$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.mft File: 3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.mft (raw, json) Hash identifier: HoshfYixpt7hvhqWsrJXvi7YyKmf048sP91BoJU+Des= Subject key identifier: AC:6D:3D:B4:72:D5:B2:14:75:B7:AD:FB:16:0D:60:A9:46:D3:62:37 Authority key identifier: B4:70:B6:11:7A:C8:5F:02:8A:BE:94:C6:6D:5C:9C:24:BA:C6:FA:EE Certificate issuer: /CN=3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02 Certificate serial: 010D0C9F4328584A7208876A716F63D011697E40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.mft Manifest number: 010D0C9F4328584595004A1770E5FE451D02FBC9 Signing time: Tue 08 Jul 2025 02:00:03 +0000 Manifest this update: Tue 08 Jul 2025 02:00:03 +0000 Manifest next update: Fri 11 Jul 2025 02:00:00 +0000 Files and hashes: 1: 3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.crl (hash: lCFTD+ThdcdxG+WgCFJQAd+9MP1DSfK0kiNe0l2PoGM=) 2: 94b3319a-658a-3317-bf87-91c877d6dd90.roa (hash: t3WLG9ML7hg2UK6sYHOAbtcUUvVwKOcdXmMYCk0GGEc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:72:08:87:6a:71:6f:63:d0:11:69:7e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02 Validity Not Before: Jul 8 02:00:03 2025 GMT Not After : Jul 11 02:00:00 2025 GMT Subject: CN=87dd26f4-0a8f-466c-a2d0-e3a2918a0ea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fc:af:52:64:3c:55:c0:a4:ef:91:a9:b4:8c: 74:17:28:d8:83:7a:a2:89:3e:3c:02:1c:cc:2b:8e: cb:b7:cc:04:ca:58:7a:ff:43:23:d3:33:a5:53:f7: 00:74:d5:44:47:39:93:e2:72:04:c9:7c:de:d4:2e: 91:da:9b:8f:9d:b0:91:b8:7a:b5:2f:69:7a:99:d8: 36:93:4a:90:b7:b4:36:28:3f:e2:7a:8e:ff:1c:51: b4:7c:48:9b:db:d3:32:37:cb:9a:a5:4e:fe:c2:d3: 68:78:da:58:22:a8:3e:16:1f:1c:e5:9f:bd:7e:89: a0:b0:50:4e:ac:ad:68:c6:83:9d:49:6c:e2:05:6a: 6f:9e:87:67:f1:8a:fa:e4:3c:52:57:ba:9a:81:3e: a5:c5:ee:30:90:22:6b:5a:61:ee:fd:25:70:4a:4f: 3b:e7:30:d0:9e:8a:c1:69:c0:eb:31:e9:48:85:64: ed:90:0f:c7:77:b7:e4:e6:d4:6f:57:cc:c2:b4:f1: 72:6a:9e:3a:68:36:13:bc:45:33:61:0e:0d:76:6a: 5e:21:19:be:1b:5a:f8:0e:a9:2c:46:20:9c:0a:23: 5c:3a:e8:19:a4:ff:c7:d6:93:f9:66:8f:14:3a:46: 87:62:d4:5b:92:bb:87:4c:92:e2:3b:15:e8:ba:bc: 3e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:6D:3D:B4:72:D5:B2:14:75:B7:AD:FB:16:0D:60:A9:46:D3:62:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.crl X509v3 Authority Key Identifier: keyid:B4:70:B6:11:7A:C8:5F:02:8A:BE:94:C6:6D:5C:9C:24:BA:C6:FA:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:8a:0a:aa:11:57:0a:d0:41:c5:11:f6:dd:7c:8f:a0:c6:48: 