$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft File: 3a86f711-5e97-4a68-9b21-940a312b854a.mft (raw, json) Hash identifier: yx3b6F9bSWP+Z8sP7Twi8wcmx3X+fg3stCNZKw4lPHQ= Subject key identifier: EF:6E:FF:78:F4:09:26:3D:09:29:61:9E:B9:2E:23:47:C9:1B:09:48 Authority key identifier: D3:F6:F7:C7:D5:CB:2F:40:EA:DE:48:27:9A:35:C5:AA:11:11:F8:55 Certificate issuer: /CN=3a86f711-5e97-4a68-9b21-940a312b854a Certificate serial: 010D0C9F4328584AEE086B62CDDE37434656A480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft Manifest number: 010D0C9F4328584988B6CEF62A3C901C9E4B602C Signing time: Thu 21 Aug 2025 12:00:03 +0000 Manifest this update: Thu 21 Aug 2025 12:00:03 +0000 Manifest next update: Sun 24 Aug 2025 12:00:00 +0000 Files and hashes: 1: 341487ac-a3e5-383d-bb5e-c10826c39192.roa (hash: zDdSEqA0luICrSjYrcUlVjCVnuhzutRICtMgH1VinQA=) 2: 3a86f711-5e97-4a68-9b21-940a312b854a.crl (hash: Tg4n5Tj6rhdOoZZrnBBISut3uEVfhFB4doZCDELJ77Y=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:08:6b:62:cd:de:37:43:46:56:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a86f711-5e97-4a68-9b21-940a312b854a Validity Not Before: Aug 21 12:00:03 2025 GMT Not After : Aug 24 12:00:00 2025 GMT Subject: CN=ed4cdb16-cecf-4164-a143-5aeb52eec202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ae:38:be:de:9b:57:7e:62:19:a3:9a:b1:ba: cb:dc:f5:90:87:ce:8c:2f:6b:d0:3b:f7:ad:9b:d1: 7e:36:87:f0:41:74:91:17:6f:14:01:c3:4b:fe:ee: eb:c5:13:cd:e7:4e:20:e6:df:1e:c2:f9:75:8d:04: 0a:58:34:0d:92:f5:98:a9:c7:91:92:e1:b7:1e:2f: 5b:8d:d7:18:bb:82:e3:dd:9d:bb:18:3b:e6:7b:bf: f3:68:10:c4:40:38:8d:75:1b:aa:4d:ac:ad:57:cc: 5c:c7:bd:1a:6e:45:67:7a:53:b4:3c:93:c4:fc:64: 3d:7d:50:a7:02:d2:3f:ba:bd:06:07:88:21:87:2a: 04:9f:85:b6:7c:87:8a:fb:9d:3e:81:97:c4:21:8d: b6:4c:71:12:a7:a2:b7:eb:30:4a:61:00:45:6a:c7: cf:ab:49:f6:85:f1:43:dd:ff:48:5b:80:ef:f9:a1: 02:55:3b:76:bf:7f:49:c7:a8:11:ba:ae:21:a8:2f: b9:03:4b:d8:56:e2:4b:d0:09:82:78:e0:14:52:0b: b6:53:13:cc:dd:76:4a:69:e1:90:71:88:7d:b7:e3: c3:e7:43:4b:dd:e6:39:dc:b0:c4:f4:47:01:e6:89: e4:91:d8:6f:f9:2e:74:2b:e2:52:6e:e1:8b:a1:8d: f3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:6E:FF:78:F4:09:26:3D:09:29:61:9E:B9:2E:23:47:C9:1B:09:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.crl X509v3 Authority Key Identifier: keyid:D3:F6:F7:C7:D5:CB:2F:40:EA:DE:48:27:9A:35:C5:AA:11:11:F8:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:b5:fb:c8:5b:ba:f8:9f:0b:d6:b2:9f:09:f6:05:0e:68:f4: 