$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.mft File: 3ed3e995-4cff-4a3d-af9b-7728ddaff70d.mft (raw, json) Hash identifier: rTRTQKsExDVPH+9yguqE8kt9GKhCTA+E9PAm9jdoHjI= Subject key identifier: EE:9B:DB:58:16:69:26:27:B1:DB:3D:76:42:C6:F8:1C:59:6C:F4:AC Authority key identifier: F3:75:96:E2:1C:D8:1C:9A:D5:67:D1:E9:54:49:B0:A4:32:C1:A4:86 Certificate issuer: /CN=3ed3e995-4cff-4a3d-af9b-7728ddaff70d Certificate serial: 010D0C9F4328584A7691E7AA405488C150B91B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.mft Manifest number: 010D0C9F43285840EBD7406C829A14CA1929D10B Signing time: Wed 09 Jul 2025 17:00:03 +0000 Manifest this update: Wed 09 Jul 2025 17:00:03 +0000 Manifest next update: Fri 11 Jul 2025 17:00:00 +0000 Files and hashes: 1: 1a475a05-1bff-3e3d-bc59-d988ebc9c4f3.roa (hash: 4EjJd5TtVyqR/Jygwjk3PySB2cBxyNztZ2i1HdLf8BM=) 2: 3541c324-e433-371b-be7a-faaf22fea4ff.roa (hash: GN3uwEfYxSUx9CNZglxwF/003k7xBPbH7FZ4o5Q+KjM=) 3: 3ed3e995-4cff-4a3d-af9b-7728ddaff70d.crl (hash: w/MiDoqo/32nW79PLU8OKJJSp8vg1Epjq4UwQpTK+DI=) 4: e65865d4-5f44-3316-802f-7aa0ec28365b.roa (hash: b1B2hASWtlJaW2sk3IpwoMQYt0AOPOh20ZjNJSM9Jl8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:91:e7:aa:40:54:88:c1:50:b9:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ed3e995-4cff-4a3d-af9b-7728ddaff70d Validity Not Before: Jul 9 17:00:03 2025 GMT Not After : Jul 11 17:00:00 2025 GMT Subject: CN=0c8fc631-691d-4224-880b-5ef8ab509ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6c:72:cb:07:ff:cf:8f:08:99:f1:cc:bc:2c: 9e:bc:bf:02:76:1a:b1:10:4f:da:ba:0b:0f:a8:71: 8e:56:2c:3c:77:bf:ea:3e:63:b6:74:ed:1b:97:63: e8:83:6e:e6:d1:fe:38:fb:97:18:23:39:68:8d:b6: e7:28:4e:b6:58:8b:b5:46:8a:e0:9a:e8:4e:a3:10: 74:6c:f3:32:3f:b3:37:7a:7d:44:78:0f:c3:65:2f: c9:bc:0b:b9:b3:4c:8b:b1:5c:74:cc:0d:15:2d:f1: e2:25:f5:40:be:36:cf:d2:92:e0:1a:3f:72:db:97: 9b:ce:03:aa:21:0f:c0:99:6a:e3:c7:a7:48:57:3e: 39:e8:4f:d3:45:28:96:c1:9f:74:13:53:9f:34:8f: ba:f6:4e:bf:55:4e:99:00:1d:d5:df:9c:98:7f:fa: 6c:b1:3e:27:86:91:26:b3:1e:b8:5f:ac:b6:b2:8d: 34:39:f8:f7:fb:ed:a6:57:46:59:4c:da:7c:a6:ee: a1:5f:e1:ba:7f:1a:44:19:71:25:18:e3:92:44:8a: 61:bd:0c:7b:5e:4e:41:e4:a1:2c:2d:e9:ce:86:4d: c1:59:33:4a:ae:af:64:93:98:84:93:1f:c6:4c:26: d1:31:80:03:31:6e:71:fe:6c:47:2e:f0:9d:70:9b: 7e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:9B:DB:58:16:69:26:27:B1:DB:3D:76:42:C6:F8:1C:59:6C:F4:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.crl X509v3 Authority Key Identifier: keyid:F3:75:96:E2:1C:D8:1C:9A:D5:67:D1:E9:54:49:B0:A4:32:C1:A4:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:61:aa:0e:9b:46:ab:2b:7c:28:86:b5:dd:14:0e:42:64:1c: ff:aa:2f:4f:14:88:41:13:11:e5:21:06:81:9c:3f:1f:98:de: eb:86:60:27:53:35:fe:17:53:c8:4e:e8:c3:db:58:2f:70:75: e1:b0:ae:5f:c6:33:21:27:72:21:08:9f:8d:82:96:ab:04:1e: 3b:d8:ed:bf:74:a6:74:ca:1d:aa:56:c3:52:63:1e:b5:b6:d1: 6e:37:3e:63:9f:65:b7:d6:ed:eb:75:17:5b:47:b0:94:a2:e9: 39:ee:16:a6:1a:68:db:bb:38:38:5d:9d:2e:83:93:91:35:1a: 0e:36:a1:f4:35:e6:ae:a5:81:d9:09:18:3f:2c:20:60:56:23: 90:33:7f:4a:0d:61:1d:23:23:7d:cc:ff:11:df:ea:8b:5a:15: a9:02:08:d0:e8:48:2c:9b:b7:12:ad:80:7d:bb:2d:0b:79:54: df:71:99:5d:f8:81:b8:54:c0:33:a4:c4:18:55:db:ab:a3:9d: 89:2f:81:8c:ba:33:55:72:0b:02:0b:00:38:30:2d:e6:0e:e8: 66:f8:f5:c9:d0:bf:3e:cf:57:67:fc:27:ba:f2:06:e3:6a:48: 8a:ec:f0:76:52:2c:9f:d8:df:31:76:42:92:4b:9b:71:7e:8e: 94:f7:cf:7d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEp2keeqQFSIwVC5G4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VkM2U5OTUtNGNmZi00YTNkLWFmOWItNzcyOGRkYWZm NzBkMB4XDTI1MDcwOTE3MDAwM1oXDTI1MDcxMTE3MDAwMFowLzEtMCsGA1UEAxMk MGM4ZmM2MzEtNjkxZC00MjI0LTg4MGItNWVmOGFiNTA5YWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2xyywf/z48ImfHMvCyevL8CdhqxEE/augsP qHGOViw8d7/qPmO2dO0bl2Pog27m0f44+5cYIzlojbbnKE62WIu1RorgmuhOoxB0 bPMyP7M3en1EeA/DZS/JvAu5s0yLsVx0zA0VLfHiJfVAvjbP0pLgGj9y25ebzgOq IQ/AmWrjx6dIVz456E/TRSiWwZ90E1OfNI+69k6/VU6ZAB3V35yYf/pssT4nhpEm sx64X6y2so00Ofj3++2mV0ZZTNp8pu6hX+G6fxpEGXElGOOSRIphvQx7Xk5B5KEs LenOhk3BWTNKrq9kk5iEkx/GTCbRMYADMW5x/mxHLvCdcJt+1wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFO6b21gWaSYnsds9dkLG+BxZbPSsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZWQz ZTk5NS00Y2ZmLTRhM2QtYWY5Yi03NzI4ZGRhZmY3MGQvM2VkM2U5OTUtNGNmZi00 YTNkLWFmOWItNzcyOGRkYWZmNzBkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2VkM2U5OTUtNGNmZi00YTNkLWFm OWItNzcyOGRkYWZmNzBkLzNlZDNlOTk1LTRjZmYtNGEzZC1hZjliLTc3MjhkZGFm ZjcwZC5jcmwwHwYDVR0jBBgwFoAU83WW4hzYHJrVZ9HpVEmwpDLBpIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zZWQzZTk5NS00Y2ZmLTRhM2QtYWY5Yi03NzI4 ZGRhZmY3MGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBAYaoOm0arK3wohrXdFA5C ZBz/qi9PFIhBExHlIQaBnD8fmN7rhmAnUzX+F1PITujD21gvcHXhsK5fxjMhJ3Ih CJ+NgparBB472O2/dKZ0yh2qVsNSYx61ttFuNz5jn2W31u3rdRdbR7CUouk57ham Gmjbuzg4XZ0ug5ORNRoONqH0NeaupYHZCRg/LCBgViOQM39KDWEdIyN9zP8R3+qL WhWpAgjQ6Egsm7cSrYB9uy0LeVTfcZld+IG4VMAzpMQYVduro52JL4GMujNVcgsC CwA4MC3mDuhm+PXJ0L8+z1dn/Ce68gbjakiK7PB2Uiyf2N8xdkKSS5txfo6U9899 -----END CERTIFICATE-----Generated at Thu Jul 10 10:05:43 2025 by rpki-client