$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft File: 3b9b8028-72e5-488e-971c-54bd1e51f064.mft (raw, json) Hash identifier: CX6DBM/ijmUg7yR8UY8C6jSok1j5QxDiiBqWQD01c98= Subject key identifier: 01:29:CD:C3:CF:42:DC:6C:0B:14:B5:E3:7F:E2:8A:E4:7B:92:04:26 Authority key identifier: 5F:8B:61:30:92:66:A4:EA:82:F9:CD:58:0F:27:90:55:72:01:AA:BD Certificate issuer: /CN=3b9b8028-72e5-488e-971c-54bd1e51f064 Certificate serial: 010D0C9F4328584AE9438B02DAC1F40C743F5D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft Manifest number: 010D0C9F4328584A528A8A7AC4CF3AECDE07A7B7 Signing time: Tue 19 Aug 2025 19:00:08 +0000 Manifest this update: Tue 19 Aug 2025 19:00:08 +0000 Manifest next update: Fri 22 Aug 2025 19:00:00 +0000 Files and hashes: 1: 31dea251-a914-3cdf-bb34-ea459b59f5b7.roa (hash: O+kRYvnS9Fz6O078M4tZey6O0tVnwvcFYUplUdNP++c=) 2: 3b9b8028-72e5-488e-971c-54bd1e51f064.crl (hash: 7XzmWAcvwiwmb2GN7MJ6HTlFSoCR6TF21DebFWISIJU=) 3: 69651a7a-33cd-341a-9ff0-30c6489996d5.roa (hash: paaCkuSrjuYP/Rw4CorCb4hoieWsxL6uWxAKZmvUkFc=) 4: d46bde8b-c4af-3c7c-b58a-db64c47da4bb.roa (hash: ovoyLP8yTIhVOhOxYD1r9tdcJXQfGSDCfckozhupohE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:43:8b:02:da:c1:f4:0c:74:3f:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b9b8028-72e5-488e-971c-54bd1e51f064 Validity Not Before: Aug 19 19:00:08 2025 GMT Not After : Aug 22 19:00:00 2025 GMT Subject: CN=8d5ff1e9-b5b5-4a30-9491-f840ecdea8df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:25:97:7d:f9:e5:81:f5:e0:df:e8:1d:ec:31: ff:34:d1:3d:32:98:07:9e:4f:2e:1a:ea:f8:48:4f: 41:bc:60:66:47:f7:00:48:6d:f0:0c:53:32:7e:04: 43:46:cf:ff:a4:6e:4a:f0:0e:e7:4f:de:c1:21:1a: f4:53:97:01:34:5e:a2:5d:75:ab:45:34:3b:e0:9d: 30:2d:bf:58:08:97:ae:ca:80:8a:d1:70:8e:9c:5a: 99:9f:35:96:1c:ca:70:b1:84:8e:1e:47:ce:42:05: 84:7a:a4:41:36:19:90:e5:11:f5:48:3c:19:77:ef: f5:cb:dc:97:87:fb:bf:0d:3b:3f:8d:0a:d8:1f:20: 8e:69:dd:35:a5:70:ef:9d:64:1f:5e:7d:1a:94:73: a4:6f:b9:4e:4d:f3:42:e8:1b:e7:d3:46:65:b7:a3: 4f:37:14:81:a9:4e:4b:09:0d:69:32:d9:a6:b3:ca: f3:42:58:08:b7:94:86:33:81:16:d9:ff:e9:5d:ff: b7:69:1a:01:98:74:b3:12:76:aa:a4:d4:78:30:84: f0:dd:ae:07:02:88:8f:11:78:a6:95:34:db:db:12: b8:1f:73:31:d9:d7:77:d7:36:d9:4a:04:73:90:4b: cb:3d:e2:0d:85:6f:91:c3:d8:eb:97:1e:b1:5f:56: e7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:29:CD:C3:CF:42:DC:6C:0B:14:B5:E3:7F:E2:8A:E4:7B:92:04:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.crl X509v3 Authority Key Identifier: keyid:5F:8B:61:30:92:66:A4:EA:82:F9:CD:58:0F:27:90:55:72:01:AA:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:3e:63:ad:e1:51:a6:e2:62:8e:1b:c2:11:13:b2:e5:50:b8: a4:6d:06:03:01:f0:bc:bb:b2:f8:50:74:2f:f0:74:ee:f8:2a: d9:7a:14:91:cc:e9:bc:a9:12:97:5d:5d:fa:8f:42:a5:4c:29: 5f:0b:e6:e8:01:e5:97:be:f3:56:90:ab:b9:35:79:4a:46:86: 2e:e6:9a:f7:5e:4a:74:df:fd:a2:36:73:35:6e:51:84:8d:1e: 70:fa:27:cb:b1:74:d0:7b:90:bc:3c:30:a5:25:15:28:62:bc: 6f:eb:a2:7f:58:8f:fa:70:e8:fc:ab:b7:fa:8b:fc:ad:06:e1: 50:ca:02:54:96:49:83:c5:ef:28:c6:e6:2f:3e:6d:f1:b3:4f: 21:9f:9c:8a:91:4b:1d:53:09:0e:36:95:c9:d1:16:aa:42:e2: df:33:59:e9:21:73:a0:0d:28:1f:04:7a:62:00:ec:ae:a9:a4: a5:87:eb:31:e1:3e:49:7c:87:5a:4d:9f:c1:33:4f:a2:e0:cc: 79:d4:12:4c:c3:58:85:66:9c:91:17:85:05:5d:7c:6f:97:f9: 67:65:59:18:ac:34:2c:b7:54:d6:87:fb:d3:e4:50:3d:25:e1: b2:72:6b:14:c9:31:ee:4c:9e:d4:56:86:3e:1f:50:bc:92:26: eb:9a:5d:ca -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErpQ4sC2sH0DHQ/XQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I5YjgwMjgtNzJlNS00ODhlLTk3MWMtNTRiZDFlNTFm MDY0MB4XDTI1MDgxOTE5MDAwOFoXDTI1MDgyMjE5MDAwMFowLzEtMCsGA1UEAxMk OGQ1ZmYxZTktYjViNS00YTMwLTk0OTEtZjg0MGVjZGVhOGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiWXffnlgfXg3+gd7DH/NNE9MpgHnk8uGur4 SE9BvGBmR/cASG3wDFMyfgRDRs//pG5K8A7nT97BIRr0U5cBNF6iXXWrRTQ74J0w Lb9YCJeuyoCK0XCOnFqZnzWWHMpwsYSOHkfOQgWEeqRBNhmQ5RH1SDwZd+/1y9yX h/u/DTs/jQrYHyCOad01pXDvnWQfXn0alHOkb7lOTfNC6Bvn00Zlt6NPNxSBqU5L CQ1pMtmms8rzQlgIt5SGM4EW2f/pXf+3aRoBmHSzEnaqpNR4MITw3a4HAoiPEXim lTTb2xK4H3Mx2dd31zbZSgRzkEvLPeINhW+Rw9jrlx6xX1bnywIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAEpzcPPQtxsCxS143/iiuR7kgQmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYjli ODAyOC03MmU1LTQ4OGUtOTcxYy01NGJkMWU1MWYwNjQvM2I5YjgwMjgtNzJlNS00 ODhlLTk3MWMtNTRiZDFlNTFmMDY0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2I5YjgwMjgtNzJlNS00ODhlLTk3 MWMtNTRiZDFlNTFmMDY0LzNiOWI4MDI4LTcyZTUtNDg4ZS05NzFjLTU0YmQxZTUx ZjA2NC5jcmwwHwYDVR0jBBgwFoAUX4thMJJmpOqC+c1YDyeQVXIBqr0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYjliODAyOC03MmU1LTQ4OGUtOTcxYy01NGJk MWU1MWYwNjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCbPmOt4VGm4mKOG8IRE7Ll ULikbQYDAfC8u7L4UHQv8HTu+CrZehSRzOm8qRKXXV36j0KlTClfC+boAeWXvvNW kKu5NXlKRoYu5pr3Xkp03/2iNnM1blGEjR5w+ifLsXTQe5C8PDClJRUoYrxv66J/ WI/6cOj8q7f6i/ytBuFQygJUlkmDxe8oxuYvPm3xs08hn5yKkUsdUwkONpXJ0Raq QuLfM1npIXOgDSgfBHpiAOyuqaSlh+sx4T5JfIdaTZ/BM0+i4Mx51BJMw1iFZpyR F4UFXXxvl/lnZVkYrDQst1TWh/vT5FA9JeGycmsUyTHuTJ7UVoY+H1C8kibrml3K -----END CERTIFICATE-----Generated at Wed Aug 20 15:40:27 2025 by rpki-client