$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.mft File: 3bfea78e-552c-46d0-a7b4-60f999223238.mft (raw, json) Hash identifier: g2nRCN1lvlFKXeU2g0gxCTZjx1Piu7699Paem106CSw= Subject key identifier: 56:00:83:F7:8B:5F:25:DD:F6:56:79:B6:E5:CA:BE:16:6C:F0:AE:A6 Authority key identifier: D7:A9:E9:5F:B8:85:26:BB:3C:57:88:CD:07:2A:BF:B7:6B:2E:8A:96 Certificate issuer: /CN=3bfea78e-552c-46d0-a7b4-60f999223238 Certificate serial: 010D0C9F4328584AC1F260C42EE52294DF616980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.mft Manifest number: 010D0C9F43285845DC7F251890046E2B090F55BB Signing time: Tue 05 Aug 2025 17:00:03 +0000 Manifest this update: Tue 05 Aug 2025 17:00:03 +0000 Manifest next update: Thu 07 Aug 2025 17:00:00 +0000 Files and hashes: 1: 3bfea78e-552c-46d0-a7b4-60f999223238.crl (hash: kOy+0JZ/9LJOLbPSC6HB9kClWdrhOgUbMPSmy4YKdFI=) 2: b07aee0a-5e02-3527-90d1-9ec6e19a26e3.roa (hash: WGG4RWebETDVZWAeqlt2fARQ+bjeUstg91HEmFverPQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c1:f2:60:c4:2e:e5:22:94:df:61:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bfea78e-552c-46d0-a7b4-60f999223238 Validity Not Before: Aug 5 17:00:03 2025 GMT Not After : Aug 7 17:00:00 2025 GMT Subject: CN=9af11e7d-3c25-4d4b-a0b5-37645c93935a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:00:ee:74:fd:50:d9:31:56:05:1e:e2:56:af: 49:fa:58:4d:51:ea:41:95:26:47:9c:d3:7c:7d:73: 41:5a:96:ac:f0:2a:65:81:df:42:71:79:07:db:b9: 93:6a:90:9f:de:5a:58:29:d7:b8:73:b3:ff:b1:aa: d1:66:19:fb:35:9c:b9:3f:2c:15:33:61:f9:fc:ff: 61:a1:d5:50:25:f7:22:bf:92:1e:e8:5d:53:d3:3a: 24:4f:b0:08:fc:4a:b1:8b:51:4b:54:aa:55:5e:52: 2f:51:96:f5:70:ed:c3:b4:a7:8f:04:a9:a0:15:f2: e0:fa:91:04:84:e0:ed:25:01:fc:75:d1:2a:72:2a: a1:82:21:ec:5d:c3:37:95:a4:a1:05:d2:cd:c3:76: 9b:8c:62:7b:f7:5f:93:ac:7f:1e:69:0b:e7:44:6a: 13:78:e5:08:fb:83:96:4e:af:88:4d:3e:87:72:be: aa:26:b5:20:64:a4:c4:31:9a:90:59:e3:58:d9:7c: 41:5f:25:cd:22:02:e3:77:ed:84:8f:a2:23:9f:63: a7:86:44:cc:16:fd:64:df:1b:a1:13:06:23:de:eb: fc:b0:55:5d:18:61:72:3d:8f:62:52:71:19:d8:a4: 55:49:c3:7d:1e:3c:4e:87:aa:eb:22:4f:84:1b:bb: 47:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:00:83:F7:8B:5F:25:DD:F6:56:79:B6:E5:CA:BE:16:6C:F0:AE:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.crl X509v3 Authority Key Identifier: keyid:D7:A9:E9:5F:B8:85:26:BB:3C:57:88:CD:07:2A:BF:B7:6B:2E:8A:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:24:86:d0:68:6a:16:1d:b4:cc:4b:a2:3e:a2:6f:d9:91:5b: ac:ba:80:23:5e:a6:be:36:dc:7c:ac:c3:88:c9:48:a6:f5:54: a3:76:e2:c3:09:72:fa:f7:d5:9c:3a:6c:a9:d9:65:51:e4:bf: c3:70:d7:6c:cf:8a:90:5b:fa:0d:d2:41:57:a6:cf:fd:73:f6: e2:fa:ca:1d:ee:b3:24:30:3e:fc:c7:ad:98:ef:24:2a:d6:0b: f9:36:a7:26:21:fd:52:0f:5f:71:fd:9d:05:7c:63:11:65:99: f0:be:3c:5c:e7:c4:74:6d:26:8b:51:1d:42:7d:77:00:11:bb: 99:22:c1:e6:03:29:a0:9e:34:51:de:fc:8e:7f:b5:00:20:ce: c1:0e:14:b7:4c:d7:75:12:9c:70:c2:84:f3:e7:e8:88:d2:29: a3:8d:9b:2b:e4:0f:1e:66:a1:a6:65:f3:f0:82:74:17:86:d7: 60:40:3b:12:6f:9a:5b:35:28:dc:b7:7d:88:88:66:a8:63:d3: 17:d8:c0:80:86:ba:e7:ee:e3:22:f1:49:b3:e5:3f:43:14:35: f7:39:ec:cc:e5:94:1f:71:28:28:22:8e:80:69:af:c1:19:8c: 18:0b:d2:7a:9f:ec:4f:75:6f:81:7c:e4:37:c3:a2:18:52:17: 03:b6:64:27 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErB8mDELuUilN9haYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JmZWE3OGUtNTUyYy00NmQwLWE3YjQtNjBmOTk5MjIz MjM4MB4XDTI1MDgwNTE3MDAwM1oXDTI1MDgwNzE3MDAwMFowLzEtMCsGA1UEAxMk OWFmMTFlN2QtM2MyNS00ZDRiLWEwYjUtMzc2NDVjOTM5MzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wDudP1Q2TFWBR7iVq9J+lhNUepBlSZHnNN8 fXNBWpas8Cplgd9CcXkH27mTapCf3lpYKde4c7P/sarRZhn7NZy5PywVM2H5/P9h odVQJfciv5Ie6F1T0zokT7AI/Eqxi1FLVKpVXlIvUZb1cO3DtKePBKmgFfLg+pEE hODtJQH8ddEqciqhgiHsXcM3laShBdLNw3abjGJ791+TrH8eaQvnRGoTeOUI+4OW Tq+ITT6Hcr6qJrUgZKTEMZqQWeNY2XxBXyXNIgLjd+2Ej6Ijn2OnhkTMFv1k3xuh EwYj3uv8sFVdGGFyPY9iUnEZ2KRVScN9HjxOh6rrIk+EG7tH7wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFYAg/eLXyXd9lZ5tuXKvhZs8K6mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zYmZl YTc4ZS01NTJjLTQ2ZDAtYTdiNC02MGY5OTkyMjMyMzgvM2JmZWE3OGUtNTUyYy00 NmQwLWE3YjQtNjBmOTk5MjIzMjM4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2JmZWE3OGUtNTUyYy00NmQwLWE3 YjQtNjBmOTk5MjIzMjM4LzNiZmVhNzhlLTU1MmMtNDZkMC1hN2I0LTYwZjk5OTIy MzIzOC5jcmwwHwYDVR0jBBgwFoAU16npX7iFJrs8V4jNByq/t2suipYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zYmZlYTc4ZS01NTJjLTQ2ZDAtYTdiNC02MGY5 OTkyMjMyMzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBsJIbQaGoWHbTMS6I+om/Z kVusuoAjXqa+Ntx8rMOIyUim9VSjduLDCXL699WcOmyp2WVR5L/DcNdsz4qQW/oN 0kFXps/9c/bi+sod7rMkMD78x62Y7yQq1gv5NqcmIf1SD19x/Z0FfGMRZZnwvjxc 58R0bSaLUR1CfXcAEbuZIsHmAymgnjRR3vyOf7UAIM7BDhS3TNd1EpxwwoTz5+iI 0imjjZsr5A8eZqGmZfPwgnQXhtdgQDsSb5pbNSjct32IiGaoY9MX2MCAhrrn7uMi 8Umz5T9DFDX3OezM5ZQfcSgoIo6Aaa/BGYwYC9J6n+xPdW+BfOQ3w6IYUhcDtmQn -----END CERTIFICATE-----Generated at Tue Aug 5 23:05:44 2025 by rpki-client