$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ad33e8c-898c-4cf1-b7ef-48f7e44f4bf6/3ad33e8c-898c-4cf1-b7ef-48f7e44f4bf6.mft File: 3ad33e8c-898c-4cf1-b7ef-48f7e44f4bf6.mft (raw, json) Hash identifier: Kk6QucDQ2QaHye5cdN269DgDq39k6Fhmtpr6JVlA6Pc= Subject key identifier: 1B:37:AB:65:43:51:9F:C6:58:2C:9F:E7:2E:6F:6C:15:3D:4A:2E:23 Authority key identifier: 34:75:A4:CD:48:96:B4:D7:99:49:1A:2A:CA:81:36:F6:01:E8:67:20 Certificate issuer: /CN=3ad33e8c-898c-4cf1-b7ef-48f7e44f4bf6 Certificate serial: 010D0C9F4328584A5817F1B0382F77194B277940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ad33e8c-898c-4cf1-b7ef-48f7e44f4bf6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ad33e8c-898c-4cf1-b7ef-48f7e44f4bf6/3ad33e8c-898c-4cf1-b7ef-48f7e44f4bf6.mft Manifest number: 010D0C9F43285841ECF1AEA6C27684736583C084 Signing time: Sat 28 Jun 2025 19:00:03 +0000 Manifest this update: Sat 28 Jun 2025 19:00:03 +0000 Manifest next update: Tue 01 Jul 2025 19:00:00 +0000 Files and hashes: 1: 3ad33e8c-898c-4cf1-b7ef-48f7e44f4bf6.crl (hash: QOwbKm7Is7HbCo7APdRHtF6+sL0i1U808rPU05SfM7U=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ad33e8c-898c-4cf1-b7ef-48f7e44f4bf6/3ad33e8c-898c-4cf1-b7ef-48f7e44f4bf6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ad33e8c-898c-4cf1-b7ef-48f7e44f4bf6/3ad33e8c-898c-4cf1-b7ef-48f7e44f4bf6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ad33e8c-898c-4cf1-b7ef-48f7e44f4bf6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:17:f1:b0:38:2f:77:19:4b:27:79:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad33e8c-898c-4cf1-b7ef-48f7e44f4bf6 Validity Not Before: Jun 28 19:00:03 2025 GMT Not After : Jul 1 19:00:00 2025 GMT Subject: CN=d17119a7-8cb5-4c3d-b36c-ca2c11f4ffa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e2:d0:18:de:b6:d0:7f:c0:12:21:e6:61:d8: 35:0a:a7:ee:d4:1a:20:ca:d5:96:7c:f9:14:59:ad: bc:57:3e:6a:29:db:18:cd:05:c4:0a:58:09:fe:6b: 1a:b6:ce:db:82:1c:1f:9f:19:9d:91:d1:df:13:81: 98:47:a1:72:df:a8:db:01:96:9b:2f:22:cd:38:56: 12:45:fa:a4:b4:1b:ff:e1:0c:6f:de:be:b4:bf:0a: 4c:bf:e6:01:d2:0c:64:cc:f6:26:97:a4:86:88:f1: 4a:2b:e6:d2:9b:41:d3:be:18:43:f2:16:b1:aa:40: a8:ee:9e:9a:0c:96:42:50:50:a0:61:d4:57:2e:5b: 87:d9:c1:84:1f:2b:c7:05:a4:3e:43:3d:e0:ff:08: ee:97:f1:42:e5:c4:da:2b:18:3b:fe:7c:77:c0:84: 26:02:15:4e:3d:bd:c7:85:dc:93:5d:b8:b5:90:b5: f7:34:3f:2c:ef:ba:f1:87:89:88:d1:17:74:73:72: da:42:24:70:45:d8:6c:c7:eb:07:e8:ad:a8:ea:20: 61:b7:9b:79:49:00:6c:42:95:4e:80:36:9f:1c:5b: b3:7c:ae:ac:d6:fa:7a:21:96:c9:f6:e3:65:83:d4: 03:04:89:cf:16:8c:9b:eb:3b:4a:49:28:56:21:6f: 42:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:37:AB:65:43:51:9F:C6:58:2C:9F:E7:2E:6F:6C:15:3D:4A:2E:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ad33e8c-898c-4cf1-b7ef-48f7e44f4bf6/3ad33e8c-898c-4cf1-b7ef-48f7e44f4bf6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ad33e8c-898c-4cf1-b7ef-48f7e44f4bf6/3ad33e8c-898c-4cf1-b7ef-48f7e44f4bf6.crl