8e:3c:94:53:c8:bc:1b:44:4a:bd:c5:88:d6:58:57:1e:d8:ba: 73:35:8f:8b:f8:0c:93:6f:22:38:60:48:91:2a:1f:63:42:e9: be:6a:30:dc:36:45:a2:d8:b5:f8:05:7d:bf:c4:0f:db:9b:5c: 77:bd:27:3b:05:59:5e:33:64:27:35:b8:93:4e:ea:f7:ff:c7: 0b:d3:72:60:98:e0:73:e2:b4:4e:d4:54:8f:cc:54:3d:e6:e1: 70:9a:a3:c1:67:df:2c:87:0f:4e:fb:b0:b0:c8:3f:dc:48:2a: 82:af:33:8c:42:f0:61:22:01:e6:18:70:5b:3b:7d:f7:ef:48: 2d:4d:1c:f2:f6:0d:6e:4c:7b:c5:56:de:93:7e:97:38:cd:d8: a7:15:1f:35:d8:c0:33:5d:f5:1f:57:43:f1:97:78:6f:b7:3a: 0f:d9:f3:82:f5:df:e8:74:f0:5b:a8:91:07:24:12:e4:48:ac: d3:36:97:52:bd:4b:07:ce:f0:b4:b1:a6:35:bc:36:d1:56:49: 9b:73:93:c1:43:15:29:86:8c:53:57:6d:bc:6f:a1:4d:c4:c1: 0b:3e:38:14:ac:40:ca:b7:aa:19:4c:d7:b0:1c:85:bc:04:56: 0e:a4:8d:29 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpyCIdqcW9j0BFpfkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2UzYjUyYzctYjdhNS00NWIwLWEyYTQtZjgyNDJiMmI2 ZTAyMB4XDTI1MDcwODAyMDAwM1oXDTI1MDcxMTAyMDAwMFowLzEtMCsGA1UEAxMk ODdkZDI2ZjQtMGE4Zi00NjZjLWEyZDAtZTNhMjkxOGEwZWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfyvUmQ8VcCk75GptIx0FyjYg3qiiT48AhzM K47Lt8wEylh6/0Mj0zOlU/cAdNVERzmT4nIEyXze1C6R2puPnbCRuHq1L2l6mdg2 k0qQt7Q2KD/ieo7/HFG0fEib29MyN8uapU7+wtNoeNpYIqg+Fh8c5Z+9fomgsFBO rK1oxoOdSWziBWpvnodn8Yr65DxSV7qagT6lxe4wkCJrWmHu/SVwSk875zDQnorB acDrMelIhWTtkA/Hd7fk5tRvV8zCtPFyap46aDYTvEUzYQ4NdmpeIRm+G1r4Dqks RiCcCiNcOugZpP/H1pP5Zo8UOkaHYtRbkruHTJLiOxXourw+4QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKxtPbRy1bIUdbet+xYNYKlG02I3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZTNi NTJjNy1iN2E1LTQ1YjAtYTJhNC1mODI0MmIyYjZlMDIvM2UzYjUyYzctYjdhNS00 NWIwLWEyYTQtZjgyNDJiMmI2ZTAyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2UzYjUyYzctYjdhNS00NWIwLWEy YTQtZjgyNDJiMmI2ZTAyLzNlM2I1MmM3LWI3YTUtNDViMC1hMmE0LWY4MjQyYjJi NmUwMi5jcmwwHwYDVR0jBBgwFoAUtHC2EXrIXwKKvpTGbVycJLrG+u4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZTNiNTJjNy1iN2E1LTQ1YjAtYTJhNC1mODI0 MmIyYjZlMDIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAaigqqEVcK0EHFEfbdfI+g xkiOPJRTyLwbREq9xYjWWFce2LpzNY+L+AyTbyI4YEiRKh9jQum+ajDcNkWi2LX4 BX2/xA/bm1x3vSc7BVleM2QnNbiTTur3/8cL03JgmOBz4rRO1FSPzFQ95uFwmqPB Z98shw9O+7CwyD/cSCqCrzOMQvBhIgHmGHBbO33370gtTRzy9g1uTHvFVt6Tfpc4 zdinFR812MAzXfUfV0Pxl3hvtzoP2fOC9d/odPBbqJEHJBLkSKzTNpdSvUsHzvC0 saY1vDbRVkmbc5PBQxUphoxTV228b6FNxMELPjgUrEDKt6oZTNewHIW8BFYOpI0p -----END CERTIFICATE-----Generated at Tue Jul 8 20:50:08 2025 by rpki-client