83:87:35:b4:55:f7:6f:24:06:89:f9:83:f8:bf:46:32:1f:95: c6:aa:65:88:43:3f:51:d7:81:7e:73:ce:b8:2c:e5:ae:11:6d: 9f:cd:86:8d:91:e1:77:fd:e2:73:64:ad:9a:83:88:5d:9f:0a: ee:7a:e9:53:c4:37:09:0b:86:87:7e:48:53:b5:9e:cc:04:f2: 04:4b:87:ed:5a:d4:16:98:ea:6f:9a:4b:43:ac:1a:aa:bf:a5: 9c:7d:6f:de:73:e7:8f:21:41:4b:60:1e:97:f4:f8:6d:bb:59: b8:68:58:3e:5d:1a:11:c0:15:83:e9:7b:df:da:dd:75:de:dd: c3:f3:71:5a:76:07:74:99:6c:7a:bc:ad:b1:8d:e2:85:38:b6: 08:a0:03:8b:9d:b4:7f:5a:1e:3c:33:5b:c1:8e:74:53:24:2b: a6:a9:90:7d:a4:bc:9f:8c:fc:70:a9:c8:1a:cb:d8:41:b5:e7: 2c:a6:84:3e:f1:48:6a:73:a0:e2:16:86:46:55:af:f4:c2:e6: d6:b8:80:e1:de:4d:75:62:cf:79:b2:54:8e:15:3c:bf:55:33: ea:47:65:63:6c:c1:01:a3:ec:07:79:31:c4:4e:88:81:9e:ef: 10:21:71:a8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEruCGtizd43Q0ZWpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E4NmY3MTEtNWU5Ny00YTY4LTliMjEtOTQwYTMxMmI4 NTRhMB4XDTI1MDgyMTEyMDAwM1oXDTI1MDgyNDEyMDAwMFowLzEtMCsGA1UEAxMk ZWQ0Y2RiMTYtY2VjZi00MTY0LWExNDMtNWFlYjUyZWVjMjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqq44vt6bV35iGaOasbrL3PWQh86ML2vQO/et m9F+NofwQXSRF28UAcNL/u7rxRPN504g5t8ewvl1jQQKWDQNkvWYqceRkuG3Hi9b jdcYu4Lj3Z27GDvme7/zaBDEQDiNdRuqTaytV8xcx70abkVnelO0PJPE/GQ9fVCn AtI/ur0GB4ghhyoEn4W2fIeK+50+gZfEIY22THESp6K36zBKYQBFasfPq0n2hfFD 3f9IW4Dv+aECVTt2v39Jx6gRuq4hqC+5A0vYVuJL0AmCeOAUUgu2UxPM3XZKaeGQ cYh9t+PD50NL3eY53LDE9EcB5onkkdhv+S50K+JSbuGLoY3zkwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFO9u/3j0CSY9CSlhnrkuI0fJGwlIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYTg2 ZjcxMS01ZTk3LTRhNjgtOWIyMS05NDBhMzEyYjg1NGEvM2E4NmY3MTEtNWU5Ny00 YTY4LTliMjEtOTQwYTMxMmI4NTRhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2E4NmY3MTEtNWU5Ny00YTY4LTli MjEtOTQwYTMxMmI4NTRhLzNhODZmNzExLTVlOTctNGE2OC05YjIxLTk0MGEzMTJi ODU0YS5jcmwwHwYDVR0jBBgwFoAU0/b3x9XLL0Dq3kgnmjXFqhER+FUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYTg2ZjcxMS01ZTk3LTRhNjgtOWIyMS05NDBh MzEyYjg1NGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC0tfvIW7r4nwvWsp8J9gUO aPSDhzW0VfdvJAaJ+YP4v0YyH5XGqmWIQz9R14F+c864LOWuEW2fzYaNkeF3/eJz ZK2ag4hdnwrueulTxDcJC4aHfkhTtZ7MBPIES4ftWtQWmOpvmktDrBqqv6WcfW/e c+ePIUFLYB6X9Phtu1m4aFg+XRoRwBWD6Xvf2t113t3D83Fadgd0mWx6vK2xjeKF OLYIoAOLnbR/Wh48M1vBjnRTJCumqZB9pLyfjPxwqcgay9hBtecspoQ+8Uhqc6Di FoZGVa/0wubWuIDh3k11Ys95slSOFTy/VTPqR2VjbMEBo+wHeTHEToiBnu8QIXGo -----END CERTIFICATE-----Generated at Fri Aug 22 01:16:51 2025 by rpki-client