$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft File: 3a86f711-5e97-4a68-9b21-940a312b854a.mft (raw, json) Hash identifier: reqUhFHG1wge3hVVdhC592ZHcmDZ+sX5qw4+JdhzDYs= Subject key identifier: C0:EF:CA:1B:91:85:A0:0E:2C:14:AA:0C:06:7A:61:53:8C:B9:57:5A Authority key identifier: D3:F6:F7:C7:D5:CB:2F:40:EA:DE:48:27:9A:35:C5:AA:11:11:F8:55 Certificate issuer: /CN=3a86f711-5e97-4a68-9b21-940a312b854a Certificate serial: 010D0C9F4328584AF39DD5ECA3A1BA1549D43480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft Manifest number: 010D0C9F4328584988B6CEF62A3C901C9E4B602E Signing time: Sat 23 Aug 2025 12:00:08 +0000 Manifest this update: Sat 23 Aug 2025 12:00:08 +0000 Manifest next update: Tue 26 Aug 2025 12:00:00 +0000 Files and hashes: 1: 341487ac-a3e5-383d-bb5e-c10826c39192.roa (hash: zDdSEqA0luICrSjYrcUlVjCVnuhzutRICtMgH1VinQA=) 2: 3a86f711-5e97-4a68-9b21-940a312b854a.crl (hash: QQrkp9rsn+7hs0ynFALcPh7P4itplUsw+r4ftBvXpQU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f3:9d:d5:ec:a3:a1:ba:15:49:d4:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a86f711-5e97-4a68-9b21-940a312b854a Validity Not Before: Aug 23 12:00:08 2025 GMT Not After : Aug 26 12:00:00 2025 GMT Subject: CN=ac8a0b39-e105-4df2-9f90-7c3c785ad482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1b:10:62:2a:cc:7a:23:cb:53:bf:72:65:2d: f3:c0:96:e8:38:6d:cc:29:63:b5:de:b8:3d:73:d4: ef:9c:c6:8b:08:45:b5:e7:74:11:02:9d:e9:75:db: ed:f5:a0:bb:48:0a:18:de:80:78:ad:25:17:fb:fa: 10:0e:db:06:65:17:d6:19:90:92:cb:e5:32:49:be: 0d:2a:a0:ea:1d:92:40:d4:3a:97:97:05:c1:11:1a: 4a:0f:bb:ff:b8:31:e1:ae:3b:46:ce:25:50:a1:b8: b1:c8:08:0b:42:7a:0a:3d:53:5e:b1:64:aa:88:49: 62:1e:6e:6c:2c:4f:53:69:86:93:aa:13:09:95:a6: a7:c0:f4:8a:5d:57:8d:91:7f:aa:a7:c7:4a:cf:10: e2:d0:8d:36:5d:69:e5:bf:21:5a:d3:4b:cf:33:14: 33:cd:4a:4d:6b:95:ee:86:89:0a:94:29:32:c1:1e: 99:6a:38:34:b8:ce:ac:95:82:65:ec:35:0b:32:0d: 7e:4b:aa:78:86:ee:95:96:5e:77:7f:d1:09:d9:31: 15:55:85:a6:d4:e5:94:a4:fd:b3:c6:32:1a:30:95: 04:56:b8:0f:16:cb:ac:cc:c4:bb:1d:22:fa:3c:d6: 5f:5a:d3:ea:e8:fd:4d:75:34:9d:24:20:44:4c:71: 91:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:EF:CA:1B:91:85:A0:0E:2C:14:AA:0C:06:7A:61:53:8C:B9:57:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.crl X509v3 Authority Key Identifier: keyid:D3:F6:F7:C7:D5:CB:2F:40:EA:DE:48:27:9A:35:C5:AA:11:11:F8:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:56:c5:eb:64:5c:ac:75:8f:4e:cd:78:3c:45:50:ac:01:d0: ec:14:18:91:de:1d:6a:23:1b:19:ce:f8:04:03:00:af:d5:5f: 2d:40:31:da:31:e5:22:d0:4b:26:5e:dc:9d:c2:7a:bc:6b:59: 69:b5:07:4a:37:9e:58:bc:21:14:51:85:fc:a3:e6:ca:18:5d: 25:59:21:f1:d7:0d:b4:3e:d3:5d:b7:36:19:0e:3f:f3:1b:a0: db:35:4c:48:e0:9b:9e:38:85:0f:d3:d8:7c:52:88:7a:a9:f4: e6:07:b7:f8:22:0b:b2:dd:ce:ed:18:9e:c9:d2:89:fd:49:f3: ee:0c:be:88:53:ca:ef:39:af:93:19:df:ab:70:06:3e:2e:30: 15:00:2b:41:6a:05:92:6c:a0:86:bb:9a:75:67:e6:c2:72:3a: 78:c1:f7:db:4e:89:db:d5:34:9e:da:9c:c8:46:28:51:83:01: 26:de:68:c4:27:c7:33:c3:29:bf:52:04:be:b4:d7:7d:4d:08: 4a:11:e7:98:b4:35:19:fe:b7:10:cb:b0:d7:37:32:ed:a0:11: 84:54:b4:01:6d:51:66:19:36:83:a6:b4:7c:3e:fd:bf:2b:66: 2d:a5:ef:d6:39:52:83:4d:77:de:f6:0e:3d:1e:a2:69:dd:95: e6:3b:f0:d9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErzndXso6G6FUnUNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E4NmY3MTEtNWU5Ny00YTY4LTliMjEtOTQwYTMxMmI4 NTRhMB4XDTI1MDgyMzEyMDAwOFoXDTI1MDgyNjEyMDAwMFowLzEtMCsGA1UEAxMk YWM4YTBiMzktZTEwNS00ZGYyLTlmOTAtN2MzYzc4NWFkNDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBsQYirMeiPLU79yZS3zwJboOG3MKWO13rg9 c9TvnMaLCEW153QRAp3pddvt9aC7SAoY3oB4rSUX+/oQDtsGZRfWGZCSy+UySb4N KqDqHZJA1DqXlwXBERpKD7v/uDHhrjtGziVQobixyAgLQnoKPVNesWSqiEliHm5s LE9TaYaTqhMJlaanwPSKXVeNkX+qp8dKzxDi0I02XWnlvyFa00vPMxQzzUpNa5Xu hokKlCkywR6Zajg0uM6slYJl7DULMg1+S6p4hu6Vll53f9EJ2TEVVYWm1OWUpP2z xjIaMJUEVrgPFsuszMS7HSL6PNZfWtPq6P1NdTSdJCBETHGROQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMDvyhuRhaAOLBSqDAZ6YVOMuVdaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYTg2 ZjcxMS01ZTk3LTRhNjgtOWIyMS05NDBhMzEyYjg1NGEvM2E4NmY3MTEtNWU5Ny00 YTY4LTliMjEtOTQwYTMxMmI4NTRhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2E4NmY3MTEtNWU5Ny00YTY4LTli MjEtOTQwYTMxMmI4NTRhLzNhODZmNzExLTVlOTctNGE2OC05YjIxLTk0MGEzMTJi ODU0YS5jcmwwHwYDVR0jBBgwFoAU0/b3x9XLL0Dq3kgnmjXFqhER+FUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYTg2ZjcxMS01ZTk3LTRhNjgtOWIyMS05NDBh MzEyYjg1NGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC8VsXrZFysdY9OzXg8RVCs AdDsFBiR3h1qIxsZzvgEAwCv1V8tQDHaMeUi0EsmXtydwnq8a1lptQdKN55YvCEU UYX8o+bKGF0lWSHx1w20PtNdtzYZDj/zG6DbNUxI4JueOIUP09h8Uoh6qfTmB7f4 Iguy3c7tGJ7J0on9SfPuDL6IU8rvOa+TGd+rcAY+LjAVACtBagWSbKCGu5p1Z+bC cjp4wffbTonb1TSe2pzIRihRgwEm3mjEJ8czwym/UgS+tNd9TQhKEeeYtDUZ/rcQ y7DXNzLtoBGEVLQBbVFmGTaDprR8Pv2/K2Ytpe/WOVKDTXfe9g49HqJp3ZXmO/DZ -----END CERTIFICATE-----Generated at Sun Aug 24 00:03:11 2025 by rpki-client