$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.mft File: 3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.mft (raw, json) Hash identifier: k0w8GwxU7whzK7HMnDBApDttsm5ReMEZBuaFQKAKaOw= Subject key identifier: 01:42:DE:72:4C:E4:86:FD:A7:22:6D:B0:04:31:80:79:12:99:82:25 Authority key identifier: 52:1A:57:8E:2A:C7:61:B5:E3:66:CB:74:74:61:80:E0:B1:16:4A:FF Certificate issuer: /CN=3e97ddc1-e605-46cf-bcf5-048f8d8eb41a Certificate serial: 010D0C9F4328584A5A6B83DA1A1164973F215A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.mft Manifest number: 010D0C9F43285844C248883735BAAFE479343DE8 Signing time: Sun 29 Jun 2025 15:00:03 +0000 Manifest this update: Sun 29 Jun 2025 15:00:03 +0000 Manifest next update: Tue 01 Jul 2025 15:00:00 +0000 Files and hashes: 1: 3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.crl (hash: qNrnR0q5P+NJp056R8bUAoaZDpYubNGvBrr6DQZVLxc=) 2: c6afc596-0b9b-3e43-b3b3-f7b83df310c2.roa (hash: gh4RSheZ/Iu9ArAMsRo1r102JBtfiHk3N773vD2A124=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5a:6b:83:da:1a:11:64:97:3f:21:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e97ddc1-e605-46cf-bcf5-048f8d8eb41a Validity Not Before: Jun 29 15:00:03 2025 GMT Not After : Jul 1 15:00:00 2025 GMT Subject: CN=3d6652ac-52fd-4935-8d93-33a2bceea127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:6f:47:31:20:33:4d:6d:32:71:a4:90:48:00: f5:fe:cb:08:e1:2b:3e:41:f3:bf:ec:41:c6:05:08: 66:26:54:66:f2:03:11:97:a9:c8:ef:c4:4f:3a:ac: 1c:38:09:b8:15:f5:80:11:80:ef:db:fe:dd:fa:83: 76:45:cd:1b:84:4a:e1:65:06:df:8a:8a:5e:6a:f3: 46:1b:37:76:e1:74:c3:6b:4a:38:37:06:7c:26:2a: 76:93:88:03:09:bb:d3:1c:79:77:48:d9:99:38:ad: 40:ab:55:cf:4c:b8:d6:bf:d7:6e:3a:a2:54:c4:e9: 71:37:4b:8a:ef:47:0f:5d:85:f1:9f:78:65:dd:c1: bb:ff:c8:ff:79:74:1c:62:82:59:4d:8a:5d:f9:2a: 58:93:71:03:95:e9:d6:59:74:73:3e:5d:11:03:a4: e2:bc:3a:c9:6f:b4:b0:28:4b:6d:f9:bf:ee:bd:09: ff:57:35:90:f9:c8:2c:48:f6:95:cf:b3:c0:86:b3: ce:32:fc:94:be:6c:2c:31:b9:68:c1:81:fe:c6:98: 32:c5:87:91:32:44:5f:b3:73:f1:d3:ee:97:b1:bc: f1:44:5d:3d:43:d4:13:59:7c:92:95:16:88:0c:2a: 10:19:81:67:22:d2:c3:74:b3:2f:ef:2c:37:b4:68: 74:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:42:DE:72:4C:E4:86:FD:A7:22:6D:B0:04:31:80:79:12:99:82:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.crl X509v3 Authority Key Identifier: keyid:52:1A:57:8E:2A:C7:61:B5:E3:66:CB:74:74:61:80:E0:B1:16:4A:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:0f:dc:ad:2e:a4:7f:24:e3:2b:19:46:fc:7c:c6:0c:98:3f: c0:12:ac:85:3e:47:e2:ad:b7:ca:7c:0c:84:c7:0c:f6:bb:18: 01:4d:4c:85:36:a5:0f:8e:2b:f0:72:83:26:a1:c4:33:d0:b6: f4:65:fc:ff:29:ce:18:93:f9:fc:48:8d:58:55:cb:c3:dc:fc: 22:01:dc:5f:c1:3f:41:25:89:9f:99:d0:9a:fa:34:49:93:0b: 90:ff:55:b2:ec:09:64:14:27:ac:e7:3c:20:7a:22:40:ee:bb: 55:c7:1b:46:2d:e6:89:4e:78:f8:d7:d6:13:c1:2e:77:2b:c4: e3:0a:f1:6e:de:f8:1d:c9:30:dc:de:d8:81:b0:9a:2b:12:78: 77:53:63:51:36:7a:c9:ac:37:8d:62:3f:75:bc:34:86:9f:92: b5:54:fb:85:e4:3c:18:d5:c3:27:78:92:f7:4d:a0:8d:d2:91: 44:55:74:06:24:53:c8:f7:0f:fe:47:00:06:5e:67:69:44:e2: 76:fb:7f:31:ff:19:3d:28:ed:e3:26:28:0d:c0:c5:4a:a4:44: 0f:04:a3:93:d5:a2:76:a7:15:4f:44:10:b9:6b:3e:12:92:47: 0e:7a:71:27:c3:2d:06:79:97:6d:ad:16:09:d1:61:fb:8f:b6: 17:e9:a3:85 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpaa4PaGhFklz8hWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U5N2RkYzEtZTYwNS00NmNmLWJjZjUtMDQ4ZjhkOGVi NDFhMB4XDTI1MDYyOTE1MDAwM1oXDTI1MDcwMTE1MDAwMFowLzEtMCsGA1UEAxMk M2Q2NjUyYWMtNTJmZC00OTM1LThkOTMtMzNhMmJjZWVhMTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA529HMSAzTW0ycaSQSAD1/ssI4Ss+QfO/7EHG BQhmJlRm8gMRl6nI78RPOqwcOAm4FfWAEYDv2/7d+oN2Rc0bhErhZQbfiopeavNG Gzd24XTDa0o4NwZ8Jip2k4gDCbvTHHl3SNmZOK1Aq1XPTLjWv9duOqJUxOlxN0uK 70cPXYXxn3hl3cG7/8j/eXQcYoJZTYpd+SpYk3EDlenWWXRzPl0RA6TivDrJb7Sw KEtt+b/uvQn/VzWQ+cgsSPaVz7PAhrPOMvyUvmwsMblowYH+xpgyxYeRMkRfs3Px 0+6XsbzxRF09Q9QTWXySlRaIDCoQGYFnItLDdLMv7yw3tGh0vwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAFC3nJM5Ib9pyJtsAQxgHkSmYIlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZTk3 ZGRjMS1lNjA1LTQ2Y2YtYmNmNS0wNDhmOGQ4ZWI0MWEvM2U5N2RkYzEtZTYwNS00 NmNmLWJjZjUtMDQ4ZjhkOGViNDFhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2U5N2RkYzEtZTYwNS00NmNmLWJj ZjUtMDQ4ZjhkOGViNDFhLzNlOTdkZGMxLWU2MDUtNDZjZi1iY2Y1LTA0OGY4ZDhl YjQxYS5jcmwwHwYDVR0jBBgwFoAUUhpXjirHYbXjZst0dGGA4LEWSv8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZTk3ZGRjMS1lNjA1LTQ2Y2YtYmNmNS0wNDhm OGQ4ZWI0MWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBND9ytLqR/JOMrGUb8fMYM mD/AEqyFPkfirbfKfAyExwz2uxgBTUyFNqUPjivwcoMmocQz0Lb0Zfz/Kc4Yk/n8 SI1YVcvD3PwiAdxfwT9BJYmfmdCa+jRJkwuQ/1Wy7AlkFCes5zwgeiJA7rtVxxtG LeaJTnj419YTwS53K8TjCvFu3vgdyTDc3tiBsJorEnh3U2NRNnrJrDeNYj91vDSG n5K1VPuF5DwY1cMneJL3TaCN0pFEVXQGJFPI9w/+RwAGXmdpROJ2+38x/xk9KO3j JigNwMVKpEQPBKOT1aJ2pxVPRBC5az4SkkcOenEnwy0GeZdtrRYJ0WH7j7YX6aOF -----END CERTIFICATE-----Generated at Mon Jun 30 09:05:15 2025 by rpki-client