$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft File: 3b9b8028-72e5-488e-971c-54bd1e51f064.mft (raw, json) Hash identifier: /smX3t9iKAJy4515/nb3Pe9swVQuHQHJ89qIbHUoAY8= Subject key identifier: C6:AE:3A:8F:90:91:C3:DC:71:16:6C:3C:1F:45:73:B6:73:8B:46:46 Authority key identifier: 5F:8B:61:30:92:66:A4:EA:82:F9:CD:58:0F:27:90:55:72:01:AA:BD Certificate issuer: /CN=3b9b8028-72e5-488e-971c-54bd1e51f064 Certificate serial: 010D0C9F4328584ABC989051BE83E9B05C419C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft Manifest number: 010D0C9F4328584A528A8A7AC4CF3AECDE07A7A7 Signing time: Sun 03 Aug 2025 19:00:03 +0000 Manifest this update: Sun 03 Aug 2025 19:00:03 +0000 Manifest next update: Wed 06 Aug 2025 19:00:00 +0000 Files and hashes: 1: 31dea251-a914-3cdf-bb34-ea459b59f5b7.roa (hash: O+kRYvnS9Fz6O078M4tZey6O0tVnwvcFYUplUdNP++c=) 2: 3b9b8028-72e5-488e-971c-54bd1e51f064.crl (hash: YWt0K/zseXWafNjgtMCycaiAks28SxUaAmF4WcwMp3o=) 3: 69651a7a-33cd-341a-9ff0-30c6489996d5.roa (hash: paaCkuSrjuYP/Rw4CorCb4hoieWsxL6uWxAKZmvUkFc=) 4: d46bde8b-c4af-3c7c-b58a-db64c47da4bb.roa (hash: ovoyLP8yTIhVOhOxYD1r9tdcJXQfGSDCfckozhupohE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bc:98:90:51:be:83:e9:b0:5c:41:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b9b8028-72e5-488e-971c-54bd1e51f064 Validity Not Before: Aug 3 19:00:03 2025 GMT Not After : Aug 6 19:00:00 2025 GMT Subject: CN=2afdc224-450d-4eed-9aed-4f5c0baa2a24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4e:43:a4:08:4c:2e:8b:ab:58:a3:22:a7:b0: a2:d9:34:e1:6f:85:54:9c:ed:1f:46:8c:95:f1:d9: 0e:09:76:88:d4:d0:54:57:34:54:45:af:80:30:b2: b4:cf:5c:80:97:fc:1e:df:77:92:72:18:08:43:c2: 15:65:a9:d9:18:2f:8d:0d:71:fa:d3:a4:75:31:cf: c0:a8:36:88:35:d6:04:47:68:e9:c6:e0:ef:21:e5: d1:20:79:bd:28:40:4d:e3:e4:0a:61:2a:24:e5:48: c4:93:ed:dc:37:31:06:e0:6c:d3:7f:0e:4a:dc:60: e8:e9:fb:b3:48:bc:5e:d0:57:a0:fe:8a:c1:e1:84: 11:c3:33:99:a6:83:ed:79:2a:5b:d2:5a:50:66:e8: 0d:93:04:5d:10:a5:19:04:4e:9e:fa:2d:7f:72:c4: b7:e0:94:86:b4:0d:10:cf:06:d8:18:fe:c9:46:70: 2e:3b:c9:99:56:63:38:42:1a:c6:d5:be:b1:ad:43: 51:73:70:75:29:ea:2c:bb:c7:55:28:9d:85:49:42: ac:d3:83:12:22:5f:99:7f:5f:7e:2d:b6:6d:74:a9: 50:2d:9e:c1:ed:72:97:9d:5c:14:ab:76:e9:44:c0: 24:96:49:e9:dc:a9:6a:1b:08:45:da:51:44:b0:5a: 64:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:AE:3A:8F:90:91:C3:DC:71:16:6C:3C:1F:45:73:B6:73:8B:46:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.crl X509v3 Authority Key Identifier: keyid:5F:8B:61:30:92:66:A4:EA:82:F9:CD:58:0F:27:90:55:72:01:AA:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:3e:7a:3a:c5:13:ba:5e:fa:77:5f:f4:1a:f0:17:9c:45:2c: 9a:0e:ef:2e:6b:97:1a:f7:af:71:03:63:df:24:7e:ec:32:26: fb:dd:19:60:36:05:74:75:2a:74:c3:18:63:af:f7:ba:eb:b4: bc:82:a3:40:58:f1:54:7d:e4:6e:e4:b0:a4:ac:92:b6:84:3f: 1e:ef:ca:c4:f2:39:7c:c4:aa:f8:8b:c9:26:2f:8d:06:7f:05: cc:b8:e0:30:8e:6d:75:36:8e:73:40:b8:ad:06:f9:94:ee:92: b0:f9:2a:4b:ec:0a:22:71:25:87:a3:be:7c:95:9a:fc:a8:b1: e3:9a:bd:57:82:62:02:d3:6b:aa:41:20:ba:8c:ca:ea:e6:ec: bc:2e:da:b1:b6:40:2e:a6:67:4d:1b:3a:a0:10:49:91:d3:37: 6c:fd:20:57:7c:d7:50:ad:eb:de:ad:79:a8:a1:dd:e1:37:d2: 6f:e0:2e:83:9e:6b:0b:f7:a5:b2:85:e3:93:31:eb:41:a8:6c: 2a:d7:a4:17:18:0e:d0:54:10:c7:28:52:0b:ec:01:1e:43:25: 50:e9:6c:91:f0:11:92:99:52:54:35:61:9e:16:d5:a9:c8:fd: c1:ea:60:de:53:d4:97:c2:c5:51:9c:85:7e:b0:4d:b0:d6:ce: 7f:67:39:72 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEq8mJBRvoPpsFxBnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I5YjgwMjgtNzJlNS00ODhlLTk3MWMtNTRiZDFlNTFm MDY0MB4XDTI1MDgwMzE5MDAwM1oXDTI1MDgwNjE5MDAwMFowLzEtMCsGA1UEAxMk MmFmZGMyMjQtNDUwZC00ZWVkLTlhZWQtNGY1YzBiYWEyYTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA005DpAhMLourWKMip7Ci2TThb4VUnO0fRoyV 8dkOCXaI1NBUVzRURa+AMLK0z1yAl/we33eSchgIQ8IVZanZGC+NDXH606R1Mc/A qDaINdYER2jpxuDvIeXRIHm9KEBN4+QKYSok5UjEk+3cNzEG4GzTfw5K3GDo6fuz SLxe0Feg/orB4YQRwzOZpoPteSpb0lpQZugNkwRdEKUZBE6e+i1/csS34JSGtA0Q zwbYGP7JRnAuO8mZVmM4QhrG1b6xrUNRc3B1Keosu8dVKJ2FSUKs04MSIl+Zf19+ LbZtdKlQLZ7B7XKXnVwUq3bpRMAklknp3KlqGwhF2lFEsFpkbwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMauOo+QkcPccRZsPB9Fc7Zzi0ZGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYjli ODAyOC03MmU1LTQ4OGUtOTcxYy01NGJkMWU1MWYwNjQvM2I5YjgwMjgtNzJlNS00 ODhlLTk3MWMtNTRiZDFlNTFmMDY0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2I5YjgwMjgtNzJlNS00ODhlLTk3 MWMtNTRiZDFlNTFmMDY0LzNiOWI4MDI4LTcyZTUtNDg4ZS05NzFjLTU0YmQxZTUx ZjA2NC5jcmwwHwYDVR0jBBgwFoAUX4thMJJmpOqC+c1YDyeQVXIBqr0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYjliODAyOC03MmU1LTQ4OGUtOTcxYy01NGJk MWU1MWYwNjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQChPno6xRO6Xvp3X/Qa8Bec RSyaDu8ua5ca969xA2PfJH7sMib73RlgNgV0dSp0wxhjr/e667S8gqNAWPFUfeRu 5LCkrJK2hD8e78rE8jl8xKr4i8kmL40GfwXMuOAwjm11No5zQLitBvmU7pKw+SpL 7AoicSWHo758lZr8qLHjmr1XgmIC02uqQSC6jMrq5uy8LtqxtkAupmdNGzqgEEmR 0zds/SBXfNdQreverXmood3hN9Jv4C6DnmsL96WyheOTMetBqGwq16QXGA7QVBDH KFIL7AEeQyVQ6WyR8BGSmVJUNWGeFtWpyP3B6mDeU9SXwsVRnIV+sE2w1s5/Zzly -----END CERTIFICATE-----Generated at Mon Aug 4 16:12:06 2025 by rpki-client