$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft File: 3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft (raw, json) Hash identifier: c4p4BbgNlUe4fp4+73Fzs2Y2X6yXQIiGMfYa7TcQcMc= Subject key identifier: E3:99:12:49:FF:37:65:43:9D:57:90:83:39:43:70:C2:A0:E1:FC:F0 Authority key identifier: 9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA Certificate issuer: /CN=3d9a4c35-54c1-427c-8f6e-ef1b1644f89e Certificate serial: 010D0C9F4328584AF1A38F4E5877FA9D9198BB40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft Manifest number: 010D0C9F4328584073A8229E05ED3D48888CE277 Signing time: Fri 22 Aug 2025 19:00:03 +0000 Manifest this update: Fri 22 Aug 2025 19:00:03 +0000 Manifest next update: Mon 25 Aug 2025 19:00:00 +0000 Files and hashes: 1: 079ec49d-80c7-36fb-a80a-15036883ce48.roa (hash: kpJAZBnC08wSXXJFvZ3kkcSttnLFb+E/kkpKIaE/x3M=) 2: 11445a47-5fff-37b5-8a9b-8d703aea3e5f.roa (hash: i7gmNW1/qWHwHssCxzzAn60JIDd+oL4t2vX5MDI2oXA=) 3: 3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl (hash: /O4RW7vRqLcO3HwkT/lAoG/bCG12NWvnFqU0FSd/v7M=) 4: 53ccae06-4eac-3309-8de2-24f62624fcd6.roa (hash: VRuxNuawFIHYSNNAAC+P6gktGie8avrvxuKFazoZP2Q=) 5: 600158e3-3a9d-334c-b3b8-2e4b9495b2ba.roa (hash: agXr7zQbBk0GaDWrzF6crY8GWHKumUzBmsNE5ByxY/U=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f1:a3:8f:4e:58:77:fa:9d:91:98:bb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d9a4c35-54c1-427c-8f6e-ef1b1644f89e Validity Not Before: Aug 22 19:00:03 2025 GMT Not After : Aug 25 19:00:00 2025 GMT Subject: CN=aca3ea81-2b4e-46c9-9bd6-6a582884f6f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c4:e1:c9:0e:6f:ff:24:d7:ba:bd:e9:a2:6c: 30:25:3b:a6:7a:0b:30:24:37:dc:d0:fc:dc:8f:21: 38:bc:91:3b:5f:9c:cb:c8:85:5b:56:7a:3e:6f:2d: 13:b0:f9:e0:7e:6d:60:81:1b:84:86:28:c2:25:6a: 6e:51:d7:4f:93:76:e3:65:60:23:20:3c:47:11:69: 4d:61:cc:e8:a5:55:fa:70:fb:3d:c8:f4:c0:75:c5: 29:6a:18:8c:17:3e:4f:ba:d0:a4:7c:89:2b:c9:a6: df:2c:b9:d0:90:12:f9:29:51:4c:30:bc:84:1b:c5: 73:89:4b:34:ed:d4:f4:f1:bd:ec:5c:b6:2f:b3:e6: b7:ca:77:38:ae:d6:8d:fb:90:c0:2d:f4:ac:7d:28: c4:33:fd:45:88:c7:54:07:b8:49:4c:4c:8c:76:83: 33:95:16:3c:72:06:01:fa:d4:fc:f4:24:ef:86:b9: c7:72:ee:6c:eb:ff:ae:08:db:6e:22:03:4b:09:8c: 39:54:c6:cd:48:59:44:12:b8:ed:e4:51:dd:cb:dc: 9e:cb:d9:24:de:f0:9e:37:99:ba:9c:00:cb:b5:e4: 50:3a:db:c5:23:1d:c5:9e:5d:76:9d:77:62:77:16: 1a:f4:f1:57:6a:9a:b4:13:b7:54:f6:55:14:36:d1: 5b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:99:12:49:FF:37:65:43:9D:57:90:83:39:43:70:C2:A0:E1:FC:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl X509v3 Authority Key Identifier: keyid:9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:19:58:bc:ba:a6:e1:49:69:fc:e2:3a:84:94:ac:21:fe:3e: 35:3a:c0:fc:cb:25:d5:7a:6f:29:2e:66:6d:b4:0d:62:47:65: fd:be:29:89:7e:76:7e:93:ce:9a:24:27:40:2a:f5:0c:7c:07: 88:ec:be:85:30:ef:2f:b1:3a:74:9c:7b:34:f2:79:02:9c:20: e6:51:d1:cb:5c:87:ba:47:4d:95:77:34:93:87:3a:70:85:4b: 6d:b2:1a:21:7b:91:87:99:70:06:16:ca:34:ad:79:c1:ea:0b: cb:de:d7:42:04:52:05:79:d8:67:18:5c:a7:eb:80:0b:5e:eb: c5:40:57:70:1b:7e:60:f8:03:e2:85:dc:e0:47:4e:5a:0a:a9: 46:c1:0d:6f:63:cf:b3:07:ef:cd:14:90:83:a7:4a:79:2a:25: 79:9d:38:c5:85:52:5d:27:96:74:7a:85:99:47:65:06:ed:b2: 3f:42:83:fd:15:21:22:ac:2a:2b:2d:e5:ff:59:cd:3f:93:0e: 42:82:41:df:d8:bf:2a:be:47:44:8e:ec:fd:fc:18:fa:5d:0f: c7:64:d1:86:ae:9e:f7:18:f7:17:0c:ab:60:89:b2:db:9d:73: ae:ea:b7:52:c0:cf:88:c6:de:d3:9b:e7:70:86:71:d5:a6:27: 07:c0:d5:6c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErxo49OWHf6nZGYu0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q5YTRjMzUtNTRjMS00MjdjLThmNmUtZWYxYjE2NDRm ODllMB4XDTI1MDgyMjE5MDAwM1oXDTI1MDgyNTE5MDAwMFowLzEtMCsGA1UEAxMk YWNhM2VhODEtMmI0ZS00NmM5LTliZDYtNmE1ODI4ODRmNmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosThyQ5v/yTXur3pomwwJTumegswJDfc0Pzc jyE4vJE7X5zLyIVbVno+by0TsPngfm1ggRuEhijCJWpuUddPk3bjZWAjIDxHEWlN YczopVX6cPs9yPTAdcUpahiMFz5PutCkfIkryabfLLnQkBL5KVFMMLyEG8VziUs0 7dT08b3sXLYvs+a3ync4rtaN+5DALfSsfSjEM/1FiMdUB7hJTEyMdoMzlRY8cgYB +tT89CTvhrnHcu5s6/+uCNtuIgNLCYw5VMbNSFlEErjt5FHdy9yey9kk3vCeN5m6 nADLteRQOtvFIx3Fnl12nXdidxYa9PFXapq0E7dU9lUUNtFbNwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOOZEkn/N2VDnVeQgzlDcMKg4fzwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZDlh NGMzNS01NGMxLTQyN2MtOGY2ZS1lZjFiMTY0NGY4OWUvM2Q5YTRjMzUtNTRjMS00 MjdjLThmNmUtZWYxYjE2NDRmODllLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2Q5YTRjMzUtNTRjMS00MjdjLThm NmUtZWYxYjE2NDRmODllLzNkOWE0YzM1LTU0YzEtNDI3Yy04ZjZlLWVmMWIxNjQ0 Zjg5ZS5jcmwwHwYDVR0jBBgwFoAUn0bW0R1K0GvS1x9acstvqb+KqLowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZDlhNGMzNS01NGMxLTQyN2MtOGY2ZS1lZjFi MTY0NGY4OWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQClGVi8uqbhSWn84jqElKwh /j41OsD8yyXVem8pLmZttA1iR2X9vimJfnZ+k86aJCdAKvUMfAeI7L6FMO8vsTp0 nHs08nkCnCDmUdHLXIe6R02VdzSThzpwhUttshohe5GHmXAGFso0rXnB6gvL3tdC BFIFedhnGFyn64ALXuvFQFdwG35g+APihdzgR05aCqlGwQ1vY8+zB+/NFJCDp0p5 KiV5nTjFhVJdJ5Z0eoWZR2UG7bI/QoP9FSEirCorLeX/Wc0/kw5CgkHf2L8qvkdE juz9/Bj6XQ/HZNGGrp73GPcXDKtgibLbnXOu6rdSwM+Ixt7Tm+dwhnHVpicHwNVs -----END CERTIFICATE-----Generated at Sat Aug 23 12:29:41 2025 by rpki-client