$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.mft File: 3bc8e9cb-88ee-455e-b012-1b1abfca72ab.mft (raw, json) Hash identifier: qp72JKeoEBC31ahV85wvtuHyHunF0WdZoiQuHToV5I0= Subject key identifier: 0B:0C:A1:10:07:F6:75:02:DB:2E:C5:57:7C:C7:1E:58:C0:14:22:6B Authority key identifier: 84:AD:69:95:E5:C7:F4:14:66:20:C8:C7:68:96:BA:C7:52:17:0D:14 Certificate issuer: /CN=3bc8e9cb-88ee-455e-b012-1b1abfca72ab Certificate serial: 010D0C9F4328584AEAE46515FF86E8031FB9DD00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.mft Manifest number: 010D0C9F4328584073A8498F3F05E22DFBDA9656 Signing time: Wed 20 Aug 2025 09:00:03 +0000 Manifest this update: Wed 20 Aug 2025 09:00:03 +0000 Manifest next update: Fri 22 Aug 2025 09:00:00 +0000 Files and hashes: 1: 3bc8e9cb-88ee-455e-b012-1b1abfca72ab.crl (hash: tpy4kszfSN7w+ZVq8czaJdUNlko9gByC2Odu0gloBGs=) 2: d9e1ae26-257a-3a0b-b46e-049aa014cc17.roa (hash: HaMgPs1cf8QUJ0TNHA44EkwG2rxjL2M8M+CF068nmKE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ea:e4:65:15:ff:86:e8:03:1f:b9:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bc8e9cb-88ee-455e-b012-1b1abfca72ab Validity Not Before: Aug 20 09:00:03 2025 GMT Not After : Aug 22 09:00:00 2025 GMT Subject: CN=22bff426-c783-4160-9050-b9e7c849f85d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:05:38:6f:6e:f7:1a:ea:9c:e8:0a:8b:f2:1e: 6e:42:44:74:20:07:c7:b4:d0:54:a5:62:88:e8:c0: f7:cc:36:3f:90:c3:6d:f1:f5:5a:76:7c:bb:45:50: ba:80:b9:67:6d:df:c9:c9:56:1f:e5:24:ac:70:a2: 05:36:71:98:e1:d3:03:45:3e:3b:e8:46:6e:15:b2: f5:1d:d3:c9:6f:c1:61:a7:db:e3:8e:96:75:d3:49: 21:85:e6:f5:59:d9:37:02:11:d2:88:b3:fb:a0:66: e0:47:5d:f1:a0:21:6c:5e:5d:94:a8:34:b9:7a:05: 2a:b3:d3:e2:81:7a:85:1b:15:c4:2b:1e:ff:18:8c: c0:c2:25:c9:93:7d:b6:58:ba:df:dd:44:82:c4:1d: d7:6b:16:db:0f:23:89:f3:75:1f:e2:00:42:6c:e1: 15:64:f7:01:6a:65:fd:a7:65:ca:43:36:c9:d7:41: cd:92:0d:ca:7b:b7:d7:cd:35:b3:b8:1f:93:3c:6f: dd:a8:72:2b:74:ea:5f:8a:a7:16:90:63:c3:d9:08: bc:01:29:cb:75:e3:2c:40:ff:a5:a2:a8:71:92:a3: e1:a3:cd:4a:59:99:95:59:a0:a9:7d:b1:1e:f1:fd: 09:72:a7:2c:dc:dc:6f:fa:b9:00:87:1b:41:d0:34: 7a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:0C:A1:10:07:F6:75:02:DB:2E:C5:57:7C:C7:1E:58:C0:14:22:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.crl X509v3 Authority Key Identifier: keyid:84:AD:69:95:E5:C7:F4:14:66:20:C8:C7:68:96:BA:C7:52:17:0D:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:11:9b:30:29:4d:71:bb:7d:aa:15:ba:80:77:f2:45:42:6e: 