$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/3bfd8346-5f32-4973-b00f-6aa94c8ca720.mft File: 3bfd8346-5f32-4973-b00f-6aa94c8ca720.mft (raw, json) Hash identifier: I8VIYRdpaGZJZCXZe4iJS46k6qDh1okWztDK1v4vx/0= Subject key identifier: 16:F3:DD:05:1D:75:12:85:19:21:3D:6B:13:FA:7E:F5:86:E1:AD:18 Authority key identifier: 61:99:39:67:76:A2:0A:A2:6A:AF:E6:CD:DF:15:1C:3A:A9:E4:FA:A6 Certificate issuer: /CN=3bfd8346-5f32-4973-b00f-6aa94c8ca720 Certificate serial: 010D0C9F4328584AF1FCE0BFB4BD512887242D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/3bfd8346-5f32-4973-b00f-6aa94c8ca720.mft Manifest number: 010D0C9F43285840D356E771FDB2BBB607159077 Signing time: Fri 22 Aug 2025 22:00:04 +0000 Manifest this update: Fri 22 Aug 2025 22:00:04 +0000 Manifest next update: Mon 25 Aug 2025 22:00:00 +0000 Files and hashes: 1: 3bfd8346-5f32-4973-b00f-6aa94c8ca720.crl (hash: bmnCXchDlz7vgb7vrajl5GAfybdwLuRLAhaRNQRR6hA=) 2: 9b2a0da3-5551-3cef-ab65-d40999076b92.roa (hash: eOQ0GJeqXKOJiOlW2CxRIgWY3qms0Gck6QFxUDP+Dtg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/3bfd8346-5f32-4973-b00f-6aa94c8ca720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/3bfd8346-5f32-4973-b00f-6aa94c8ca720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f1:fc:e0:bf:b4:bd:51:28:87:24:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bfd8346-5f32-4973-b00f-6aa94c8ca720 Validity Not Before: Aug 22 22:00:04 2025 GMT Not After : Aug 25 22:00:00 2025 GMT Subject: CN=fcecf10a-a603-47ec-809e-a22d7562d587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:4a:76:5c:b1:49:30:a4:9b:c5:04:ea:64:f5: 2a:7d:18:ff:c4:87:68:44:01:b8:5b:40:e8:84:29: ca:44:9a:4c:21:2c:75:f4:d6:6f:f3:75:1b:be:18: f0:c1:7d:56:d7:52:2a:b6:38:3a:f6:be:2d:ae:a7: 43:d8:53:81:f3:cf:d8:05:8c:13:d5:0d:59:ff:a0: 6d:e4:fd:aa:b8:7c:c5:12:3c:23:a2:b5:6e:06:33: cb:af:b3:11:2c:d4:6d:9f:0e:3f:75:51:f2:79:0f: c0:5e:80:b1:fa:2c:d4:05:a0:d1:0b:8a:20:6d:32: 9b:28:e7:ec:f3:2c:a8:3a:25:b6:9f:bd:73:3e:a9: 9d:a0:e4:6b:28:c6:3b:96:67:d0:29:01:a8:a8:1a: 06:8d:55:3c:00:fa:cd:52:bd:5c:8e:db:2e:f1:10: 2e:a4:aa:9e:8a:62:48:84:d0:1d:6b:5e:85:d9:f0: ca:17:95:a3:c0:0f:a7:ed:f3:23:28:0f:04:3d:6d: 78:82:bb:d4:46:fc:51:23:c6:69:8f:69:ca:a6:33: 52:3f:01:89:22:99:2c:62:f6:00:5e:d5:6e:8c:9a: ac:1a:e7:8a:eb:0d:cb:70:75:eb:81:47:22:73:76: 14:ed:61:75:2d:a0:c8:d9:d0:9b:c1:24:cf:c6:1e: 26:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F3:DD:05:1D:75:12:85:19:21:3D:6B:13:FA:7E:F5:86:E1:AD:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/3bfd8346-5f32-4973-b00f-6aa94c8ca720.