$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/3789343d-8560-48b0-9530-d2a1129fefe7.mft File: 3789343d-8560-48b0-9530-d2a1129fefe7.mft (raw, json) Hash identifier: d82uHzjjZepcfE6jzlF3QbXQH+N8YMQ6vp3+IZalnO8= Subject key identifier: 13:D8:4A:14:0B:0A:88:CB:09:2E:34:01:A3:A0:78:75:6E:97:F5:F8 Authority key identifier: 42:FD:E7:FA:D2:03:A1:BC:60:07:16:6B:17:B1:BA:42:B9:C1:9A:53 Certificate issuer: /CN=3789343d-8560-48b0-9530-d2a1129fefe7 Certificate serial: 010D0C9F4328584A60D15B4A058EB66F7983E100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/3789343d-8560-48b0-9530-d2a1129fefe7.mft Manifest number: 010D0C9F4328584676A999D1ED37E0ACB5EFAE6E Signing time: Tue 01 Jul 2025 22:00:08 +0000 Manifest this update: Tue 01 Jul 2025 22:00:08 +0000 Manifest next update: Thu 03 Jul 2025 22:00:00 +0000 Files and hashes: 1: 3789343d-8560-48b0-9530-d2a1129fefe7.crl (hash: 2N7A9EASO9e/t1BtA5xnsMDg0zydexzHIN0YRdqOPdc=) 2: d603bc48-0e7c-3f9c-ac30-aa2ddd7af2bc.roa (hash: pzYVWfXFRw+f5aS5DUdHaPysYiMsKpvjQTR1VivITnA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/3789343d-8560-48b0-9530-d2a1129fefe7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/3789343d-8560-48b0-9530-d2a1129fefe7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:60:d1:5b:4a:05:8e:b6:6f:79:83:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3789343d-8560-48b0-9530-d2a1129fefe7 Validity Not Before: Jul 1 22:00:08 2025 GMT Not After : Jul 3 22:00:00 2025 GMT Subject: CN=79377f64-526a-4d3e-9e69-996c70f18deb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d5:aa:42:94:eb:94:66:a3:22:75:00:09:39: 8c:d7:61:a6:e2:a3:59:d2:cc:e8:99:a0:a3:70:f2: 1e:a1:4f:19:a9:b6:3c:67:7b:f1:af:c3:d9:40:d4: 82:44:ba:78:ff:7a:b3:d5:16:47:1a:99:f2:1b:9d: d0:68:26:6c:4b:83:c2:9b:01:00:9a:05:eb:6f:8a: cb:79:2e:cb:5e:e4:c5:2f:62:9c:bf:53:e8:d4:0c: 38:ff:b2:7a:3a:e0:c9:dd:4e:09:17:65:70:ab:92: 54:b5:9d:6d:90:90:06:3d:5d:27:37:17:c7:be:49: 89:43:57:0d:10:d4:2f:a1:4d:23:4d:ea:04:83:e6: 63:80:98:75:6a:26:c1:37:d6:24:62:5a:70:7e:57: f0:75:e5:15:e4:7c:38:9f:ed:d5:ba:c8:09:df:dc: bf:78:12:b7:67:f7:e7:38:2a:6c:d1:53:26:01:59: 35:cd:62:8c:b3:8d:10:41:e5:96:a5:71:82:e8:3a: 1d:a6:fa:e6:8c:21:c5:ab:51:ee:ec:97:44:92:c7: d4:11:ac:4f:77:ab:0f:d5:ee:5c:91:a8:3b:3c:1d: ad:ff:95:12:67:29:46:05:d6:df:36:d4:fe:e1:5f: b3:b4:bf:f2:11:72:a8:ac:11:76:f1:dc:dc:e3:6e: 08:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D8:4A:14:0B:0A:88:CB:09:2E:34:01:A3:A0:78:75:6E:97:F5:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/3789343d-8560-48b0-9530-d2a1129fefe7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/3789343d-8560-48b0-9530-d2a1129fefe7.crl