$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft File: 3b24522b-8239-4bb9-9845-1e01e28aa452.mft (raw, json) Hash identifier: tCphiIptq3yxzdFhFV7/e1EmGYOgGfOPB+h5o5iZzaA= Subject key identifier: DD:3B:D2:2E:55:38:54:53:5E:EE:28:24:10:64:26:91:CE:26:C7:9D Authority key identifier: A0:02:F5:68:D9:AE:0F:63:11:51:15:44:02:1D:1D:5B:FE:4E:B0:D2 Certificate issuer: /CN=3b24522b-8239-4bb9-9845-1e01e28aa452 Certificate serial: 010D0C9F4328584ABF633B8BB9CD306C32996150 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft Manifest number: 010D0C9F43285846097092BB96E608752D6F706F Signing time: Mon 04 Aug 2025 19:00:03 +0000 Manifest this update: Mon 04 Aug 2025 19:00:03 +0000 Manifest next update: Thu 07 Aug 2025 19:00:00 +0000 Files and hashes: 1: 3b24522b-8239-4bb9-9845-1e01e28aa452.crl (hash: pRRb3sX2DZ6sJ2ykht68RwDJDKI9iIcEhMafdCeup5s=) 2: a3278fd8-969b-3d7a-b7c1-e5f4aaba073f.roa (hash: oTEEtG2U23A4LGwYMB1oH0mglsW8YQlgtjW+ktSLbhI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bf:63:3b:8b:b9:cd:30:6c:32:99:61:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b24522b-8239-4bb9-9845-1e01e28aa452 Validity Not Before: Aug 4 19:00:03 2025 GMT Not After : Aug 7 19:00:00 2025 GMT Subject: CN=99809a6d-5c1e-4c94-86d2-0d7912b7d050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7b:79:13:91:6c:89:01:10:75:72:b0:11:d7: 5d:db:94:32:63:56:c6:34:fe:2e:65:7c:ad:a5:ac: be:13:64:1d:01:c0:86:d8:20:44:77:50:02:0a:f5: 41:d6:7b:6a:0c:9f:73:49:46:45:8d:39:53:91:3b: 1e:0d:ad:0d:3c:ff:41:e9:93:30:2c:cc:65:f6:46: 34:b3:1b:40:d5:9f:af:37:fe:d7:82:e2:ba:34:0f: 69:bf:fe:69:34:3c:6e:a4:21:b0:3a:70:17:89:96: 78:c0:9f:98:94:e2:84:1d:e2:0e:05:69:64:7e:db: 03:75:2b:7b:9c:c9:ab:ed:b3:32:b8:f9:08:09:18: ba:80:56:00:f0:53:b7:5e:60:83:e5:53:5b:5e:21: d7:38:7b:a4:e9:4d:ab:d7:37:9d:71:85:78:b3:c5: a9:9e:ce:a9:08:e0:40:17:86:49:ea:1e:6f:0b:5a: 08:70:64:1c:b5:b0:08:4f:23:47:fb:66:50:ab:c7: 13:84:9e:ca:53:0e:67:74:d6:73:28:83:2c:ce:0a: 0b:44:fb:15:d2:c3:af:b5:a6:12:c4:22:89:0d:95: 89:ba:36:bb:7e:51:2c:36:f4:d0:89:ca:ea:59:c7: ba:05:af:b6:d3:56:7e:d2:fc:ca:e2:31:18:27:fd: 73:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:3B:D2:2E:55:38:54:53:5E:EE:28:24:10:64:26:91:CE:26:C7:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.crl X509v3 Authority Key Identifier: keyid:A0:02:F5:68:D9:AE:0F:63:11:51:15:44:02:1D:1D:5B:FE:4E:B0:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:3a:d0:82:53:a3:b8:18:42:2d:7e:65:dc:11:53:fc:e3:26: 