$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.mft File: 3ccb9ed0-7870-4a4a-bf28-cb86bca49137.mft (raw, json) Hash identifier: PP0oDewwb+JWMiz3M+i9PMlhl6I1W/6E57wDlFlCR+0= Subject key identifier: 12:91:A7:1D:25:CC:93:6A:B2:F4:32:7A:A6:44:10:64:55:E0:A2:A5 Authority key identifier: 92:A8:7E:36:E1:2A:E3:B9:02:AD:CD:7B:CD:EA:42:EF:B1:8D:20:22 Certificate issuer: /CN=3ccb9ed0-7870-4a4a-bf28-cb86bca49137 Certificate serial: 010D0C9F4328584AEB2000CE4F36AD336C3BC600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.mft Manifest number: 010D0C9F4328584073A85062F6BEE4FE457676D4 Signing time: Wed 20 Aug 2025 11:00:08 +0000 Manifest this update: Wed 20 Aug 2025 11:00:08 +0000 Manifest next update: Fri 22 Aug 2025 11:00:00 +0000 Files and hashes: 1: 3ccb9ed0-7870-4a4a-bf28-cb86bca49137.crl (hash: OeRJsePmGEmSrkRHOWyIVc4Nl1vpi7HONBgedwpfINA=) 2: f5ad0dde-a733-3deb-81db-42293449a543.roa (hash: Zcmn5fa2Wj9UluM+YU4hwaGZwL0pD9ISv2OqQiBTodA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:20:00:ce:4f:36:ad:33:6c:3b:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ccb9ed0-7870-4a4a-bf28-cb86bca49137 Validity Not Before: Aug 20 11:00:08 2025 GMT Not After : Aug 22 11:00:00 2025 GMT Subject: CN=5f95aaac-a300-4a68-a794-7979bbead89a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:92:70:74:8f:67:3a:e9:3b:e6:88:35:f7:e0: f5:aa:c2:73:44:de:4f:b7:f9:99:96:e7:17:25:8c: d2:03:ab:cb:37:8a:e7:46:b3:a7:6c:5e:bf:f4:f6: f3:33:e4:f4:e7:27:76:a1:10:49:21:d5:f6:00:19: 03:35:5f:52:2f:98:38:bc:0c:b6:6b:35:cb:43:61: de:5f:0d:b3:da:a3:66:99:fc:06:d0:52:6d:cc:21: 7b:e7:4d:a4:31:74:d3:d9:df:34:4f:a6:14:ca:53: 93:b8:c7:70:53:8b:9d:e9:b9:60:e4:7e:8c:12:04: 4f:1a:83:bb:43:6a:fe:36:69:b7:ba:ec:4e:16:15: e6:6f:ae:58:e0:d8:28:b2:52:4d:80:61:a7:2a:ec: bd:09:00:e5:26:6a:62:78:1c:a2:90:ff:b0:23:2c: 89:95:89:6f:de:6e:a2:ea:87:65:d9:19:16:4d:03: e8:b0:cd:f5:2c:7d:ea:ca:3f:62:38:a1:7c:24:63: b3:8e:e5:5f:43:78:95:0d:af:c3:26:f0:fe:d9:ce: 32:68:ae:5b:e3:47:cc:81:30:0d:2d:85:e4:2c:e0: e2:85:20:c2:65:6d:d5:a5:66:fc:1b:57:2d:38:28: 83:dd:77:7b:ad:ee:24:0c:3e:54:ef:85:c9:75:33: 91:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:91:A7:1D:25:CC:93:6A:B2:F4:32:7A:A6:44:10:64:55:E0:A2:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.crl X509v3 Authority Key Identifier: keyid:92:A8:7E:36:E1:2A:E3:B9:02:AD:CD:7B:CD:EA:42:EF:B1:8D:20:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:ff:9f:e3:26:2d:47:3e:03:f2:34:40:3b:4b:ae:72:c5:5a: 