$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.mft File: 3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.mft (raw, json) Hash identifier: WiYxq55SziqE47ZRU85JvvmabCi1dpSpx2XK4jgfsJ0= Subject key identifier: F2:90:C9:05:9C:18:F5:E6:8F:1C:D8:9C:0B:AF:C1:EB:13:9A:A6:60 Authority key identifier: 7C:94:A1:84:50:BD:35:0E:33:CA:66:4A:B4:E0:66:EE:F1:0A:3B:EC Certificate issuer: /CN=3b8cec25-d1c2-4372-bf39-1fe2015ee1a9 Certificate serial: 010D0C9F4328584B1E8A1106E12AA41686CD02A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.mft Manifest number: 010D0C9F432858476EF1D5E25F620B9E9B5EF96D Signing time: Sun 07 Sep 2025 21:00:03 +0000 Manifest this update: Sun 07 Sep 2025 21:00:03 +0000 Manifest next update: Wed 10 Sep 2025 21:00:00 +0000 Files and hashes: 1: 3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.crl (hash: 1uavpD1VBOcX0QZH5xFqWBGRdE3PNlteSrpr3PbjJII=) 2: e746abd4-c62e-3b05-88bc-b654eeb90c84.roa (hash: NODiQ28pC0168Nk22hr9PKHX9Jnkow/CjGHQm2yyc+w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1e:8a:11:06:e1:2a:a4:16:86:cd:02:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b8cec25-d1c2-4372-bf39-1fe2015ee1a9 Validity Not Before: Sep 7 21:00:03 2025 GMT Not After : Sep 10 21:00:00 2025 GMT Subject: CN=67c36525-b797-449e-9252-1a78f83bf579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b9:cf:50:46:30:c5:b7:a0:35:17:01:a1:25: 9a:d4:e3:67:71:22:0f:c6:b7:bc:9d:b5:0b:0c:01: ee:43:7f:57:9f:85:2e:4e:e9:73:87:d8:e2:3c:a3: e0:d8:93:c8:4a:34:58:5a:5e:a8:c5:53:eb:b7:38: c4:e5:3a:8b:b5:9c:6d:41:12:3f:e8:61:2f:c1:73: 98:be:49:ef:af:c9:20:e7:8a:fb:bb:8c:7a:44:be: 82:57:6e:73:61:be:59:bf:1d:96:16:c6:34:8a:e9: 05:2b:9f:e2:1c:ef:d6:04:15:a0:9f:30:73:c7:26: d7:4e:68:72:c2:fe:69:63:cd:c2:3c:9c:9b:b0:c8: b6:d4:5a:b8:25:51:30:d0:0d:af:d0:dc:12:96:56: e1:b1:90:05:a9:45:bd:c3:a0:34:50:84:73:d0:e4: e6:47:9c:cd:69:b8:7d:4f:aa:f3:17:0d:ea:41:7c: 95:71:21:03:b3:1b:e9:32:fa:32:0c:9f:a1:ca:4a: 9b:6e:c1:7d:7e:1d:7b:a2:c3:46:c2:65:a3:cc:0b: df:21:97:d4:8e:44:43:f6:a4:c0:2b:e3:1d:62:f0: 84:c6:35:3d:ea:14:70:1f:66:e6:58:15:43:52:3c: c0:64:8d:01:d4:55:6c:f8:35:f7:de:d5:7c:5a:b7: 4a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:90:C9:05:9C:18:F5:E6:8F:1C:D8:9C:0B:AF:C1:EB:13:9A:A6:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.crl X509v3 Authority Key Identifier: keyid:7C:94:A1:84:50:BD:35:0E:33:CA:66:4A:B4:E0:66:EE:F1:0A:3B:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:69:99:81:a6:4f:fc:a9:b7:7b:d1:b3:51:d8:2e:23:e3:23: bc:e7:2d:e9:40:d6:34:f4:e5:1e:51:f6:3d:ec:c5:b8:ab:32: 8e:03:a5:c0:d6:d6:c3:c8:d2:1f:2a:53:64:63:ed:07:09:b8: a6:86:28:88:c6:fb:93:09:f0:4b:ce:5d:b4:38:a6:80:ff:6c: ee:4a:db:15:70:1a:c6:86:25:8e:5b:76:1f:68:02:a3:02:66: 19:81:44:74:81:2c:4b:15:04:fe:aa:4e:21:a7:65:b5:b3:40: db:51:14:70:91:0f:4a:1b:f1:27:87:3a:3a:10:d6:85:0f:33: cb:96:16:76:18:d0:29:26:cd:12:62:f1:91:a2:36:8b:86:26: bc:56:60:05:78:a8:d2:be:be:81:26:1b:44:39:f0:89:63:33: 2d:76:01:2b:e5:24:f5:32:fb:3e:b4:a7:6c:2a:d3:6b:23:80: e3:98:fb:0a:85:13:f1:47:dc:9b:bd:fc:e6:d9:28:13:d4:f1: a8:d9:ee:46:f1:73:90:db:47:34:77:6a:6a:99:cc:0e:2a:7b: 6b:27:ed:49:6b:8b:b1:8f:cd:b4:2d:23:6a:c4:16:63:4d:ad: 9f:50:af:4a:05:03:3d:ad:6e:e4:5a:d5:37:f3:cc:0c:7a:bf: a6:62:a2:13 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEseihEG4SqkFobNAqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I4Y2VjMjUtZDFjMi00MzcyLWJmMzktMWZlMjAxNWVl MWE5MB4XDTI1MDkwNzIxMDAwM1oXDTI1MDkxMDIxMDAwMFowLzEtMCsGA1UEAxMk NjdjMzY1MjUtYjc5Ny00NDllLTkyNTItMWE3OGY4M2JmNTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37nPUEYwxbegNRcBoSWa1ONncSIPxre8nbUL DAHuQ39Xn4UuTulzh9jiPKPg2JPISjRYWl6oxVPrtzjE5TqLtZxtQRI/6GEvwXOY vknvr8kg54r7u4x6RL6CV25zYb5Zvx2WFsY0iukFK5/iHO/WBBWgnzBzxybXTmhy wv5pY83CPJybsMi21Fq4JVEw0A2v0NwSllbhsZAFqUW9w6A0UIRz0OTmR5zNabh9 T6rzFw3qQXyVcSEDsxvpMvoyDJ+hykqbbsF9fh17osNGwmWjzAvfIZfUjkRD9qTA K+MdYvCExjU96hRwH2bmWBVDUjzAZI0B1FVs+DX33tV8WrdK0QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPKQyQWcGPXmjxzYnAuvwesTmqZgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYjhj ZWMyNS1kMWMyLTQzNzItYmYzOS0xZmUyMDE1ZWUxYTkvM2I4Y2VjMjUtZDFjMi00 MzcyLWJmMzktMWZlMjAxNWVlMWE5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2I4Y2VjMjUtZDFjMi00MzcyLWJm MzktMWZlMjAxNWVlMWE5LzNiOGNlYzI1LWQxYzItNDM3Mi1iZjM5LTFmZTIwMTVl ZTFhOS5jcmwwHwYDVR0jBBgwFoAUfJShhFC9NQ4zymZKtOBm7vEKO+wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYjhjZWMyNS1kMWMyLTQzNzItYmYzOS0xZmUy MDE1ZWUxYTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBjaZmBpk/8qbd70bNR2C4j 4yO85y3pQNY09OUeUfY97MW4qzKOA6XA1tbDyNIfKlNkY+0HCbimhiiIxvuTCfBL zl20OKaA/2zuStsVcBrGhiWOW3YfaAKjAmYZgUR0gSxLFQT+qk4hp2W1s0DbURRw kQ9KG/Enhzo6ENaFDzPLlhZ2GNApJs0SYvGRojaLhia8VmAFeKjSvr6BJhtEOfCJ YzMtdgEr5ST1Mvs+tKdsKtNrI4DjmPsKhRPxR9ybvfzm2SgT1PGo2e5G8XOQ20c0 d2pqmcwOKntrJ+1Ja4uxj820LSNqxBZjTa2fUK9KBQM9rW7kWtU388wMer+mYqIT -----END CERTIFICATE-----Generated at Mon Sep 8 10:18:28 2025 by rpki-client