$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.mft File: 3aeb4dac-8911-4f44-9f24-1f5081193043.mft (raw, json) Hash identifier: 9XSPZ2ORSH5bC+hubzIPV508lSqycYKg5keWKbHD+ck= Subject key identifier: F0:B3:82:22:5E:BD:D4:DE:74:9D:12:91:55:6A:70:AB:11:87:C9:6C Authority key identifier: 96:FF:31:79:24:B5:E1:3A:74:B0:00:4D:50:56:C3:6D:12:47:5E:9D Certificate issuer: /CN=3aeb4dac-8911-4f44-9f24-1f5081193043 Certificate serial: 010D0C9F4328584AF6DFA2328AA0EEE63F773100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.mft Manifest number: 010D0C9F4328584733CC76BFA5FFE5884A560362 Signing time: Sun 24 Aug 2025 16:00:08 +0000 Manifest this update: Sun 24 Aug 2025 16:00:08 +0000 Manifest next update: Tue 26 Aug 2025 16:00:00 +0000 Files and hashes: 1: 3aeb4dac-8911-4f44-9f24-1f5081193043.crl (hash: QGTlUGUwZytldvqg6qrR8gFEI1tC9hPjS431G/ns7h4=) 2: 91ec1b9a-5318-3b0b-8d0d-18183e71e924.roa (hash: c0dBnZD6ZTJ7N83SNxak6He8AiAc8HCCpScXYO8mqCg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:df:a2:32:8a:a0:ee:e6:3f:77:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aeb4dac-8911-4f44-9f24-1f5081193043 Validity Not Before: Aug 24 16:00:08 2025 GMT Not After : Aug 26 16:00:00 2025 GMT Subject: CN=121eff30-3c67-4da9-95bb-3bfcd8ea9852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:84:99:31:c0:4f:ac:f5:11:ca:96:9e:c2:7a: d8:53:d4:5e:19:cb:d9:7c:e1:86:35:a3:8d:e8:0f: c3:f4:80:f8:64:2d:ae:6a:61:80:2a:37:54:32:9f: 16:b2:66:59:75:2b:39:a8:c6:54:bd:f3:2c:c5:59: 42:6a:23:f9:a0:74:af:c9:ce:30:a5:64:fc:a9:5d: af:8f:5d:15:4a:ae:45:23:16:0f:5f:38:ff:9f:78: 00:b6:0f:d5:40:93:d9:75:8f:4a:61:a1:66:7c:22: 5b:78:d6:b3:bc:03:1d:16:15:98:60:5b:ad:d2:2b: 0d:13:0f:ba:73:f1:36:09:82:f9:a7:1c:f6:d1:55: c7:df:9c:33:9d:9b:22:b7:02:84:95:e7:34:2a:de: 66:46:1c:7d:72:25:f3:ef:87:40:d7:87:4c:cd:77: 0f:b3:7b:ba:f7:55:c6:64:5b:7d:34:22:b2:91:47: 6c:ef:ca:69:73:9c:9d:12:37:7c:b1:8a:21:51:97: 2b:2f:56:99:30:b4:4b:6d:a9:f4:f0:61:9d:7a:a8: a9:7b:45:98:b2:43:59:ba:b7:79:05:1c:48:5c:21: 05:3e:69:bc:cb:86:4c:c7:52:d3:c9:9a:c0:26:f4: ee:49:50:52:b9:a3:3e:f0:4f:bd:e6:0a:e3:c9:fe: 68:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:B3:82:22:5E:BD:D4:DE:74:9D:12:91:55:6A:70:AB:11:87:C9:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.crl X509v3 Authority Key Identifier: keyid:96:FF:31:79:24:B5:E1:3A:74:B0:00:4D:50:56:C3:6D:12:47:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:dc:d2:08:1f:fa:4d:27:07:67:af:98:6c:ee:1a:59:d5:e0: 