$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.mft File: 3be7133e-7e46-4fc6-9410-e18bafb885d8.mft (raw, json) Hash identifier: gMIIWPwwFjRujSBgjBFkrZoaMVWyAndjYO+S3pjivvE= Subject key identifier: 88:C6:D3:FB:FB:7D:86:B2:71:25:13:2C:FD:24:E9:B6:1A:24:8B:9F Authority key identifier: 1B:CD:05:03:12:EB:FC:D7:92:D6:FE:AA:B9:96:69:FA:0D:6C:B0:C0 Certificate issuer: /CN=3be7133e-7e46-4fc6-9410-e18bafb885d8 Certificate serial: 010D0C9F4328584AF3800174DED274DE56BE6380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.mft Manifest number: 010D0C9F4328584356E47ADE33A7F975BBDBCA4B Signing time: Sat 23 Aug 2025 11:00:03 +0000 Manifest this update: Sat 23 Aug 2025 11:00:03 +0000 Manifest next update: Tue 26 Aug 2025 11:00:00 +0000 Files and hashes: 1: 3be7133e-7e46-4fc6-9410-e18bafb885d8.crl (hash: RCkJT5EkL5dFOkZTsElpegsWlmAy/L93RHr/MVZ9kz8=) 2: ef5b4f84-fcd9-3e5f-b986-6114bc1ef0b0.roa (hash: UtBQ5JJzkF4nQHGA+Z3yuZnKJj7p7A1010mV+y/2sjE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f3:80:01:74:de:d2:74:de:56:be:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3be7133e-7e46-4fc6-9410-e18bafb885d8 Validity Not Before: Aug 23 11:00:03 2025 GMT Not After : Aug 26 11:00:00 2025 GMT Subject: CN=f9deb802-1d2f-43db-ab94-48599c3d8627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e6:16:72:e6:72:aa:8c:d2:d4:a3:86:dc:70: 29:6f:ee:d6:32:45:84:da:0a:38:42:70:46:c6:1d: 5a:ee:8e:4f:2d:64:8e:7a:d7:00:4b:87:23:a4:0d: 37:a3:24:4c:89:4e:fe:ff:ae:ed:6f:85:95:29:f8: 3c:4c:00:7d:29:76:1e:99:9f:54:9e:9b:f3:bd:f9: df:9a:d0:35:47:79:b5:65:9c:36:9f:e8:99:81:53: 96:e9:97:a8:b6:f1:fc:68:e4:a5:7f:a4:ef:e3:d3: 89:9c:77:8c:9f:dc:4b:f0:88:b3:28:30:a4:ea:95: 4e:6f:b3:8a:6d:de:4c:fa:84:14:57:fa:a4:43:ae: 6a:b8:bd:39:6f:89:c0:08:4a:b6:06:d3:f5:08:0d: 9c:97:86:5d:5b:ff:cd:34:1c:e2:44:57:1d:1f:35: 8a:85:da:20:18:e0:5a:91:79:80:2d:f7:a2:9a:5b: c1:e9:4d:9d:7e:ab:2b:69:6f:17:17:11:01:45:0f: de:3b:78:2d:5e:83:fb:89:5b:74:61:18:7c:33:9a: 2a:56:c4:a3:46:10:40:bd:09:f6:d9:15:dd:24:61: b3:4a:cc:1b:a8:63:d1:80:32:ec:05:73:ad:24:6c: a7:89:a2:15:95:2f:1f:a1:fa:a0:3c:7b:3f:37:51: 48:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C6:D3:FB:FB:7D:86:B2:71:25:13:2C:FD:24:E9:B6:1A:24:8B:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.crl X509v3 Authority Key Identifier: keyid:1B:CD:05:03:12:EB:FC:D7:92:D6:FE:AA:B9:96:69:FA:0D:6C:B0:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:d5:de:c4:e8:8e:2b:1b:48:e3:2a:27:f7:bb:32:01:b7:28: 