$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft File: 3d21f741-fd91-4158-8853-7388dab3b3e3.mft (raw, json) Hash identifier: 1ttjRPgXPv/BCh9cS6QGcHVCMOwO+QwJ/2h2S919iLM= Subject key identifier: 7F:53:F8:C4:21:15:76:02:68:18:48:75:1E:C3:94:4C:C1:B7:31:77 Authority key identifier: A7:AF:BF:E1:62:39:AF:97:9B:56:A5:07:BE:38:09:30:7F:F3:BE:14 Certificate issuer: /CN=3d21f741-fd91-4158-8853-7388dab3b3e3 Certificate serial: 010D0C9F4328584A75C1705DE13A9FAF6E7826E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft Manifest number: 010D0C9F4328584073A84C34E2402761CF9DBAAC Signing time: Wed 09 Jul 2025 10:00:03 +0000 Manifest this update: Wed 09 Jul 2025 10:00:03 +0000 Manifest next update: Fri 11 Jul 2025 10:00:00 +0000 Files and hashes: 1: 3d21f741-fd91-4158-8853-7388dab3b3e3.crl (hash: WIXTa2E7e1/oNDJ63L970k7FEOVOTsfcBz4MhfOEhYA=) 2: 90ad5afb-11a5-3a7e-af84-85ae08f294f7.roa (hash: XNhH0OmiACW7ouB/7jH8prFuvyZiw+WI1Wxc7WjNwPc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:75:c1:70:5d:e1:3a:9f:af:6e:78:26:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d21f741-fd91-4158-8853-7388dab3b3e3 Validity Not Before: Jul 9 10:00:03 2025 GMT Not After : Jul 11 10:00:00 2025 GMT Subject: CN=70674ece-99a6-49d0-adee-008d97d98b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bc:e5:47:b2:1b:f5:c9:cd:41:a4:de:49:35: a5:c1:00:3c:fe:92:8d:e0:01:b5:83:2d:4d:a1:76: 4e:5d:c4:9d:ff:63:22:ed:ce:1c:1f:2b:a4:41:86: e2:50:1d:6a:2a:1c:bc:67:14:45:87:b3:9d:78:c7: cc:d6:d6:29:37:42:05:d5:5a:8c:a5:91:b0:27:99: 07:b5:12:90:56:d0:e3:33:4d:81:3a:6b:13:a5:b1: 46:c7:22:57:ba:fb:ad:11:bd:92:53:d6:6d:3a:10: 97:c4:c7:8f:5e:12:7c:0e:10:d5:05:ba:25:df:74: 19:1d:3e:57:16:ce:8c:c5:c7:ff:d9:a2:d1:3c:81: 10:cd:85:bd:7b:39:36:1c:e0:73:60:4e:ed:6e:4f: 77:5c:ea:2e:c5:69:bf:50:24:2a:a8:95:22:b0:e4: 83:45:c9:34:b0:01:b0:29:4e:5e:e2:58:e7:70:52: 99:c4:56:7d:c2:2e:d4:3c:93:ee:67:5e:b4:69:08: db:ab:d2:67:8f:d6:ff:22:fc:43:84:53:dd:74:1d: f4:1b:bd:6d:31:ee:3d:17:f4:d5:aa:25:11:21:28: f5:01:c1:35:06:3f:ea:7a:5d:ac:e2:81:ac:d1:61: 9f:4e:09:0f:84:ee:7e:fc:c2:d7:9b:bc:02:bb:73: 94:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:53:F8:C4:21:15:76:02:68:18:48:75:1E:C3:94:4C:C1:B7:31:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.crl X509v3 Authority Key Identifier: keyid:A7:AF:BF:E1:62:39:AF:97:9B:56:A5:07:BE:38:09:30:7F:F3:BE:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:25:9c:62:5b:f2:51:92:d9:4c:0e:01:ea:1d:15:f7:e7:0a: 