$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.mft File: 3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.mft (raw, json) Hash identifier: QXVhoSgMRBCzNpLJH9N8Y3jgCNkfUAUyUpLGVZ/+Avo= Subject key identifier: A6:50:C2:3B:22:CE:21:BA:C7:74:22:96:49:B9:49:AD:F6:6D:D4:B1 Authority key identifier: 3E:98:7B:0D:CE:66:B6:86:13:8A:2A:FB:21:30:82:87:5B:74:B0:49 Certificate issuer: /CN=3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7 Certificate serial: 010D0C9F4328584ABE39726604C7ACAC1E02A3C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.mft Manifest number: 010D0C9F4328584677E442BE896761CB509EC151 Signing time: Mon 04 Aug 2025 09:00:03 +0000 Manifest this update: Mon 04 Aug 2025 09:00:03 +0000 Manifest next update: Thu 07 Aug 2025 09:00:00 +0000 Files and hashes: 1: 08b21afd-c79d-35c4-91d3-323622a79ddc.roa (hash: /24iL5Cc1dLuDjSNgoUhXSIXb0pLmQcyeWI91QlO2rY=) 2: 3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.crl (hash: +dPKfywz4LB4Pu7UGSD8dxXtd1jQeYVzX8wyElnv4K8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:be:39:72:66:04:c7:ac:ac:1e:02:a3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7 Validity Not Before: Aug 4 09:00:03 2025 GMT Not After : Aug 7 09:00:00 2025 GMT Subject: CN=3d75ac85-4f7b-448d-96c7-639f69095cdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:c9:ad:55:c5:46:68:2d:f6:1b:08:20:e7:46: 42:40:10:39:91:69:49:b7:9d:f2:60:11:e4:61:2f: 15:98:7f:69:42:ab:d0:34:eb:ac:db:41:21:e2:0f: d5:dc:e9:f8:33:e6:f3:0b:d4:8d:76:d0:77:77:cd: 89:89:a4:79:79:a2:c5:0c:68:63:c5:cc:2c:bd:69: b9:50:9b:6e:85:e1:4f:03:1e:7e:c1:5f:00:85:33: 0a:93:0b:a7:69:61:8f:2b:c6:45:1c:31:e2:51:1e: 52:ac:4a:81:f7:0c:53:f8:92:9f:48:4b:b3:9b:90: 62:5a:d6:3e:f6:98:fa:61:46:96:bc:47:ee:fd:f9: 34:b1:39:ab:95:fe:de:e6:bd:41:36:9f:00:14:28: cb:b5:50:0f:e1:50:dd:e4:20:a1:68:15:1e:04:a2: 19:b2:b4:a5:19:2e:ab:fa:34:0c:b2:22:34:2c:1e: b1:a7:4a:c5:8d:98:8e:bd:65:43:f9:7d:cd:23:83: c1:22:2f:a9:f6:5a:45:3a:90:9f:17:60:48:b7:b7: 37:fe:a6:05:b1:f1:58:d8:4a:85:c3:1e:75:fc:77: 31:a2:f1:50:f8:48:41:a4:89:60:47:9c:0a:c8:1b: 94:e1:b4:43:d9:1d:37:c3:0a:aa:81:1a:53:19:71: 40:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:50:C2:3B:22:CE:21:BA:C7:74:22:96:49:B9:49:AD:F6:6D:D4:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.crl X509v3 Authority Key Identifier: keyid:3E:98:7B:0D:CE:66:B6:86:13:8A:2A:FB:21:30:82:87:5B:74:B0:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:d3:3c:f5:e6:b8:49:16:0c:d4:83:78:76:a1:31:7c:f0:2e: 