$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.mft File: 3bbdd71c-c30e-44ac-90f8-ba443134d8dd.mft (raw, json) Hash identifier: 3wjyx+zg6DYwK+2J7M9qV6kODBbtJjX6VrlfG2SBPds= Subject key identifier: 62:C8:3C:DD:B8:2D:AD:1F:67:A8:99:C6:B3:ED:DA:5B:AD:43:8E:50 Authority key identifier: B7:F4:1B:FB:03:A3:D7:21:03:F8:AE:08:6D:5E:76:BC:E6:BB:EC:73 Certificate issuer: /CN=3bbdd71c-c30e-44ac-90f8-ba443134d8dd Certificate serial: 010D0C9F4328584A77802C11F5C8250B3C59A360 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.mft Manifest number: 010D0C9F4328584073A83347C9F5954AECED656B Signing time: Thu 10 Jul 2025 01:00:08 +0000 Manifest this update: Thu 10 Jul 2025 01:00:08 +0000 Manifest next update: Sun 13 Jul 2025 01:00:00 +0000 Files and hashes: 1: 3bbdd71c-c30e-44ac-90f8-ba443134d8dd.crl (hash: q95nUBmSLoLjk9a3vhHqyrG1lMkvKdzb8VLSRqVb8YA=) 2: 870b3555-4770-357a-83a4-150807097e93.roa (hash: GQXriXaVvwhwWP8vikEyfCcadXH6vXESaXFDRu3tpQo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:2c:11:f5:c8:25:0b:3c:59:a3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bbdd71c-c30e-44ac-90f8-ba443134d8dd Validity Not Before: Jul 10 01:00:08 2025 GMT Not After : Jul 13 01:00:00 2025 GMT Subject: CN=5de89bb6-bb44-4ae7-a109-0cbfba131dba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f6:d5:3d:27:5e:4c:d6:95:7b:2c:ad:c2:e6: fe:b6:7b:8a:d2:7c:e7:48:f0:25:de:f3:c3:81:1e: 74:71:cc:58:1f:72:78:8a:60:43:84:63:a4:1e:56: 2e:f1:c4:1c:1a:ee:8c:75:f0:95:07:8e:c3:1f:62: 00:30:af:ae:cf:56:e4:34:be:88:e4:25:04:fc:32: 31:02:64:ba:c1:1e:93:ef:cf:0f:e5:61:53:b6:7b: 80:51:96:3f:36:6d:5a:01:65:41:66:ec:80:5c:1c: 78:7a:1b:97:e4:66:f5:87:26:df:15:c5:ba:70:5f: 77:a6:6e:15:1e:9b:e6:b2:96:a5:d1:63:35:2b:af: a2:45:cb:64:51:63:88:3c:aa:03:fc:bb:c8:11:c5: c8:a8:1f:4c:5c:c4:a4:31:4c:47:ac:b8:21:3f:c0: b1:49:14:82:a1:d3:aa:c0:40:04:c0:47:0c:49:52: d6:f1:cd:99:69:4b:4e:0e:32:70:ce:02:5a:55:2b: da:94:34:c5:70:ad:88:f4:c8:a2:1c:2f:eb:2d:32: 66:01:30:53:f8:87:02:90:e3:ee:46:90:91:39:58: 34:6b:7f:ca:6c:32:74:72:20:72:7a:5f:42:1c:79: a9:bf:f5:11:9a:df:77:a3:c5:df:91:db:28:fa:64: f1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:C8:3C:DD:B8:2D:AD:1F:67:A8:99:C6:B3:ED:DA:5B:AD:43:8E:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.crl X509v3 Authority Key Identifier: keyid:B7:F4:1B:FB:03:A3:D7:21:03:F8:AE:08:6D:5E:76:BC:E6:BB:EC:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:ad:d2:51:18:b9:6c:cc:9e:eb:d6:b6:72:e8:db:75:67:e3: f4:fb:32:df:1c:de:94:44:15:ac:a4:1a:d2:73:29:85:2d:8d: d1:e3:9a:8c:2d:7e:8b:b2:00:a3:de:26:07:9a:4e:ae:71:0b: 20:42:be:cf:b1:dd:d9:77:53:25:42:28:e2:3a:fc:89:90:2b: 18:9b:1a:ad:36:ae:41:e0:c4:6d:92:e0:fe:7a:fd:ce:8b:87: 14:3b:36:7e:a4:b8:90:65:7f:e0:93:8b:3d:8b:64:2c:36:63: 41:06:d0:f8:38:3f:8f:0e:f5:99:2a:61:a4:13:38:8e:c9:c8: 32:04:ee:34:38:0c:e7:3c:03:26:a1:34:7d:4c:90:2b:c6:6e: ee:6e:73:5c:99:9f:3d:4e:32:15:3d:5f:71:85:d3:79:41:4f: 39:62:a6:95:36:a0:44:28:f6:7a:1f:84:53:c5:c1:ce:4c:a1: 05:3b:2a:b4:10:51:26:bc:f1:57:7c:22:1e:39:01:79:5a:21: cf:e9:27:3c:a2:ff:2b:ca:4a:10:ea:54:40:c2:ff:82:f4:c3: c2:27:d3:41:08:cf:6f:a0:04:80:17:90:2b:0a:aa:34:04:27: 86:1e:72:91:f6:ed:c7:35:87:ab:bd:eb:93:8a:ed:c6:07:84: 71:40:f2:5e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEp3gCwR9cglCzxZo2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JiZGQ3MWMtYzMwZS00NGFjLTkwZjgtYmE0NDMxMzRk OGRkMB4XDTI1MDcxMDAxMDAwOFoXDTI1MDcxMzAxMDAwMFowLzEtMCsGA1UEAxMk NWRlODliYjYtYmI0NC00YWU3LWExMDktMGNiZmJhMTMxZGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fbVPSdeTNaVeyytwub+tnuK0nznSPAl3vPD gR50ccxYH3J4imBDhGOkHlYu8cQcGu6MdfCVB47DH2IAMK+uz1bkNL6I5CUE/DIx AmS6wR6T788P5WFTtnuAUZY/Nm1aAWVBZuyAXBx4ehuX5Gb1hybfFcW6cF93pm4V Hpvmspal0WM1K6+iRctkUWOIPKoD/LvIEcXIqB9MXMSkMUxHrLghP8CxSRSCodOq wEAEwEcMSVLW8c2ZaUtODjJwzgJaVSvalDTFcK2I9MiiHC/rLTJmATBT+IcCkOPu RpCROVg0a3/KbDJ0ciByel9CHHmpv/URmt93o8Xfkdso+mTxzwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGLIPN24La0fZ6iZxrPt2lutQ45QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zYmJk ZDcxYy1jMzBlLTQ0YWMtOTBmOC1iYTQ0MzEzNGQ4ZGQvM2JiZGQ3MWMtYzMwZS00 NGFjLTkwZjgtYmE0NDMxMzRkOGRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2JiZGQ3MWMtYzMwZS00NGFjLTkw ZjgtYmE0NDMxMzRkOGRkLzNiYmRkNzFjLWMzMGUtNDRhYy05MGY4LWJhNDQzMTM0 ZDhkZC5jcmwwHwYDVR0jBBgwFoAUt/Qb+wOj1yED+K4IbV52vOa77HMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zYmJkZDcxYy1jMzBlLTQ0YWMtOTBmOC1iYTQ0 MzEzNGQ4ZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAmrdJRGLlszJ7r1rZy6Nt1 Z+P0+zLfHN6URBWspBrScymFLY3R45qMLX6LsgCj3iYHmk6ucQsgQr7Psd3Zd1Ml QijiOvyJkCsYmxqtNq5B4MRtkuD+ev3Oi4cUOzZ+pLiQZX/gk4s9i2QsNmNBBtD4 OD+PDvWZKmGkEziOycgyBO40OAznPAMmoTR9TJArxm7ubnNcmZ89TjIVPV9xhdN5 QU85YqaVNqBEKPZ6H4RTxcHOTKEFOyq0EFEmvPFXfCIeOQF5WiHP6Sc8ov8rykoQ 6lRAwv+C9MPCJ9NBCM9voASAF5ArCqo0BCeGHnKR9u3HNYerveuTiu3GB4RxQPJe -----END CERTIFICATE-----Generated at Thu Jul 10 08:50:30 2025 by rpki-client