$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft File: 3b72c968-d673-4a7a-bfec-4071a7be5317.mft (raw, json) Hash identifier: E50GDr5WcCooLz85hTO59uDL1dPuinYMOky7iFi6cmY= Subject key identifier: 61:57:E1:89:CD:EC:5C:E8:D2:5B:F9:D2:98:C3:33:A6:C4:FF:6B:24 Authority key identifier: D4:D0:6C:E1:8F:F9:73:1D:53:22:23:6D:36:3F:38:F6:81:03:B5:6F Certificate issuer: /CN=3b72c968-d673-4a7a-bfec-4071a7be5317 Certificate serial: 010D0C9F4328584A22B39A008607E79CF010D880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft Manifest number: 010D0C9F4328584073A81BDF619690B6FD17C6DC Signing time: Mon 09 Jun 2025 16:00:03 +0000 Manifest this update: Mon 09 Jun 2025 16:00:03 +0000 Manifest next update: Thu 12 Jun 2025 16:00:00 +0000 Files and hashes: 1: 0fb6d382-f0fb-39bb-a947-10e2bb7ff6d0.roa (hash: NlsP0g4CYsd9JYL4cPuhZ1ULcrIIsAcf9UT77IL8g00=) 2: 3b72c968-d673-4a7a-bfec-4071a7be5317.crl (hash: aqNLEAYtlBq5je0Z3CZ9RJagUgi5ayJeGNS0zu0+xNY=) 3: 3df446ef-8f84-35ef-9354-563bf5792560.roa (hash: O6jtuO+GsxUbmnFRIBAz4Kf6ewb296QxojYs22u4SeQ=) 4: 828c35a4-d70a-329b-afc8-43f0c6744f3e.roa (hash: lQWH6wjQyT3miHEDB/PifXOLzSWd6DzD9q2lPK6in7s=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:22:b3:9a:00:86:07:e7:9c:f0:10:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b72c968-d673-4a7a-bfec-4071a7be5317 Validity Not Before: Jun 9 16:00:03 2025 GMT Not After : Jun 12 16:00:00 2025 GMT Subject: CN=15ee5d82-8fdd-4d7b-9bd8-9851f2e80e86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:97:80:f2:a2:ef:c4:2a:b1:51:71:76:d1:8d: d5:b7:2f:10:2d:95:f0:a3:98:ca:eb:aa:d1:9b:39: d2:48:38:c0:03:5c:64:d1:bc:5d:cc:0b:d7:d6:d2: b3:48:fd:c2:ba:3e:01:20:c3:bc:6f:d6:94:cb:13: 3b:e4:ca:29:48:6d:9d:10:f3:82:d9:f5:37:64:db: 4c:95:f7:99:d9:8b:db:67:bb:91:49:54:99:b5:5a: 59:fc:e9:81:c5:a2:c2:c6:da:5f:74:ee:a3:5b:3e: fb:05:cc:ff:42:02:ad:fa:67:7e:9b:3a:dc:4c:62: b7:85:0b:3b:1f:47:91:82:5a:0f:2f:5c:a7:93:f7: 08:c3:a8:71:e6:e1:aa:8c:ab:81:c5:5e:ad:72:23: 7f:4a:ff:61:46:4d:c7:b1:37:46:59:78:02:47:c0: 4e:e9:27:a9:26:bc:eb:0f:8e:c8:51:a8:29:06:d2: 6c:24:e1:c5:f9:6f:30:fa:31:65:1d:8c:d0:c1:25: 3d:2b:a8:a0:ce:09:2f:7b:f2:1b:e2:01:b7:be:01: 68:8b:ae:bb:aa:ee:97:f9:7a:b3:94:e9:b8:74:c3: d9:da:f5:7a:e1:1a:30:cf:46:17:b0:18:b3:8d:1c: c5:07:4e:85:62:a4:12:df:ee:f9:f3:d1:da:bc:2e: c7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:57:E1:89:CD:EC:5C:E8:D2:5B:F9:D2:98:C3:33:A6:C4:FF:6B:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.crl X509v3 Authority Key Identifier: keyid:D4:D0:6C:E1:8F:F9:73:1D:53:22:23:6D:36:3F:38:F6:81:03:B5:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:89:fc:b5:f9:87:4e:24:e0:a6:03:0a:94:3b:36:a6:2a:9d: ea:99:f3:f5:58:e1:6d:89:b2:b1:54:73:c3:a0:00:51:99:74: 68:bb:49:56:b6:37:73:f6:cd:21:26:21:77:46:fe:47:09:9a: 93:32:05:60:9f:cb:79:9c:41:64:ea:4d:df:a3:73:75:28:67: 6e:04:16:52:e3:a4:aa:1c:e9:80:80:7c:82:4d:ea:1f:f4:c2: 71:69:96:76:1d:e3:dd:a3:49:a3:6f:a5:d4:1a:a6:e9:52:fa: 16:29:94:3d:14:a0:16:82:0e:1b:da:2d:10:8f:23:dd:74:84: b5:2e:d4:9b:f3:51:b7:12:0c:40:25:54:eb:f4:91:fa:a6:62: fa:fd:bd:0f:ff:bc:07:28:0f:51:d4:67:4d:1e:75:42:47:54: 9c:f5:56:3d:f5:0f:c6:1b:00:84:3f:14:c3:c0:61:3b:8b:41: 15:5f:7c:a3:e3:5d:66:45:33:de:62:97:cd:6e:67:68:9b:02: 49:10:aa:13:74:02:e0:f5:c9:b2:d8:ce:41:71:97:12:ba:dc: f9:15:e7:de:3a:0f:af:39:32:14:a0:8d:a9:78:24:d6:35:00: c1:4f:4c:0c:02:50:ba:d9:bd:0f:e9:eb:fc:e4:35:27:1d:a6: c6:99:d9:02 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEois5oAhgfnnPAQ2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I3MmM5NjgtZDY3My00YTdhLWJmZWMtNDA3MWE3YmU1 MzE3MB4XDTI1MDYwOTE2MDAwM1oXDTI1MDYxMjE2MDAwMFowLzEtMCsGA1UEAxMk MTVlZTVkODItOGZkZC00ZDdiLTliZDgtOTg1MWYyZTgwZTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJeA8qLvxCqxUXF20Y3Vty8QLZXwo5jK66rR mznSSDjAA1xk0bxdzAvX1tKzSP3Cuj4BIMO8b9aUyxM75MopSG2dEPOC2fU3ZNtM lfeZ2YvbZ7uRSVSZtVpZ/OmBxaLCxtpfdO6jWz77Bcz/QgKt+md+mzrcTGK3hQs7 H0eRgloPL1ynk/cIw6hx5uGqjKuBxV6tciN/Sv9hRk3HsTdGWXgCR8BO6SepJrzr D47IUagpBtJsJOHF+W8w+jFlHYzQwSU9K6igzgkve/Ib4gG3vgFoi667qu6X+Xqz lOm4dMPZ2vV64Rowz0YXsBizjRzFB06FYqQS3+7589HavC7H8wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGFX4YnN7Fzo0lv50pjDM6bE/2skMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zYjcy Yzk2OC1kNjczLTRhN2EtYmZlYy00MDcxYTdiZTUzMTcvM2I3MmM5NjgtZDY3My00 YTdhLWJmZWMtNDA3MWE3YmU1MzE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2I3MmM5NjgtZDY3My00YTdhLWJm ZWMtNDA3MWE3YmU1MzE3LzNiNzJjOTY4LWQ2NzMtNGE3YS1iZmVjLTQwNzFhN2Jl NTMxNy5jcmwwHwYDVR0jBBgwFoAU1NBs4Y/5cx1TIiNtNj849oEDtW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zYjcyYzk2OC1kNjczLTRhN2EtYmZlYy00MDcx YTdiZTUzMTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBZify1+YdOJOCmAwqUOzam Kp3qmfP1WOFtibKxVHPDoABRmXRou0lWtjdz9s0hJiF3Rv5HCZqTMgVgn8t5nEFk 6k3fo3N1KGduBBZS46SqHOmAgHyCTeof9MJxaZZ2HePdo0mjb6XUGqbpUvoWKZQ9 FKAWgg4b2i0QjyPddIS1LtSb81G3EgxAJVTr9JH6pmL6/b0P/7wHKA9R1GdNHnVC R1Sc9VY99Q/GGwCEPxTDwGE7i0EVX3yj411mRTPeYpfNbmdomwJJEKoTdALg9cmy 2M5BcZcSutz5FefeOg+vOTIUoI2peCTWNQDBT0wMAlC62b0P6ev85DUnHabGmdkC -----END CERTIFICATE-----Generated at Mon Jun 9 22:57:54 2025 by rpki-client