$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft File: 3b9b8028-72e5-488e-971c-54bd1e51f064.mft (raw, json) Hash identifier: jbLRHKaK5UJR9LNO+ueU8s3qI+slBDeQ5Ln/nMAVUHs= Subject key identifier: 52:2A:1F:CD:77:95:E8:76:94:D9:E7:11:66:56:86:E8:F4:8B:3D:A6 Authority key identifier: 5F:8B:61:30:92:66:A4:EA:82:F9:CD:58:0F:27:90:55:72:01:AA:BD Certificate issuer: /CN=3b9b8028-72e5-488e-971c-54bd1e51f064 Certificate serial: 010D0C9F4328584AF1A38E13F119D427B9799200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft Manifest number: 010D0C9F4328584A528A8A7AC4CF3AECDE07A7BA Signing time: Fri 22 Aug 2025 19:00:03 +0000 Manifest this update: Fri 22 Aug 2025 19:00:03 +0000 Manifest next update: Sun 24 Aug 2025 19:00:00 +0000 Files and hashes: 1: 31dea251-a914-3cdf-bb34-ea459b59f5b7.roa (hash: O+kRYvnS9Fz6O078M4tZey6O0tVnwvcFYUplUdNP++c=) 2: 3b9b8028-72e5-488e-971c-54bd1e51f064.crl (hash: bGifIqt5qzwrc/NpHDXop1yFDapXENWeKRTJ1YHTA/U=) 3: 69651a7a-33cd-341a-9ff0-30c6489996d5.roa (hash: paaCkuSrjuYP/Rw4CorCb4hoieWsxL6uWxAKZmvUkFc=) 4: d46bde8b-c4af-3c7c-b58a-db64c47da4bb.roa (hash: ovoyLP8yTIhVOhOxYD1r9tdcJXQfGSDCfckozhupohE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f1:a3:8e:13:f1:19:d4:27:b9:79:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b9b8028-72e5-488e-971c-54bd1e51f064 Validity Not Before: Aug 22 19:00:03 2025 GMT Not After : Aug 24 19:00:00 2025 GMT Subject: CN=37bc07ef-f469-4699-9acd-33df40384781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:53:85:b1:d4:f5:8e:4f:1e:85:34:ab:a9:de: 3b:c9:1a:d6:f6:98:a4:0f:65:fd:a5:8f:22:79:42: 57:cf:2f:0b:e8:a8:01:b9:1b:f4:21:ff:0f:4f:6c: 79:85:77:2f:e8:33:b3:51:54:e3:9a:6c:6f:29:69: 96:30:4f:6f:5a:42:2b:46:d4:6e:8d:8e:22:a9:ef: 0f:5d:3b:1c:9b:d9:4a:5b:9a:d3:14:50:98:42:1e: ec:4b:a7:00:dc:2e:2c:fb:f7:28:80:64:a5:6a:0a: 57:07:4c:5a:ea:09:ae:b2:23:46:91:b8:f9:bb:49: 88:5f:04:1b:87:ef:ca:57:63:7e:52:93:78:1a:97: 72:8b:d7:1c:99:e2:74:a0:bb:b0:2b:49:f2:1b:79: bf:ee:64:42:bd:34:50:46:02:85:fc:8d:7c:49:68: 2b:48:67:2b:b5:f5:04:8a:09:9f:4d:2f:cc:00:87: 2e:60:aa:b2:37:b6:10:f3:ba:38:b6:35:5e:ac:04: ba:4a:49:34:09:9d:76:42:ce:0f:5a:ed:ff:ae:2a: 5a:10:c9:30:31:66:a1:e6:12:db:32:67:60:d2:70: 3d:4e:70:7a:82:95:38:26:fd:6d:d9:9b:70:2d:0a: f4:44:fe:65:2e:5c:75:e8:17:7b:b2:db:b9:f2:39: 07:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:2A:1F:CD:77:95:E8:76:94:D9:E7:11:66:56:86:E8:F4:8B:3D:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.crl X509v3 Authority Key Identifier: