$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft File: 3a636afd-ece5-4e23-a54f-c43e0fc08124.mft (raw, json) Hash identifier: jmeKnSA75yCCIMH48pp8lnMj7KwKtjWnkGb/7iovvG8= Subject key identifier: D7:E0:7B:9A:7F:1C:52:14:A0:6E:F1:8B:E8:14:11:3A:9E:E2:B3:2F Authority key identifier: 8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 Certificate issuer: /CN=3a636afd-ece5-4e23-a54f-c43e0fc08124 Certificate serial: 010D0C9F4328584A59D6994659FAD3A258E76A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft Manifest number: 010D0C9F4328584073A84C6382713EC3B9026C22 Signing time: Sun 29 Jun 2025 10:00:03 +0000 Manifest this update: Sun 29 Jun 2025 10:00:03 +0000 Manifest next update: Tue 01 Jul 2025 10:00:00 +0000 Files and hashes: 1: 2ed04e60-1e97-3647-b39a-9a93be9e3ceb.roa (hash: cwcmGinHeBkFR7QoVPGw0dPCq8h0LmvpoCC+OQ7EIYY=) 2: 3a636afd-ece5-4e23-a54f-c43e0fc08124.crl (hash: UGfMN5rmmYtQmWoFdC/g/6/bj58//asOssxW6xjGBIM=) 3: 86ce795d-c584-310b-9693-21cb26b6e90a.roa (hash: yW32RbA6WDg8G8/PGbMbLsaHAb9WDPzYk/AC3vxuA6g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:59:d6:99:46:59:fa:d3:a2:58:e7:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a636afd-ece5-4e23-a54f-c43e0fc08124 Validity Not Before: Jun 29 10:00:03 2025 GMT Not After : Jul 1 10:00:00 2025 GMT Subject: CN=90cbe829-0125-44ac-a0d0-a4f9003a09df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f5:8f:52:bb:33:ed:cf:c0:09:9a:05:1d:9c: 20:f4:8b:02:32:6f:82:08:00:10:57:a7:19:50:5d: bc:64:15:63:d8:6a:a3:92:fe:3b:30:52:53:f8:8a: b6:d1:d8:84:d8:cc:cd:be:cd:2f:78:5e:ad:10:39: d5:e8:d3:d2:a0:66:f2:15:3f:d3:32:a9:a2:80:22: a3:1e:64:3d:ad:75:a9:63:90:05:1a:80:7f:12:55: 45:37:c6:16:b9:1f:d5:dc:2d:3c:fd:c4:56:a3:db: 47:fc:0d:2d:2e:fe:39:1b:ec:63:4b:76:bc:ec:e7: 2e:61:57:f9:69:8f:21:23:d9:28:d1:b4:b4:72:db: fb:cb:11:e8:35:2b:3d:79:b8:0a:52:f3:2d:18:bd: 21:c3:44:e6:1c:89:ce:a3:aa:6d:45:eb:e3:16:e3: 7e:75:0e:52:a2:c3:f2:d0:db:6a:af:e3:87:a6:bd: 2a:05:39:a4:a1:4e:2b:66:0a:79:4b:40:db:8b:f9: 1f:90:7c:83:2c:cc:ee:25:dc:06:ee:99:bd:06:e2: 87:26:09:19:bd:d4:e5:0a:3e:16:28:88:16:8c:39: 44:62:60:d2:0a:e8:37:35:75:c8:cf:9f:1a:42:ea: 23:a9:16:07:22:0b:0e:f9:49:58:ed:5e:88:b3:ac: 47:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:E0:7B:9A:7F:1C:52:14:A0:6E:F1:8B:E8:14:11:3A:9E:E2:B3:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl X509v3 Authority Key Identifier: keyid:8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:3c:90:c4:3c:53:95:6b:dd:cb:52:75:4d:39:31:5d:fb:03: 