$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8.mft File: 3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8.mft (raw, json) Hash identifier: GJcSFl2gfQdBLnrbSegOGpPoFWnxOdBWNvQjEvF9ZXk= Subject key identifier: 32:15:E5:90:23:E4:41:AD:49:45:CE:8E:E1:0F:61:72:3A:E3:FC:3F Authority key identifier: A5:CB:08:74:12:2A:85:45:3F:68:87:FD:C4:D8:C5:4D:A9:87:00:06 Certificate issuer: /CN=3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8 Certificate serial: 010D0C9F4328584AF82731A33B932D9B89561B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8.mft Manifest number: 010D0C9F4328584073A839A80FE515214519831C Signing time: Mon 25 Aug 2025 03:00:08 +0000 Manifest this update: Mon 25 Aug 2025 03:00:08 +0000 Manifest next update: Thu 28 Aug 2025 03:00:00 +0000 Files and hashes: 1: 2ef2c836-21f9-32b9-8322-176c344929e8.roa (hash: VV7rhbxOhawQnvquiJ1hLK9SmgpF36hjtGP3yzQO1eI=) 2: 3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8.crl (hash: VN7esyU7egFOE+s7V5Bb1f0YSZNZDEgRP+1Rn4TRsGE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f8:27:31:a3:3b:93:2d:9b:89:56:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8 Validity Not Before: Aug 25 03:00:08 2025 GMT Not After : Aug 28 03:00:00 2025 GMT Subject: CN=6bb4dc89-6381-41d2-8dc7-040af6ccea4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ef:2d:2c:74:a3:71:91:fb:74:52:1d:44:f0: 85:a8:ae:f4:88:9c:a2:ec:6c:62:a7:c5:e3:01:3b: 3a:07:95:7b:da:7c:cc:d5:47:bd:1d:38:a0:58:46: 4d:00:4c:32:83:ae:63:d0:d2:4f:ec:b1:95:bd:aa: 23:bc:4b:92:87:cd:09:b3:3c:c1:8b:0b:9e:1d:48: 98:67:9c:b7:2c:cb:01:b3:b6:59:b8:54:1d:0c:f4: c7:9e:cc:ed:45:77:95:d7:22:8d:b6:80:53:65:76: 2f:16:7d:2e:c6:5c:7d:78:84:41:96:50:4d:ea:10: 2c:b7:aa:70:f1:e2:ff:52:49:f8:ec:54:e1:87:95: e7:fa:81:c1:39:d2:dc:23:b5:4c:47:d8:53:b2:8f: b9:25:ac:d6:7e:a4:31:9a:cb:9b:66:f0:6a:71:5c: 61:55:6d:90:78:a5:02:0b:09:01:38:50:96:41:85: d3:22:8d:14:d2:b6:14:45:22:43:32:c6:10:04:78: 99:58:23:3e:7a:5c:e9:05:1d:2f:9e:56:e5:4e:32: 5f:f5:50:1f:5c:17:ab:86:81:16:20:5e:29:40:fb: 9a:80:de:16:9b:58:d5:5f:c1:3a:a8:dc:a0:aa:22: ed:f1:8f:ff:3b:82:4d:35:9f:55:ab:c0:4e:c8:c9: 1c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:15:E5:90:23:E4:41:AD:49:45:CE:8E:E1:0F:61:72:3A:E3:FC:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8.crl X509v3 Authority Key Identifier: keyid:A5:CB:08:74:12:2A:85:45:3F:68:87:FD:C4:D8:C5:4D:A9:87:00:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:8b:0a:4a:c6:fa:b7:e9:4e:e4:8e:11:f8:5b:14:46:49:3d: 