$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.mft File: 3ab06b10-1d03-4fa9-b22c-bb98590313d3.mft (raw, json) Hash identifier: z+7BSQvyNQKFhQBjO0R6zwah8CoAGj2hUOqwCEub8ak= Subject key identifier: 8F:DD:6C:39:B9:A5:0C:54:61:9B:62:DD:88:F0:D5:29:B8:9D:FB:D8 Authority key identifier: 33:D9:DA:BC:31:08:D5:AA:CF:ED:B1:BB:45:09:22:0F:00:1C:C5:4D Certificate issuer: /CN=3ab06b10-1d03-4fa9-b22c-bb98590313d3 Certificate serial: 010D0C9F4328584A5DE8DCF213053EAC6B503100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.mft Manifest number: 010D0C9F4328584073A8285CBADCAB24D8E6CF96 Signing time: Mon 30 Jun 2025 21:00:03 +0000 Manifest this update: Mon 30 Jun 2025 21:00:03 +0000 Manifest next update: Wed 02 Jul 2025 21:00:00 +0000 Files and hashes: 1: 3ab06b10-1d03-4fa9-b22c-bb98590313d3.crl (hash: DvIkKaYgDjaGT5gE74CSQGAPCdy6DIW56OgBwAFxKqQ=) 2: 48314f3e-e2ad-3d66-a359-8ccfd8d258e2.roa (hash: XFn9kGx6lM+QXJiX8Rz4badFK3YZACXE25oZPKgoUOc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5d:e8:dc:f2:13:05:3e:ac:6b:50:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab06b10-1d03-4fa9-b22c-bb98590313d3 Validity Not Before: Jun 30 21:00:03 2025 GMT Not After : Jul 2 21:00:00 2025 GMT Subject: CN=ff2cebd8-10da-4a99-a7e9-cdfff4f52349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c0:79:01:87:3f:35:7e:04:d2:da:67:54:7c: 1f:79:5d:a3:70:1c:84:38:fc:f5:34:90:35:41:4c: bc:fc:fb:49:ca:56:f4:8a:84:6f:76:d2:f6:26:5e: 7e:29:d3:c4:22:e9:69:e8:2c:c4:3e:ad:03:c2:0b: b2:21:d7:39:e1:7a:44:10:1d:30:09:cc:94:36:26: f3:5f:22:2c:af:a6:e9:37:8f:fd:96:16:26:5f:b3: 46:93:c5:7b:b0:d9:cf:cd:a5:7d:2a:48:d9:14:ad: 92:ce:73:64:ca:a1:93:79:f2:68:f6:df:2f:9d:ab: b8:32:9e:c2:39:f9:4a:18:74:1a:90:a8:65:47:11: 8a:82:2c:9c:3b:9e:e5:6d:3c:ff:c4:be:58:2f:fc: 2f:76:68:22:f8:69:82:6a:e7:db:4c:c6:db:35:d7: 6e:30:81:e8:5f:c9:0d:38:cd:23:a2:56:52:1e:18: 4e:6d:c7:c5:45:a2:e9:0c:2f:fa:13:48:3a:0b:68: 07:87:69:86:a3:77:e0:d1:e0:4c:7b:14:aa:01:55: a9:36:e7:7b:7e:b1:57:2b:ee:da:1c:f4:f3:a1:99: 29:c9:1e:a3:62:ee:63:67:c4:52:77:e1:b9:92:0e: 4a:48:d6:0a:86:5e:f6:b6:1e:60:60:ee:b4:05:e7: 51:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:DD:6C:39:B9:A5:0C:54:61:9B:62:DD:88:F0:D5:29:B8:9D:FB:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3/3ab06b10-1d03-4fa9-b22c-bb98590313d3.crl X509v3 Authority Key Identifier: keyid:33:D9:DA:BC:31:08:D5:AA:CF:ED:B1:BB:45:09:22:0F:00:1C:C5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ab06b10-1d03-4fa9-b22c-bb98590313d3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:e4:ca:da:0b:52:12:9e:1a:fa:0f:0e:eb:76:f7:e2:53:3d: 