$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft File: 3a636afd-ece5-4e23-a54f-c43e0fc08124.mft (raw, json) Hash identifier: wFFB1OZbFa0PbhqU0bUoemqyuo87p8ppDDwDRk5QTbw= Subject key identifier: 62:D9:EE:5C:74:71:B7:2E:3E:92:F6:98:AC:BF:F4:78:78:E6:8C:2B Authority key identifier: 8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 Certificate issuer: /CN=3a636afd-ece5-4e23-a54f-c43e0fc08124 Certificate serial: 010D0C9F4328584AF09793B678FF92429BA1C680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft Manifest number: 010D0C9F4328584073A84C6382713EC3B9026C59 Signing time: Fri 22 Aug 2025 10:00:08 +0000 Manifest this update: Fri 22 Aug 2025 10:00:08 +0000 Manifest next update: Sun 24 Aug 2025 10:00:00 +0000 Files and hashes: 1: 2ed04e60-1e97-3647-b39a-9a93be9e3ceb.roa (hash: mm/Gt8mXHebIFoxO13txrgSnIJ9T3kerEQiUnvoJWvY=) 2: 3a636afd-ece5-4e23-a54f-c43e0fc08124.crl (hash: fakU4kmQTgVYJ0XjlgNLW3KVbgigCyLpJ4FMYlBDUtk=) 3: 86ce795d-c584-310b-9693-21cb26b6e90a.roa (hash: qqdYngo5D+o3hg9kBFr/sMg94Z0lGGys0C4Qy/8CSjI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:97:93:b6:78:ff:92:42:9b:a1:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a636afd-ece5-4e23-a54f-c43e0fc08124 Validity Not Before: Aug 22 10:00:08 2025 GMT Not After : Aug 24 10:00:00 2025 GMT Subject: CN=f903aad3-97cc-4071-815a-1d0ce6c2b817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3f:25:0d:47:cc:b0:c4:28:59:46:5e:ac:a3: 08:76:00:42:6a:db:f8:52:d3:5c:66:12:f2:15:c6: 61:70:5d:29:50:9e:b8:c7:8b:6c:ba:6b:f6:c8:72: a1:19:d4:0c:ac:d8:b4:4b:83:fe:74:c7:6f:a8:97: b9:32:d3:9e:bb:e4:cf:29:f3:0f:c5:c8:e3:f7:30: b5:dc:7d:e2:b6:71:1c:23:81:38:5a:05:d2:34:47: 76:b8:2a:87:65:45:12:c9:86:83:39:dc:e4:2a:c5: 6a:f9:d8:1b:46:be:1e:29:6b:8f:14:62:4d:af:5d: 48:8c:e8:f3:36:c5:83:6d:d5:34:15:a6:5d:6d:d6: 0f:25:45:50:c5:d6:f0:1f:ba:94:65:35:5a:45:21: 29:8a:b6:ee:34:cd:02:59:5f:5e:b9:cd:8c:2e:ce: 1d:63:7d:9f:7a:03:89:41:9c:04:13:01:19:85:b9: df:94:b8:9c:ce:55:e1:40:b6:da:60:68:93:6d:38: 89:2b:7a:71:5f:90:48:35:9d:4d:60:62:85:f2:67: 6f:d9:fb:49:73:19:9e:b6:17:4c:c8:12:6f:5e:4a: ec:72:e8:97:00:39:72:36:46:4b:29:9d:08:6a:34: 70:fd:b4:e9:b1:e4:d3:41:63:03:09:cc:91:12:d3: 73:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D9:EE:5C:74:71:B7:2E:3E:92:F6:98:AC:BF:F4:78:78:E6:8C:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl X509v3 Authority Key Identifier: keyid:8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:91:87:92:5f:ab:57:7e:5c:cf:58:09:c8:0d:1e:95:35:b2: 