19:96:c6:4a:76:27:9f:fb:ff:30:a9:47:25:77:ac:0a:b5:35: fc:28:82:f6:41:00:7f:16:0b:52:9c:ee:d1:37:c7:3e:e0:32: 30:d2:61:ce:a5:0d:ca:0f:60:2f:c0:42:37:fe:d8:16:6b:cd: 13:79:c5:2a:30:6f:a3:07:5d:8b:58:d7:2b:5a:9b:91:a8:bd: 21:67:f9:a3:08:e7:e6:26:bc:76:5f:dc:e3:22:65:a7:3d:3c: 26:e0:10:3c:ab:dc:94:d0:ce:8b:6b:d1:38:57:1e:5e:99:ac: 2a:1f:cb:fb:1f:07:8d:79:ac:d7:bd:3b:f6:94:ea:d2:67:23: d1:7f:66:1f:41:96:d9:94:30:41:3e:3c:f4:0b:36:2e:69:6d: cb:0d:4a:cb:70:25:ba:1c:5a:e7:db:4d:d4:17:2e:fb:db:1b: 67:18:15:be:d1:35:4c:35:d1:2c:3f:a1:bf:6c:1f:2b:5e:5f: 9b:01:ce:99:b4:e6:a5:56:b6:83:87:6a:34:c4:ac:62:ef:29: d4:09:1d:a6:0f:f8:7b:4a:38:15:29:46:b5:76:02:3b:96:5c: 08:01:7f:33:b7:d5:cc:1f:6d:06:2d:2a:f7:64:e3:fd:c0:83: 37:c3:4a:bb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr4JzGjO5Mtm4lWG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y5NWE4YWItZjliMi00MzJjLWExZmQtZDkzNjgzYmMy ZmE4MB4XDTI1MDgyNTAzMDAwOFoXDTI1MDgyODAzMDAwMFowLzEtMCsGA1UEAxMk NmJiNGRjODktNjM4MS00MWQyLThkYzctMDQwYWY2Y2NlYTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAou8tLHSjcZH7dFIdRPCFqK70iJyi7Gxip8Xj ATs6B5V72nzM1Ue9HTigWEZNAEwyg65j0NJP7LGVvaojvEuSh80JszzBiwueHUiY Z5y3LMsBs7ZZuFQdDPTHnsztRXeV1yKNtoBTZXYvFn0uxlx9eIRBllBN6hAst6pw 8eL/Ukn47FThh5Xn+oHBOdLcI7VMR9hTso+5JazWfqQxmsubZvBqcVxhVW2QeKUC CwkBOFCWQYXTIo0U0rYURSJDMsYQBHiZWCM+elzpBR0vnlblTjJf9VAfXBerhoEW IF4pQPuagN4Wm1jVX8E6qNygqiLt8Y//O4JNNZ9Vq8BOyMkc1QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDIV5ZAj5EGtSUXOjuEPYXI64/w/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZjk1 YThhYi1mOWIyLTQzMmMtYTFmZC1kOTM2ODNiYzJmYTgvM2Y5NWE4YWItZjliMi00 MzJjLWExZmQtZDkzNjgzYmMyZmE4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2Y5NWE4YWItZjliMi00MzJjLWEx ZmQtZDkzNjgzYmMyZmE4LzNmOTVhOGFiLWY5YjItNDMyYy1hMWZkLWQ5MzY4M2Jj MmZhOC5jcmwwHwYDVR0jBBgwFoAUpcsIdBIqhUU/aIf9xNjFTamHAAYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZjk1YThhYi1mOWIyLTQzMmMtYTFmZC1kOTM2 ODNiYzJmYTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBpiwpKxvq36U7kjhH4WxRG ST0ZlsZKdief+/8wqUcld6wKtTX8KIL2QQB/FgtSnO7RN8c+4DIw0mHOpQ3KD2Av wEI3/tgWa80TecUqMG+jB12LWNcrWpuRqL0hZ/mjCOfmJrx2X9zjImWnPTwm4BA8 q9yU0M6La9E4Vx5emawqH8v7HweNeazXvTv2lOrSZyPRf2YfQZbZlDBBPjz0CzYu aW3LDUrLcCW6HFrn203UFy772xtnGBW+0TVMNdEsP6G/bB8rXl+bAc6ZtOalVraD h2o0xKxi7ynUCR2mD/h7SjgVKUa1dgI7llwIAX8zt9XMH20GLSr3ZOP9wIM3w0q7 -----END CERTIFICATE-----Generated at Mon Aug 25 08:34:44 2025 by rpki-client