08:49:f9:9f:01:13:de:6d:cd:96:43:49:d5:8b:40:ae:c8:37: 4a:11:39:6a:2a:3e:02:b4:4d:c0:8e:84:f9:f1:29:e9:65:33: 87:cd:94:59:ec:db:e8:9c:65:c3:b4:09:82:81:5d:96:2c:dd: 63:bd:47:39:89:63:83:08:9e:77:67:c0:c9:0b:f1:b1:d1:09: ad:3a:9c:5d:77:b1:d1:51:38:9d:61:67:97:d2:06:04:19:06: cd:43:59:1a:4b:d9:7c:0e:40:b4:97:c8:5a:ae:7b:ce:ba:7f: ba:3c:fe:d3:11:37:ff:d1:7d:ae:43:af:49:6b:03:75:bd:c9: fa:90:05:77:f6:22:ff:48:62:79:b4:4a:16:63:1c:26:a3:53: 0b:d5:08:46:73:13:73:9b:35:93:0f:fc:ef:58:53:44:24:1c: af:2c:4b:84:4c:d2:a7:1c:ec:a5:d5:bd:85:bb:cf:11:8a:7e: c0:2d:74:99:0c:e5:93:16:81:51:bb:6b:ce:d3:fe:0e:49:07: ba:2e:d7:be:5b:9c:08:91:f1:3f:1b:d1:73:2a:16:8f:0f:d6: 39:19:f1:14:7a:71:f6:e5:07:53:c4:10:ba:b4:2e:99:9c:52: b9:62:c7:e1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr236IyiqDu5j93MQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FlYjRkYWMtODkxMS00ZjQ0LTlmMjQtMWY1MDgxMTkz MDQzMB4XDTI1MDgyNDE2MDAwOFoXDTI1MDgyNjE2MDAwMFowLzEtMCsGA1UEAxMk MTIxZWZmMzAtM2M2Ny00ZGE5LTk1YmItM2JmY2Q4ZWE5ODUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYSZMcBPrPURypaewnrYU9ReGcvZfOGGNaON 6A/D9ID4ZC2uamGAKjdUMp8WsmZZdSs5qMZUvfMsxVlCaiP5oHSvyc4wpWT8qV2v j10VSq5FIxYPXzj/n3gAtg/VQJPZdY9KYaFmfCJbeNazvAMdFhWYYFut0isNEw+6 c/E2CYL5pxz20VXH35wznZsitwKElec0Kt5mRhx9ciXz74dA14dMzXcPs3u691XG ZFt9NCKykUds78ppc5ydEjd8sYohUZcrL1aZMLRLban08GGdeqipe0WYskNZurd5 BRxIXCEFPmm8y4ZMx1LTyZrAJvTuSVBSuaM+8E+95grjyf5oLQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPCzgiJevdTedJ0SkVVqcKsRh8lsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYWVi NGRhYy04OTExLTRmNDQtOWYyNC0xZjUwODExOTMwNDMvM2FlYjRkYWMtODkxMS00 ZjQ0LTlmMjQtMWY1MDgxMTkzMDQzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2FlYjRkYWMtODkxMS00ZjQ0LTlm MjQtMWY1MDgxMTkzMDQzLzNhZWI0ZGFjLTg5MTEtNGY0NC05ZjI0LTFmNTA4MTE5 MzA0My5jcmwwHwYDVR0jBBgwFoAUlv8xeSS14Tp0sABNUFbDbRJHXp0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYWViNGRhYy04OTExLTRmNDQtOWYyNC0xZjUw ODExOTMwNDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAv3NIIH/pNJwdnr5hs7hpZ 1eAISfmfARPebc2WQ0nVi0CuyDdKETlqKj4CtE3AjoT58SnpZTOHzZRZ7NvonGXD tAmCgV2WLN1jvUc5iWODCJ53Z8DJC/Gx0QmtOpxdd7HRUTidYWeX0gYEGQbNQ1ka S9l8DkC0l8harnvOun+6PP7TETf/0X2uQ69JawN1vcn6kAV39iL/SGJ5tEoWYxwm o1ML1QhGcxNzmzWTD/zvWFNEJByvLEuETNKnHOyl1b2Fu88Rin7ALXSZDOWTFoFR u2vO0/4OSQe6Lte+W5wIkfE/G9FzKhaPD9Y5GfEUenH25QdTxBC6tC6ZnFK5Ysfh -----END CERTIFICATE-----Generated at Mon Aug 25 09:47:57 2025 by rpki-client