$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3cb9bd40-c7d5-4787-b35a-bde5e711565a/3cb9bd40-c7d5-4787-b35a-bde5e711565a.mft File: 3cb9bd40-c7d5-4787-b35a-bde5e711565a.mft (raw, json) Hash identifier: qXpIr6ROErxPYG6DdqZQWA8dhKSkufmIQGzBktD524w= Subject key identifier: D2:C9:05:E6:36:BA:FC:0A:6E:61:34:4C:1E:C3:54:E3:65:F0:1D:95 Authority key identifier: 3F:62:FB:9C:A9:3B:51:F9:79:81:6B:83:4C:96:AD:8B:12:2B:48:AF Certificate issuer: /CN=3cb9bd40-c7d5-4787-b35a-bde5e711565a Certificate serial: 010D0C9F4328584AF1C15D03C4EECEE451A30100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3cb9bd40-c7d5-4787-b35a-bde5e711565a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3cb9bd40-c7d5-4787-b35a-bde5e711565a/3cb9bd40-c7d5-4787-b35a-bde5e711565a.mft Manifest number: 010D0C9F4328584073A8264A8C6A0A73B1393C82 Signing time: Fri 22 Aug 2025 20:00:08 +0000 Manifest this update: Fri 22 Aug 2025 20:00:08 +0000 Manifest next update: Mon 25 Aug 2025 20:00:00 +0000 Files and hashes: 1: 3cb9bd40-c7d5-4787-b35a-bde5e711565a.crl (hash: TZBmDAyykTeDaqsMb87XmBsPMhyY/qE/+McWx4uGw+0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3cb9bd40-c7d5-4787-b35a-bde5e711565a/3cb9bd40-c7d5-4787-b35a-bde5e711565a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3cb9bd40-c7d5-4787-b35a-bde5e711565a/3cb9bd40-c7d5-4787-b35a-bde5e711565a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3cb9bd40-c7d5-4787-b35a-bde5e711565a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f1:c1:5d:03:c4:ee:ce:e4:51:a3:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cb9bd40-c7d5-4787-b35a-bde5e711565a Validity Not Before: Aug 22 20:00:08 2025 GMT Not After : Aug 25 20:00:00 2025 GMT Subject: CN=b946fe4d-ad98-4256-9a8b-b510b1729e25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:0a:85:92:da:5c:d1:85:15:0e:04:19:8f:aa: 15:74:1f:df:6f:52:cd:39:60:08:b9:6b:7c:1f:63: d5:93:54:6b:0a:7e:a4:3b:b7:92:e8:6b:60:49:0b: 8d:ed:11:7e:c1:0f:1d:12:8d:07:ff:ea:e9:05:f5: 61:25:f1:2a:8f:e9:ae:f5:87:43:f7:2d:f6:bc:25: 5e:17:ee:ff:49:48:c3:bd:cf:e2:8e:08:3d:4d:b8: 94:4f:83:3c:e7:1d:8e:0e:11:ae:da:68:98:d9:ff: 8a:b8:f1:37:be:8f:4f:ce:6e:e3:ff:68:28:9e:fa: 2e:9b:92:1e:08:d9:2b:a6:39:5d:91:19:4b:82:35: e6:45:02:76:70:62:c4:c0:f8:f5:a4:dc:72:51:e8: 1a:41:43:55:6c:f9:94:8a:2b:04:89:e7:e1:1f:12: f7:55:93:b7:45:5a:00:2f:7b:b6:26:9a:33:3c:57: 7f:be:b7:26:e4:19:46:1e:1a:09:14:d6:17:56:ce: 6e:c2:f3:f2:32:c6:e4:f3:6f:dd:b3:3f:0a:ab:08: 28:7a:a7:bf:ef:e2:74:07:94:a3:5b:74:cf:72:88: 5f:7d:0a:31:a4:74:b0:4c:99:db:11:da:28:9d:4a: fb:40:b8:b4:84:3a:29:cc:b4:f3:c9:ec:5f:8a:2f: aa:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C9:05:E6:36:BA:FC:0A:6E:61:34:4C:1E:C3:54:E3:65:F0:1D:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3cb9bd40-c7d5-4787-b35a-bde5e711565a/3cb9bd40-c7d5-4787-b35a-bde5e711565a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3cb9bd40-c7d5-4787-b35a-bde5e711565a/3cb9bd40-c7d5-4787-b35a-bde5e711565a.crl