$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft File: d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft (raw, json) Hash identifier: krFoti+ES7n+ID1RaAuN7mN/LF3anjeSRDYn73z4M9c= Subject key identifier: 3F:D6:E4:C8:94:52:26:5E:28:CC:9E:2C:C9:35:CA:9D:A8:5C:6F:11 Authority key identifier: F8:E0:54:64:56:2E:06:FC:45:40:3B:F8:F6:1F:52:85:28:DA:22:CA Certificate issuer: /CN=d3c1e47f-2bd9-4e42-a950-0f81e45cd461 Certificate serial: 010D0C9F4328584AF2AF8E6CE35530A4C18FA980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft Manifest number: 010D0C9F4328584073A83CCF3B74A2EBFF564398 Signing time: Sat 23 Aug 2025 04:00:03 +0000 Manifest this update: Sat 23 Aug 2025 04:00:03 +0000 Manifest next update: Tue 26 Aug 2025 04:00:00 +0000 Files and hashes: 1: 6fa801e3-3342-3f1c-a396-6f9201c0d56d.roa (hash: 8kTN9u66M6Nsztcy/hQhpR3uLP4Ht7SmYKQ0RACAH6s=) 2: d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl (hash: tJ4m76fdksZ/ts1pc7fQK/11In+oHK0SBk4G+H9S7WA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:af:8e:6c:e3:55:30:a4:c1:8f:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3c1e47f-2bd9-4e42-a950-0f81e45cd461 Validity Not Before: Aug 23 04:00:03 2025 GMT Not After : Aug 26 04:00:00 2025 GMT Subject: CN=8c7f21d7-f1ce-4221-ac33-aeab9dd18fbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3e:29:cd:89:29:b3:5f:7c:30:59:1e:94:b2: 36:d7:3b:ff:0f:ee:30:f7:3b:70:2c:a3:2d:6c:81: d6:c3:dc:bb:99:60:92:14:ea:68:ee:5b:5e:1a:7d: a7:d5:4a:10:06:ec:5f:85:c1:2c:cd:30:9c:82:84: 82:75:ad:97:41:c6:a8:83:4f:02:6b:1c:0a:5f:c4: 08:70:10:b4:51:08:f2:aa:e6:83:56:8d:79:ba:83: 63:58:34:d5:4c:dc:0c:de:4a:44:16:e0:d3:de:19: b3:95:cb:e9:86:37:33:20:46:3a:1e:63:72:30:58: 82:ef:39:77:ad:d3:95:e1:f3:b4:10:e5:2e:10:c7: 90:52:ed:39:4f:62:37:62:e3:bf:44:2d:74:b9:bb: 80:ca:04:e4:95:d1:e5:f4:b1:84:53:18:50:cf:b2: 17:b8:04:8a:cd:aa:87:dd:a5:b0:a0:60:e1:e3:27: 4e:cd:a5:5f:f0:0c:af:41:4f:44:30:37:a9:3c:1b: 6e:d3:d9:a0:ce:b3:7a:fa:aa:ce:b6:32:80:6d:30: 5e:2e:83:74:ee:81:16:49:09:c4:c6:38:e6:ca:e1: 16:46:10:5f:7b:f0:b4:99:0a:75:66:cc:11:9c:f0: c5:4e:63:5d:a4:ae:ea:05:19:73:07:6d:ec:31:fb: ef:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:D6:E4:C8:94:52:26:5E:28:CC:9E:2C:C9:35:CA:9D:A8:5C:6F:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl X509v3 Authority Key Identifier: keyid:F8:E0:54:64:56:2E:06:FC:45:40:3B:F8:F6:1F:52:85:28:DA:22:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:30:91:84:c5:ce:d7:bd:b7:7a:e8:dd:9c:4f:a1:d0:64:ea: cf:f2:a2:a1:e0:1c:ea:f0:48:9f:ac:21:a0:46:86:54:4b:78: e8:6c:e4:f5:6f:72:56:f1:97:1d:0a:b2:8f:82:03:f5:59:7a: ec:e8:bb:b8:a8:68:5b:e2:dd:e2:d3:35:ba:75:54:0d:46:68: 24:1c:5d:20:12:fc:dd:3c:3b:96:2c:c4:10:3f:f5:7b:a2:c5: cc:e9:fa:84:c7:73:a6:99:4c:3e:74:5f:2b:13:b8:39:33:0f: 3f:27:dc:bc:c3:35:63:b5:06:3e:92:3c:f4:6f:ee:ed:e8:e0: e0:60:f1:da:3c:af:95:5b:09:d0:43:65:e0:65:d1:c0:af:60: 5b:7f:17:20:ac:59:43:00:11:24:44:46:d3:09:c1:1c:f7:0d: 7e:80:cf:bb:47:47:6d:cc:2a:8f:90:79:93:7d:f5:c9:a9:7a: 39:b2:c9:12:39:cd:64:1b:49:e3:90:de:e0:9e:ef:97:2a:b8: aa:ac:ea:fb:39:7b:52:43:d8:ec:db:f8:02:cf:47:6b:f4:67: b0:67:92:58:51:12:aa:cf:62:52:de:03:b3:b4:98:e7:f9:59: d3:ca:9b:ab:a3:f2:7f:2d:c5:e1:2b:31:ed:cb:2c:50:2a:0f: 66:3b:11:68 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEryr45s41UwpMGPqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDNjMWU0N2YtMmJkOS00ZTQyLWE5NTAtMGY4MWU0NWNk NDYxMB4XDTI1MDgyMzA0MDAwM1oXDTI1MDgyNjA0MDAwMFowLzEtMCsGA1UEAxMk OGM3ZjIxZDctZjFjZS00MjIxLWFjMzMtYWVhYjlkZDE4ZmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwz4pzYkps198MFkelLI21zv/D+4w9ztwLKMt bIHWw9y7mWCSFOpo7lteGn2n1UoQBuxfhcEszTCcgoSCda2XQcaog08CaxwKX8QI cBC0UQjyquaDVo15uoNjWDTVTNwM3kpEFuDT3hmzlcvphjczIEY6HmNyMFiC7zl3 rdOV4fO0EOUuEMeQUu05T2I3YuO/RC10ubuAygTkldHl9LGEUxhQz7IXuASKzaqH 3aWwoGDh4ydOzaVf8AyvQU9EMDepPBtu09mgzrN6+qrOtjKAbTBeLoN07oEWSQnE xjjmyuEWRhBfe/C0mQp1ZswRnPDFTmNdpK7qBRlzB23sMfvvVwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFD/W5MiUUiZeKMyeLMk1yp2oXG8RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kM2Mx ZTQ3Zi0yYmQ5LTRlNDItYTk1MC0wZjgxZTQ1Y2Q0NjEvZDNjMWU0N2YtMmJkOS00 ZTQyLWE5NTAtMGY4MWU0NWNkNDYxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDNjMWU0N2YtMmJkOS00ZTQyLWE5 NTAtMGY4MWU0NWNkNDYxL2QzYzFlNDdmLTJiZDktNGU0Mi1hOTUwLTBmODFlNDVj ZDQ2MS5jcmwwHwYDVR0jBBgwFoAU+OBUZFYuBvxFQDv49h9ShSjaIsowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kM2MxZTQ3Zi0yYmQ5LTRlNDItYTk1MC0wZjgx ZTQ1Y2Q0NjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQABMJGExc7Xvbd66N2cT6HQ ZOrP8qKh4Bzq8EifrCGgRoZUS3jobOT1b3JW8ZcdCrKPggP1WXrs6Lu4qGhb4t3i 0zW6dVQNRmgkHF0gEvzdPDuWLMQQP/V7osXM6fqEx3OmmUw+dF8rE7g5Mw8/J9y8 wzVjtQY+kjz0b+7t6ODgYPHaPK+VWwnQQ2XgZdHAr2BbfxcgrFlDABEkREbTCcEc 9w1+gM+7R0dtzCqPkHmTffXJqXo5sskSOc1kG0njkN7gnu+XKriqrOr7OXtSQ9js 2/gCz0dr9GewZ5JYURKqz2JS3gOztJjn+VnTypuro/J/LcXhKzHtyyxQKg9mOxFo -----END CERTIFICATE-----Generated at Sat Aug 23 19:44:00 2025 by rpki-client