$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft File: 3a636afd-ece5-4e23-a54f-c43e0fc08124.mft (raw, json) Hash identifier: WpY/2sdcRxwLkzYxGcRFE6l5JSvQYuPWXzI0DWKK9PA= Subject key identifier: AF:45:F1:70:D7:C5:2A:39:33:D7:2C:57:FA:6C:9E:24:BA:CF:9C:25 Authority key identifier: 8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 Certificate issuer: /CN=3a636afd-ece5-4e23-a54f-c43e0fc08124 Certificate serial: 010D0C9F4328584AEB0236387A4A0B815324A4A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft Manifest number: 010D0C9F4328584073A84C6382713EC3B9026C57 Signing time: Wed 20 Aug 2025 10:00:08 +0000 Manifest this update: Wed 20 Aug 2025 10:00:08 +0000 Manifest next update: Fri 22 Aug 2025 10:00:00 +0000 Files and hashes: 1: 2ed04e60-1e97-3647-b39a-9a93be9e3ceb.roa (hash: mm/Gt8mXHebIFoxO13txrgSnIJ9T3kerEQiUnvoJWvY=) 2: 3a636afd-ece5-4e23-a54f-c43e0fc08124.crl (hash: PnJUwkqx8L5i2xB3jII8EYy/eKnNc87XA/lfpeA2Ym4=) 3: 86ce795d-c584-310b-9693-21cb26b6e90a.roa (hash: qqdYngo5D+o3hg9kBFr/sMg94Z0lGGys0C4Qy/8CSjI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:02:36:38:7a:4a:0b:81:53:24:a4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a636afd-ece5-4e23-a54f-c43e0fc08124 Validity Not Before: Aug 20 10:00:08 2025 GMT Not After : Aug 22 10:00:00 2025 GMT Subject: CN=10338cc9-18a0-4618-9863-dc590018507f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:39:12:45:4f:22:5b:f6:30:d1:14:b3:6a:ac: ce:9d:3c:d5:48:04:24:0e:da:51:23:43:e7:9d:3d: 61:f2:5e:d6:de:db:cc:0a:3a:af:7c:3c:90:56:a2: 52:82:0c:ca:ea:ae:b0:a4:9a:64:be:f8:09:64:ee: a3:d5:c3:3b:4a:9e:5a:a0:38:02:bd:f9:00:c9:43: 24:b5:69:8a:97:72:ed:d0:bb:39:7f:e6:e7:be:c2: 92:01:42:29:89:68:b9:ac:e1:34:f6:32:19:fb:72: 38:6a:43:12:a6:a8:a6:7a:42:db:23:57:ed:35:a0: 5f:e9:e5:b8:3a:33:07:2c:e6:14:5b:a8:9c:63:3f: 8c:56:7b:e6:b8:61:a9:4a:90:39:85:d1:e1:e2:06: 88:2e:51:78:ec:13:0f:9e:64:34:c0:0d:88:b7:b8: 0e:2e:1d:40:7b:d2:02:b6:11:50:74:73:a6:1b:aa: 3c:48:44:9a:b1:9b:f0:e0:05:ad:49:44:1e:f3:4d: a3:31:2c:ea:c3:21:c1:8c:12:d2:a3:21:05:0d:f5: 94:6f:47:74:ef:5e:aa:30:15:2e:42:8e:8b:44:55: 7f:9b:d9:fd:b9:67:db:ab:2f:53:7e:94:87:91:45: 7c:b9:4a:d0:78:b4:9d:a5:23:ec:5a:41:14:40:29: a0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:45:F1:70:D7:C5:2A:39:33:D7:2C:57:FA:6C:9E:24:BA:CF:9C:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl X509v3 Authority Key Identifier: keyid:8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:64:b0:34:e9:2f:6f:07:19:c5:f2:b2:d6:b4:51:b1:53:0a: 