X509v3 Authority Key Identifier: keyid:3F:62:FB:9C:A9:3B:51:F9:79:81:6B:83:4C:96:AD:8B:12:2B:48:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3cb9bd40-c7d5-4787-b35a-bde5e711565a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:f5:16:ba:7c:3f:2a:32:4c:20:9c:39:88:72:5d:ec:e8:cf: 90:55:62:0e:94:85:58:56:5c:84:61:89:70:b7:a9:b3:94:cd: a7:37:8f:00:43:bf:92:74:7e:a3:23:45:13:93:72:30:e4:7b: 6d:93:87:8b:45:9b:0a:55:66:e5:bc:0f:f1:ed:38:0c:cc:f0: cd:ab:17:db:6b:78:37:d3:79:a7:af:d5:36:eb:b5:02:ee:df: 73:83:89:bf:18:c5:cf:aa:81:f5:d8:91:6c:80:36:02:1e:17: a5:50:ce:16:5b:44:75:06:e5:97:d6:6c:38:fd:b3:43:41:50: 03:8c:6c:9e:39:bc:37:16:ea:25:6c:ef:44:a0:b0:e6:d8:f2: 0b:da:be:30:0b:0a:41:bb:30:f9:a6:cc:78:f1:7d:21:9a:c2: 2c:68:27:4f:f9:bb:5b:33:e3:a2:d8:b4:1b:a7:82:e4:5a:e2: c7:e5:3e:53:0b:58:79:09:35:33:7a:c7:a3:55:2b:0f:ac:1a: 24:3f:07:3c:e4:09:f0:ac:e8:85:af:be:63:c3:67:d6:d2:ad: d5:c9:64:9f:63:1b:90:c2:09:da:cc:5d:29:83:2d:89:31:08: a0:35:8b:d9:71:f0:09:e4:4f:0b:d6:fd:98:d1:de:88:66:8d: 5e:7e:ae:a2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErxwV0DxO7O5FGjAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2NiOWJkNDAtYzdkNS00Nzg3LWIzNWEtYmRlNWU3MTE1 NjVhMB4XDTI1MDgyMjIwMDAwOFoXDTI1MDgyNTIwMDAwMFowLzEtMCsGA1UEAxMk Yjk0NmZlNGQtYWQ5OC00MjU2LTlhOGItYjUxMGIxNzI5ZTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQqFktpc0YUVDgQZj6oVdB/fb1LNOWAIuWt8 H2PVk1RrCn6kO7eS6GtgSQuN7RF+wQ8dEo0H/+rpBfVhJfEqj+mu9YdD9y32vCVe F+7/SUjDvc/ijgg9TbiUT4M85x2ODhGu2miY2f+KuPE3vo9Pzm7j/2gonvoum5Ie CNkrpjldkRlLgjXmRQJ2cGLEwPj1pNxyUegaQUNVbPmUiisEiefhHxL3VZO3RVoA L3u2JpozPFd/vrcm5BlGHhoJFNYXVs5uwvPyMsbk82/dsz8Kqwgoeqe/7+J0B5Sj W3TPcohffQoxpHSwTJnbEdoonUr7QLi0hDopzLTzyexfii+qWQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNLJBeY2uvwKbmE0TB7DVONl8B2VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zY2I5 YmQ0MC1jN2Q1LTQ3ODctYjM1YS1iZGU1ZTcxMTU2NWEvM2NiOWJkNDAtYzdkNS00 Nzg3LWIzNWEtYmRlNWU3MTE1NjVhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2NiOWJkNDAtYzdkNS00Nzg3LWIz NWEtYmRlNWU3MTE1NjVhLzNjYjliZDQwLWM3ZDUtNDc4Ny1iMzVhLWJkZTVlNzEx NTY1YS5jcmwwHwYDVR0jBBgwFoAUP2L7nKk7Ufl5gWuDTJatixIrSK8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zY2I5YmQ0MC1jN2Q1LTQ3ODctYjM1YS1iZGU1 ZTcxMTU2NWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCP9Ra6fD8qMkwgnDmIcl3s 6M+QVWIOlIVYVlyEYYlwt6mzlM2nN48AQ7+SdH6jI0UTk3Iw5Httk4eLRZsKVWbl vA/x7TgMzPDNqxfba3g303mnr9U267UC7t9zg4m/GMXPqoH12JFsgDYCHhelUM4W W0R1BuWX1mw4/bNDQVADjGyeObw3FuolbO9EoLDm2PIL2r4wCwpBuzD5psx48X0h msIsaCdP+btbM+Oi2LQbp4LkWuLH5T5TC1h5CTUzesejVSsPrBokPwc85AnwrOiF r75jw2fW0q3VyWSfYxuQwgnazF0pgy2JMQigNYvZcfAJ5E8L1v2Y0d6IZo1efq6i -----END CERTIFICATE-----Generated at Sat Aug 23 20:08:29 2025 by rpki-client