$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.mft File: 3be7133e-7e46-4fc6-9410-e18bafb885d8.mft (raw, json) Hash identifier: EeQhLYbvbDa9hjFD2GcbfDh/1/MJevi6/LY2iv5ozpY= Subject key identifier: 8B:19:80:0F:8F:AD:3D:67:82:18:FF:2F:C4:5D:3E:1E:26:87:3E:02 Authority key identifier: 1B:CD:05:03:12:EB:FC:D7:92:D6:FE:AA:B9:96:69:FA:0D:6C:B0:C0 Certificate issuer: /CN=3be7133e-7e46-4fc6-9410-e18bafb885d8 Certificate serial: 010D0C9F4328584AC13FBAC7E01541CAB3EA95C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.mft Manifest number: 010D0C9F4328584356E47ADE33A7F975BBDBCA39 Signing time: Tue 05 Aug 2025 11:00:08 +0000 Manifest this update: Tue 05 Aug 2025 11:00:08 +0000 Manifest next update: Fri 08 Aug 2025 11:00:00 +0000 Files and hashes: 1: 3be7133e-7e46-4fc6-9410-e18bafb885d8.crl (hash: 4AKnpGbX0YMyqraj3kePVPN/DZ6aplPgz6JYRl7DZwY=) 2: ef5b4f84-fcd9-3e5f-b986-6114bc1ef0b0.roa (hash: UtBQ5JJzkF4nQHGA+Z3yuZnKJj7p7A1010mV+y/2sjE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c1:3f:ba:c7:e0:15:41:ca:b3:ea:95:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3be7133e-7e46-4fc6-9410-e18bafb885d8 Validity Not Before: Aug 5 11:00:08 2025 GMT Not After : Aug 8 11:00:00 2025 GMT Subject: CN=33e17900-9cf6-4d7f-8b26-2ba2a2275bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5a:26:43:f1:cd:4f:14:ce:3c:ac:bd:1c:11: 02:f8:79:59:88:e4:95:df:33:62:11:88:e4:43:c2: 34:ec:b3:e1:1d:97:9d:d0:81:18:76:e7:67:cf:d0: d2:aa:62:65:23:37:5c:6e:f2:ec:b0:ca:aa:34:ac: c5:e8:05:16:ae:5f:09:26:ed:86:c4:16:fc:74:90: b2:88:1a:a9:43:f7:c1:55:95:06:5d:03:61:45:67: c7:e0:7b:b2:d0:c4:25:72:33:6d:bd:28:be:09:0e: 40:d8:a6:e1:d8:a4:15:c1:ff:85:0c:88:c6:78:c2: 05:e7:10:45:ba:0e:dd:98:10:b7:26:77:ce:71:ae: a9:06:4b:53:b5:dc:14:a2:2d:97:a2:9e:8c:5f:de: 42:d5:d5:24:33:ee:16:dd:64:ec:08:6e:f4:04:fe: 52:cd:53:f7:da:8b:7e:28:08:1e:e2:14:aa:74:50: 1a:a6:81:fd:65:55:87:fa:a7:88:8d:49:d8:0b:3e: 43:54:fd:7e:48:76:8f:57:7d:09:db:25:e9:14:59: fd:ac:94:4e:c0:fa:2e:88:2b:6f:40:54:e1:e4:93: d5:3e:a3:16:1f:9b:b0:6d:4f:d7:3f:6c:34:34:33: e2:d4:9c:f8:b1:16:ae:18:f9:6f:b6:bb:cf:7f:78: 4d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:19:80:0F:8F:AD:3D:67:82:18:FF:2F:C4:5D:3E:1E:26:87:3E:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.crl X509v3 Authority Key Identifier: keyid:1B:CD:05:03:12:EB:FC:D7:92:D6:FE:AA:B9:96:69:FA:0D:6C:B0:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:e2:3a:c8:a5:36:01:d9:93:32:07:27:10:4e:a4:62:5f:29: 