$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.mft File: 3bfea78e-552c-46d0-a7b4-60f999223238.mft (raw, json) Hash identifier: E4Jj8VZgBSsEF9Kpem7u1QOlXKmZ3f9RBKPnOzj5jQ0= Subject key identifier: FB:75:60:9C:C6:86:AF:28:A1:C6:47:5A:EC:81:14:12:79:48:61:13 Authority key identifier: D7:A9:E9:5F:B8:85:26:BB:3C:57:88:CD:07:2A:BF:B7:6B:2E:8A:96 Certificate issuer: /CN=3bfea78e-552c-46d0-a7b4-60f999223238 Certificate serial: 010D0C9F4328584A5AA70F091A89FD6E6B729880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.mft Manifest number: 010D0C9F43285845DC7F251890046E2B090F5596 Signing time: Sun 29 Jun 2025 17:00:03 +0000 Manifest this update: Sun 29 Jun 2025 17:00:03 +0000 Manifest next update: Wed 02 Jul 2025 17:00:00 +0000 Files and hashes: 1: 3bfea78e-552c-46d0-a7b4-60f999223238.crl (hash: vpj9UYVNUak9ZAH/LoXfoW69Tb0NHAdiZmB5fnJNdUs=) 2: b07aee0a-5e02-3527-90d1-9ec6e19a26e3.roa (hash: WGG4RWebETDVZWAeqlt2fARQ+bjeUstg91HEmFverPQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5a:a7:0f:09:1a:89:fd:6e:6b:72:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bfea78e-552c-46d0-a7b4-60f999223238 Validity Not Before: Jun 29 17:00:03 2025 GMT Not After : Jul 2 17:00:00 2025 GMT Subject: CN=4bcdf235-4e81-4f18-aa7c-5a104c5b6884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d4:8e:df:87:1c:7a:49:59:cd:f6:87:14:81: ed:f8:e4:ed:5b:70:8c:9e:a4:80:7a:9c:2d:76:7f: 36:3b:c0:06:14:b4:24:82:07:f8:71:49:10:b0:ca: 12:b4:fb:8b:e0:16:90:a4:0d:bc:78:f7:dd:20:a6: ac:1d:2e:32:97:82:bd:63:f6:34:45:06:35:39:f1: 2c:76:fa:c0:24:27:d1:1a:b5:0a:66:09:0d:ad:5e: 8d:ca:0d:20:45:9a:a0:9e:f6:33:35:3c:05:90:48: 25:87:ef:fb:e6:ac:7e:9c:9d:f6:80:f4:ba:39:73: fa:31:9b:ed:3f:1d:09:1a:8a:b4:86:1d:a0:c2:12: 1d:47:a5:4d:1a:c8:ee:75:3a:51:27:44:cc:b0:d0: cd:d9:65:75:89:88:4e:b1:ca:84:e1:bd:8c:ef:e5: 26:75:a3:3f:62:ea:0d:44:ac:37:75:8a:b4:cf:f6: 94:b1:63:b0:47:18:9d:e5:7e:ae:5f:bb:ea:94:0b: fa:18:c0:77:4b:ec:19:43:60:80:8e:54:35:0a:f2: 4b:9c:16:d5:74:43:89:50:11:24:e9:f9:b8:f0:be: 8d:c1:dc:b5:79:2d:07:ab:19:44:85:55:92:c3:86: 84:97:98:86:e8:b7:81:ec:8c:94:d4:44:33:22:47: c5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:75:60:9C:C6:86:AF:28:A1:C6:47:5A:EC:81:14:12:79:48:61:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.crl X509v3 Authority Key Identifier: keyid:D7:A9:E9:5F:B8:85:26:BB:3C:57:88:CD:07:2A:BF:B7:6B:2E:8A:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:e9:72:48:4d:bf:c7:82:41:5d:ad:ff:da:aa:8a:57:e5:da: b3:f0:92:be:85:88:d2:25:66:96:c2:2b:64:60:33:41:93:11: 2b:aa:cc:39:21:13:a1:57:ac:5f:1a:58:2f:22:16:39:e1:df: d9:b2:b9:71:4d:79:75:25:70:a7:6e:26:07:18:e8:8e:ea:38: 14:45:41:8a:d4:7d:59:9a:28:bb:6f:85:c9:49:cb:bf:64:b9: df:ea:e0:15:9d:71:62:4f:42:40:41:76:00:1c:33:09:74:85: d8:37:02:00:2a:8a:e7:14:f9:66:67:13:8c:0b:5e:d3:46:73: e8:a9:d8:f2:e2:01:4c:9d:8d:b0:90:fc:14:5b:71:d5:86:cd: 8b:ed:d4:9a:d4:bf:ec:cc:d4:24:13:17:b1:9d:49:e7:48:25: 1e:07:8b:2f:67:0f:a4:a1:eb:ee:da:23:8b:8e:ba:18:fb:a9: 16:b0:6b:ba:91:85:e4:d7:a7:e2:ec:7a:33:a3:76:67:96:98: ea:9d:2e:86:78:02:3d:72:49:ed:68:f2:d5:e8:34:cc:a6:7a: 76:80:01:11:0c:b4:7f:09:23:da:b8:e3:2a:b8:69:a4:5c:25: 1e:9a:b7:ce:56:8f:41:96:4d:69:56:75:70:84:2a:c7:4a:d1: 52:bd:50:98 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpapw8JGon9bmtymIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JmZWE3OGUtNTUyYy00NmQwLWE3YjQtNjBmOTk5MjIz MjM4MB4XDTI1MDYyOTE3MDAwM1oXDTI1MDcwMjE3MDAwMFowLzEtMCsGA1UEAxMk NGJjZGYyMzUtNGU4MS00ZjE4LWFhN2MtNWExMDRjNWI2ODg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtSO34cceklZzfaHFIHt+OTtW3CMnqSAepwt dn82O8AGFLQkggf4cUkQsMoStPuL4BaQpA28ePfdIKasHS4yl4K9Y/Y0RQY1OfEs dvrAJCfRGrUKZgkNrV6Nyg0gRZqgnvYzNTwFkEglh+/75qx+nJ32gPS6OXP6MZvt Px0JGoq0hh2gwhIdR6VNGsjudTpRJ0TMsNDN2WV1iYhOscqE4b2M7+UmdaM/YuoN RKw3dYq0z/aUsWOwRxid5X6uX7vqlAv6GMB3S+wZQ2CAjlQ1CvJLnBbVdEOJUBEk 6fm48L6Nwdy1eS0HqxlEhVWSw4aEl5iG6LeB7IyU1EQzIkfFIQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPt1YJzGhq8oocZHWuyBFBJ5SGETMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zYmZl YTc4ZS01NTJjLTQ2ZDAtYTdiNC02MGY5OTkyMjMyMzgvM2JmZWE3OGUtNTUyYy00 NmQwLWE3YjQtNjBmOTk5MjIzMjM4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2JmZWE3OGUtNTUyYy00NmQwLWE3 YjQtNjBmOTk5MjIzMjM4LzNiZmVhNzhlLTU1MmMtNDZkMC1hN2I0LTYwZjk5OTIy MzIzOC5jcmwwHwYDVR0jBBgwFoAU16npX7iFJrs8V4jNByq/t2suipYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zYmZlYTc4ZS01NTJjLTQ2ZDAtYTdiNC02MGY5 OTkyMjMyMzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC26XJITb/HgkFdrf/aqopX 5dqz8JK+hYjSJWaWwitkYDNBkxErqsw5IROhV6xfGlgvIhY54d/ZsrlxTXl1JXCn biYHGOiO6jgURUGK1H1Zmii7b4XJScu/ZLnf6uAVnXFiT0JAQXYAHDMJdIXYNwIA KornFPlmZxOMC17TRnPoqdjy4gFMnY2wkPwUW3HVhs2L7dSa1L/szNQkExexnUnn SCUeB4svZw+koevu2iOLjroY+6kWsGu6kYXk16fi7Hozo3ZnlpjqnS6GeAI9cknt aPLV6DTMpnp2gAERDLR/CSPauOMquGmkXCUemrfOVo9Blk1pVnVwhCrHStFSvVCY -----END CERTIFICATE-----Generated at Mon Jun 30 16:50:43 2025 by rpki-client