98:74:df:da:fc:f2:13:f8:93:c6:8a:34:69:d5:5b:b1:5d:0d: d4:18:af:ad:29:00:50:08:75:53:21:5b:77:12:34:1e:13:68: 58:ee:06:16:2d:02:45:3c:bc:03:de:07:8a:39:45:f6:a4:08: b2:3d:e6:0a:10:2f:a6:7b:84:49:63:10:21:2c:b0:b0:41:77: 62:d2:5e:28:8a:c7:59:9a:86:a7:95:c3:4d:f4:d8:f9:d9:20: d0:4a:11:35:68:4d:9c:43:b6:cc:73:b7:2d:30:cc:f7:6a:85: d7:a6:20:ef:46:89:90:5c:9b:28:eb:db:a3:fa:42:8f:38:71: 62:98:ad:3a:3d:f1:2e:b3:16:7c:c4:bd:bb:f9:4a:cb:b7:96: d5:61:4a:6e:7b:a5:d3:32:7c:6a:44:87:83:b2:56:d0:bb:d0: b9:8a:34:79:44:e3:28:4f:61:55:b9:e1:ab:59:2a:3b:7b:43: d9:03:30:f3:be:da:4b:a4:12:fe:ee:54:09:9a:85:c6:4f:ee: 12:d7:d3:44:e9:5d:69:6c:ac:87:d8:43:0c:63:6d:31:aa:02: d0:58:03:93:0f:38:4e:36:6f:36:e8:0b:5e:2c:73:01:ed:e4: f5:cc:9d:6b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEp1wXBd4Tqfr254JuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QyMWY3NDEtZmQ5MS00MTU4LTg4NTMtNzM4OGRhYjNi M2UzMB4XDTI1MDcwOTEwMDAwM1oXDTI1MDcxMTEwMDAwMFowLzEtMCsGA1UEAxMk NzA2NzRlY2UtOTlhNi00OWQwLWFkZWUtMDA4ZDk3ZDk4YjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLzlR7Ib9cnNQaTeSTWlwQA8/pKN4AG1gy1N oXZOXcSd/2Mi7c4cHyukQYbiUB1qKhy8ZxRFh7OdeMfM1tYpN0IF1VqMpZGwJ5kH tRKQVtDjM02BOmsTpbFGxyJXuvutEb2SU9ZtOhCXxMePXhJ8DhDVBbol33QZHT5X Fs6Mxcf/2aLRPIEQzYW9ezk2HOBzYE7tbk93XOouxWm/UCQqqJUisOSDRck0sAGw KU5e4ljncFKZxFZ9wi7UPJPuZ160aQjbq9Jnj9b/IvxDhFPddB30G71tMe49F/TV qiURISj1AcE1Bj/qel2s4oGs0WGfTgkPhO5+/MLXm7wCu3OUPQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFH9T+MQhFXYCaBhIdR7DlEzBtzF3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZDIx Zjc0MS1mZDkxLTQxNTgtODg1My03Mzg4ZGFiM2IzZTMvM2QyMWY3NDEtZmQ5MS00 MTU4LTg4NTMtNzM4OGRhYjNiM2UzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2QyMWY3NDEtZmQ5MS00MTU4LTg4 NTMtNzM4OGRhYjNiM2UzLzNkMjFmNzQxLWZkOTEtNDE1OC04ODUzLTczODhkYWIz YjNlMy5jcmwwHwYDVR0jBBgwFoAUp6+/4WI5r5ebVqUHvjgJMH/zvhQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZDIxZjc0MS1mZDkxLTQxNTgtODg1My03Mzg4 ZGFiM2IzZTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA+JZxiW/JRktlMDgHqHRX3 5wqYdN/a/PIT+JPGijRp1VuxXQ3UGK+tKQBQCHVTIVt3EjQeE2hY7gYWLQJFPLwD 3geKOUX2pAiyPeYKEC+me4RJYxAhLLCwQXdi0l4oisdZmoanlcNN9Nj52SDQShE1 aE2cQ7bMc7ctMMz3aoXXpiDvRomQXJso69uj+kKPOHFimK06PfEusxZ8xL27+UrL t5bVYUpue6XTMnxqRIeDslbQu9C5ijR5ROMoT2FVueGrWSo7e0PZAzDzvtpLpBL+ 7lQJmoXGT+4S19NE6V1pbKyH2EMMY20xqgLQWAOTDzhONm826AteLHMB7eT1zJ1r -----END CERTIFICATE-----Generated at Wed Jul 9 13:46:49 2025 by rpki-client