$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3.mft File: 3f58ad98-0e5e-485d-bd5d-5c620932b6c3.mft (raw, json) Hash identifier: JF94ne9TrcK+ICvRy8xCcDg/HDr5Vb30xng/q4jneR8= Subject key identifier: 58:0E:FD:08:54:E9:35:F4:00:FB:D6:70:BE:22:8B:14:F7:F3:7E:F4 Authority key identifier: D3:CB:84:8B:12:B1:7C:62:9C:0C:E4:54:D3:2F:0D:0B:F0:E8:47:B1 Certificate issuer: /CN=3f58ad98-0e5e-485d-bd5d-5c620932b6c3 Certificate serial: 010D0C9F4328584A73A96E8D4781095F6E9C5E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3.mft Manifest number: 010D0C9F43285849490D0FADC3DA076F134F50AD Signing time: Tue 08 Jul 2025 16:00:03 +0000 Manifest this update: Tue 08 Jul 2025 16:00:03 +0000 Manifest next update: Thu 10 Jul 2025 16:00:00 +0000 Files and hashes: 1: 3f58ad98-0e5e-485d-bd5d-5c620932b6c3.crl (hash: QlPZ44LHYOdPpxL2Jj/qWTx4roF7G8xcTxPV6sNdjg4=) 2: dc9bc937-e8ce-3bad-acc7-766bfc1c52ea.roa (hash: 2BewOwevzGcVbVEM6NY0kHACbcBzGS2RdYIClIEs+ng=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:a9:6e:8d:47:81:09:5f:6e:9c:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f58ad98-0e5e-485d-bd5d-5c620932b6c3 Validity Not Before: Jul 8 16:00:03 2025 GMT Not After : Jul 10 16:00:00 2025 GMT Subject: CN=202a3a22-3990-4c68-abc1-f92741736f95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:85:2a:df:e5:c9:ca:cd:28:70:a1:4b:14:61: 22:39:58:83:e5:96:5a:22:bb:d7:3a:e4:96:39:45: a4:ef:97:60:ce:c3:b4:bb:7d:bf:a0:eb:a0:ec:81: 91:02:5c:ff:fd:23:f0:91:0d:4a:c5:f9:69:7a:72: 66:4b:1a:7c:23:85:d3:86:67:ff:19:53:40:34:00: 4b:ee:37:50:fd:84:39:51:cb:dd:96:e4:f4:fe:82: 7c:3a:28:e3:86:7d:04:f0:6e:14:67:d5:1d:ea:63: 5c:0d:5c:cc:77:ed:db:eb:52:26:60:17:45:a1:3e: 72:41:b2:15:ba:42:07:81:e7:e6:34:81:39:c4:c4: 42:42:0a:cc:e2:a7:f9:2e:74:cf:63:f2:41:fb:6c: b2:dd:36:a0:a2:a4:f4:ed:e4:46:da:fd:75:48:3d: 55:db:09:79:f4:8d:93:fe:c0:47:ff:2c:78:78:a6: c4:c2:46:82:5d:94:10:24:85:b0:25:42:05:8b:6f: 56:88:aa:1a:30:69:4f:9b:95:20:72:78:1b:64:6e: c6:66:f4:0e:c1:8f:66:aa:6c:2c:4a:df:64:15:69: ce:22:68:38:e0:fe:76:84:33:34:92:ab:b6:e2:53: 97:61:01:26:de:50:5d:0c:ba:94:c1:b4:b8:1f:f0: f4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:0E:FD:08:54:E9:35:F4:00:FB:D6:70:BE:22:8B:14:F7:F3:7E:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3.crl X509v3 Authority Key Identifier: keyid:D3:CB:84:8B:12:B1:7C:62:9C:0C:E4:54:D3:2F:0D:0B:F0:E8:47:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:75:db:24:85:87:aa:1f:56:ef:cd:08:a8:57:e4:a6:98:22: 