74:b9:7c:5f:a6:73:0c:2b:cb:6f:27:fe:9a:09:27:ca:b1:d3: 9f:41:5e:35:99:4e:20:b2:41:db:0c:58:78:0a:0c:0d:eb:d3: 3a:a9:5f:3a:38:27:b4:db:a9:cd:b7:d2:b0:73:a7:2a:40:be: 23:ec:92:74:89:13:c8:62:30:57:8e:cd:8c:6c:6b:7a:d6:4e: 02:cc:0d:2d:be:19:e1:62:b5:77:8d:03:1c:09:e6:bb:76:89: 2f:e9:cf:20:27:01:93:95:94:dd:ee:d3:b3:e1:53:a7:90:8e: 92:9c:3a:8d:7e:3d:73:c8:ac:00:c4:ed:35:dc:25:0b:a9:52: 14:9e:82:ca:a7:af:6a:ee:e0:88:51:53:69:13:b1:3f:b9:ed: c1:11:98:29:79:90:38:6e:b7:c2:59:b7:da:07:b9:71:6e:ec: 8f:d9:79:76:90:eb:99:a4:21:6c:90:81:a4:22:99:02:f5:29: 0d:98:8a:00:46:37:16:58:2e:49:1e:76:65:18:38:27:01:32: 74:75:62:16:27:5b:10:e0:1f:f1:c3:21:80:8b:39:00:50:24: d8:c0:b2:6c:d8:ba:77:97:0b:4d:42:8e:ff:67:b7:15:55:59: 68:6d:04:f8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpd6NzyEwU+rGtQMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiMDZiMTAtMWQwMy00ZmE5LWIyMmMtYmI5ODU5MDMx M2QzMB4XDTI1MDYzMDIxMDAwM1oXDTI1MDcwMjIxMDAwMFowLzEtMCsGA1UEAxMk ZmYyY2ViZDgtMTBkYS00YTk5LWE3ZTktY2RmZmY0ZjUyMzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucB5AYc/NX4E0tpnVHwfeV2jcByEOPz1NJA1 QUy8/PtJylb0ioRvdtL2Jl5+KdPEIulp6CzEPq0DwguyIdc54XpEEB0wCcyUNibz XyIsr6bpN4/9lhYmX7NGk8V7sNnPzaV9KkjZFK2SznNkyqGTefJo9t8vnau4Mp7C OflKGHQakKhlRxGKgiycO57lbTz/xL5YL/wvdmgi+GmCaufbTMbbNdduMIHoX8kN OM0jolZSHhhObcfFRaLpDC/6E0g6C2gHh2mGo3fg0eBMexSqAVWpNud7frFXK+7a HPTzoZkpyR6jYu5jZ8RSd+G5kg5KSNYKhl72th5gYO60BedRgQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFI/dbDm5pQxUYZti3Yjw1Sm4nfvYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYWIw NmIxMC0xZDAzLTRmYTktYjIyYy1iYjk4NTkwMzEzZDMvM2FiMDZiMTAtMWQwMy00 ZmE5LWIyMmMtYmI5ODU5MDMxM2QzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2FiMDZiMTAtMWQwMy00ZmE5LWIy MmMtYmI5ODU5MDMxM2QzLzNhYjA2YjEwLTFkMDMtNGZhOS1iMjJjLWJiOTg1OTAz MTNkMy5jcmwwHwYDVR0jBBgwFoAUM9navDEI1arP7bG7RQkiDwAcxU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYWIwNmIxMC0xZDAzLTRmYTktYjIyYy1iYjk4 NTkwMzEzZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBG5MraC1ISnhr6Dw7rdvfi Uz10uXxfpnMMK8tvJ/6aCSfKsdOfQV41mU4gskHbDFh4CgwN69M6qV86OCe026nN t9Kwc6cqQL4j7JJ0iRPIYjBXjs2MbGt61k4CzA0tvhnhYrV3jQMcCea7dokv6c8g JwGTlZTd7tOz4VOnkI6SnDqNfj1zyKwAxO013CULqVIUnoLKp69q7uCIUVNpE7E/ ue3BEZgpeZA4brfCWbfaB7lxbuyP2Xl2kOuZpCFskIGkIpkC9SkNmIoARjcWWC5J HnZlGDgnATJ0dWIWJ1sQ4B/xwyGAizkAUCTYwLJs2Lp3lwtNQo7/Z7cVVVlobQT4 -----END CERTIFICATE-----Generated at Tue Jul 1 11:40:45 2025 by rpki-client