$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3fd960ab-9af6-47e2-a28d-623b7d4ced6a/3fd960ab-9af6-47e2-a28d-623b7d4ced6a.mft File: 3fd960ab-9af6-47e2-a28d-623b7d4ced6a.mft (raw, json) Hash identifier: 44Abcov6c+0F7gEsaCuaVZFgf4Kp4cTQlbrozP+Kptc= Subject key identifier: ED:DA:2A:8F:BA:10:5C:7F:FD:72:ED:C5:02:93:D2:39:ED:C6:AC:AD Authority key identifier: 37:13:1B:A2:85:A7:04:0D:C6:9E:97:C6:AA:56:FE:A8:3B:B5:06:C2 Certificate issuer: /CN=3fd960ab-9af6-47e2-a28d-623b7d4ced6a Certificate serial: 010D0C9F4328584A304FAC60060B9035EB371080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3fd960ab-9af6-47e2-a28d-623b7d4ced6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3fd960ab-9af6-47e2-a28d-623b7d4ced6a/3fd960ab-9af6-47e2-a28d-623b7d4ced6a.mft Manifest number: 010D0C9F43285849D9D65FE8AFBABE9E8FB01020 Signing time: Sat 14 Jun 2025 13:00:03 +0000 Manifest this update: Sat 14 Jun 2025 13:00:03 +0000 Manifest next update: Mon 16 Jun 2025 13:00:00 +0000 Files and hashes: 1: 3fd960ab-9af6-47e2-a28d-623b7d4ced6a.crl (hash: lZh+qqIfHvxDy2Erfk7wXQM9xqmUCrQC+V7eu1QKYDQ=) 2: d2418aec-7a93-3789-881e-6e9bb35e157e.roa (hash: I7AxVqQH5GhZ1qc0BTNtCovzMgAIs3h2exCuQpxzmug=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3fd960ab-9af6-47e2-a28d-623b7d4ced6a/3fd960ab-9af6-47e2-a28d-623b7d4ced6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3fd960ab-9af6-47e2-a28d-623b7d4ced6a/3fd960ab-9af6-47e2-a28d-623b7d4ced6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3fd960ab-9af6-47e2-a28d-623b7d4ced6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:30:4f:ac:60:06:0b:90:35:eb:37:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd960ab-9af6-47e2-a28d-623b7d4ced6a Validity Not Before: Jun 14 13:00:03 2025 GMT Not After : Jun 16 13:00:00 2025 GMT Subject: CN=11b7e997-d1e4-41b8-a3d2-4fabdfe56f44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:fe:69:0f:95:0c:41:16:f0:55:79:77:28:f5: 55:aa:e5:c1:67:62:cb:23:e0:5d:ec:c1:13:46:e0: cb:a3:72:6d:9a:bf:f9:3d:ea:00:c3:9e:f5:27:a1: 83:ff:f1:55:56:20:9b:f6:d2:9e:1e:39:02:54:3f: 86:08:2c:5a:09:f7:a7:7c:a5:15:27:a4:80:bc:9b: e9:67:a3:cb:0e:59:d9:c6:7a:3a:cb:b1:ef:5b:e6: 90:0b:64:c3:4d:07:8e:c5:a8:bf:2c:75:bc:e6:46: 83:8c:dc:6a:aa:28:f5:c5:15:43:78:c6:db:c1:1a: 7f:85:27:7d:c6:76:65:c4:ca:43:ae:9c:12:e5:54: 91:54:af:16:78:0c:3e:f8:26:72:62:ad:40:1e:9c: b0:29:5c:ca:83:0b:c4:1b:95:aa:08:a1:65:68:1f: de:73:ad:d9:27:36:5c:85:4f:30:99:aa:af:ca:51: 77:aa:ec:1b:fa:2c:fe:b1:c9:7d:63:0e:13:50:9d: 60:d8:51:1f:6b:70:cc:69:77:2f:08:87:53:00:25: c2:e8:28:99:80:e9:b0:bc:48:b6:4a:81:75:a0:f9: 51:30:24:f6:88:4c:8e:d5:18:0b:6b:fc:85:bc:3a: 23:29:bc:85:af:42:a2:23:8d:bb:a9:d2:ce:b1:39: a4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:DA:2A:8F:BA:10:5C:7F:FD:72:ED:C5:02:93:D2:39:ED:C6:AC:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3fd960ab-9af6-47e2-a28d-623b7d4ced6a/3fd960ab-9af6-47e2-a28d-623b7d4ced6a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3fd960ab-9af6-47e2-a28d-623b7d4ced6a/3fd960ab-9af6-47e2-a28d-623b7d4ced6a.crl