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/3bfd8346-5f32-4973-b00f-6aa94c8ca720.crl X509v3 Authority Key Identifier: keyid:61:99:39:67:76:A2:0A:A2:6A:AF:E6:CD:DF:15:1C:3A:A9:E4:FA:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:ab:b1:a4:65:9a:84:24:28:5e:d8:00:81:f4:a6:73:9e:5f: bc:25:b9:7c:f1:2a:ee:74:29:09:1a:9f:94:fb:bb:8c:df:da: 0b:2e:ad:19:54:6b:dd:16:d7:1a:a4:16:7b:44:a3:11:02:60: 4d:1a:e3:6f:20:8c:d3:8f:3d:01:f2:89:39:99:27:a5:db:cf: 19:db:bb:e6:a4:20:22:92:69:6f:9b:f7:b0:be:04:a6:a5:63: cb:36:1b:4f:4a:0f:45:af:f5:07:5d:2b:23:8a:e2:cb:2d:2e: 0d:92:83:2c:d8:8f:08:e5:3e:27:3f:e9:57:76:b8:ba:b6:de: 18:54:48:12:60:bc:4f:c3:f8:2e:91:06:c0:03:e0:ec:0b:5b: 6f:7b:df:59:54:fb:40:e1:73:04:3d:db:07:c5:4d:77:40:ac: e3:fa:71:68:ff:6c:07:67:68:f4:fa:a7:0e:c9:b8:95:09:e0: 6b:a5:28:83:0a:e1:93:f1:99:f2:a4:b1:ea:62:91:51:66:84: 4d:7e:53:f3:c6:80:ab:9a:48:0b:c9:fb:d0:ef:4f:0f:5c:c7: 5c:35:58:f2:bd:a2:77:27:44:83:d1:8a:5c:56:24:fc:cf:65: d7:12:9c:5e:ff:bf:cf:d1:77:d0:08:92:64:aa:59:e4:fe:48: ff:48:b0:6e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErx/OC/tL1RKIckLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JmZDgzNDYtNWYzMi00OTczLWIwMGYtNmFhOTRjOGNh NzIwMB4XDTI1MDgyMjIyMDAwNFoXDTI1MDgyNTIyMDAwMFowLzEtMCsGA1UEAxMk ZmNlY2YxMGEtYTYwMy00N2VjLTgwOWUtYTIyZDc1NjJkNTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0p2XLFJMKSbxQTqZPUqfRj/xIdoRAG4W0Do hCnKRJpMISx19NZv83UbvhjwwX1W11Iqtjg69r4trqdD2FOB88/YBYwT1Q1Z/6Bt 5P2quHzFEjwjorVuBjPLr7MRLNRtnw4/dVHyeQ/AXoCx+izUBaDRC4ogbTKbKOfs 8yyoOiW2n71zPqmdoORrKMY7lmfQKQGoqBoGjVU8APrNUr1cjtsu8RAupKqeimJI hNAda16F2fDKF5WjwA+n7fMjKA8EPW14grvURvxRI8Zpj2nKpjNSPwGJIpksYvYA XtVujJqsGueK6w3LcHXrgUcic3YU7WF1LaDI2dCbwSTPxh4mvwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBbz3QUddRKFGSE9axP6fvWG4a0YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zYmZk ODM0Ni01ZjMyLTQ5NzMtYjAwZi02YWE5NGM4Y2E3MjAvM2JmZDgzNDYtNWYzMi00 OTczLWIwMGYtNmFhOTRjOGNhNzIwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2JmZDgzNDYtNWYzMi00OTczLWIw MGYtNmFhOTRjOGNhNzIwLzNiZmQ4MzQ2LTVmMzItNDk3My1iMDBmLTZhYTk0Yzhj YTcyMC5jcmwwHwYDVR0jBBgwFoAUYZk5Z3aiCqJqr+bN3xUcOqnk+qYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zYmZkODM0Ni01ZjMyLTQ5NzMtYjAwZi02YWE5 NGM4Y2E3MjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAlq7GkZZqEJChe2ACB9KZz nl+8Jbl88SrudCkJGp+U+7uM39oLLq0ZVGvdFtcapBZ7RKMRAmBNGuNvIIzTjz0B 8ok5mSel288Z27vmpCAikmlvm/ewvgSmpWPLNhtPSg9Fr/UHXSsjiuLLLS4NkoMs 2I8I5T4nP+lXdri6tt4YVEgSYLxPw/gukQbAA+DsC1tve99ZVPtA4XMEPdsHxU13 QKzj+nFo/2wHZ2j0+qcOybiVCeBrpSiDCuGT8ZnypLHqYpFRZoRNflPzxoCrmkgL yfvQ708PXMdcNVjyvaJ3J0SD0YpcViT8z2XXEpxe/7/P0XfQCJJkqlnk/kj/SLBu -----END CERTIFICATE-----Generated at Sat Aug 23 18:11:11 2025 by rpki-client