$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.mft File: 3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.mft (raw, json) Hash identifier: NrWRb/yy3AYXuJ2Fnv5WPvBnZWRp3kY+9CdsqU+Eq2Q= Subject key identifier: A9:79:2E:B2:FF:EF:4A:D3:2C:41:06:B7:9D:0B:57:48:31:AB:75:C2 Authority key identifier: 71:6B:A2:F9:A0:CF:2C:93:59:CC:DC:54:83:71:40:04:DA:0C:CC:2C Certificate issuer: /CN=3e39bfa7-ed51-4d17-9ce5-536a4b90a62f Certificate serial: 010D0C9F4328584AC49F4642E5CBB70F1D243500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.mft Manifest number: 010D0C9F4328584A7948C2D16CFD12786C43989C Signing time: Wed 06 Aug 2025 16:00:03 +0000 Manifest this update: Wed 06 Aug 2025 16:00:03 +0000 Manifest next update: Fri 08 Aug 2025 16:00:00 +0000 Files and hashes: 1: 3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.crl (hash: 21DK73X6ge8xLGwvhJ6WQwDykTC5+GADAnBdtAGdGhg=) 2: 47754403-719c-32bb-a3a8-8ed2ac68a9f2.roa (hash: iuE8ytWS3bicWoCC5IyjPj2QHU3p36dY4FW5YTFDIlQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c4:9f:46:42:e5:cb:b7:0f:1d:24:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e39bfa7-ed51-4d17-9ce5-536a4b90a62f Validity Not Before: Aug 6 16:00:03 2025 GMT Not After : Aug 8 16:00:00 2025 GMT Subject: CN=ab151ad6-ca9b-4d38-87be-c6e71130fb14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:67:36:03:79:d4:2c:1e:e1:e2:41:92:8d:35: 1d:2d:ee:dc:a3:32:6a:2a:fd:78:d8:4c:50:87:de: e3:c8:48:19:d3:40:31:45:aa:5c:0e:cf:5c:09:f8: f7:93:6a:25:dc:49:37:bd:48:b0:47:cb:f7:9b:70: 5b:3e:d1:1c:1e:45:92:67:05:80:68:f3:11:fc:f4: 99:dd:08:d7:e6:28:3d:4f:bb:d2:d6:8d:dc:2b:fe: f8:98:e0:1a:ff:40:ee:22:c2:01:c7:6d:e9:f1:67: 44:1c:4e:6e:52:0d:e7:9b:f3:9b:4e:00:ed:62:84: ae:66:b4:cb:bf:aa:97:a7:37:7c:3d:ac:00:5f:d2: ba:03:f6:c0:4a:d8:8e:b7:10:e1:da:5d:3f:fd:e0: bb:65:d7:2f:cf:c2:c3:99:61:8c:ac:94:1e:ff:c6: 33:fa:43:6e:74:8c:55:04:21:2e:01:18:1d:43:ec: 44:d2:71:ff:d4:6f:4b:01:14:9e:1a:f0:d2:3c:4c: a0:65:98:5b:a0:d1:23:22:69:79:1e:e0:ed:ed:0b: 77:1d:b6:83:91:9b:42:a2:d5:2b:99:7e:4c:5a:ad: 29:cb:80:31:1c:fd:42:45:d7:3b:3d:d6:ca:09:1e: e5:fc:c2:cf:c5:a1:8b:24:ca:26:62:97:a0:f2:a5: 08:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:79:2E:B2:FF:EF:4A:D3:2C:41:06:B7:9D:0B:57:48:31:AB:75:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.crl X509v3 Authority Key Identifier: keyid:71:6B:A2:F9:A0:CF:2C:93:59:CC:DC:54:83:71:40:04:DA:0C:CC:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:af:a4:df:4e:76:74:93:a4:0e:50:f0:b0:67:09:14:e0:ec: 