9e:4a:72:a2:56:47:c9:62:d6:15:17:e2:16:b5:5c:c2:25:67: 6a:de:3b:6b:a7:b7:3f:18:b8:89:42:4a:49:6a:fc:20:30:14: 2d:2d:c4:6d:c2:51:77:03:ab:af:d3:29:07:b9:a6:b6:d7:6d: 4a:ed:5b:13:32:90:c1:1c:52:39:7d:58:7b:3d:4c:bf:c8:e1: e7:66:8d:91:7b:24:e0:11:d7:9e:a6:44:75:13:01:d1:63:d9: 7d:64:30:c3:47:7b:eb:15:1a:7b:bf:2a:31:a1:61:53:39:7e: 6e:d0:28:21:7a:c5:3a:60:20:dd:90:f8:72:75:d5:04:c1:ca: 81:71:4a:36:97:db:2a:8a:88:62:19:fe:b7:b5:ab:56:82:73: f1:1f:58:66:c1:5a:c4:79:77:0d:82:40:3e:b8:8b:cd:75:ed: ea:de:4e:71:d3:53:41:e7:c5:22:a8:b2:de:c0:d2:f3:6a:ae: 3e:fa:d3:bd:e5:1e:ce:df:86:2c:d4:3e:e8:38:3b:e2:2d:e9: c6:31:41:a5:db:e7:aa:8b:6c:2a:3a:2b:c5:24:25:5a:93:74: 77:9c:4d:88:68:88:27:b7:97:d0:67:c6:13:b1:55:c9:96:e0: ce:3f:54:c2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErwl5O2eP+SQpuhxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E2MzZhZmQtZWNlNS00ZTIzLWE1NGYtYzQzZTBmYzA4 MTI0MB4XDTI1MDgyMjEwMDAwOFoXDTI1MDgyNDEwMDAwMFowLzEtMCsGA1UEAxMk ZjkwM2FhZDMtOTdjYy00MDcxLTgxNWEtMWQwY2U2YzJiODE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjj8lDUfMsMQoWUZerKMIdgBCatv4UtNcZhLy FcZhcF0pUJ64x4tsumv2yHKhGdQMrNi0S4P+dMdvqJe5MtOeu+TPKfMPxcjj9zC1 3H3itnEcI4E4WgXSNEd2uCqHZUUSyYaDOdzkKsVq+dgbRr4eKWuPFGJNr11IjOjz NsWDbdU0FaZdbdYPJUVQxdbwH7qUZTVaRSEpirbuNM0CWV9euc2MLs4dY32fegOJ QZwEEwEZhbnflLiczlXhQLbaYGiTbTiJK3pxX5BINZ1NYGKF8mdv2ftJcxmethdM yBJvXkrscuiXADlyNkZLKZ0IajRw/bTpseTTQWMDCcyREtNzKwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGLZ7lx0cbcuPpL2mKy/9Hh45owrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYz NmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNlMGZjMDgxMjQvM2E2MzZhZmQtZWNlNS00 ZTIzLWE1NGYtYzQzZTBmYzA4MTI0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2E2MzZhZmQtZWNlNS00ZTIzLWE1 NGYtYzQzZTBmYzA4MTI0LzNhNjM2YWZkLWVjZTUtNGUyMy1hNTRmLWM0M2UwZmMw ODEyNC5jcmwwHwYDVR0jBBgwFoAUi85A8V4+45U8NUK2BDw+0WEHNyMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYzNmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNl MGZjMDgxMjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAvkYeSX6tXflzPWAnIDR6V NbKeSnKiVkfJYtYVF+IWtVzCJWdq3jtrp7c/GLiJQkpJavwgMBQtLcRtwlF3A6uv 0ykHuaa2121K7VsTMpDBHFI5fVh7PUy/yOHnZo2ReyTgEdeepkR1EwHRY9l9ZDDD R3vrFRp7vyoxoWFTOX5u0CghesU6YCDdkPhyddUEwcqBcUo2l9sqiohiGf63tatW gnPxH1hmwVrEeXcNgkA+uIvNde3q3k5x01NB58UiqLLewNLzaq4++tO95R7O34Ys 1D7oODviLenGMUGl2+eqi2wqOivFJCVak3R3nE2IaIgnt5fQZ8YTsVXJluDOP1TC -----END CERTIFICATE-----Generated at Sat Aug 23 10:11:41 2025 by rpki-client