$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft File: 3b24522b-8239-4bb9-9845-1e01e28aa452.mft (raw, json) Hash identifier: f0elZu9us3SL+4Ogefnk7SorJpWxkd45O0OhlJnZQfg= Subject key identifier: 02:F0:DB:32:92:72:7F:8D:E0:C2:65:FC:CC:75:C0:4F:71:77:37:CB Authority key identifier: A0:02:F5:68:D9:AE:0F:63:11:51:15:44:02:1D:1D:5B:FE:4E:B0:D2 Certificate issuer: /CN=3b24522b-8239-4bb9-9845-1e01e28aa452 Certificate serial: 010D0C9F4328584AF1A38F6FFAEB80D36E5B8BC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft Manifest number: 010D0C9F43285846097092BB96E608752D6F7081 Signing time: Fri 22 Aug 2025 19:00:03 +0000 Manifest this update: Fri 22 Aug 2025 19:00:03 +0000 Manifest next update: Mon 25 Aug 2025 19:00:00 +0000 Files and hashes: 1: 3b24522b-8239-4bb9-9845-1e01e28aa452.crl (hash: EMrylBUacjLliZc07K9D/IzT9YGmYQ4lYd+gCeBsCqI=) 2: a3278fd8-969b-3d7a-b7c1-e5f4aaba073f.roa (hash: oTEEtG2U23A4LGwYMB1oH0mglsW8YQlgtjW+ktSLbhI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f1:a3:8f:6f:fa:eb:80:d3:6e:5b:8b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b24522b-8239-4bb9-9845-1e01e28aa452 Validity Not Before: Aug 22 19:00:03 2025 GMT Not After : Aug 25 19:00:00 2025 GMT Subject: CN=50630bca-af44-45ca-88f8-0897adf8d8fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:3c:81:d6:0b:10:ff:e3:a8:53:08:cc:f7:5a: 5f:1f:d3:6b:c9:e9:2e:4a:d6:f8:d4:13:df:67:f9: e7:37:b5:d0:7e:7a:dd:e3:b9:b0:cd:27:5c:8d:de: 5b:2b:07:8c:e8:0e:3c:f3:35:f8:68:ca:7c:36:17: ec:b5:d5:08:55:1f:bb:8b:e4:58:2f:b1:5d:9c:ae: 15:44:2a:4b:80:92:ce:8d:b5:08:ed:74:51:ef:d9: da:26:ce:94:57:1f:80:15:b4:83:e9:44:63:d5:20: 82:97:17:e8:a4:85:e4:99:50:f7:57:3f:03:08:4a: f6:14:08:4d:e3:4a:40:5e:63:d5:c2:3f:a3:05:43: d4:00:71:a7:06:7c:98:0a:85:c0:54:65:5f:a0:3d: 6b:05:af:0e:61:99:f2:9a:0d:4c:95:66:6f:38:67: 33:d7:87:1c:3a:dd:8c:53:93:81:d9:98:60:cb:26: c9:d5:43:37:d8:35:e5:25:53:08:36:59:b0:eb:17: ba:c3:bd:9b:2f:77:69:16:fd:94:51:ba:bb:af:40: 3e:be:33:08:c6:a4:15:60:8b:bc:0a:87:69:02:0c: d6:57:34:5b:d6:74:f2:d5:cf:1a:b8:1b:2b:d4:61: f8:ce:77:a4:1f:d0:8c:81:5b:df:a7:38:f1:63:3e: a8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F0:DB:32:92:72:7F:8D:E0:C2:65:FC:CC:75:C0:4F:71:77:37:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.crl X509v3 Authority Key Identifier: keyid:A0:02:F5:68:D9:AE:0F:63:11:51:15:44:02:1D:1D:5B:FE:4E:B0:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:3d:1e:cc:b2:4e:dd:75:a1:63:33:aa:c8:a1:e2:59:de:cd: 