4f:fb:35:12:59:5b:73:22:22:03:32:13:f1:f0:07:c9:6c:bf: ed:be:d7:c2:4b:d0:87:43:d3:f2:43:a2:cb:ef:f6:e0:2a:5b: e7:79:31:9a:d2:6a:7f:7b:b6:1a:dd:fe:63:a1:c7:d5:88:5c: 83:95:af:9e:da:87:1a:5a:f1:58:61:65:4d:cd:f3:be:ff:3d: 5d:aa:e8:a4:68:2e:0f:7e:a2:d9:e9:08:78:96:cf:f0:6e:3f: b4:d0:9c:60:3e:88:12:9b:ef:14:cc:53:4c:46:a2:1d:84:d2: 8e:c4:20:da:dc:8c:d6:1e:09:12:ea:0e:d5:53:96:9f:fe:c1: f0:46:26:f5:93:af:06:67:11:b1:c7:f0:9a:ff:2d:59:c0:5a: 29:c4:fe:38:89:31:4a:8b:66:b8:b7:65:49:75:ff:3e:a1:0b: b8:46:28:a0:bb:e3:05:d6:7d:be:07:e7:88:41:71:33:55:88: c4:cd:69:84:db:c3:f9:52:ff:e3:a7:cf:ee:9e:fc:2d:b1:f4: f7:7e:6e:74:55:a5:5a:89:04:e1:0d:b8:69:23:b5:67:8a:f3: 42:ca:16:25:1e:9a:fa:a7:49:cd:ac:57:23:a8:8e:d9:3b:f1: a8:42:9e:35 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErEn0ZC5cu3Dx0kNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2UzOWJmYTctZWQ1MS00ZDE3LTljZTUtNTM2YTRiOTBh NjJmMB4XDTI1MDgwNjE2MDAwM1oXDTI1MDgwODE2MDAwMFowLzEtMCsGA1UEAxMk YWIxNTFhZDYtY2E5Yi00ZDM4LTg3YmUtYzZlNzExMzBmYjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Gc2A3nULB7h4kGSjTUdLe7cozJqKv142ExQ h97jyEgZ00AxRapcDs9cCfj3k2ol3Ek3vUiwR8v3m3BbPtEcHkWSZwWAaPMR/PSZ 3QjX5ig9T7vS1o3cK/74mOAa/0DuIsIBx23p8WdEHE5uUg3nm/ObTgDtYoSuZrTL v6qXpzd8PawAX9K6A/bAStiOtxDh2l0//eC7Zdcvz8LDmWGMrJQe/8Yz+kNudIxV BCEuARgdQ+xE0nH/1G9LARSeGvDSPEygZZhboNEjIml5HuDt7Qt3HbaDkZtCotUr mX5MWq0py4AxHP1CRdc7PdbKCR7l/MLPxaGLJMomYpeg8qUIlQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKl5LrL/70rTLEEGt50LV0gxq3XCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zZTM5 YmZhNy1lZDUxLTRkMTctOWNlNS01MzZhNGI5MGE2MmYvM2UzOWJmYTctZWQ1MS00 ZDE3LTljZTUtNTM2YTRiOTBhNjJmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2UzOWJmYTctZWQ1MS00ZDE3LTlj ZTUtNTM2YTRiOTBhNjJmLzNlMzliZmE3LWVkNTEtNGQxNy05Y2U1LTUzNmE0Yjkw YTYyZi5jcmwwHwYDVR0jBBgwFoAUcWui+aDPLJNZzNxUg3FABNoMzCwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zZTM5YmZhNy1lZDUxLTRkMTctOWNlNS01MzZh NGI5MGE2MmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAtr6TfTnZ0k6QOUPCwZwkU 4OxP+zUSWVtzIiIDMhPx8AfJbL/tvtfCS9CHQ9PyQ6LL7/bgKlvneTGa0mp/e7Ya 3f5jocfViFyDla+e2ocaWvFYYWVNzfO+/z1dquikaC4PfqLZ6Qh4ls/wbj+00Jxg PogSm+8UzFNMRqIdhNKOxCDa3IzWHgkS6g7VU5af/sHwRib1k68GZxGxx/Ca/y1Z wFopxP44iTFKi2a4t2VJdf8+oQu4Riigu+MF1n2+B+eIQXEzVYjEzWmE28P5Uv/j p8/unvwtsfT3fm50VaVaiQThDbhpI7VnivNCyhYlHpr6p0nNrFcjqI7ZO/GoQp41 -----END CERTIFICATE-----Generated at Thu Aug 7 17:24:45 2025 by rpki-client