5c:6a:d9:e5:d0:b4:aa:86:eb:53:13:f2:04:cc:43:81:fa:5d: 03:0a:a7:2a:c6:df:8b:44:95:f3:c5:e5:01:05:04:6f:69:e5: 70:93:88:f1:84:fe:90:d8:65:b7:79:2a:e4:20:45:56:f5:5f: 63:07:dd:86:2c:fb:ff:1c:3f:4b:50:56:39:43:a5:53:d5:46: c4:ef:c6:f8:74:2e:fa:88:54:14:5a:10:ef:a0:53:a8:6b:0f: eb:ed:97:b5:30:9d:7e:f0:2a:f3:b5:ff:7a:b8:0e:64:9a:ed: c8:98:75:97:38:a2:03:41:ad:f9:9e:85:ab:41:e0:34:a2:35: d3:88:bd:50:01:ee:63:98:7e:66:41:5a:65:cd:11:8f:b3:21: 77:a1:f7:9d:62:be:d9:8a:fb:f1:5a:d3:45:bf:70:b2:54:7d: ce:66:d1:8b:01:a0:c1:90:25:df:50:ba:b7:4a:7a:df:90:60: f8:0e:2d:cb:cb:72:75:d7:73:84:23:3f:7a:f0:65:26:13:1e: b2:43:6b:c9:35:91:d8:08:ee:67:87:37:4f:b6:21:36:0f:8d: 8c:fb:9a:3c:57:b7:f5:3b:21:74:4b:f2:42:ab:06:f0:53:60: 16:11:61:c3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErq5GUV/4boAx+53QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JjOGU5Y2ItODhlZS00NTVlLWIwMTItMWIxYWJmY2E3 MmFiMB4XDTI1MDgyMDA5MDAwM1oXDTI1MDgyMjA5MDAwMFowLzEtMCsGA1UEAxMk MjJiZmY0MjYtYzc4My00MTYwLTkwNTAtYjllN2M4NDlmODVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswU4b273Guqc6AqL8h5uQkR0IAfHtNBUpWKI 6MD3zDY/kMNt8fVadny7RVC6gLlnbd/JyVYf5SSscKIFNnGY4dMDRT476EZuFbL1 HdPJb8Fhp9vjjpZ100khheb1Wdk3AhHSiLP7oGbgR13xoCFsXl2UqDS5egUqs9Pi gXqFGxXEKx7/GIzAwiXJk322WLrf3USCxB3XaxbbDyOJ83Uf4gBCbOEVZPcBamX9 p2XKQzbJ10HNkg3Ke7fXzTWzuB+TPG/dqHIrdOpfiqcWkGPD2Qi8ASnLdeMsQP+l oqhxkqPho81KWZmVWaCpfbEe8f0Jcqcs3Nxv+rkAhxtB0DR6uQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAsMoRAH9nUC2y7FV3zHHljAFCJrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYmM4 ZTljYi04OGVlLTQ1NWUtYjAxMi0xYjFhYmZjYTcyYWIvM2JjOGU5Y2ItODhlZS00 NTVlLWIwMTItMWIxYWJmY2E3MmFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2JjOGU5Y2ItODhlZS00NTVlLWIw MTItMWIxYWJmY2E3MmFiLzNiYzhlOWNiLTg4ZWUtNDU1ZS1iMDEyLTFiMWFiZmNh NzJhYi5jcmwwHwYDVR0jBBgwFoAUhK1pleXH9BRmIMjHaJa6x1IXDRQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYmM4ZTljYi04OGVlLTQ1NWUtYjAxMi0xYjFh YmZjYTcyYWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBsEZswKU1xu32qFbqAd/JF Qm5catnl0LSqhutTE/IEzEOB+l0DCqcqxt+LRJXzxeUBBQRvaeVwk4jxhP6Q2GW3 eSrkIEVW9V9jB92GLPv/HD9LUFY5Q6VT1UbE78b4dC76iFQUWhDvoFOoaw/r7Ze1 MJ1+8Crztf96uA5kmu3ImHWXOKIDQa35noWrQeA0ojXTiL1QAe5jmH5mQVplzRGP syF3ofedYr7ZivvxWtNFv3CyVH3OZtGLAaDBkCXfULq3SnrfkGD4Di3Ly3J113OE Iz968GUmEx6yQ2vJNZHYCO5nhzdPtiE2D42M+5o8V7f1OyF0S/JCqwbwU2AWEWHD -----END CERTIFICATE-----Generated at Wed Aug 20 21:15:10 2025 by rpki-client