57:07:fe:33:a9:11:fe:f3:32:5e:4c:a2:cc:a1:99:90:93:3a: a9:a2:f4:37:a6:11:7b:4e:d3:dc:d7:8d:41:75:0c:a6:6d:58: 4b:ca:7e:a9:1a:2c:2e:eb:63:85:e8:0c:3f:f6:2a:1f:e7:b1: b3:6d:38:60:b0:81:7c:f1:d7:27:ad:9d:5f:f5:a6:68:08:4a: 36:2e:03:ba:d9:33:58:9a:ae:da:fe:96:a4:62:23:5f:bb:6b: ae:5e:d0:2e:b5:80:6b:71:1e:65:e9:92:92:2a:8a:85:be:86: d1:da:04:f1:50:5c:1b:94:b7:24:89:d7:f4:2e:4e:12:cc:1b: 9e:ec:91:48:ae:70:31:a4:3d:ba:a2:3d:41:74:a0:19:1a:7a: 05:b9:9d:d8:4b:17:e7:a8:bd:a1:ad:c7:94:3b:d7:96:ca:58: 4b:e6:86:a3:3e:dc:4c:bc:00:f7:a9:8d:17:b4:b2:65:c7:00: 42:f4:81:96:58:a2:14:de:9e:81:d8:94:3f:3b:cb:51:6c:29: 7d:87:61:52:50:c7:7b:3d:62:ef:a0:8f:7e:b8:c6:31:a0:84: 3e:fe:70:aa:06:8a:0a:df:67:4e:be:1c:0f:80:d2:5d:33:22: de:ce:2f:cd -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpzqW6NR4EJX26cXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y1OGFkOTgtMGU1ZS00ODVkLWJkNWQtNWM2MjA5MzJi NmMzMB4XDTI1MDcwODE2MDAwM1oXDTI1MDcxMDE2MDAwMFowLzEtMCsGA1UEAxMk MjAyYTNhMjItMzk5MC00YzY4LWFiYzEtZjkyNzQxNzM2Zjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4Uq3+XJys0ocKFLFGEiOViD5ZZaIrvXOuSW OUWk75dgzsO0u32/oOug7IGRAlz//SPwkQ1KxflpenJmSxp8I4XThmf/GVNANABL 7jdQ/YQ5UcvdluT0/oJ8Oijjhn0E8G4UZ9Ud6mNcDVzMd+3b61ImYBdFoT5yQbIV ukIHgefmNIE5xMRCQgrM4qf5LnTPY/JB+2yy3TagoqT07eRG2v11SD1V2wl59I2T /sBH/yx4eKbEwkaCXZQQJIWwJUIFi29WiKoaMGlPm5UgcngbZG7GZvQOwY9mqmws St9kFWnOImg44P52hDM0kqu24lOXYQEm3lBdDLqUwbS4H/D0zwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFgO/QhU6TX0APvWcL4iixT38370MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjU4 YWQ5OC0wZTVlLTQ4NWQtYmQ1ZC01YzYyMDkzMmI2YzMvM2Y1OGFkOTgtMGU1ZS00 ODVkLWJkNWQtNWM2MjA5MzJiNmMzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y1OGFkOTgtMGU1ZS00ODVkLWJk NWQtNWM2MjA5MzJiNmMzLzNmNThhZDk4LTBlNWUtNDg1ZC1iZDVkLTVjNjIwOTMy YjZjMy5jcmwwHwYDVR0jBBgwFoAU08uEixKxfGKcDORU0y8NC/DoR7EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjU4YWQ5OC0wZTVlLTQ4NWQtYmQ1ZC01YzYy MDkzMmI2YzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAjddskhYeqH1bvzQioV+Sm mCJXB/4zqRH+8zJeTKLMoZmQkzqpovQ3phF7TtPc141BdQymbVhLyn6pGiwu62OF 6Aw/9iof57GzbThgsIF88dcnrZ1f9aZoCEo2LgO62TNYmq7a/pakYiNfu2uuXtAu tYBrcR5l6ZKSKoqFvobR2gTxUFwblLckidf0Lk4SzBue7JFIrnAxpD26oj1BdKAZ GnoFuZ3YSxfnqL2hrceUO9eWylhL5oajPtxMvAD3qY0XtLJlxwBC9IGWWKIU3p6B 2JQ/O8tRbCl9h2FSUMd7PWLvoI9+uMYxoIQ+/nCqBooK32dOvhwPgNJdMyLezi/N -----END CERTIFICATE-----Generated at Tue Jul 8 22:00:00 2025 by rpki-client