$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft File: 3d21f741-fd91-4158-8853-7388dab3b3e3.mft (raw, json) Hash identifier: EwSyd+lylrXokM9E8e6I8gPvyzp/7nlGfaaHGjKmJKQ= Subject key identifier: E3:23:DF:CA:BF:C3:E8:E0:79:8F:AA:10:BA:B6:A7:1A:9C:C4:8F:38 Authority key identifier: A7:AF:BF:E1:62:39:AF:97:9B:56:A5:07:BE:38:09:30:7F:F3:BE:14 Certificate issuer: /CN=3d21f741-fd91-4158-8853-7388dab3b3e3 Certificate serial: 010D0C9F4328584AC6B747EE1A47BB765B9E4780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft Manifest number: 010D0C9F4328584073A84C34E2402761CF9DBAC9 Signing time: Thu 07 Aug 2025 10:00:03 +0000 Manifest this update: Thu 07 Aug 2025 10:00:03 +0000 Manifest next update: Sun 10 Aug 2025 10:00:00 +0000 Files and hashes: 1: 3d21f741-fd91-4158-8853-7388dab3b3e3.crl (hash: gnwNxJVNLCqZn68GTEcN0qgoYT5x475xQEDazRP6CF4=) 2: 90ad5afb-11a5-3a7e-af84-85ae08f294f7.roa (hash: XNhH0OmiACW7ouB/7jH8prFuvyZiw+WI1Wxc7WjNwPc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c6:b7:47:ee:1a:47:bb:76:5b:9e:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d21f741-fd91-4158-8853-7388dab3b3e3 Validity Not Before: Aug 7 10:00:03 2025 GMT Not After : Aug 10 10:00:00 2025 GMT Subject: CN=933ec6d3-65bb-4b7e-9ecf-5efd894991e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7e:93:67:05:77:51:ce:4d:9b:fb:58:a7:02: 0b:1d:05:e6:87:b8:d6:40:af:39:c0:4f:08:42:8f: ff:82:98:62:04:fe:63:90:cb:b7:ae:7e:c9:a0:37: f3:7f:56:11:fe:67:ad:c4:53:54:db:94:de:b5:5e: e0:20:8d:fb:23:43:b9:37:dd:ba:73:69:4a:cf:0e: 8c:d7:30:9d:5c:d6:68:10:f2:6c:14:39:6a:be:b6: 03:f1:24:a2:fd:0f:0d:c1:87:07:7c:96:2f:98:8e: e0:cc:57:8f:f6:33:1f:10:95:8e:55:39:84:1d:a6: 0b:62:c8:de:2a:ad:1c:05:39:f3:f2:ef:fa:84:e7: c9:52:5d:10:66:1d:ec:09:c7:4b:10:3a:b2:90:d6: 2a:89:fd:26:71:ae:e1:0e:d4:1e:79:26:46:7a:5c: 76:0f:47:78:4f:7f:d5:96:2a:d6:f5:30:d5:f4:cf: d0:c0:85:68:27:45:ce:bd:34:d8:31:df:5e:0c:3d: 2d:00:b6:c1:c7:07:1d:fe:00:e7:dd:4a:a8:ee:fb: 9e:fc:8f:26:42:55:73:d9:f1:9c:6a:b8:50:36:06: 79:d3:97:00:02:38:a7:a8:fc:2f:03:1e:de:38:6f: ba:a2:d5:52:3f:79:3a:3d:fb:07:c2:bb:a1:ef:98: e5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:23:DF:CA:BF:C3:E8:E0:79:8F:AA:10:BA:B6:A7:1A:9C:C4:8F:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.crl X509v3 Authority Key Identifier: keyid:A7:AF:BF:E1:62:39:AF:97:9B:56:A5:07:BE:38:09:30:7F:F3:BE:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:72:2e:3a:29:94:dc:de:42:1b:90:36:fc:42:27:5a:c2:74: b7:fd:b1:e8:8f:a8:f1:62:ac:4b:db:23:b1:8b:59:c4:c4:2d: d6:54:58:49:65:91:b2:92:90:16:15:17:10:3f:20:7d:d0:c1: 4e:62:75:5a:15:91:12:e7:64:39:e1:3d:58:cf:59:db:5c:59: b6:54:f5:5d:cb:bd:d8:25:9d:02:2d:0d:f2:9a:b3:96:1f:47: f2:b0:d3:41:54:e2:1f:29:f4:c7:4c:9a:53:db:f6:ea:d1:e9: 71:11:8b:13:4f:d0:22:45:c1:bd:f7:02:ff:23:d3:4b:be:87: 88:d7:57:18:78:77:0f:28:b7:c2:75:10:9f:0c:d7:41:f3:4a: 54:b9:a9:91:a9:b1:27:34:cf:d0:9e:5e:a1:7f:09:1f:b5:38: 2f:3c:f0:d3:02:1e:a4:42:0e:0f:cc:ea:90:79:d5:1f:27:52: 76:f2:7d:2d:51:1f:a9:9f:d9:37:7f:41:0e:c4:cc:83:77:ad: a9:1b:00:28:32:cb:71:61:32:b5:9f:a9:14:1a:ed:0b:8e:b5: 35:e0:34:a6:bd:eb:9d:c6:03:21:43:ae:71:25:02:b0:ad:32: cc:54:21:17:fd:af:24:31:7b:85:ce:5a:00:ae:e9:47:73:87: b2:62:1f:bc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErGt0fuGke7dlueR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QyMWY3NDEtZmQ5MS00MTU4LTg4NTMtNzM4OGRhYjNi M2UzMB4XDTI1MDgwNzEwMDAwM1oXDTI1MDgxMDEwMDAwMFowLzEtMCsGA1UEAxMk OTMzZWM2ZDMtNjViYi00YjdlLTllY2YtNWVmZDg5NDk5MWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi36TZwV3Uc5Nm/tYpwILHQXmh7jWQK85wE8I Qo//gphiBP5jkMu3rn7JoDfzf1YR/metxFNU25TetV7gII37I0O5N926c2lKzw6M 1zCdXNZoEPJsFDlqvrYD8SSi/Q8NwYcHfJYvmI7gzFeP9jMfEJWOVTmEHaYLYsje Kq0cBTnz8u/6hOfJUl0QZh3sCcdLEDqykNYqif0mca7hDtQeeSZGelx2D0d4T3/V lirW9TDV9M/QwIVoJ0XOvTTYMd9eDD0tALbBxwcd/gDn3Uqo7vue/I8mQlVz2fGc arhQNgZ505cAAjinqPwvAx7eOG+6otVSP3k6PfsHwruh75jlqQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOMj38q/w+jgeY+qELq2pxqcxI84MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZDIx Zjc0MS1mZDkxLTQxNTgtODg1My03Mzg4ZGFiM2IzZTMvM2QyMWY3NDEtZmQ5MS00 MTU4LTg4NTMtNzM4OGRhYjNiM2UzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2QyMWY3NDEtZmQ5MS00MTU4LTg4 NTMtNzM4OGRhYjNiM2UzLzNkMjFmNzQxLWZkOTEtNDE1OC04ODUzLTczODhkYWIz YjNlMy5jcmwwHwYDVR0jBBgwFoAUp6+/4WI5r5ebVqUHvjgJMH/zvhQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZDIxZjc0MS1mZDkxLTQxNTgtODg1My03Mzg4 ZGFiM2IzZTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQANci46KZTc3kIbkDb8Qida wnS3/bHoj6jxYqxL2yOxi1nExC3WVFhJZZGykpAWFRcQPyB90MFOYnVaFZES52Q5 4T1Yz1nbXFm2VPVdy73YJZ0CLQ3ymrOWH0fysNNBVOIfKfTHTJpT2/bq0elxEYsT T9AiRcG99wL/I9NLvoeI11cYeHcPKLfCdRCfDNdB80pUuamRqbEnNM/Qnl6hfwkf tTgvPPDTAh6kQg4PzOqQedUfJ1J28n0tUR+pn9k3f0EOxMyDd62pGwAoMstxYTK1 n6kUGu0LjrU14DSmveudxgMhQ65xJQKwrTLMVCEX/a8kMXuFzloArulHc4eyYh+8 -----END CERTIFICATE-----Generated at Fri Aug 8 00:34:34 2025 by rpki-client