$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.mft File: 3ed3e995-4cff-4a3d-af9b-7728ddaff70d.mft (raw, json) Hash identifier: 6DlQd5psCmFECHHvRXc2IeY2rAI0Gh96OJcLgCz1F0M= Subject key identifier: A4:E4:F6:2A:30:FC:9E:22:FD:8F:7C:F2:D1:54:38:21:23:9A:91:13 Authority key identifier: F3:75:96:E2:1C:D8:1C:9A:D5:67:D1:E9:54:49:B0:A4:32:C1:A4:86 Certificate issuer: /CN=3ed3e995-4cff-4a3d-af9b-7728ddaff70d Certificate serial: 010D0C9F4328584AC4BD0E9CBC7CBBB1050E5620 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.mft Manifest number: 010D0C9F43285840EBD7406C829A14CA1929D127 Signing time: Wed 06 Aug 2025 17:00:03 +0000 Manifest this update: Wed 06 Aug 2025 17:00:03 +0000 Manifest next update: Fri 08 Aug 2025 17:00:00 +0000 Files and hashes: 1: 1a475a05-1bff-3e3d-bc59-d988ebc9c4f3.roa (hash: 4EjJd5TtVyqR/Jygwjk3PySB2cBxyNztZ2i1HdLf8BM=) 2: 3541c324-e433-371b-be7a-faaf22fea4ff.roa (hash: GN3uwEfYxSUx9CNZglxwF/003k7xBPbH7FZ4o5Q+KjM=) 3: 3ed3e995-4cff-4a3d-af9b-7728ddaff70d.crl (hash: 5QDENPgiO4TqzX9uU1Il6WO0ACbJfmFtKSXzIVDOE38=) 4: e65865d4-5f44-3316-802f-7aa0ec28365b.roa (hash: b1B2hASWtlJaW2sk3IpwoMQYt0AOPOh20ZjNJSM9Jl8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c4:bd:0e:9c:bc:7c:bb:b1:05:0e:56:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ed3e995-4cff-4a3d-af9b-7728ddaff70d Validity Not Before: Aug 6 17:00:03 2025 GMT Not After : Aug 8 17:00:00 2025 GMT Subject: CN=a035e413-56c9-4e93-86f7-6e5339ba6d0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:36:44:4b:fc:20:1e:1a:46:16:6c:ae:31:9f: 23:f5:a1:aa:61:07:11:ee:09:c4:05:12:5e:64:55: c7:bf:da:17:77:50:a6:7e:3b:18:1d:a6:64:d0:fd: 9a:55:c6:d2:6d:05:1c:3f:5d:94:b9:8c:73:34:40: 0d:f8:d1:be:38:6a:73:ed:0b:c6:2d:7b:9a:c4:24: 70:b9:30:36:c7:c8:1b:0a:27:f8:0b:6e:4e:2d:ea: 2e:6a:0b:02:8b:dd:de:38:84:29:f8:f9:da:93:74: f3:5d:56:bb:b1:8d:4a:77:5a:3a:ef:29:0a:49:81: a0:f0:c0:96:87:e6:39:69:bf:47:1a:34:50:89:a0: 76:d8:70:70:37:07:2d:f1:f9:29:70:6f:51:cb:c6: f0:e0:c1:35:b2:9e:9c:b1:c4:08:95:94:5e:e6:34: 17:c1:11:59:8b:f7:17:a7:a4:3c:67:b9:62:40:b9: 43:d9:e6:6c:37:30:07:70:91:89:df:50:61:7d:2b: 0f:ad:a3:86:07:18:90:13:ec:c4:b4:c8:02:54:94: e6:35:49:d5:80:30:52:e9:95:24:48:42:2d:bd:59: 80:68:a6:52:ae:df:ff:02:5a:af:ca:eb:7f:36:9e: 7f:98:ed:bb:7f:8e:fb:ed:f4:0f:b9:4f:03:a5:09: 7f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E4:F6:2A:30:FC:9E:22:FD:8F:7C:F2:D1:54:38:21:23:9A:91:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.crl X509v3 Authority Key Identifier: keyid:F3:75:96:E2:1C:D8:1C:9A:D5:67:D1:E9:54:49:B0:A4:32:C1:A4:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:a9:a9:0a:84:14:36:4d:a8:b4:12:72:dd:cd:b5:20:45:a9: 57:ca:de:48:11:03:4a:63:bb:e3:cc:39:e4:d4:8a:c0:a9:79: e1:c7:c6:ba:d0:a5:c5:5c:8c:d5:05:cb:56:3a:ef:04:5e:43: 3e:c9:b8:a3:13:f2:70:10:d5:6c:54:ea:51:b3:45:2e:d3:19: 23:19:43:d0:10:d9:7d:13:85:7b:a5:fe:b1:77:ba:57:7b:c3: e4:85:11:52:56:5b:8c:4c:42:83:f7:b0:53:de:64:fa:67:25: 80:36:72:68:aa:ee:15:91:53:c1:30:9e:1e:5f:13:40:6b:29: 2e:bf:72:e9:a7:99:15:23:c4:62:2b:b3:90:ed:e8:52:8f:b8: 33:b7:8d:f6:a4:6b:ce:1d:25:43:8d:78:69:74:a0:f9:85:d0: e0:83:1a:62:7e:e8:b1:fc:42:57:12:00:61:9d:8b:95:a9:c0: 85:a8:ff:bf:00:0e:2e:36:2f:80:8c:33:cb:cc:06:db:8d:a1: 17:79:e0:cb:73:13:cb:d0:bf:3e:a9:79:3b:cc:49:54:df:e8: fc:93:b7:c5:27:f0:e9:b0:fa:1e:25:d2:ce:2c:1f:68:3e:0f: 14:84:58:a0:dd:b9:54:8d:99:32:63:80:b4:df:f2:40:4a:84: 29:8e:20:02 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErEvQ6cvHy7sQUOViAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VkM2U5OTUtNGNmZi00YTNkLWFmOWItNzcyOGRkYWZm NzBkMB4XDTI1MDgwNjE3MDAwM1oXDTI1MDgwODE3MDAwMFowLzEtMCsGA1UEAxMk YTAzNWU0MTMtNTZjOS00ZTkzLTg2ZjctNmU1MzM5YmE2ZDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDZES/wgHhpGFmyuMZ8j9aGqYQcR7gnEBRJe ZFXHv9oXd1CmfjsYHaZk0P2aVcbSbQUcP12UuYxzNEAN+NG+OGpz7QvGLXuaxCRw uTA2x8gbCif4C25OLeouagsCi93eOIQp+Pnak3TzXVa7sY1Kd1o67ykKSYGg8MCW h+Y5ab9HGjRQiaB22HBwNwct8fkpcG9Ry8bw4ME1sp6cscQIlZRe5jQXwRFZi/cX p6Q8Z7liQLlD2eZsNzAHcJGJ31BhfSsPraOGBxiQE+zEtMgCVJTmNUnVgDBS6ZUk SEItvVmAaKZSrt//Alqvyut/Np5/mO27f4777fQPuU8DpQl/FwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKTk9iow/J4i/Y988tFUOCEjmpETMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZWQz ZTk5NS00Y2ZmLTRhM2QtYWY5Yi03NzI4ZGRhZmY3MGQvM2VkM2U5OTUtNGNmZi00 YTNkLWFmOWItNzcyOGRkYWZmNzBkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2VkM2U5OTUtNGNmZi00YTNkLWFm OWItNzcyOGRkYWZmNzBkLzNlZDNlOTk1LTRjZmYtNGEzZC1hZjliLTc3MjhkZGFm ZjcwZC5jcmwwHwYDVR0jBBgwFoAU83WW4hzYHJrVZ9HpVEmwpDLBpIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zZWQzZTk5NS00Y2ZmLTRhM2QtYWY5Yi03NzI4 ZGRhZmY3MGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBYqakKhBQ2Tai0EnLdzbUg RalXyt5IEQNKY7vjzDnk1IrAqXnhx8a60KXFXIzVBctWOu8EXkM+ybijE/JwENVs VOpRs0Uu0xkjGUPQENl9E4V7pf6xd7pXe8PkhRFSVluMTEKD97BT3mT6ZyWANnJo qu4VkVPBMJ4eXxNAaykuv3Lpp5kVI8RiK7OQ7ehSj7gzt432pGvOHSVDjXhpdKD5 hdDggxpifuix/EJXEgBhnYuVqcCFqP+/AA4uNi+AjDPLzAbbjaEXeeDLcxPL0L8+ qXk7zElU3+j8k7fFJ/DpsPoeJdLOLB9oPg8UhFig3blUjZkyY4C03/JASoQpjiAC -----END CERTIFICATE-----Generated at Wed Aug 6 18:40:13 2025 by rpki-client