$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft File: 3b72c968-d673-4a7a-bfec-4071a7be5317.mft (raw, json) Hash identifier: /ahZhajeCZ+aPM1vuLWSXk4RhbR9gi8VQ11P7u9cXgI= Subject key identifier: 13:E2:C1:01:3F:A8:28:C6:AB:71:C2:E7:5B:10:18:E0:6B:64:BF:CB Authority key identifier: D4:D0:6C:E1:8F:F9:73:1D:53:22:23:6D:36:3F:38:F6:81:03:B5:6F Certificate issuer: /CN=3b72c968-d673-4a7a-bfec-4071a7be5317 Certificate serial: 010D0C9F4328584AF414EF3B22FA7FE3BD785E20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft Manifest number: 010D0C9F4328584073A81BDF619690B6FD17C72C Signing time: Sat 23 Aug 2025 16:00:08 +0000 Manifest this update: Sat 23 Aug 2025 16:00:08 +0000 Manifest next update: Mon 25 Aug 2025 16:00:00 +0000 Files and hashes: 1: 0fb6d382-f0fb-39bb-a947-10e2bb7ff6d0.roa (hash: F4T+QFvarAkg4vvzicn/iSJ5OktSWut4QlVPjP5A8lo=) 2: 3b72c968-d673-4a7a-bfec-4071a7be5317.crl (hash: lorOh0GWnNC6AMAuhAMQjgNo43KNaf/SWp7/xfQrHaY=) 3: 3df446ef-8f84-35ef-9354-563bf5792560.roa (hash: A3vCeRpPzFdVUKWrYpHp7vm5Fo6yfOqvrI0/UJqZh6o=) 4: 828c35a4-d70a-329b-afc8-43f0c6744f3e.roa (hash: PB3mndTgIuq9LGPDycgT+Kb5VUQgKi0b5Q9rpPLbsVc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f4:14:ef:3b:22:fa:7f:e3:bd:78:5e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b72c968-d673-4a7a-bfec-4071a7be5317 Validity Not Before: Aug 23 16:00:08 2025 GMT Not After : Aug 25 16:00:00 2025 GMT Subject: CN=d94d6f7e-1582-4e6a-ad3a-f57345f5b892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:01:fb:1c:27:40:0a:0b:a9:15:d7:8d:3d:ec: 60:29:e3:2f:2f:3a:ea:bf:34:ba:bc:68:05:72:34: 14:7e:11:2a:68:81:7e:89:c5:06:c1:26:45:ca:c6: 36:d8:f0:eb:07:3e:fa:a8:c2:40:2e:91:f0:83:02: e6:e9:b3:fc:67:8c:ed:0c:72:b5:6b:f2:ec:1a:58: f8:3d:da:5a:ec:56:9c:8a:ec:37:66:5d:dd:3a:be: 52:dd:ea:dd:9a:51:0d:6f:6a:61:51:79:06:04:38: 4a:35:d2:d7:f2:6d:e6:b7:8a:98:68:2c:97:a3:76: c4:3f:d7:3b:1e:08:aa:02:39:6e:78:72:cc:7a:e1: 43:7d:7d:a7:b6:88:ca:4a:e0:fe:25:37:8f:f6:46: d5:00:a8:41:80:bb:79:10:12:b3:c8:08:c6:c4:02: bf:ac:0b:19:14:6b:ac:9e:ac:b5:a3:74:4d:ec:1b: 21:1b:d7:3a:68:14:52:3f:9b:97:81:97:20:e3:91: 8f:a4:6b:10:f5:b9:e1:8d:e7:fe:4b:6f:c8:60:6c: 72:80:29:08:6c:5c:66:ce:4b:36:c0:4d:49:8d:29: d9:31:b7:34:35:19:65:b9:ec:89:41:db:64:be:25: 01:35:1e:f7:f9:f1:9f:a5:d0:39:45:4a:e5:43:e6: f2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:E2:C1:01:3F:A8:28:C6:AB:71:C2:E7:5B:10:18:E0:6B:64:BF:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.crl X509v3 Authority Key Identifier: keyid:D4:D0:6C:E1:8F:F9:73:1D:53:22:23:6D:36:3F:38:F6:81:03:B5:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:cb:5b:d0:89:58:ff:df:ec:b8:df:57:5c:45:35:9a:19:b6: cd:85:7e:b6:0f:b9:6d:fb:ae:1a:dd:ab:49:5c:13:c0:28:ae: ca:87:73:da:ee:03:8d:6f:1e:39:6f:3c:40:1d:27:70:7d:35: 8b:5f:48:0d:13:b0:80:67:46:e2:3b:f9:05:ef:09:80:36:6e: b9:4a:52:78:b0:f6:f5:dc:98:e5:8a:9f:de:ff:81:13:da:24: f8:4d:ef:2a:67:39:e5:0c:97:03:91:4a:71:8f:8a:a0:92:54: eb:13:e7:d5:99:70:73:9c:fa:62:bf:7c:e2:91:54:0d:da:af: e1:05:90:7d:6c:4f:65:61:bd:fd:cc:5f:2b:bb:51:4a:32:74: 3b:96:e1:30:d6:7c:df:ea:87:2b:0e:ce:c1:06:fd:58:1e:9a: 1d:86:8a:9d:a9:fe:20:07:18:90:cb:8a:84:2b:d8:9f:a6:45: fd:e7:ed:dd:b1:98:ea:eb:70:7f:c1:be:c1:f7:e2:4b:c3:e1: 7d:b8:3f:2d:65:2a:d1:f2:ef:67:aa:d6:86:4f:ee:24:4c:a2: 10:72:d4:13:e0:66:98:06:0e:1f:78:10:85:a1:34:da:bd:50: 64:c4:1c:e3:03:bd:a7:f8:65:5c:9c:95:54:40:df:60:6e:ec: 9a:44:8d:95 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr0FO87Ivp/4714XiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I3MmM5NjgtZDY3My00YTdhLWJmZWMtNDA3MWE3YmU1 MzE3MB4XDTI1MDgyMzE2MDAwOFoXDTI1MDgyNTE2MDAwMFowLzEtMCsGA1UEAxMk ZDk0ZDZmN2UtMTU4Mi00ZTZhLWFkM2EtZjU3MzQ1ZjViODkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAH7HCdACgupFdeNPexgKeMvLzrqvzS6vGgF cjQUfhEqaIF+icUGwSZFysY22PDrBz76qMJALpHwgwLm6bP8Z4ztDHK1a/LsGlj4 Pdpa7Faciuw3Zl3dOr5S3erdmlENb2phUXkGBDhKNdLX8m3mt4qYaCyXo3bEP9c7 HgiqAjlueHLMeuFDfX2ntojKSuD+JTeP9kbVAKhBgLt5EBKzyAjGxAK/rAsZFGus nqy1o3RN7BshG9c6aBRSP5uXgZcg45GPpGsQ9bnhjef+S2/IYGxygCkIbFxmzks2 wE1JjSnZMbc0NRllueyJQdtkviUBNR73+fGfpdA5RUrlQ+byMwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBPiwQE/qCjGq3HC51sQGOBrZL/LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zYjcy Yzk2OC1kNjczLTRhN2EtYmZlYy00MDcxYTdiZTUzMTcvM2I3MmM5NjgtZDY3My00 YTdhLWJmZWMtNDA3MWE3YmU1MzE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2I3MmM5NjgtZDY3My00YTdhLWJm ZWMtNDA3MWE3YmU1MzE3LzNiNzJjOTY4LWQ2NzMtNGE3YS1iZmVjLTQwNzFhN2Jl NTMxNy5jcmwwHwYDVR0jBBgwFoAU1NBs4Y/5cx1TIiNtNj849oEDtW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zYjcyYzk2OC1kNjczLTRhN2EtYmZlYy00MDcx YTdiZTUzMTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAZy1vQiVj/3+y431dcRTWa GbbNhX62D7lt+64a3atJXBPAKK7Kh3Pa7gONbx45bzxAHSdwfTWLX0gNE7CAZ0bi O/kF7wmANm65SlJ4sPb13Jjlip/e/4ET2iT4Te8qZznlDJcDkUpxj4qgklTrE+fV mXBznPpiv3zikVQN2q/hBZB9bE9lYb39zF8ru1FKMnQ7luEw1nzf6ocrDs7BBv1Y Hpodhoqdqf4gBxiQy4qEK9ifpkX95+3dsZjq63B/wb7B9+JLw+F9uD8tZSrR8u9n qtaGT+4kTKIQctQT4GaYBg4feBCFoTTavVBkxBzjA72n+GVcnJVUQN9gbuyaRI2V -----END CERTIFICATE-----Generated at Sat Aug 23 23:12:50 2025 by rpki-client