53:25:f0:01:b3:32:73:be:c7:67:c9:93:eb:04:a4:1f:8f:2b: 8f:4d:66:f3:5a:17:e9:c3:e3:8e:72:69:e0:02:62:76:b6:df: 30:85:e9:1f:8e:2c:16:e0:cd:d8:ba:49:23:43:eb:2f:d6:9b: 39:79:6b:d2:71:c8:8b:1d:f5:68:f9:8e:12:67:70:e0:66:13: cc:13:a0:f8:e3:56:44:99:53:fe:f1:26:12:c4:3e:10:b9:34: 26:48:a1:17:3c:ed:0d:3a:ab:b2:63:92:45:dd:dd:25:eb:1e: 3f:f1:98:b9:72:37:f6:7e:01:1e:24:03:5b:40:27:3a:18:cd: af:56:5e:b9:1f:80:2e:d2:13:22:01:30:c9:59:f0:a1:7e:4a: 3b:e4:61:bf:56:80:11:73:f1:a1:cf:f4:6f:1f:a8:44:ed:c5: 3c:ba:2b:b0:8f:ef:c7:ed:74:4e:c6:29:8c:fe:15:1f:30:aa: 3e:9e:e3:37:e1:d8:19:c4:dd:a0:72:85:71:9c:ab:04:67:84: 87:c3:bb:1c:7c:54:0b:d4:b3:f3:d8:05:70:26:4b:28:79:95: a0:ad:5b:2c:b3:5f:be:f8:4e:8a:16:02:14:04:ba:aa:72:03: e2:75:9b:4c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEq+OXJmBMesrB4Co8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FlN2VjZmYtZTNhYi00NzJkLWE0ZWMtMGZjZDNmZTk0 YWE3MB4XDTI1MDgwNDA5MDAwM1oXDTI1MDgwNzA5MDAwMFowLzEtMCsGA1UEAxMk M2Q3NWFjODUtNGY3Yi00NDhkLTk2YzctNjM5ZjY5MDk1Y2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+MmtVcVGaC32Gwgg50ZCQBA5kWlJt53yYBHk YS8VmH9pQqvQNOus20Eh4g/V3On4M+bzC9SNdtB3d82JiaR5eaLFDGhjxcwsvWm5 UJtuheFPAx5+wV8AhTMKkwunaWGPK8ZFHDHiUR5SrEqB9wxT+JKfSEuzm5BiWtY+ 9pj6YUaWvEfu/fk0sTmrlf7e5r1BNp8AFCjLtVAP4VDd5CChaBUeBKIZsrSlGS6r +jQMsiI0LB6xp0rFjZiOvWVD+X3NI4PBIi+p9lpFOpCfF2BIt7c3/qYFsfFY2EqF wx51/HcxovFQ+EhBpIlgR5wKyBuU4bRD2R03wwqqgRpTGXFATwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKZQwjsiziG6x3Qilkm5Sa32bdSxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zYWU3 ZWNmZi1lM2FiLTQ3MmQtYTRlYy0wZmNkM2ZlOTRhYTcvM2FlN2VjZmYtZTNhYi00 NzJkLWE0ZWMtMGZjZDNmZTk0YWE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2FlN2VjZmYtZTNhYi00NzJkLWE0 ZWMtMGZjZDNmZTk0YWE3LzNhZTdlY2ZmLWUzYWItNDcyZC1hNGVjLTBmY2QzZmU5 NGFhNy5jcmwwHwYDVR0jBBgwFoAUPph7Dc5mtoYTiir7ITCCh1t0sEkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zYWU3ZWNmZi1lM2FiLTQ3MmQtYTRlYy0wZmNk M2ZlOTRhYTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBM0zz15rhJFgzUg3h2oTF8 8C5TJfABszJzvsdnyZPrBKQfjyuPTWbzWhfpw+OOcmngAmJ2tt8whekfjiwW4M3Y ukkjQ+sv1ps5eWvScciLHfVo+Y4SZ3DgZhPME6D441ZEmVP+8SYSxD4QuTQmSKEX PO0NOquyY5JF3d0l6x4/8Zi5cjf2fgEeJANbQCc6GM2vVl65H4Au0hMiATDJWfCh fko75GG/VoARc/Ghz/RvH6hE7cU8uiuwj+/H7XROximM/hUfMKo+nuM34dgZxN2g coVxnKsEZ4SHw7scfFQL1LPz2AVwJksoeZWgrVsss1+++E6KFgIUBLqqcgPidZtM -----END CERTIFICATE-----Generated at Mon Aug 4 11:08:48 2025 by rpki-client