$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.mft File: 3bfea78e-552c-46d0-a7b4-60f999223238.mft (raw, json) Hash identifier: kUs2MCPueNZvYU+oauIzzUvGN/zWY1Bk/j9ItZvfFaw= Subject key identifier: C2:66:B7:64:ED:05:79:A0:83:7E:61:DC:7E:92:EA:29:FA:C4:F9:0F Authority key identifier: D7:A9:E9:5F:B8:85:26:BB:3C:57:88:CD:07:2A:BF:B7:6B:2E:8A:96 Certificate issuer: /CN=3bfea78e-552c-46d0-a7b4-60f999223238 Certificate serial: 010D0C9F4328584A7691E487EA853760BE08EF40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.mft Manifest number: 010D0C9F43285845DC7F251890046E2B090F55A0 Signing time: Wed 09 Jul 2025 17:00:03 +0000 Manifest this update: Wed 09 Jul 2025 17:00:03 +0000 Manifest next update: Sat 12 Jul 2025 17:00:00 +0000 Files and hashes: 1: 3bfea78e-552c-46d0-a7b4-60f999223238.crl (hash: WjIzIT+K4x4koaptkc4C+6Zmg7BK5bjVA1G77fUCqTg=) 2: b07aee0a-5e02-3527-90d1-9ec6e19a26e3.roa (hash: WGG4RWebETDVZWAeqlt2fARQ+bjeUstg91HEmFverPQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:91:e4:87:ea:85:37:60:be:08:ef:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bfea78e-552c-46d0-a7b4-60f999223238 Validity Not Before: Jul 9 17:00:03 2025 GMT Not After : Jul 12 17:00:00 2025 GMT Subject: CN=ac7d2246-d464-4b71-8db0-921312002693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4b:ab:63:97:6f:86:9f:c2:10:83:8d:14:6b: 78:63:4b:21:ea:d0:7b:af:23:b9:0a:f5:36:4f:61: bb:84:5e:ac:62:4d:52:e9:76:44:6a:64:bc:8e:fd: c6:15:ca:64:4a:b6:9c:5e:d1:2a:b3:08:cb:f4:cb: d5:e8:ab:dc:7f:a3:ef:2d:a4:6c:5f:18:32:8f:aa: b7:10:3d:95:b1:08:95:d6:e3:ee:25:2c:c1:75:31: a4:63:b3:d7:fa:45:59:30:7d:0d:8b:1f:4b:40:9b: e6:3d:58:64:cb:a4:7e:d3:7f:7c:c5:59:8e:6c:26: 90:ed:8f:4a:80:73:2a:c4:42:7b:d1:e6:da:9f:ba: 0d:54:28:e2:38:4a:e6:87:f0:0c:93:2d:84:e3:a3: a5:78:07:4e:8b:58:96:7f:6a:14:4e:be:95:ce:0a: fe:de:77:a4:4d:21:2a:c1:e9:f1:24:1a:81:07:95: d6:14:2c:ce:49:3e:4a:b6:8d:fe:c2:b2:9e:01:ab: 16:a5:52:9d:20:f4:a1:ae:5d:4c:b9:49:13:ed:1a: 51:dd:5f:a6:81:60:86:a8:87:70:9f:17:17:2c:dd: 30:5a:5c:b4:64:8f:67:8c:ea:fb:06:14:ad:36:eb: 3f:86:a2:1b:5a:18:a4:b0:8e:df:8d:7b:4f:42:d2: 78:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:66:B7:64:ED:05:79:A0:83:7E:61:DC:7E:92:EA:29:FA:C4:F9:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.crl X509v3 Authority Key Identifier: keyid:D7:A9:E9:5F:B8:85:26:BB:3C:57:88:CD:07:2A:BF:B7:6B:2E:8A:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:5e:44:6e:06:1f:70:e4:40:54:69:37:9e:e9:26:ae:85:86: 