34:68:7d:ff:07:26:27:24:31:97:dd:e5:df:79:b5:e8:3c:08: 31:2b:52:6b:4d:1e:88:96:4f:27:53:26:03:ed:7f:10:25:4f: 23:fa:c4:dc:d1:71:02:df:12:94:4a:11:df:f3:f6:9f:b2:80: 43:b2:70:f6:90:c9:82:45:9a:73:8d:73:d8:52:18:cb:30:f1: bc:7f:ed:63:56:e0:a0:9b:82:55:82:93:b2:60:50:8b:d7:87: 3b:37:0d:31:80:da:74:5f:34:5f:7c:ba:06:9d:c5:51:10:32: c3:00:8d:f8:dd:b2:89:2b:59:27:0a:a6:16:cb:31:a4:de:78: 70:30:dc:d2:8b:43:0c:ca:e6:1f:bc:f7:48:6f:f7:93:f3:01: ac:47:39:64:14:48:d8:82:3e:b5:89:b9:5d:1c:c3:c5:6d:78: ab:ab:f2:ee:b3:af:49:ef:fe:2a:ff:5b:99:c7:5b:60:56:d4: ca:bc:ce:30:16:7e:59:c8:56:d8:a5:f5:56:32:37:5f:9f:9d: 7b:19:63:df:9b:98:8e:0c:e6:90:31:d6:72:78:ba:bf:9d:ce: b5:50:4b:93:e5:4f:e7:4f:c7:c9:a1:19:7b:55:a6:36:7c:60: 06:a1:1b:9e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEq/YzuLuc0wbDKZYVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2IyNDUyMmItODIzOS00YmI5LTk4NDUtMWUwMWUyOGFh NDUyMB4XDTI1MDgwNDE5MDAwM1oXDTI1MDgwNzE5MDAwMFowLzEtMCsGA1UEAxMk OTk4MDlhNmQtNWMxZS00Yzk0LTg2ZDItMGQ3OTEyYjdkMDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHt5E5FsiQEQdXKwEddd25QyY1bGNP4uZXyt pay+E2QdAcCG2CBEd1ACCvVB1ntqDJ9zSUZFjTlTkTseDa0NPP9B6ZMwLMxl9kY0 sxtA1Z+vN/7XguK6NA9pv/5pNDxupCGwOnAXiZZ4wJ+YlOKEHeIOBWlkftsDdSt7 nMmr7bMyuPkICRi6gFYA8FO3XmCD5VNbXiHXOHuk6U2r1zedcYV4s8Wpns6pCOBA F4ZJ6h5vC1oIcGQctbAITyNH+2ZQq8cThJ7KUw5ndNZzKIMszgoLRPsV0sOvtaYS xCKJDZWJuja7flEsNvTQicrqWce6Ba+201Z+0vzK4jEYJ/1zuQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFN070i5VOFRTXu4oJBBkJpHOJsedMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zYjI0 NTIyYi04MjM5LTRiYjktOTg0NS0xZTAxZTI4YWE0NTIvM2IyNDUyMmItODIzOS00 YmI5LTk4NDUtMWUwMWUyOGFhNDUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2IyNDUyMmItODIzOS00YmI5LTk4 NDUtMWUwMWUyOGFhNDUyLzNiMjQ1MjJiLTgyMzktNGJiOS05ODQ1LTFlMDFlMjhh YTQ1Mi5jcmwwHwYDVR0jBBgwFoAUoAL1aNmuD2MRURVEAh0dW/5OsNIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zYjI0NTIyYi04MjM5LTRiYjktOTg0NS0xZTAx ZTI4YWE0NTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAfOtCCU6O4GEItfmXcEVP8 4yY0aH3/ByYnJDGX3eXfebXoPAgxK1JrTR6Ilk8nUyYD7X8QJU8j+sTc0XEC3xKU ShHf8/afsoBDsnD2kMmCRZpzjXPYUhjLMPG8f+1jVuCgm4JVgpOyYFCL14c7Nw0x gNp0XzRffLoGncVREDLDAI343bKJK1knCqYWyzGk3nhwMNzSi0MMyuYfvPdIb/eT 8wGsRzlkFEjYgj61ibldHMPFbXirq/Lus69J7/4q/1uZx1tgVtTKvM4wFn5ZyFbY pfVWMjdfn517GWPfm5iODOaQMdZyeLq/nc61UEuT5U/nT8fJoRl7VaY2fGAGoRue -----END CERTIFICATE-----Generated at Tue Aug 5 20:17:26 2025 by rpki-client