$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft File: 3b9b8028-72e5-488e-971c-54bd1e51f064.mft (raw, json) Hash identifier: 65TwfQ2uf9BDMbPjEscv5QGOo4b0r7P2LJw7AuR7tHY= Subject key identifier: E7:2C:68:88:A9:55:05:49:FE:D0:61:9D:9A:92:93:DA:45:C2:47:D0 Authority key identifier: 5F:8B:61:30:92:66:A4:EA:82:F9:CD:58:0F:27:90:55:72:01:AA:BD Certificate issuer: /CN=3b9b8028-72e5-488e-971c-54bd1e51f064 Certificate serial: 010D0C9F4328584A5817ECD87BA4F85BCA01E200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft Manifest number: 010D0C9F4328584A528A8A7AC4CF3AECDE07A783 Signing time: Sat 28 Jun 2025 19:00:03 +0000 Manifest this update: Sat 28 Jun 2025 19:00:03 +0000 Manifest next update: Tue 01 Jul 2025 19:00:00 +0000 Files and hashes: 1: 31dea251-a914-3cdf-bb34-ea459b59f5b7.roa (hash: O+kRYvnS9Fz6O078M4tZey6O0tVnwvcFYUplUdNP++c=) 2: 3b9b8028-72e5-488e-971c-54bd1e51f064.crl (hash: XYiDvJpozz72wQpQTEjWM1AJ8fA5HOEnxKeZnBk+4VE=) 3: 69651a7a-33cd-341a-9ff0-30c6489996d5.roa (hash: paaCkuSrjuYP/Rw4CorCb4hoieWsxL6uWxAKZmvUkFc=) 4: d46bde8b-c4af-3c7c-b58a-db64c47da4bb.roa (hash: ovoyLP8yTIhVOhOxYD1r9tdcJXQfGSDCfckozhupohE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:17:ec:d8:7b:a4:f8:5b:ca:01:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b9b8028-72e5-488e-971c-54bd1e51f064 Validity Not Before: Jun 28 19:00:03 2025 GMT Not After : Jul 1 19:00:00 2025 GMT Subject: CN=cc5d4222-1aad-4679-8924-4b6969759396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a9:99:2e:03:ac:4b:fe:73:69:c9:42:1f:1b: 80:4f:2f:e5:de:51:55:27:75:c0:9d:89:11:2c:9c: 4e:83:1b:22:60:b3:a0:2b:6e:a0:b3:01:53:0c:dc: ef:75:80:70:45:34:f9:77:2b:f2:a5:3d:e9:85:23: 2d:5f:f3:cc:a4:95:84:b7:1a:93:c5:fc:c1:7c:93: 20:fd:d7:14:89:03:eb:4d:df:7f:b8:5a:41:ad:a1: f6:e6:ca:2d:f6:73:4e:48:04:a8:f8:46:3f:37:c2: c3:a9:d1:98:c1:fa:26:d5:a6:b6:b2:fa:1d:3b:17: 80:29:f0:44:8d:7e:74:f5:93:72:3a:0a:dd:08:b5: a0:65:d2:60:95:20:cc:27:b1:b0:8b:b7:82:a3:e5: de:5b:bd:ed:fd:8d:49:13:2a:d0:4b:09:f7:14:04: f4:9e:27:33:59:df:62:fd:7a:3b:95:a7:4b:b9:a9: ac:e1:7f:0a:3f:eb:df:ac:3d:f2:6f:77:fd:75:0b: 65:98:ee:3e:78:b3:ef:0a:86:3b:00:3e:fc:a3:31: 72:ce:4c:8e:e8:b6:7d:ac:a2:af:fa:49:b1:72:1a: 53:bd:77:ab:ea:ad:72:b8:81:d1:38:d5:87:62:b1: cf:6c:d5:3b:41:5e:93:e9:02:b3:74:fc:27:05:66: 95:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:2C:68:88:A9:55:05:49:FE:D0:61:9D:9A:92:93:DA:45:C2:47:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.crl X509v3 Authority Key Identifier: keyid:5F:8B:61:30:92:66:A4:EA:82:F9:CD:58:0F:27:90:55:72:01:AA:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:bd:90:17:ce:b0:98:35:42:b2:c7:8c:12:80:57:2a:55:70: 04:3e:1a:ab:4e:ec:de:17:3f:44:e2:a3:17:d3:5b:9d:44:e9: 52:93:34:0f:4a:c7:17:7b:b0:7b:a3:f3:43:4e:ff:31:d2:eb: 3b:c5:e3:4e:c9:8a:4d:e0:fb:bf:15:39:25:d6:55:b3:ba:33: 36:e7:95:0e:d5:5f:57:6b:8c:ed:fa:ad:6d:3a:ba:ea:75:e5: fd:46:65:e9:93:13:76:27:73:fd:0f:72:21:78:0c:6f:df:c9: 43:93:ba:24:71:d6:69:da:a4:07:fb:e2:6b:c7:d9:51:f8:3c: 19:a9:c0:e0:c7:ec:24:1f:f1:65:b3:b5:a1:55:72:e2:06:08: 8c:84:a0:77:92:3e:e5:17:51:33:57:90:c7:fc:c0:71:13:5c: da:99:ee:f2:2a:16:e9:46:ea:57:a2:b3:e7:18:48:d5:da:05: 78:a9:df:69:03:99:f6:62:8a:91:6d:39:8b:71:88:7d:de:b5: 81:0f:28:0c:ca:86:a6:4d:ba:65:4c:7c:24:80:2b:7c:06:fc: 5e:ba:30:7d:1c:98:29:9e:45:46:3e:89:04:a0:ab:48:26:b9: c0:d2:e9:19:d5:01:d9:31:d6:83:b6:a2:7a:c1:f9:e6:8b:96: 24:57:8a:a6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpYF+zYe6T4W8oB4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I5YjgwMjgtNzJlNS00ODhlLTk3MWMtNTRiZDFlNTFm MDY0MB4XDTI1MDYyODE5MDAwM1oXDTI1MDcwMTE5MDAwMFowLzEtMCsGA1UEAxMk Y2M1ZDQyMjItMWFhZC00Njc5LTg5MjQtNGI2OTY5NzU5Mzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKmZLgOsS/5zaclCHxuATy/l3lFVJ3XAnYkR LJxOgxsiYLOgK26gswFTDNzvdYBwRTT5dyvypT3phSMtX/PMpJWEtxqTxfzBfJMg /dcUiQPrTd9/uFpBraH25sot9nNOSASo+EY/N8LDqdGYwfom1aa2svodOxeAKfBE jX509ZNyOgrdCLWgZdJglSDMJ7Gwi7eCo+XeW73t/Y1JEyrQSwn3FAT0niczWd9i /Xo7ladLuams4X8KP+vfrD3yb3f9dQtlmO4+eLPvCoY7AD78ozFyzkyO6LZ9rKKv +kmxchpTvXer6q1yuIHRONWHYrHPbNU7QV6T6QKzdPwnBWaVSwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOcsaIipVQVJ/tBhnZqSk9pFwkfQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYjli ODAyOC03MmU1LTQ4OGUtOTcxYy01NGJkMWU1MWYwNjQvM2I5YjgwMjgtNzJlNS00 ODhlLTk3MWMtNTRiZDFlNTFmMDY0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2I5YjgwMjgtNzJlNS00ODhlLTk3 MWMtNTRiZDFlNTFmMDY0LzNiOWI4MDI4LTcyZTUtNDg4ZS05NzFjLTU0YmQxZTUx ZjA2NC5jcmwwHwYDVR0jBBgwFoAUX4thMJJmpOqC+c1YDyeQVXIBqr0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYjliODAyOC03MmU1LTQ4OGUtOTcxYy01NGJk MWU1MWYwNjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBpvZAXzrCYNUKyx4wSgFcq VXAEPhqrTuzeFz9E4qMX01udROlSkzQPSscXe7B7o/NDTv8x0us7xeNOyYpN4Pu/ FTkl1lWzujM255UO1V9Xa4zt+q1tOrrqdeX9RmXpkxN2J3P9D3IheAxv38lDk7ok cdZp2qQH++Jrx9lR+DwZqcDgx+wkH/Fls7WhVXLiBgiMhKB3kj7lF1EzV5DH/MBx E1zame7yKhbpRupXorPnGEjV2gV4qd9pA5n2YoqRbTmLcYh93rWBDygMyoamTbpl THwkgCt8BvxeujB9HJgpnkVGPokEoKtIJrnA0ukZ1QHZMdaDtqJ6wfnmi5YkV4qm -----END CERTIFICATE-----Generated at Sun Jun 29 17:23:42 2025 by rpki-client