$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft File: 3d21f741-fd91-4158-8853-7388dab3b3e3.mft (raw, json) Hash identifier: R3DpP+xO7EEDCT+5Z9imiAWyGJ0EGGEKMwz2eE4d/Us= Subject key identifier: 88:CA:60:C3:98:84:EF:6C:CD:51:6B:5E:F9:65:DF:36:46:06:01:36 Authority key identifier: A7:AF:BF:E1:62:39:AF:97:9B:56:A5:07:BE:38:09:30:7F:F3:BE:14 Certificate issuer: /CN=3d21f741-fd91-4158-8853-7388dab3b3e3 Certificate serial: 010D0C9F4328584AF8F7A2B27EEB4EB29B422A20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft Manifest number: 010D0C9F4328584073A84C34E2402761CF9DBADC Signing time: Mon 25 Aug 2025 10:00:08 +0000 Manifest this update: Mon 25 Aug 2025 10:00:08 +0000 Manifest next update: Thu 28 Aug 2025 10:00:00 +0000 Files and hashes: 1: 3d21f741-fd91-4158-8853-7388dab3b3e3.crl (hash: kJDKhVfMKqToo06699rWaJdI1Ykwn7ZjoX2tUCc3M6U=) 2: 90ad5afb-11a5-3a7e-af84-85ae08f294f7.roa (hash: H06UmjlWIabt2OGqnnY+gtdAB6k8ET6VYOJWn69U9x8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f8:f7:a2:b2:7e:eb:4e:b2:9b:42:2a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d21f741-fd91-4158-8853-7388dab3b3e3 Validity Not Before: Aug 25 10:00:08 2025 GMT Not After : Aug 28 10:00:00 2025 GMT Subject: CN=4337985e-b897-4f45-ba65-4369ecc93158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:77:63:94:8e:72:20:5a:01:c8:c8:11:90:96: 0e:e1:b9:e3:c7:b9:d9:37:b5:05:47:0e:9d:81:85: bf:1a:31:b6:6c:72:4a:6e:2f:4e:e3:98:75:91:f1: e2:22:30:cd:fc:55:0a:00:18:22:74:b9:05:9d:1e: 73:1d:7e:ae:2c:84:4e:b4:a4:0d:09:bc:da:a7:25: 23:8a:7e:ca:b3:88:32:b6:52:aa:67:d1:c9:34:70: d5:5a:ee:39:f3:39:9f:97:6c:af:97:00:0c:b4:e5: 18:45:3e:ab:9f:64:4e:7e:27:b8:73:23:75:d6:82: 1a:f6:ac:d5:65:2a:0c:3e:74:d0:15:45:84:1f:4a: 65:55:3a:83:d6:f5:84:e4:2a:eb:ff:6b:f3:35:87: 26:77:c8:f4:bb:bd:4b:ec:6c:c7:fb:03:6c:36:e7: 4c:d8:3e:3d:b3:66:c5:3b:2e:5c:14:48:64:c0:57: ed:54:d9:fd:c1:c7:1e:94:33:2c:14:aa:5e:a2:f2: 35:8f:e2:a6:f0:b0:2f:01:ce:e8:b3:70:71:de:35: 06:3b:a9:9c:e0:3c:b6:27:50:92:50:7e:1c:13:d4: db:16:52:a5:11:1f:dc:f3:19:ab:c4:24:79:6f:a0: 93:6f:01:6a:86:c6:b1:4d:23:d5:eb:83:84:67:82: a5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:CA:60:C3:98:84:EF:6C:CD:51:6B:5E:F9:65:DF:36:46:06:01:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.crl X509v3 Authority Key Identifier: keyid:A7:AF:BF:E1:62:39:AF:97:9B:56:A5:07:BE:38:09:30:7F:F3:BE:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:50:81:a7:de:49:d6:28:14:6f:b5:90:8c:a8:a1:e6:28:53: b4:93:9a:54:10:fd:b6:87:03:83:9c:f9:bd:28:ec:12:b5:d2: 3b:92:71:16:cc:74:4a:ec:4a:ef:99:2d:f3:97:79:05:1d:88: 04:93:30:23:a2:ce:b3:2f:9b:2f:63:fa:39:6a:f3:0b:37:e2: 99:de:db:45:ff:4c:1c:fe:fd:bb:41:54:d7:e2:38:41:aa:73: ac:4d:eb:63:4e:9a:19:3e:9c:30:dd:86:e2:ce:d4:6e:fb:a1: bf:f9:39:f9:7b:7a:eb:f8:05:d2:03:36:72:a6:f3:28:96:b8: f5:4a:e5:bf:cf:3e:21:4a:95:42:48:42:cb:1d:dd:04:46:6a: 40:61:b7:d0:67:19:d9:fa:0d:82:3a:d4:54:83:75:3c:e3:f9: a3:9f:50:97:39:92:da:17:c8:21:94:8f:b3:90:8a:13:75:9f: 21:26:b5:a2:9e:be:99:8d:c9:3b:5d:f2:fa:c2:52:72:c4:e5: bc:3e:f9:d4:71:da:52:83:9c:f5:08:a9:71:79:a4:04:4e:07: bc:e8:ba:07:e3:c6:cb:0b:4f:fd:4c:b8:39:8a:3e:00:97:98: 94:96:74:bd:ec:2f:b9:1d:f9:f6:9b:77:20:61:ad:c2:95:0e: a9:f4:b6:d5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr496KyfutOsptCKiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QyMWY3NDEtZmQ5MS00MTU4LTg4NTMtNzM4OGRhYjNi M2UzMB4XDTI1MDgyNTEwMDAwOFoXDTI1MDgyODEwMDAwMFowLzEtMCsGA1UEAxMk NDMzNzk4NWUtYjg5Ny00ZjQ1LWJhNjUtNDM2OWVjYzkzMTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkndjlI5yIFoByMgRkJYO4bnjx7nZN7UFRw6d gYW/GjG2bHJKbi9O45h1kfHiIjDN/FUKABgidLkFnR5zHX6uLIROtKQNCbzapyUj in7Ks4gytlKqZ9HJNHDVWu458zmfl2yvlwAMtOUYRT6rn2ROfie4cyN11oIa9qzV ZSoMPnTQFUWEH0plVTqD1vWE5Crr/2vzNYcmd8j0u71L7GzH+wNsNudM2D49s2bF Oy5cFEhkwFftVNn9wccelDMsFKpeovI1j+Km8LAvAc7os3Bx3jUGO6mc4Dy2J1CS UH4cE9TbFlKlER/c8xmrxCR5b6CTbwFqhsaxTSPV64OEZ4KlZQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIjKYMOYhO9szVFrXvll3zZGBgE2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZDIx Zjc0MS1mZDkxLTQxNTgtODg1My03Mzg4ZGFiM2IzZTMvM2QyMWY3NDEtZmQ5MS00 MTU4LTg4NTMtNzM4OGRhYjNiM2UzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2QyMWY3NDEtZmQ5MS00MTU4LTg4 NTMtNzM4OGRhYjNiM2UzLzNkMjFmNzQxLWZkOTEtNDE1OC04ODUzLTczODhkYWIz YjNlMy5jcmwwHwYDVR0jBBgwFoAUp6+/4WI5r5ebVqUHvjgJMH/zvhQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZDIxZjc0MS1mZDkxLTQxNTgtODg1My03Mzg4 ZGFiM2IzZTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAIUIGn3knWKBRvtZCMqKHm KFO0k5pUEP22hwODnPm9KOwStdI7knEWzHRK7ErvmS3zl3kFHYgEkzAjos6zL5sv Y/o5avMLN+KZ3ttF/0wc/v27QVTX4jhBqnOsTetjTpoZPpww3YbiztRu+6G/+Tn5 e3rr+AXSAzZypvMolrj1SuW/zz4hSpVCSELLHd0ERmpAYbfQZxnZ+g2COtRUg3U8 4/mjn1CXOZLaF8ghlI+zkIoTdZ8hJrWinr6Zjck7XfL6wlJyxOW8PvnUcdpSg5z1 CKlxeaQETge86LoH48bLC0/9TLg5ij4Al5iUlnS97C+5Hfn2m3cgYa3ClQ6p9LbV -----END CERTIFICATE-----Generated at Tue Aug 26 09:02:42 2025 by rpki-client