X509v3 Authority Key Identifier: keyid:42:FD:E7:FA:D2:03:A1:BC:60:07:16:6B:17:B1:BA:42:B9:C1:9A:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:32:2f:1a:bd:18:bc:61:25:fb:ff:5e:a7:35:45:8c:6e:ea: fe:fe:6b:bb:54:fe:87:2d:57:48:74:93:74:71:b4:5b:44:c1: 8d:89:1f:2c:e4:b3:ed:dc:1c:f8:78:58:85:7a:4d:cb:4f:af: f2:1f:c0:e6:bc:cb:5b:e7:ca:9a:cc:b4:e8:68:13:78:60:91: 2f:b7:c9:33:a6:c6:ea:00:3d:0d:7e:7d:9a:07:54:3d:4f:4d: 72:01:d9:f1:65:df:1d:20:07:c1:eb:7c:ee:02:1b:6a:7e:e5: be:19:0c:ff:40:c3:6d:4f:27:2b:04:3a:6f:c8:48:1d:5f:cc: 4a:29:43:8e:d7:e3:29:bb:0b:f7:cd:dd:3d:8a:3f:53:23:5f: ca:01:86:be:d3:f7:4a:4d:9e:fc:ad:9f:2c:37:66:23:b1:27: 63:88:bc:f3:59:55:96:16:e9:57:4a:0b:8b:56:24:c6:82:6e: 98:1e:ff:14:95:80:56:fa:ec:c9:b0:0b:a4:c5:c8:4d:60:a8: 35:47:d3:e1:5b:d6:f1:69:20:5c:c6:1c:3f:fd:27:40:ad:21: 3f:ea:40:58:e5:00:ee:79:74:2f:d0:85:97:dc:f6:70:fb:28: 7c:88:23:35:25:50:03:86:aa:e4:ee:57:77:1a:14:b8:20:09: 9f:d3:4d:8e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpg0VtKBY62b3mD4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzc4OTM0M2QtODU2MC00OGIwLTk1MzAtZDJhMTEyOWZl ZmU3MB4XDTI1MDcwMTIyMDAwOFoXDTI1MDcwMzIyMDAwMFowLzEtMCsGA1UEAxMk NzkzNzdmNjQtNTI2YS00ZDNlLTllNjktOTk2YzcwZjE4ZGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNWqQpTrlGajInUACTmM12Gm4qNZ0szomaCj cPIeoU8ZqbY8Z3vxr8PZQNSCRLp4/3qz1RZHGpnyG53QaCZsS4PCmwEAmgXrb4rL eS7LXuTFL2Kcv1Po1Aw4/7J6OuDJ3U4JF2Vwq5JUtZ1tkJAGPV0nNxfHvkmJQ1cN ENQvoU0jTeoEg+ZjgJh1aibBN9YkYlpwflfwdeUV5Hw4n+3VusgJ39y/eBK3Z/fn OCps0VMmAVk1zWKMs40QQeWWpXGC6DodpvrmjCHFq1Hu7JdEksfUEaxPd6sP1e5c kag7PB2t/5USZylGBdbfNtT+4V+ztL/yEXKorBF28dzc424ItwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBPYShQLCojLCS40AaOgeHVul/X4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zNzg5 MzQzZC04NTYwLTQ4YjAtOTUzMC1kMmExMTI5ZmVmZTcvMzc4OTM0M2QtODU2MC00 OGIwLTk1MzAtZDJhMTEyOWZlZmU3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMzc4OTM0M2QtODU2MC00OGIwLTk1 MzAtZDJhMTEyOWZlZmU3LzM3ODkzNDNkLTg1NjAtNDhiMC05NTMwLWQyYTExMjlm ZWZlNy5jcmwwHwYDVR0jBBgwFoAUQv3n+tIDobxgBxZrF7G6QrnBmlMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zNzg5MzQzZC04NTYwLTQ4YjAtOTUzMC1kMmEx MTI5ZmVmZTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCbMi8avRi8YSX7/16nNUWM bur+/mu7VP6HLVdIdJN0cbRbRMGNiR8s5LPt3Bz4eFiFek3LT6/yH8DmvMtb58qa zLToaBN4YJEvt8kzpsbqAD0Nfn2aB1Q9T01yAdnxZd8dIAfB63zuAhtqfuW+GQz/ QMNtTycrBDpvyEgdX8xKKUOO1+Mpuwv3zd09ij9TI1/KAYa+0/dKTZ78rZ8sN2Yj sSdjiLzzWVWWFulXSguLViTGgm6YHv8UlYBW+uzJsAukxchNYKg1R9PhW9bxaSBc xhw//SdArSE/6kBY5QDueXQv0IWX3PZw+yh8iCM1JVADhqrk7ld3GhS4IAmf002O -----END CERTIFICATE-----Generated at Wed Jul 2 19:57:47 2025 by rpki-client