5c:e0:58:7e:fd:e7:24:71:86:4a:aa:8a:2b:24:85:eb:d3:62: 38:3b:09:68:3b:19:a0:f6:00:e0:ff:5f:a1:c3:f2:78:4a:00: a5:39:eb:f5:93:1f:77:eb:73:93:c7:1e:b5:22:9e:69:6a:a5: 1e:6e:22:6e:4f:52:73:5b:2f:a1:06:63:aa:0a:03:ad:1b:37: 17:67:8b:37:57:08:95:40:ad:da:9e:31:15:9a:7a:f3:8b:2b: 0b:f3:da:0e:45:71:95:5c:3a:1b:54:bc:19:ef:e8:46:d7:06: 6a:18:7b:06:db:f2:24:38:76:3d:1a:9d:c4:dd:d2:60:e9:30: 88:54:a9:a4:8f:1e:22:c9:b2:51:32:4d:1d:57:7e:f9:54:d3: 11:a1:f9:e9:74:9a:6a:1b:e8:2d:16:20:57:1f:94:7a:d1:7d: 12:e5:55:89:6e:0a:fa:ac:47:29:12:71:6b:8c:1d:09:3c:b4: 0e:77:f0:03:29:67:81:b8:d8:30:77:3f:42:98:a5:09:4b:bd: 55:e4:ba:55:fc:15:a7:2e:09:fb:be:4c:56:20:3e:57:35:f9: 0e:f1:94:41:c3:d1:a0:e3:d3:77:44:e0:56:b0:0c:25:b2:9e: 59:18:d4:54 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErrIADOTzatM2w7xgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2NjYjllZDAtNzg3MC00YTRhLWJmMjgtY2I4NmJjYTQ5 MTM3MB4XDTI1MDgyMDExMDAwOFoXDTI1MDgyMjExMDAwMFowLzEtMCsGA1UEAxMk NWY5NWFhYWMtYTMwMC00YTY4LWE3OTQtNzk3OWJiZWFkODlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5JwdI9nOuk75og19+D1qsJzRN5Pt/mZlucX JYzSA6vLN4rnRrOnbF6/9PbzM+T05yd2oRBJIdX2ABkDNV9SL5g4vAy2azXLQ2He Xw2z2qNmmfwG0FJtzCF7502kMXTT2d80T6YUylOTuMdwU4ud6blg5H6MEgRPGoO7 Q2r+Nmm3uuxOFhXmb65Y4NgoslJNgGGnKuy9CQDlJmpieByikP+wIyyJlYlv3m6i 6odl2RkWTQPosM31LH3qyj9iOKF8JGOzjuVfQ3iVDa/DJvD+2c4yaK5b40fMgTAN LYXkLODihSDCZW3VpWb8G1ctOCiD3Xd7re4kDD5U74XJdTORkQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBKRpx0lzJNqsvQyeqZEEGRV4KKlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zY2Ni OWVkMC03ODcwLTRhNGEtYmYyOC1jYjg2YmNhNDkxMzcvM2NjYjllZDAtNzg3MC00 YTRhLWJmMjgtY2I4NmJjYTQ5MTM3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2NjYjllZDAtNzg3MC00YTRhLWJm MjgtY2I4NmJjYTQ5MTM3LzNjY2I5ZWQwLTc4NzAtNGE0YS1iZjI4LWNiODZiY2E0 OTEzNy5jcmwwHwYDVR0jBBgwFoAUkqh+NuEq47kCrc17zepC77GNICIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zY2NiOWVkMC03ODcwLTRhNGEtYmYyOC1jYjg2 YmNhNDkxMzcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCF/5/jJi1HPgPyNEA7S65y xVpc4Fh+/eckcYZKqoorJIXr02I4OwloOxmg9gDg/1+hw/J4SgClOev1kx9363OT xx61Ip5paqUebiJuT1JzWy+hBmOqCgOtGzcXZ4s3VwiVQK3anjEVmnrziysL89oO RXGVXDobVLwZ7+hG1wZqGHsG2/IkOHY9Gp3E3dJg6TCIVKmkjx4iybJRMk0dV375 VNMRofnpdJpqG+gtFiBXH5R60X0S5VWJbgr6rEcpEnFrjB0JPLQOd/ADKWeBuNgw dz9CmKUJS71V5LpV/BWnLgn7vkxWID5XNfkO8ZRBw9Gg49N3ROBWsAwlsp5ZGNRU -----END CERTIFICATE-----Generated at Wed Aug 20 21:37:39 2025 by rpki-client