$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.mft File: 3ed3e995-4cff-4a3d-af9b-7728ddaff70d.mft (raw, json) Hash identifier: 2uy0osFvRaxnylNzFpisR11a4nE6kiRDY0mX93udT2k= Subject key identifier: 05:51:D0:AC:BA:EC:7B:1B:72:2C:CA:52:98:E2:87:B0:9B:F4:BE:61 Authority key identifier: F3:75:96:E2:1C:D8:1C:9A:D5:67:D1:E9:54:49:B0:A4:32:C1:A4:86 Certificate issuer: /CN=3ed3e995-4cff-4a3d-af9b-7728ddaff70d Certificate serial: 010D0C9F4328584AF9C81650211375398823E980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.mft Manifest number: 010D0C9F43285840EBD7406C829A14CA1929D13B Signing time: Mon 25 Aug 2025 17:00:08 +0000 Manifest this update: Mon 25 Aug 2025 17:00:08 +0000 Manifest next update: Thu 28 Aug 2025 17:00:00 +0000 Files and hashes: 1: 1a475a05-1bff-3e3d-bc59-d988ebc9c4f3.roa (hash: trIcwoS1kEuMsQVn07Xmi5wlT3pdFIQ+WI8GTBinqV4=) 2: 3541c324-e433-371b-be7a-faaf22fea4ff.roa (hash: xa0ElEHH4iM4OTAiHXd1SqEeS2SGiJju5LC2iHCmnac=) 3: 3ed3e995-4cff-4a3d-af9b-7728ddaff70d.crl (hash: sJgcD0d4HHzWdBWlV25606QyzfEh/Tikpuf5Jbc5tsg=) 4: e65865d4-5f44-3316-802f-7aa0ec28365b.roa (hash: b1B2hASWtlJaW2sk3IpwoMQYt0AOPOh20ZjNJSM9Jl8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 28 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:c8:16:50:21:13:75:39:88:23:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ed3e995-4cff-4a3d-af9b-7728ddaff70d Validity Not Before: Aug 25 17:00:08 2025 GMT Not After : Aug 28 17:00:00 2025 GMT Subject: CN=031309ee-e1e2-42e3-9b6a-8992bef65c6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:07:2d:79:44:b5:f8:21:8f:54:fa:0e:ae:03: c0:23:81:94:6e:44:7a:14:81:cb:60:dc:e4:df:1c: 81:7f:3a:d5:4c:3b:17:05:c2:d8:62:2e:67:e7:f8: 8a:ae:c0:dc:10:dc:52:05:e7:c9:8c:23:1d:e6:d8: 7a:19:52:d1:e0:ab:df:a6:31:39:fc:10:74:c9:ad: aa:4d:50:da:8a:cd:78:41:c0:75:37:a4:28:da:2c: 2c:a2:34:8b:1f:c2:72:2c:20:28:26:0d:ef:b5:65: 4d:d9:04:df:67:c3:da:02:c1:50:dd:22:73:da:2f: 9e:d9:66:f8:10:87:3d:8c:f0:31:af:e1:6f:50:0d: c2:eb:e5:b4:93:92:fb:14:0a:f6:68:d0:8d:31:6b: c8:a9:00:ac:f9:08:3e:bf:8e:b3:ec:ed:95:b5:f8: 8c:03:02:64:04:81:2c:ab:d3:67:f7:82:b8:83:1e: 44:22:cd:fc:00:ae:72:d3:2b:72:95:58:8a:e5:ec: a7:3e:f4:e1:09:37:67:c8:9a:3d:e2:8e:63:eb:01: 2d:94:df:28:62:9e:26:be:f9:61:8a:e4:cb:50:d9: 0e:55:2d:ad:a6:5c:1e:32:a7:48:13:dc:38:65:89: 7c:b3:6d:a6:ed:62:aa:43:95:93:5c:cd:ae:af:b1: 40:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:51:D0:AC:BA:EC:7B:1B:72:2C:CA:52:98:E2:87:B0:9B:F4:BE:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.crl X509v3 Authority Key Identifier: keyid:F3:75:96:E2:1C:D8:1C:9A:D5:67:D1:E9:54:49:B0:A4:32:C1:A4:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:07:00:b9:b7:d2:5c:23:9c:30:d4:ff:45:c2:df:b1:d6:5e: b5:c2:57:d6:cb:c5:a2:40:ea:2d:67:e5:1a:17:43:fe:cd:65: 12:c5:2c:b7:44:28:3b:e8:4f:a5:82:c1:82:34:1c:d0:16:78: 55:6d:76:0d:e1:97:48:33:e7:c9:89:11:b5:70:a0:51:79:fb: 47:7c:b1:7a:f7:a3:ea:1f:dd:01:2e:72:1c:77:ed:86:2f:7c: e5:41:86:0d:48:9c:13:77:d9:4b:8b:37:2c:98:73:93:c2:c7: 8f:a4:c3:fb:dd:af:15:36:f2:58:d0:c1:bf:48:60:d6:a1:f9: a2:62:ff:c1:e0:8d:fb:d1:c8:3e:c9:93:60:65:6f:e3:37:c4: f0:43:33:18:d8:64:39:f4:91:b3:7b:1e:45:82:00:25:ab:ce: 00:c5:df:c8:85:39:7c:68:a6:ea:d4:a0:fb:42:0a:41:88:d0: 1a:c2:ca:e0:96:df:c4:7f:05:6c:53:90:c2:4b:81:49:90:e1: 55:d1:6c:80:bd:b0:b8:2e:88:e5:50:2c:56:4f:ff:a2:25:02: 70:be:f0:be:11:be:3e:fa:c5:18:8a:00:ef:e8:aa:e9:94:cc: c6:ca:34:48:ad:60:6b:37:74:9e:4c:03:80:88:a2:b9:b9:e3: 8f:d2:31:d1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr5yBZQIRN1OYgj6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VkM2U5OTUtNGNmZi00YTNkLWFmOWItNzcyOGRkYWZm NzBkMB4XDTI1MDgyNTE3MDAwOFoXDTI1MDgyODE3MDAwMFowLzEtMCsGA1UEAxMk MDMxMzA5ZWUtZTFlMi00MmUzLTliNmEtODk5MmJlZjY1YzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQcteUS1+CGPVPoOrgPAI4GUbkR6FIHLYNzk 3xyBfzrVTDsXBcLYYi5n5/iKrsDcENxSBefJjCMd5th6GVLR4KvfpjE5/BB0ya2q TVDais14QcB1N6Qo2iwsojSLH8JyLCAoJg3vtWVN2QTfZ8PaAsFQ3SJz2i+e2Wb4 EIc9jPAxr+FvUA3C6+W0k5L7FAr2aNCNMWvIqQCs+Qg+v46z7O2VtfiMAwJkBIEs q9Nn94K4gx5EIs38AK5y0ytylViK5eynPvThCTdnyJo94o5j6wEtlN8oYp4mvvlh iuTLUNkOVS2tplweMqdIE9w4ZYl8s22m7WKqQ5WTXM2ur7FARQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAVR0Ky67HsbcizKUpjih7Cb9L5hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZWQz ZTk5NS00Y2ZmLTRhM2QtYWY5Yi03NzI4ZGRhZmY3MGQvM2VkM2U5OTUtNGNmZi00 YTNkLWFmOWItNzcyOGRkYWZmNzBkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2VkM2U5OTUtNGNmZi00YTNkLWFm OWItNzcyOGRkYWZmNzBkLzNlZDNlOTk1LTRjZmYtNGEzZC1hZjliLTc3MjhkZGFm ZjcwZC5jcmwwHwYDVR0jBBgwFoAU83WW4hzYHJrVZ9HpVEmwpDLBpIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zZWQzZTk5NS00Y2ZmLTRhM2QtYWY5Yi03NzI4 ZGRhZmY3MGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAXBwC5t9JcI5ww1P9Fwt+x 1l61wlfWy8WiQOotZ+UaF0P+zWUSxSy3RCg76E+lgsGCNBzQFnhVbXYN4ZdIM+fJ iRG1cKBReftHfLF696PqH90BLnIcd+2GL3zlQYYNSJwTd9lLizcsmHOTwsePpMP7 3a8VNvJY0MG/SGDWofmiYv/B4I370cg+yZNgZW/jN8TwQzMY2GQ59JGzex5FggAl q84Axd/IhTl8aKbq1KD7QgpBiNAawsrglt/EfwVsU5DCS4FJkOFV0WyAvbC4Lojl UCxWT/+iJQJwvvC+Eb4++sUYigDv6KrplMzGyjRIrWBrN3SeTAOAiKK5ueOP0jHR -----END CERTIFICATE-----Generated at Tue Aug 26 17:06:57 2025 by rpki-client