64:f0:de:3a:64:93:db:96:78:61:7a:0a:3f:ed:cb:30:82:ec: 41:6f:e4:03:a2:77:ef:68:e9:c5:48:93:86:61:f7:d8:a2:d4: 56:ce:c0:09:5e:f5:36:c9:1a:78:18:ac:61:64:9b:f8:b8:a6: 79:31:58:e0:3d:15:e0:e1:a5:bb:a2:0a:fa:d8:a9:a7:2d:9c: 4d:b6:ac:30:d8:79:62:65:46:f1:8f:d9:62:ea:86:1b:d4:04: 0d:0f:ce:48:1d:83:4c:d5:fa:af:4a:c9:7f:67:5f:5e:9c:c3: f6:77:85:f2:ec:96:01:d6:d6:54:a0:81:2f:84:69:34:dd:a7: 88:74:4c:8c:93:6c:74:dd:c2:f1:ab:4f:d6:94:d3:c9:19:c6: e9:bb:1c:c8:ad:56:0c:d9:1c:75:86:91:d5:43:f0:a5:36:e7: 04:e6:60:0f:1e:ad:6a:84:de:f7:94:84:47:18:dd:90:b5:d1: ec:1d:c1:16:d9:b3:80:b3:17:7b:2f:2d:c5:c8:2b:b3:49:fa: c6:92:40:90:65:d0:4c:30:b9:f1:e5:0d:92:cf:15:70:c9:e2: 43:29:ef:0b:b5:1a:d4:c1:6f:a1:43:3f:c8:0c:2d:b5:51:a5: d2:2f:de:61 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErrAjY4ekoLgVMkpKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E2MzZhZmQtZWNlNS00ZTIzLWE1NGYtYzQzZTBmYzA4 MTI0MB4XDTI1MDgyMDEwMDAwOFoXDTI1MDgyMjEwMDAwMFowLzEtMCsGA1UEAxMk MTAzMzhjYzktMThhMC00NjE4LTk4NjMtZGM1OTAwMTg1MDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTkSRU8iW/Yw0RSzaqzOnTzVSAQkDtpRI0Pn nT1h8l7W3tvMCjqvfDyQVqJSggzK6q6wpJpkvvgJZO6j1cM7Sp5aoDgCvfkAyUMk tWmKl3Lt0Ls5f+bnvsKSAUIpiWi5rOE09jIZ+3I4akMSpqimekLbI1ftNaBf6eW4 OjMHLOYUW6icYz+MVnvmuGGpSpA5hdHh4gaILlF47BMPnmQ0wA2It7gOLh1Ae9IC thFQdHOmG6o8SESasZvw4AWtSUQe802jMSzqwyHBjBLSoyEFDfWUb0d0716qMBUu Qo6LRFV/m9n9uWfbqy9TfpSHkUV8uUrQeLSdpSPsWkEUQCmg4wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFK9F8XDXxSo5M9csV/psniS6z5wlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYz NmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNlMGZjMDgxMjQvM2E2MzZhZmQtZWNlNS00 ZTIzLWE1NGYtYzQzZTBmYzA4MTI0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2E2MzZhZmQtZWNlNS00ZTIzLWE1 NGYtYzQzZTBmYzA4MTI0LzNhNjM2YWZkLWVjZTUtNGUyMy1hNTRmLWM0M2UwZmMw ODEyNC5jcmwwHwYDVR0jBBgwFoAUi85A8V4+45U8NUK2BDw+0WEHNyMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYzNmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNl MGZjMDgxMjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCRZLA06S9vBxnF8rLWtFGx Uwpk8N46ZJPblnhhego/7cswguxBb+QDonfvaOnFSJOGYffYotRWzsAJXvU2yRp4 GKxhZJv4uKZ5MVjgPRXg4aW7ogr62KmnLZxNtqww2HliZUbxj9li6oYb1AQND85I HYNM1fqvSsl/Z19enMP2d4Xy7JYB1tZUoIEvhGk03aeIdEyMk2x03cLxq0/WlNPJ GcbpuxzIrVYM2Rx1hpHVQ/ClNucE5mAPHq1qhN73lIRHGN2QtdHsHcEW2bOAsxd7 Ly3FyCuzSfrGkkCQZdBMMLnx5Q2SzxVwyeJDKe8LtRrUwW+hQz/IDC21UaXSL95h -----END CERTIFICATE-----Generated at Wed Aug 20 13:10:58 2025 by rpki-client