X509v3 Authority Key Identifier: keyid:34:75:A4:CD:48:96:B4:D7:99:49:1A:2A:CA:81:36:F6:01:E8:67:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ad33e8c-898c-4cf1-b7ef-48f7e44f4bf6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:fd:45:62:93:28:fc:ff:8b:e9:cf:0c:01:0f:cc:2f:b6:8b: 2e:09:13:d5:ee:b8:09:56:d7:74:ca:c6:50:8f:99:35:94:43: 16:5a:84:a0:c3:93:44:32:8b:5b:e4:72:96:98:32:00:c7:ba: e6:6c:e4:f8:d0:29:52:95:9f:0e:60:75:4e:ed:0f:6a:e6:d6: 44:b4:71:d8:68:a2:73:57:09:d7:35:4a:07:26:e4:53:d4:78: 20:8c:bf:6e:96:f5:41:a7:d2:4e:a3:f9:ea:00:66:00:2f:e0: 5a:e0:36:90:4f:d4:2c:ec:41:bf:cf:8a:02:f3:1d:56:e3:41: ab:73:2c:78:3e:f7:e0:cb:80:ca:e7:cc:99:c7:fa:70:67:96: 4c:e7:1a:a3:1c:03:62:18:7c:aa:e3:b0:9e:fc:dd:62:5f:e5: 3a:bb:61:06:09:a8:f3:83:c6:27:37:3b:3c:b9:1d:8d:d9:c7: fc:87:d3:dc:f9:2c:e0:cd:62:77:f1:cf:27:18:f1:38:e1:59: 80:f8:a4:3c:6d:49:71:ed:d4:9e:3f:01:c2:16:ce:c2:31:19: 4e:bf:fc:73:a2:fc:cb:4d:48:d8:1e:0e:92:45:89:76:bd:72: 26:1f:55:e8:78:80:7a:be:ee:a0:c6:a5:84:f9:96:d7:94:b0: c3:f6:1c:81 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpYF/GwOC93GUsneUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FkMzNlOGMtODk4Yy00Y2YxLWI3ZWYtNDhmN2U0NGY0 YmY2MB4XDTI1MDYyODE5MDAwM1oXDTI1MDcwMTE5MDAwMFowLzEtMCsGA1UEAxMk ZDE3MTE5YTctOGNiNS00YzNkLWIzNmMtY2EyYzExZjRmZmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOLQGN620H/AEiHmYdg1Cqfu1BogytWWfPkU Wa28Vz5qKdsYzQXEClgJ/msats7bghwfnxmdkdHfE4GYR6Fy36jbAZabLyLNOFYS RfqktBv/4Qxv3r60vwpMv+YB0gxkzPYml6SGiPFKK+bSm0HTvhhD8haxqkCo7p6a DJZCUFCgYdRXLluH2cGEHyvHBaQ+Qz3g/wjul/FC5cTaKxg7/nx3wIQmAhVOPb3H hdyTXbi1kLX3ND8s77rxh4mI0Rd0c3LaQiRwRdhsx+sH6K2o6iBht5t5SQBsQpVO gDafHFuzfK6s1vp6IZbJ9uNlg9QDBInPFoyb6ztKSShWIW9CZQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBs3q2VDUZ/GWCyf5y5vbBU9Si4jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zYWQz M2U4Yy04OThjLTRjZjEtYjdlZi00OGY3ZTQ0ZjRiZjYvM2FkMzNlOGMtODk4Yy00 Y2YxLWI3ZWYtNDhmN2U0NGY0YmY2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2FkMzNlOGMtODk4Yy00Y2YxLWI3 ZWYtNDhmN2U0NGY0YmY2LzNhZDMzZThjLTg5OGMtNGNmMS1iN2VmLTQ4ZjdlNDRm NGJmNi5jcmwwHwYDVR0jBBgwFoAUNHWkzUiWtNeZSRoqyoE29gHoZyAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zYWQzM2U4Yy04OThjLTRjZjEtYjdlZi00OGY3 ZTQ0ZjRiZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA//UVikyj8/4vpzwwBD8wv tosuCRPV7rgJVtd0ysZQj5k1lEMWWoSgw5NEMotb5HKWmDIAx7rmbOT40ClSlZ8O YHVO7Q9q5tZEtHHYaKJzVwnXNUoHJuRT1HggjL9ulvVBp9JOo/nqAGYAL+Ba4DaQ T9Qs7EG/z4oC8x1W40Grcyx4Pvfgy4DK58yZx/pwZ5ZM5xqjHANiGHyq47Ce/N1i X+U6u2EGCajzg8YnNzs8uR2N2cf8h9Pc+SzgzWJ38c8nGPE44VmA+KQ8bUlx7dSe PwHCFs7CMRlOv/xzovzLTUjYHg6SRYl2vXImH1XoeIB6vu6gxqWE+ZbXlLDD9hyB -----END CERTIFICATE-----Generated at Sun Jun 29 18:08:59 2025 by rpki-client