg4MmQ3ODc4YWUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTMzOThkYzEtZGUwMy00ODQ0LTk1 N2ItZTg4MmQ3ODc4YWUyL2EzMzk4ZGMxLWRlMDMtNDg0NC05NTdiLWU4ODJkNzg3 OGFlMi5jcmwwHwYDVR0jBBgwFoAUQsWSHiqKBr11agIi3c4wpqvZXVIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hMzM5OGRjMS1kZTAzLTQ4NDQtOTU3Yi1lODgy ZDc4NzhhZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBNdCMinOVV8WkIsC/61xxh cZCJHMM+Bi1BHQ2JOjY5FEO/+RSDX2adUevIpec2li7qv3XBreaIKUEEXiHQnQ0Q oQacuDJINFpTPR+b8/fl0sIswsaZcr3wTDfR++CkAqEq66CW6g69TxOYG7cMvHxp UMnRD32IX3RnR3jQhmfamt7CnVNgF81hwDJM48zrE0Qy0QUupQ75rCMEYhjLjsf9 bYzsSDXmET8GUFRnMhNgLynu5CoGzUiAddSxdiGo1LtiuMfbxe854CQ+6aQjEhg4 ubiz14NxFLVrgHm3WRXMlL64lijLJMm7v8J5i3GT5cW7xWDkCu1qh0MEanG6Ymra -----END CERTIFICATE-----Generated at Wed Aug 6 11:03:36 2025 by rpki-client