$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/3767dced-4e89-4965-b8de-50e421201b4d.mft File: 3767dced-4e89-4965-b8de-50e421201b4d.mft (raw, json) Hash identifier: QmbdmwKjW7Ofu0MM2FLZEszuq+WG0VQwS6AhvAqzIXw= Subject key identifier: 59:86:78:AC:34:31:B1:4E:7A:8F:39:CD:A9:AA:2E:21:89:C9:21:62 Authority key identifier: 49:2A:5A:7A:A5:AC:FD:22:58:F5:E4:46:90:9D:05:72:ED:A6:80:C6 Certificate issuer: /CN=3767dced-4e89-4965-b8de-50e421201b4d Certificate serial: 010D0C9F4328584AF4A9CC86488DA99E188AF700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/3767dced-4e89-4965-b8de-50e421201b4d.mft Manifest number: 010D0C9F432858413D3A46C149FA4136E37FCB7F Signing time: Sat 23 Aug 2025 21:00:03 +0000 Manifest this update: Sat 23 Aug 2025 21:00:03 +0000 Manifest next update: Mon 25 Aug 2025 21:00:00 +0000 Files and hashes: 1: 0cb34fe9-1cce-3cca-bc49-f58f1b2f3f70.roa (hash: gefFYfFn2fUCZFoKKSjywfnF0GszQXqh1ftBNzBRRxM=) 2: 3767dced-4e89-4965-b8de-50e421201b4d.crl (hash: yPHuWIG/z5bIt2iF71D4mbLKCbA3E+cg3MwJasb1rqE=) 3: c0bc5cda-07ef-3599-9395-650cc03eefb1.roa (hash: vW8pBoqSqFu0MDQnpJ220nuD0esYdBycUdty8UoAaE8=) 4: c4f0e537-cfdd-3437-b5ad-f613a259b23b.roa (hash: ZxXGKBjZflg7ooQ4b1gT83J2N6s0LcqO6E8eyAKYQss=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/3767dced-4e89-4965-b8de-50e421201b4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/3767dced-4e89-4965-b8de-50e421201b4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f4:a9:cc:86:48:8d:a9:9e:18:8a:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3767dced-4e89-4965-b8de-50e421201b4d Validity Not Before: Aug 23 21:00:03 2025 GMT Not After : Aug 25 21:00:00 2025 GMT Subject: CN=35adf497-8195-4e01-a8c5-da6ead2a95d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:70:fc:fa:e0:6e:f6:6f:f9:b5:1f:73:6b:72: dc:c6:ae:4b:bf:92:45:c6:82:54:70:9a:50:7c:26: e8:20:34:bd:0f:5f:71:21:66:c9:b5:af:8e:ff:75: 28:5b:32:2f:46:7c:90:95:2c:93:6f:36:49:60:b9: 24:c8:83:6a:0a:c7:68:b1:f7:88:b4:79:96:2a:69: 9b:76:ab:a0:ac:0a:b4:00:55:c5:53:28:0c:c2:53: 2a:87:ce:1d:39:40:69:ba:7e:e1:a2:18:1c:1d:0c: 14:09:37:a3:8e:8e:54:63:cc:cb:d0:2f:0e:d2:91: 0d:bb:93:05:2c:f0:f6:f9:a1:73:cb:67:d6:7c:1f: 0f:82:96:52:ee:30:51:4b:27:46:74:d2:e2:33:c8: a7:de:b1:cd:45:11:5d:09:c1:d9:c1:5b:cc:e3:3d: 8d:ff:eb:8b:07:b5:2a:95:f5:21:92:e6:08:5f:5a: 32:7e:72:2a:81:43:0e:95:7e:bc:3d:ac:15:1f:d7: 16:a5:fc:a7:08:90:a5:14:c4:83:5f:cc:6a:e8:35: e5:82:2c:b3:82:a9:87:86:52:19:2c:e1:27:72:60: e8:e5:c7:96:c4:29:01:09:c3:83:04:d2:e1:91:39: 03:a6:0e:87:98:a0:7a:1b:65:e1:8a:28:e2:be:0c: c4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:86:78:AC:34:31:B1:4E:7A:8F:39:CD:A9:AA:2E:21:89:C9:21:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/3767dced-4e89-4965-b8de-50e421201b4d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/3767dced-4e89-4965-b8de-50e421201b4d.crl