X509v3 Authority Key Identifier: keyid:37:13:1B:A2:85:A7:04:0D:C6:9E:97:C6:AA:56:FE:A8:3B:B5:06:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3fd960ab-9af6-47e2-a28d-623b7d4ced6a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:46:5c:f1:d2:37:6f:70:9a:2f:b1:9f:f2:0f:48:44:d3:c2: 02:71:0f:49:f8:cf:fa:69:0c:09:d7:4d:c9:71:33:42:c5:e7: b6:65:48:49:7b:2f:a2:11:20:d9:74:c7:39:d6:81:99:37:0e: 9f:40:7a:e8:37:fc:1e:c9:8f:3d:65:16:d4:ec:98:25:55:33: 36:f6:ed:23:c6:77:e9:54:2c:c3:48:4f:62:da:8c:c5:db:43: 7c:87:b6:a1:ee:24:87:67:92:c9:38:49:b7:1c:90:f2:b4:53: 94:21:87:46:68:98:4c:18:19:cb:ce:6f:a7:48:3b:7e:6e:df: 0d:30:86:e7:c7:c7:dd:ca:52:36:b6:5b:5c:82:ad:f3:ae:38: a0:f4:f8:10:4d:8c:47:e7:1b:fa:55:96:d0:d4:06:71:0d:e4: 9f:75:2b:08:bf:ee:cf:9f:ed:d6:b8:52:b2:64:cc:b3:66:9f: 34:d0:5b:25:16:de:7d:6a:ed:ec:57:36:6f:ef:ac:b4:14:5f: d6:b5:08:2d:94:e2:22:f7:48:c1:b6:51:e0:cd:82:a9:ca:95: 35:c2:b7:3a:51:c8:2b:09:ab:b8:c9:1a:e1:a2:9f:ad:4e:95: a2:f1:2c:79:a9:70:79:6d:63:f9:56:c8:a9:53:9f:70:2d:1e: 94:69:ec:1b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEowT6xgBguQNes3EIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ZkOTYwYWItOWFmNi00N2UyLWEyOGQtNjIzYjdkNGNl ZDZhMB4XDTI1MDYxNDEzMDAwM1oXDTI1MDYxNjEzMDAwMFowLzEtMCsGA1UEAxMk MTFiN2U5OTctZDFlNC00MWI4LWEzZDItNGZhYmRmZTU2ZjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhP5pD5UMQRbwVXl3KPVVquXBZ2LLI+Bd7MET RuDLo3Jtmr/5PeoAw571J6GD//FVViCb9tKeHjkCVD+GCCxaCfenfKUVJ6SAvJvp Z6PLDlnZxno6y7HvW+aQC2TDTQeOxai/LHW85kaDjNxqqij1xRVDeMbbwRp/hSd9 xnZlxMpDrpwS5VSRVK8WeAw++CZyYq1AHpywKVzKgwvEG5WqCKFlaB/ec63ZJzZc hU8wmaqvylF3quwb+iz+scl9Yw4TUJ1g2FEfa3DMaXcvCIdTACXC6CiZgOmwvEi2 SoF1oPlRMCT2iEyO1RgLa/yFvDojKbyFr0KiI427qdLOsTmkrQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFO3aKo+6EFx//XLtxQKT0jntxqytMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZmQ5 NjBhYi05YWY2LTQ3ZTItYTI4ZC02MjNiN2Q0Y2VkNmEvM2ZkOTYwYWItOWFmNi00 N2UyLWEyOGQtNjIzYjdkNGNlZDZhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2ZkOTYwYWItOWFmNi00N2UyLWEy OGQtNjIzYjdkNGNlZDZhLzNmZDk2MGFiLTlhZjYtNDdlMi1hMjhkLTYyM2I3ZDRj ZWQ2YS5jcmwwHwYDVR0jBBgwFoAUNxMbooWnBA3GnpfGqlb+qDu1BsIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZmQ5NjBhYi05YWY2LTQ3ZTItYTI4ZC02MjNi N2Q0Y2VkNmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQACRlzx0jdvcJovsZ/yD0hE 08ICcQ9J+M/6aQwJ103JcTNCxee2ZUhJey+iESDZdMc51oGZNw6fQHroN/weyY89 ZRbU7JglVTM29u0jxnfpVCzDSE9i2ozF20N8h7ah7iSHZ5LJOEm3HJDytFOUIYdG aJhMGBnLzm+nSDt+bt8NMIbnx8fdylI2tltcgq3zrjig9PgQTYxH5xv6VZbQ1AZx DeSfdSsIv+7Pn+3WuFKyZMyzZp800FslFt59au3sVzZv76y0FF/WtQgtlOIi90jB tlHgzYKpypU1wrc6UcgrCau4yRrhop+tTpWi8Sx5qXB5bWP5VsipU59wLR6Uaewb -----END CERTIFICATE-----Generated at Sat Jun 14 17:09:32 2025 by rpki-client