34:ff:f5:42:b0:c8:86:4f:13:cd:a2:8b:c6:d9:d3:11:d7:3b: 92:b0:99:be:4a:fe:05:cb:6c:5e:05:60:e7:67:c1:4f:76:04: 73:9c:41:69:8c:c4:aa:e4:4c:55:44:d3:ae:2f:77:fd:38:7b: ea:2f:b7:ca:d3:c6:aa:82:79:05:57:27:d3:33:dd:8c:88:1f: 00:b8:28:df:bb:98:f4:56:d3:7e:cc:d1:14:00:26:fb:db:00: 96:b6:b2:f4:05:7f:44:66:eb:36:ea:6f:68:9b:92:6e:8a:6d: 1f:56:c0:d7:67:a8:a0:0b:d6:a2:68:1a:83:04:e3:87:2e:c9: d0:a0:c5:d4:9d:d5:1c:f4:f9:5d:66:f7:5d:ac:07:21:28:bd: db:18:48:c3:28:c9:16:a6:ed:ab:38:46:0e:ad:0e:34:04:3a: 69:94:34:79:b1:37:15:e2:11:fd:03:7d:1f:71:63:58:9a:1b: 2f:7c:21:e6:55:67:a5:00:5e:1d:0f:41:d3:fd:95:fe:f7:5a: 94:0e:ce:59:51:2e:1d:24:6a:5a:cc:a3:8c:3c:79:55:cb:e3: 03:06:e1:5e:ff:9b:80:bb:c0:6e:75:16:bb:15:88:df:0c:7f: 01:7d:f4:5e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErxo49v+uuA025bi8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2IyNDUyMmItODIzOS00YmI5LTk4NDUtMWUwMWUyOGFh NDUyMB4XDTI1MDgyMjE5MDAwM1oXDTI1MDgyNTE5MDAwMFowLzEtMCsGA1UEAxMk NTA2MzBiY2EtYWY0NC00NWNhLTg4ZjgtMDg5N2FkZjhkOGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzyB1gsQ/+OoUwjM91pfH9NryekuStb41BPf Z/nnN7XQfnrd47mwzSdcjd5bKweM6A488zX4aMp8NhfstdUIVR+7i+RYL7FdnK4V RCpLgJLOjbUI7XRR79naJs6UVx+AFbSD6URj1SCClxfopIXkmVD3Vz8DCEr2FAhN 40pAXmPVwj+jBUPUAHGnBnyYCoXAVGVfoD1rBa8OYZnymg1MlWZvOGcz14ccOt2M U5OB2ZhgyybJ1UM32DXlJVMINlmw6xe6w72bL3dpFv2UUbq7r0A+vjMIxqQVYIu8 CodpAgzWVzRb1nTy1c8auBsr1GH4znekH9CMgVvfpzjxYz6o2wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFALw2zKScn+N4MJl/Mx1wE9xdzfLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zYjI0 NTIyYi04MjM5LTRiYjktOTg0NS0xZTAxZTI4YWE0NTIvM2IyNDUyMmItODIzOS00 YmI5LTk4NDUtMWUwMWUyOGFhNDUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2IyNDUyMmItODIzOS00YmI5LTk4 NDUtMWUwMWUyOGFhNDUyLzNiMjQ1MjJiLTgyMzktNGJiOS05ODQ1LTFlMDFlMjhh YTQ1Mi5jcmwwHwYDVR0jBBgwFoAUoAL1aNmuD2MRURVEAh0dW/5OsNIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zYjI0NTIyYi04MjM5LTRiYjktOTg0NS0xZTAx ZTI4YWE0NTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAzPR7Msk7ddaFjM6rIoeJZ 3s00//VCsMiGTxPNoovG2dMR1zuSsJm+Sv4Fy2xeBWDnZ8FPdgRznEFpjMSq5ExV RNOuL3f9OHvqL7fK08aqgnkFVyfTM92MiB8AuCjfu5j0VtN+zNEUACb72wCWtrL0 BX9EZus26m9om5Juim0fVsDXZ6igC9aiaBqDBOOHLsnQoMXUndUc9PldZvddrAch KL3bGEjDKMkWpu2rOEYOrQ40BDpplDR5sTcV4hH9A30fcWNYmhsvfCHmVWelAF4d D0HT/ZX+91qUDs5ZUS4dJGpazKOMPHlVy+MDBuFe/5uAu8BudRa7FYjfDH8BffRe -----END CERTIFICATE-----Generated at Sat Aug 23 18:51:32 2025 by rpki-client