8b:35:25:67:0c:af:e5:a6:dc:67:40:d3:b0:c4:ed:82:d9:73: 98:a0:92:70:df:de:8c:67:00:aa:52:0d:76:04:71:5d:81:41: 10:e2:13:d9:43:32:ae:2f:40:6f:71:41:c3:c3:92:06:7c:f4: 27:f0:06:a6:87:ac:6f:24:6f:86:85:5e:9b:d1:9f:a7:66:6e: 65:bf:a1:2a:78:60:01:94:1f:d9:38:fa:13:bd:e1:c0:d3:b7: ae:92:6f:e9:81:49:72:6b:1b:25:89:dc:17:fe:62:98:d8:cf: af:c1:0c:c1:71:a0:b7:df:15:09:aa:98:04:d1:d5:0d:ba:85: 9b:a7:52:bb:c4:12:56:0f:4f:28:8e:5a:91:e8:0b:d0:a5:7b: 36:f0:c5:f7:4d:2a:d2:54:5d:5e:7d:2d:ca:00:38:02:dc:1c: fe:fd:53:9e:ec:3d:65:ec:05:a5:66:ea:22:14:e0:b0:41:55: d3:bd:9b:12:80:66:5e:d6:35:8c:e3:a9:e1:ac:1f:38:0a:64: 29:63:26:52:82:04:53:8e:90:b0:13:b3:5d:b2:c4:04:a7:61: a9:c8:fb:f7:d4:c5:dc:9d:51:e0:39:fb:9a:4d:45:51:08:77: 18:d9:4a:0f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpZ1plGWfrToljnaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E2MzZhZmQtZWNlNS00ZTIzLWE1NGYtYzQzZTBmYzA4 MTI0MB4XDTI1MDYyOTEwMDAwM1oXDTI1MDcwMTEwMDAwMFowLzEtMCsGA1UEAxMk OTBjYmU4MjktMDEyNS00NGFjLWEwZDAtYTRmOTAwM2EwOWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvWPUrsz7c/ACZoFHZwg9IsCMm+CCAAQV6cZ UF28ZBVj2Gqjkv47MFJT+Iq20diE2MzNvs0veF6tEDnV6NPSoGbyFT/TMqmigCKj HmQ9rXWpY5AFGoB/ElVFN8YWuR/V3C08/cRWo9tH/A0tLv45G+xjS3a87OcuYVf5 aY8hI9ko0bS0ctv7yxHoNSs9ebgKUvMtGL0hw0TmHInOo6ptRevjFuN+dQ5SosPy 0Ntqr+OHpr0qBTmkoU4rZgp5S0Dbi/kfkHyDLMzuJdwG7pm9BuKHJgkZvdTlCj4W KIgWjDlEYmDSCug3NXXIz58aQuojqRYHIgsO+UlY7V6Is6xHlwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNfge5p/HFIUoG7xi+gUETqe4rMvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYz NmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNlMGZjMDgxMjQvM2E2MzZhZmQtZWNlNS00 ZTIzLWE1NGYtYzQzZTBmYzA4MTI0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2E2MzZhZmQtZWNlNS00ZTIzLWE1 NGYtYzQzZTBmYzA4MTI0LzNhNjM2YWZkLWVjZTUtNGUyMy1hNTRmLWM0M2UwZmMw ODEyNC5jcmwwHwYDVR0jBBgwFoAUi85A8V4+45U8NUK2BDw+0WEHNyMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYzNmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNl MGZjMDgxMjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQApPJDEPFOVa93LUnVNOTFd +wOLNSVnDK/lptxnQNOwxO2C2XOYoJJw396MZwCqUg12BHFdgUEQ4hPZQzKuL0Bv cUHDw5IGfPQn8Aamh6xvJG+GhV6b0Z+nZm5lv6EqeGABlB/ZOPoTveHA07eukm/p gUlyaxslidwX/mKY2M+vwQzBcaC33xUJqpgE0dUNuoWbp1K7xBJWD08ojlqR6AvQ pXs28MX3TSrSVF1efS3KADgC3Bz+/VOe7D1l7AWlZuoiFOCwQVXTvZsSgGZe1jWM 46nhrB84CmQpYyZSggRTjpCwE7NdssQEp2GpyPv31MXcnVHgOfuaTUVRCHcY2UoP -----END CERTIFICATE-----Generated at Sun Jun 29 15:52:59 2025 by rpki-client