keyid:5F:8B:61:30:92:66:A4:EA:82:F9:CD:58:0F:27:90:55:72:01:AA:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:86:57:a4:55:aa:bd:81:a1:88:10:76:75:e8:4b:3d:0e:cd: 5f:98:18:3f:4b:32:15:ce:9e:ee:41:9d:9b:fe:5b:8c:ad:84: ab:29:93:ea:60:08:79:57:f9:e9:f2:ff:81:17:99:d5:5e:22: 15:fe:23:f3:80:96:3b:f2:18:92:b3:ea:2b:84:61:68:96:ad: 14:f4:09:5a:b2:91:58:c2:6f:d2:31:4f:40:41:93:d5:32:46: 3d:7a:6c:be:5d:f7:3f:d2:14:e7:68:49:ee:4d:d4:a5:00:c3: 26:b9:af:95:37:d1:b9:ab:f7:de:99:ed:1d:dd:0c:81:4d:ad: 11:02:38:68:63:c4:2f:fa:b5:f7:ba:15:9c:e9:35:41:6a:18: ca:10:c9:a2:79:a2:74:e1:42:d5:08:77:fe:c8:d3:75:f8:b0: 1d:26:15:71:ff:cf:31:ab:de:23:74:08:b7:5f:a0:d0:19:33: b1:39:cd:19:22:b8:7b:f0:81:29:ed:ef:2b:4c:29:66:6d:af: 23:14:a3:49:b0:c4:b7:ae:3b:0d:cd:59:be:1d:ac:70:e7:26: 90:45:49:b8:33:c8:7c:61:73:90:f3:62:bf:73:2c:0b:6e:20: a9:ae:37:e4:e0:81:ca:a4:85:a5:83:04:d5:21:19:0c:6f:7b: 9b:f8:d2:1e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErxo44T8RnUJ7l5kgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I5YjgwMjgtNzJlNS00ODhlLTk3MWMtNTRiZDFlNTFm MDY0MB4XDTI1MDgyMjE5MDAwM1oXDTI1MDgyNDE5MDAwMFowLzEtMCsGA1UEAxMk MzdiYzA3ZWYtZjQ2OS00Njk5LTlhY2QtMzNkZjQwMzg0NzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1OFsdT1jk8ehTSrqd47yRrW9pikD2X9pY8i eUJXzy8L6KgBuRv0If8PT2x5hXcv6DOzUVTjmmxvKWmWME9vWkIrRtRujY4iqe8P XTscm9lKW5rTFFCYQh7sS6cA3C4s+/cogGSlagpXB0xa6gmusiNGkbj5u0mIXwQb h+/KV2N+UpN4Gpdyi9ccmeJ0oLuwK0nyG3m/7mRCvTRQRgKF/I18SWgrSGcrtfUE igmfTS/MAIcuYKqyN7YQ87o4tjVerAS6Skk0CZ12Qs4PWu3/ripaEMkwMWah5hLb Mmdg0nA9TnB6gpU4Jv1t2ZtwLQr0RP5lLlx16Bd7stu58jkHHwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFIqH813leh2lNnnEWZWhuj0iz2mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYjli ODAyOC03MmU1LTQ4OGUtOTcxYy01NGJkMWU1MWYwNjQvM2I5YjgwMjgtNzJlNS00 ODhlLTk3MWMtNTRiZDFlNTFmMDY0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2I5YjgwMjgtNzJlNS00ODhlLTk3 MWMtNTRiZDFlNTFmMDY0LzNiOWI4MDI4LTcyZTUtNDg4ZS05NzFjLTU0YmQxZTUx ZjA2NC5jcmwwHwYDVR0jBBgwFoAUX4thMJJmpOqC+c1YDyeQVXIBqr0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYjliODAyOC03MmU1LTQ4OGUtOTcxYy01NGJk MWU1MWYwNjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCGhlekVaq9gaGIEHZ16Es9 Ds1fmBg/SzIVzp7uQZ2b/luMrYSrKZPqYAh5V/np8v+BF5nVXiIV/iPzgJY78hiS s+orhGFolq0U9AlaspFYwm/SMU9AQZPVMkY9emy+Xfc/0hTnaEnuTdSlAMMmua+V N9G5q/feme0d3QyBTa0RAjhoY8Qv+rX3uhWc6TVBahjKEMmieaJ04ULVCHf+yNN1 +LAdJhVx/88xq94jdAi3X6DQGTOxOc0ZIrh78IEp7e8rTClmba8jFKNJsMS3rjsN zVm+Haxw5yaQRUm4M8h8YXOQ82K/cywLbiCprjfk4IHKpIWlgwTVIRkMb3ub+NIe -----END CERTIFICATE-----Generated at Sat Aug 23 14:03:17 2025 by rpki-client