X509v3 Authority Key Identifier: keyid:49:2A:5A:7A:A5:AC:FD:22:58:F5:E4:46:90:9D:05:72:ED:A6:80:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:a8:7a:e4:5d:98:7d:e2:80:c9:d8:d6:ae:5c:e3:ff:5f:89: 01:71:8c:bc:33:5a:e1:4a:98:a2:fa:56:a3:65:e2:a0:65:e8: 26:b8:ef:b9:71:cb:65:66:37:3c:13:f9:67:c5:bb:ed:63:c0: 55:d2:a3:d9:71:23:12:27:bf:28:1a:51:b2:58:e7:fe:3a:8d: de:08:64:0c:49:cc:c3:2d:2f:8c:f5:a9:27:ab:ed:22:99:3c: 9b:df:2c:80:1e:f4:2b:69:e0:53:72:9f:81:6c:54:d3:2a:9d: 74:cd:ab:e2:94:c2:c3:45:fb:32:a0:fe:99:7a:d0:95:90:70: ae:cd:7d:db:bb:8b:c8:fa:c5:28:31:e7:18:72:3b:15:d0:94: 08:4b:3f:19:f6:f4:ba:e0:17:39:77:91:31:40:51:eb:b1:a0: 22:4a:85:d0:c5:22:a1:1b:54:09:f6:5f:d9:2d:68:3f:5a:e0: b2:a0:37:14:eb:01:81:93:f5:4d:33:dd:c2:01:69:4d:e8:48: f5:38:1d:7e:5d:bb:4b:33:ca:cb:91:0a:e9:f9:35:aa:58:22: 22:1f:d2:12:22:20:10:bd:75:e3:d4:3f:2d:11:3a:36:b6:d8: 54:33:a1:d7:d2:f5:0d:e7:20:8e:a0:c4:cc:88:5a:8e:8a:ce: 20:fc:e2:7e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr0qcyGSI2pnhiK9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzc2N2RjZWQtNGU4OS00OTY1LWI4ZGUtNTBlNDIxMjAx YjRkMB4XDTI1MDgyMzIxMDAwM1oXDTI1MDgyNTIxMDAwMFowLzEtMCsGA1UEAxMk MzVhZGY0OTctODE5NS00ZTAxLWE4YzUtZGE2ZWFkMmE5NWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03D8+uBu9m/5tR9za3Lcxq5Lv5JFxoJUcJpQ fCboIDS9D19xIWbJta+O/3UoWzIvRnyQlSyTbzZJYLkkyINqCsdosfeItHmWKmmb dqugrAq0AFXFUygMwlMqh84dOUBpun7hohgcHQwUCTejjo5UY8zL0C8O0pENu5MF LPD2+aFzy2fWfB8PgpZS7jBRSydGdNLiM8in3rHNRRFdCcHZwVvM4z2N/+uLB7Uq lfUhkuYIX1oyfnIqgUMOlX68PawVH9cWpfynCJClFMSDX8xq6DXlgiyzgqmHhlIZ LOEncmDo5ceWxCkBCcODBNLhkTkDpg6HmKB6G2XhiijivgzEhQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFmGeKw0MbFOeo85zamqLiGJySFiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNzY3 ZGNlZC00ZTg5LTQ5NjUtYjhkZS01MGU0MjEyMDFiNGQvMzc2N2RjZWQtNGU4OS00 OTY1LWI4ZGUtNTBlNDIxMjAxYjRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzc2N2RjZWQtNGU4OS00OTY1LWI4 ZGUtNTBlNDIxMjAxYjRkLzM3NjdkY2VkLTRlODktNDk2NS1iOGRlLTUwZTQyMTIw MWI0ZC5jcmwwHwYDVR0jBBgwFoAUSSpaeqWs/SJY9eRGkJ0Fcu2mgMYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNzY3ZGNlZC00ZTg5LTQ5NjUtYjhkZS01MGU0 MjEyMDFiNGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCRqHrkXZh94oDJ2NauXOP/ X4kBcYy8M1rhSpii+lajZeKgZegmuO+5cctlZjc8E/lnxbvtY8BV0qPZcSMSJ78o GlGyWOf+Oo3eCGQMSczDLS+M9aknq+0imTyb3yyAHvQraeBTcp+BbFTTKp10zavi lMLDRfsyoP6ZetCVkHCuzX3bu4vI+sUoMecYcjsV0JQISz8Z9vS64Bc5d5ExQFHr saAiSoXQxSKhG1QJ9l/ZLWg/WuCyoDcU6wGBk/VNM93CAWlN6Ej1OB1+XbtLM8rL kQrp+TWqWCIiH9ISIiAQvXXj1D8tETo2tthUM6HX0vUN5yCOoMTMiFqOis4g/OJ+ -----END CERTIFICATE-----Generated at Sun Aug 24 00:35:57 2025 by rpki-client