47:b6:ef:c1:ef:ca:b8:ec:ae:c8:a9:88:cb:39:2c:32:65:d6: 6d:a4:77:2f:d0:2f:91:b0:78:b8:95:e2:4b:72:5a:0c:db:0e: 60:f8:50:55:51:94:36:b4:18:68:9d:c5:ea:03:a4:ec:6c:a2: a5:c6:cf:09:ea:f8:77:2e:c6:00:28:54:20:82:35:38:47:c1: 97:62:70:4f:64:47:50:0d:b4:51:b4:0b:dd:41:d4:f2:58:cf: 53:95:e7:17:5c:25:dc:13:c6:f2:f8:4f:28:e3:5e:5d:7c:b0: aa:1d:83:ac:55:79:d7:e9:41:f0:52:7e:a2:90:a6:39:81:a6: 06:f6:db:96:82:35:a3:47:70:64:6f:4c:b2:4c:47:2a:fe:dd: b0:e1:ce:f1:52:23:90:0c:41:d4:70:c3:b9:29:35:86:95:b5: b1:9a:63:fd:f7:01:e4:ff:81:7a:55:23:e6:dc:e3:66:7d:0f: 33:e9:56:4b:d3:17:29:49:a0:a9:3b:8a:4a:f0:5c:3a:94:07: f7:6b:34:d6:48:6c:90:45:93:10:63:0d:b0:86:8c:1b:db:43: ab:71:24:02:b7:8f:1f:63:29:71:4c:92:20:51:13:ed:e9:29: 97:bb:ea:a5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErzgAF03tJ03la+Y4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JlNzEzM2UtN2U0Ni00ZmM2LTk0MTAtZTE4YmFmYjg4 NWQ4MB4XDTI1MDgyMzExMDAwM1oXDTI1MDgyNjExMDAwMFowLzEtMCsGA1UEAxMk ZjlkZWI4MDItMWQyZi00M2RiLWFiOTQtNDg1OTljM2Q4NjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeYWcuZyqozS1KOG3HApb+7WMkWE2go4QnBG xh1a7o5PLWSOetcAS4cjpA03oyRMiU7+/67tb4WVKfg8TAB9KXYemZ9Unpvzvfnf mtA1R3m1ZZw2n+iZgVOW6ZeotvH8aOSlf6Tv49OJnHeMn9xL8IizKDCk6pVOb7OK bd5M+oQUV/qkQ65quL05b4nACEq2BtP1CA2cl4ZdW//NNBziRFcdHzWKhdogGOBa kXmALfeimlvB6U2dfqsraW8XFxEBRQ/eO3gtXoP7iVt0YRh8M5oqVsSjRhBAvQn2 2RXdJGGzSswbqGPRgDLsBXOtJGyniaIVlS8fofqgPHs/N1FItwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIjG0/v7fYaycSUTLP0k6bYaJIufMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zYmU3 MTMzZS03ZTQ2LTRmYzYtOTQxMC1lMThiYWZiODg1ZDgvM2JlNzEzM2UtN2U0Ni00 ZmM2LTk0MTAtZTE4YmFmYjg4NWQ4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2JlNzEzM2UtN2U0Ni00ZmM2LTk0 MTAtZTE4YmFmYjg4NWQ4LzNiZTcxMzNlLTdlNDYtNGZjNi05NDEwLWUxOGJhZmI4 ODVkOC5jcmwwHwYDVR0jBBgwFoAUG80FAxLr/NeS1v6quZZp+g1ssMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zYmU3MTMzZS03ZTQ2LTRmYzYtOTQxMC1lMThi YWZiODg1ZDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCD1d7E6I4rG0jjKif3uzIB tyhHtu/B78q47K7IqYjLOSwyZdZtpHcv0C+RsHi4leJLcloM2w5g+FBVUZQ2tBho ncXqA6TsbKKlxs8J6vh3LsYAKFQggjU4R8GXYnBPZEdQDbRRtAvdQdTyWM9TlecX XCXcE8by+E8o415dfLCqHYOsVXnX6UHwUn6ikKY5gaYG9tuWgjWjR3Bkb0yyTEcq /t2w4c7xUiOQDEHUcMO5KTWGlbWxmmP99wHk/4F6VSPm3ONmfQ8z6VZL0xcpSaCp O4pK8Fw6lAf3azTWSGyQRZMQYw2whowb20OrcSQCt48fYylxTJIgURPt6SmXu+ql -----END CERTIFICATE-----Generated at Sat Aug 23 21:56:05 2025 by rpki-client