8e:f9:b2:2d:ac:dc:75:ee:32:aa:e5:e3:13:ea:84:c0:f5:63: 85:c8:f7:ed:50:2d:3e:18:3c:d4:c2:79:f0:72:03:48:8d:d8: 5b:8d:ac:db:47:01:d9:72:fc:89:62:5a:5a:19:59:46:97:7f: 15:eb:fe:62:12:b9:36:c5:0c:41:d9:b6:cd:fb:37:27:20:7f: 3a:fd:cd:08:e8:2f:94:8b:7d:8d:8e:74:9c:0b:3d:66:1a:c0: 01:1f:59:2a:3e:a9:19:4f:a9:06:b3:35:8e:86:0a:28:b8:bd: 5f:ff:ff:5b:6a:78:2b:b4:13:81:6f:a5:8f:4e:59:f5:97:31: 92:95:e8:6b:3b:1e:91:a6:06:19:ee:b3:34:d2:f2:97:92:a3: 2e:3a:7c:69:b7:d5:d0:84:c0:11:17:b0:1b:d4:ad:98:10:ce: 6d:98:82:80:ef:53:be:92:fa:f7:40:f9:f9:76:65:20:d9:34: b0:4a:fe:36:76:74:90:91:65:0a:8f:17:01:e0:27:f7:8a:80: 2f:04:d6:4e:af:40:23:c5:ef:15:b2:ac:a0:1b:3e:33:24:e4: 60:e8:d2:68:a7:2f:17:94:32:63:4c:96:8e:81:05:17:e3:2b: c7:0a:4b:55 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEp2keSH6oU3YL4I70AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JmZWE3OGUtNTUyYy00NmQwLWE3YjQtNjBmOTk5MjIz MjM4MB4XDTI1MDcwOTE3MDAwM1oXDTI1MDcxMjE3MDAwMFowLzEtMCsGA1UEAxMk YWM3ZDIyNDYtZDQ2NC00YjcxLThkYjAtOTIxMzEyMDAyNjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEurY5dvhp/CEIONFGt4Y0sh6tB7ryO5CvU2 T2G7hF6sYk1S6XZEamS8jv3GFcpkSracXtEqswjL9MvV6Kvcf6PvLaRsXxgyj6q3 ED2VsQiV1uPuJSzBdTGkY7PX+kVZMH0Nix9LQJvmPVhky6R+0398xVmObCaQ7Y9K gHMqxEJ70eban7oNVCjiOErmh/AMky2E46OleAdOi1iWf2oUTr6Vzgr+3nekTSEq wenxJBqBB5XWFCzOST5Kto3+wrKeAasWpVKdIPShrl1MuUkT7RpR3V+mgWCGqIdw nxcXLN0wWly0ZI9njOr7BhStNus/hqIbWhiksI7fjXtPQtJ4WQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMJmt2TtBXmgg35h3H6S6in6xPkPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zYmZl YTc4ZS01NTJjLTQ2ZDAtYTdiNC02MGY5OTkyMjMyMzgvM2JmZWE3OGUtNTUyYy00 NmQwLWE3YjQtNjBmOTk5MjIzMjM4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2JmZWE3OGUtNTUyYy00NmQwLWE3 YjQtNjBmOTk5MjIzMjM4LzNiZmVhNzhlLTU1MmMtNDZkMC1hN2I0LTYwZjk5OTIy MzIzOC5jcmwwHwYDVR0jBBgwFoAU16npX7iFJrs8V4jNByq/t2suipYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zYmZlYTc4ZS01NTJjLTQ2ZDAtYTdiNC02MGY5 OTkyMjMyMzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAAXkRuBh9w5EBUaTee6Sau hYaO+bItrNx17jKq5eMT6oTA9WOFyPftUC0+GDzUwnnwcgNIjdhbjazbRwHZcvyJ YlpaGVlGl38V6/5iErk2xQxB2bbN+zcnIH86/c0I6C+Ui32NjnScCz1mGsABH1kq PqkZT6kGszWOhgoouL1f//9bangrtBOBb6WPTln1lzGSlehrOx6RpgYZ7rM00vKX kqMuOnxpt9XQhMARF7Ab1K2YEM5tmIKA71O+kvr3QPn5dmUg2TSwSv42dnSQkWUK jxcB4Cf3ioAvBNZOr0Ajxe8VsqygGz4zJORg6NJopy8XlDJjTJaOgQUX4yvHCktV -----END CERTIFICATE-----Generated at Wed Jul 9 20:46:01 2025 by rpki-client