08:48:51:00:3a:49:60:e5:f4:60:a2:9e:37:7e:ba:86:3c:41: f2:67:bc:7c:8e:bb:6a:f4:4d:17:c4:6f:96:49:87:49:ac:4a: b4:e9:e5:d0:19:22:81:3e:bc:47:c2:5e:5b:2d:d6:23:55:ae: 8a:d9:4d:29:a2:f0:59:aa:1f:c5:eb:8a:48:76:4c:5e:8e:26: a2:13:b3:71:f9:72:2c:2c:37:ab:53:79:f4:dd:40:07:0c:ad: ed:0d:30:e1:91:31:14:3e:5f:0f:61:d4:d9:42:8d:43:93:26: 71:e4:7c:a7:69:9d:f4:ce:09:38:49:ed:6e:89:5c:1d:21:0b: 26:27:16:f4:49:15:5f:e2:81:a5:2c:3f:ca:25:73:db:21:5b: 11:ee:c3:33:01:d1:d6:ff:98:58:44:03:55:ad:c8:e5:60:39: dd:a6:f7:cf:dd:00:d4:2e:f3:c7:69:80:81:6a:cd:40:38:80: 08:79:c0:29:4b:fb:99:62:5b:98:57:67:c3:2e:9f:f3:4c:06: b0:32:7a:31:6b:8c:22:65:52:0e:b8:40:cb:d3:cc:b6:5f:e6: 47:f2:f4:a6:51:7c:14:3b:4b:a6:3a:de:00:77:a0:65:7c:d1: ca:b8:e3:d7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErBP7rH4BVByrPqlcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JlNzEzM2UtN2U0Ni00ZmM2LTk0MTAtZTE4YmFmYjg4 NWQ4MB4XDTI1MDgwNTExMDAwOFoXDTI1MDgwODExMDAwMFowLzEtMCsGA1UEAxMk MzNlMTc5MDAtOWNmNi00ZDdmLThiMjYtMmJhMmEyMjc1YmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1omQ/HNTxTOPKy9HBEC+HlZiOSV3zNiEYjk Q8I07LPhHZed0IEYdudnz9DSqmJlIzdcbvLssMqqNKzF6AUWrl8JJu2GxBb8dJCy iBqpQ/fBVZUGXQNhRWfH4Huy0MQlcjNtvSi+CQ5A2Kbh2KQVwf+FDIjGeMIF5xBF ug7dmBC3JnfOca6pBktTtdwUoi2Xop6MX95C1dUkM+4W3WTsCG70BP5SzVP32ot+ KAge4hSqdFAapoH9ZVWH+qeIjUnYCz5DVP1+SHaPV30J2yXpFFn9rJROwPouiCtv QFTh5JPVPqMWH5uwbU/XP2w0NDPi1Jz4sRauGPlvtrvPf3hNEwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIsZgA+PrT1nghj/L8RdPh4mhz4CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zYmU3 MTMzZS03ZTQ2LTRmYzYtOTQxMC1lMThiYWZiODg1ZDgvM2JlNzEzM2UtN2U0Ni00 ZmM2LTk0MTAtZTE4YmFmYjg4NWQ4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2JlNzEzM2UtN2U0Ni00ZmM2LTk0 MTAtZTE4YmFmYjg4NWQ4LzNiZTcxMzNlLTdlNDYtNGZjNi05NDEwLWUxOGJhZmI4 ODVkOC5jcmwwHwYDVR0jBBgwFoAUG80FAxLr/NeS1v6quZZp+g1ssMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zYmU3MTMzZS03ZTQ2LTRmYzYtOTQxMC1lMThi YWZiODg1ZDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBs4jrIpTYB2ZMyBycQTqRi XykISFEAOklg5fRgop43frqGPEHyZ7x8jrtq9E0XxG+WSYdJrEq06eXQGSKBPrxH wl5bLdYjVa6K2U0povBZqh/F64pIdkxejiaiE7Nx+XIsLDerU3n03UAHDK3tDTDh kTEUPl8PYdTZQo1DkyZx5HynaZ30zgk4Se1uiVwdIQsmJxb0SRVf4oGlLD/KJXPb IVsR7sMzAdHW/5hYRANVrcjlYDndpvfP3QDULvPHaYCBas1AOIAIecApS/uZYluY V2fDLp/zTAawMnoxa4wiZVIOuEDL08y2X+ZH8vSmUXwUO0umOt4Ad6BlfNHKuOPX -----END CERTIFICATE-----Generated at Wed Aug 6 05:49:59 2025 by rpki-client