$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.mft File: 3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.mft (raw, json) Hash identifier: zwCzxIM+gZolnUIyi2CdznmD/SeNJ/Te3j4U/HKu/5M= Subject key identifier: CD:5C:95:26:55:E5:CA:21:A0:0D:E9:3A:52:21:C3:BD:96:50:08:D6 Authority key identifier: B4:70:B6:11:7A:C8:5F:02:8A:BE:94:C6:6D:5C:9C:24:BA:C6:FA:EE Certificate issuer: /CN=3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02 Certificate serial: 010D0C9F4328584B1F1EF33DDC19DF2BAB507980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.mft Manifest number: 010D0C9F4328584595004A1770E5FE451D02FC09 Signing time: Mon 08 Sep 2025 02:00:03 +0000 Manifest this update: Mon 08 Sep 2025 02:00:03 +0000 Manifest next update: Thu 11 Sep 2025 02:00:00 +0000 Files and hashes: 1: 3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.crl (hash: F/Todh7JeC5l9HEf4OadMQnAI+X616Lc6jy+axQJLhM=) 2: 94b3319a-658a-3317-bf87-91c877d6dd90.roa (hash: 66oOWEfRI5jyVZemoiZEai9wcxkhMuvDYeTjiVIvg2w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Sep 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:1e:f3:3d:dc:19:df:2b:ab:50:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02 Validity Not Before: Sep 8 02:00:03 2025 GMT Not After : Sep 11 02:00:00 2025 GMT Subject: CN=29dc8f96-13c9-40be-9752-9817bda4c978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:57:af:db:f6:c1:15:b8:1d:4c:cd:a5:e8:96: d4:23:60:72:bc:3f:ce:ac:b8:27:3b:a8:4e:16:f8: 04:8d:cf:94:15:ae:71:9d:36:1f:7c:a5:33:d4:61: 06:78:ad:6b:93:9a:b5:ab:14:ad:ee:85:7e:a4:de: a5:4f:b3:19:6c:c4:a5:23:0d:64:10:7b:73:38:bd: 1e:ad:13:40:0a:7f:54:6a:77:a3:b3:3b:6e:78:96: f4:de:b1:af:cc:7a:92:48:94:a3:a6:82:8f:21:9b: c6:f1:f7:ba:90:92:04:e3:46:0c:9f:6a:aa:d6:65: 42:d2:05:f2:05:2e:50:bf:df:28:47:e7:7d:13:71: e1:62:bc:ab:a1:aa:49:0f:2d:67:b8:00:9a:3a:22: 5f:da:de:c5:94:00:44:45:fc:3a:a1:b3:e3:f6:90: 25:af:e5:6f:7c:85:3f:c1:8a:b1:95:90:c8:cc:43: 6c:75:1c:d5:47:ea:4b:59:0e:91:3a:e0:72:7b:11: 60:70:64:0e:69:7f:89:91:62:8f:fa:c9:b3:8e:38: 0a:a2:58:38:06:1d:37:81:a0:54:66:f7:30:06:e4: 61:cb:f2:25:06:9e:98:97:3d:1e:c0:c1:b1:ab:95: 63:09:bf:10:ac:60:71:ce:ea:0c:5f:18:f8:97:b2: c9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5C:95:26:55:E5:CA:21:A0:0D:E9:3A:52:21:C3:BD:96:50:08:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.crl X509v3 Authority Key Identifier: keyid:B4:70:B6:11:7A:C8:5F:02:8A:BE:94:C6:6D:5C:9C:24:BA:C6:FA:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:e3:4d:a7:0b:bb:52:4b:13:00:1e:0f:54:cd:24:84:06:86: ec:41:99:d5:af:49:a5:73:b4:7a:20:e9:95:8f:86:05:10:a3: 23:63:e4:cb:0d:b2:e4:da:a5:10:82:64:41:5a:47:3d:26:f6: e2:f9:9e:2e:12:ce:59:22:cb:d7:98:7f:a9:29:34:66:53:23: ab:4b:32:6a:fa:fb:5e:d1:8e:3a:62:c1:85:53:cc:f7:35:c9: 99:63:f8:a5:8a:a4:22:a0:e5:81:ea:44:80:47:ba:cc:4e:37: 98:29:2b:17:c7:c7:90:79:d7:cd:aa:40:70:71:ac:bb:ef:2a: db:66:90:72:14:73:12:c8:cb:30:6d:d0:a2:f7:7a:92:f8:32: da:5c:ef:80:36:1e:d2:be:41:ae:21:4d:00:23:b6:05:c4:a6: f2:e5:88:46:22:ca:7a:31:43:3b:33:61:25:64:6a:3b:4c:f3: 53:e0:21:46:b8:30:0d:31:d3:fc:e7:5b:9f:f5:9f:cd:28:9f: 06:e0:4f:27:dc:c4:7d:40:48:13:b1:56:5c:4b:1b:ec:7e:8b: e0:39:cd:1c:62:cb:43:78:48:f9:a5:e4:66:7b:b3:ff:53:9c: bc:f4:6e:76:34:38:f7:ee:bb:23:c6:da:2e:27:07:eb:55:a8: ca:82:ee:93 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEsfHvM93BnfK6tQeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2UzYjUyYzctYjdhNS00NWIwLWEyYTQtZjgyNDJiMmI2 ZTAyMB4XDTI1MDkwODAyMDAwM1oXDTI1MDkxMTAyMDAwMFowLzEtMCsGA1UEAxMk MjlkYzhmOTYtMTNjOS00MGJlLTk3NTItOTgxN2JkYTRjOTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lev2/bBFbgdTM2l6JbUI2ByvD/OrLgnO6hO FvgEjc+UFa5xnTYffKUz1GEGeK1rk5q1qxSt7oV+pN6lT7MZbMSlIw1kEHtzOL0e rRNACn9UanejsztueJb03rGvzHqSSJSjpoKPIZvG8fe6kJIE40YMn2qq1mVC0gXy BS5Qv98oR+d9E3HhYryroapJDy1nuACaOiJf2t7FlABERfw6obPj9pAlr+VvfIU/ wYqxlZDIzENsdRzVR+pLWQ6ROuByexFgcGQOaX+JkWKP+smzjjgKolg4Bh03gaBU ZvcwBuRhy/IlBp6Ylz0ewMGxq5VjCb8QrGBxzuoMXxj4l7LJeQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFM1clSZV5cohoA3pOlIhw72WUAjWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZTNi NTJjNy1iN2E1LTQ1YjAtYTJhNC1mODI0MmIyYjZlMDIvM2UzYjUyYzctYjdhNS00 NWIwLWEyYTQtZjgyNDJiMmI2ZTAyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2UzYjUyYzctYjdhNS00NWIwLWEy YTQtZjgyNDJiMmI2ZTAyLzNlM2I1MmM3LWI3YTUtNDViMC1hMmE0LWY4MjQyYjJi NmUwMi5jcmwwHwYDVR0jBBgwFoAUtHC2EXrIXwKKvpTGbVycJLrG+u4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZTNiNTJjNy1iN2E1LTQ1YjAtYTJhNC1mODI0 MmIyYjZlMDIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCF402nC7tSSxMAHg9UzSSE BobsQZnVr0mlc7R6IOmVj4YFEKMjY+TLDbLk2qUQgmRBWkc9Jvbi+Z4uEs5ZIsvX mH+pKTRmUyOrSzJq+vte0Y46YsGFU8z3NcmZY/iliqQioOWB6kSAR7rMTjeYKSsX x8eQedfNqkBwcay77yrbZpByFHMSyMswbdCi93qS+DLaXO+ANh7SvkGuIU0AI7YF xKby5YhGIsp6MUM7M2ElZGo7TPNT4CFGuDANMdP851uf9Z/NKJ8G4E8n3MR9QEgT sVZcSxvsfovgOc0cYstDeEj5peRme7P/U5y89G52NDj37rsjxtouJwfrVajKgu6T -----END CERTIFICATE-----Generated at Tue Sep 9 01:48:42 2025 by rpki-client