$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.mft File: 3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.mft (raw, json) Hash identifier: +3sNaVbTZc/nEaUOJJ5TNQvrtZRldfHmPWstZC+10PI= Subject key identifier: C2:C3:97:34:D3:96:79:43:A5:81:B2:9F:8D:85:97:19:F0:2C:48:75 Authority key identifier: B9:FA:57:DE:DB:64:ED:20:6A:5E:8D:41:2D:2E:86:34:D7:63:4B:14 Certificate issuer: /CN=3c8a971f-d7dc-4e95-bc6e-a0db15f80a84 Certificate serial: 010D0C9F4328584AF48C0F7995D425C622B2B680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.mft Manifest number: 010D0C9F43285849DA9CE5EFC966AA9E1974D06C Signing time: Sat 23 Aug 2025 20:00:08 +0000 Manifest this update: Sat 23 Aug 2025 20:00:08 +0000 Manifest next update: Mon 25 Aug 2025 20:00:00 +0000 Files and hashes: 1: 2e73e149-085f-345e-acd0-10867059c3f9.roa (hash: FVyTcphNEi2EPidlAs51kMNBZBjTH0DabL2CENLTWoc=) 2: 389cc261-cf0d-329f-ad46-5a405e8a611e.roa (hash: 4bfkeQ+sNU80/GoyoIba0PeW4ZdQXccJPih1eE/++cc=) 3: 3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.crl (hash: 39mjelUk05k0NGZkgF+xiV+ORRYQ25hMnjt3mLUcC7Q=) 4: fbbba54b-950b-302b-a65a-9cf427e72454.roa (hash: cyL/hSbUh3JcKiWUxrsL1/YeikRYGrkoCPQAKGSsljY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f4:8c:0f:79:95:d4:25:c6:22:b2:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c8a971f-d7dc-4e95-bc6e-a0db15f80a84 Validity Not Before: Aug 23 20:00:08 2025 GMT Not After : Aug 25 20:00:00 2025 GMT Subject: CN=cec5134e-f610-4d00-a01f-3719de5c728a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5f:c9:8c:6e:01:77:02:ec:25:01:cf:eb:4f: 09:e1:bb:93:93:4e:6b:c8:56:e7:c5:06:3f:42:fb: 64:9e:aa:1e:59:ad:97:dd:b8:bf:4b:f0:78:b6:de: 5c:b7:a8:04:fa:b8:ee:54:e4:57:35:8a:e3:df:07: 03:95:52:f0:9f:3f:0b:91:b9:f8:b3:da:a4:17:e5: b4:29:90:9b:de:79:75:bc:04:aa:34:9c:20:b8:b0: 36:62:7e:3d:c5:0d:83:61:a1:dc:69:04:ae:34:28: 03:af:6e:07:96:2e:a8:9a:ac:06:a3:b0:d5:df:0c: 1e:00:27:46:97:ae:35:96:70:c3:80:35:0b:b1:5d: 9e:0c:2f:d6:db:61:5c:56:4a:2d:fd:ab:9d:0b:a1: 58:78:88:95:df:b8:e5:7b:e5:1d:30:92:6f:33:e9: 49:17:91:6b:28:f2:de:38:f8:0b:71:75:8e:75:1a: 8d:41:1b:22:1f:de:ea:a7:b0:44:23:1b:ae:87:59: 9d:a1:10:bd:07:62:b3:37:b2:9e:83:45:bc:a1:ca: d8:84:1d:94:66:59:77:b7:88:27:55:e0:f2:3e:64: 2f:2e:7c:b2:c5:62:cb:44:84:2d:57:f1:11:85:e0: 39:5f:c5:df:08:85:63:4a:59:c3:e2:0b:c3:0c:53: bb:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C3:97:34:D3:96:79:43:A5:81:B2:9F:8D:85:97:19:F0:2C:48:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.crl X509v3 Authority Key Identifier: keyid:B9:FA:57:DE:DB:64:ED:20:6A:5E:8D:41:2D:2E:86:34:D7:63:4B:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:b6:5f:ec:74:a1:4b:b1:22:9d:51:02:56:26:62:49:01:a8: 5a:64:03:af:9b:5f:b4:f7:c9:52:4d:e2:b5:2d:f0:8e:3a:70: 3c:9e:e2:79:3b:57:c6:6a:b7:df:17:ec:27:8a:44:00:72:c2: 53:56:0e:11:b3:9a:be:15:5b:6a:04:fd:d5:09:bd:fb:64:c0: f3:29:09:8e:a5:96:50:61:7f:ca:b2:7f:0d:28:5e:52:09:c1: d5:f5:8f:d3:6c:64:ae:93:41:4b:c2:74:a9:82:ff:f0:53:ac: 40:3e:8f:e9:16:aa:49:73:e3:cf:af:50:9d:9b:7a:c1:90:45: 64:f4:28:a6:8f:b4:c8:8d:14:1c:5e:10:51:85:32:f1:51:92: 83:be:4d:d3:52:37:eb:dc:15:9e:63:41:80:cc:17:12:b2:84: 8c:51:7e:83:48:b6:88:62:9d:2e:aa:7b:b0:ba:07:22:8a:a6: 55:f3:be:ad:ff:f0:a5:39:31:41:de:d9:1d:7c:dc:15:74:97: c1:c8:a3:52:d2:9a:90:a4:56:53:0c:0b:97:47:46:dd:d7:db: b6:2c:2e:a1:05:3a:a6:84:c6:b0:61:96:c6:b1:4f:d3:d6:c9: a7:21:a9:5e:2f:44:d1:b0:ea:06:ec:88:c3:e7:11:33:32:b3: c0:d1:de:0f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr0jA95ldQlxiKytoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M4YTk3MWYtZDdkYy00ZTk1LWJjNmUtYTBkYjE1Zjgw YTg0MB4XDTI1MDgyMzIwMDAwOFoXDTI1MDgyNTIwMDAwMFowLzEtMCsGA1UEAxMk Y2VjNTEzNGUtZjYxMC00ZDAwLWEwMWYtMzcxOWRlNWM3MjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1F/JjG4BdwLsJQHP608J4buTk05ryFbnxQY/ QvtknqoeWa2X3bi/S/B4tt5ct6gE+rjuVORXNYrj3wcDlVLwnz8Lkbn4s9qkF+W0 KZCb3nl1vASqNJwguLA2Yn49xQ2DYaHcaQSuNCgDr24Hli6omqwGo7DV3wweACdG l641lnDDgDULsV2eDC/W22FcVkot/audC6FYeIiV37jle+UdMJJvM+lJF5FrKPLe OPgLcXWOdRqNQRsiH97qp7BEIxuuh1mdoRC9B2KzN7Keg0W8ocrYhB2UZll3t4gn VeDyPmQvLnyyxWLLRIQtV/ERheA5X8XfCIVjSlnD4gvDDFO7gwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMLDlzTTlnlDpYGyn42FlxnwLEh1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYzhh OTcxZi1kN2RjLTRlOTUtYmM2ZS1hMGRiMTVmODBhODQvM2M4YTk3MWYtZDdkYy00 ZTk1LWJjNmUtYTBkYjE1ZjgwYTg0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2M4YTk3MWYtZDdkYy00ZTk1LWJj NmUtYTBkYjE1ZjgwYTg0LzNjOGE5NzFmLWQ3ZGMtNGU5NS1iYzZlLWEwZGIxNWY4 MGE4NC5jcmwwHwYDVR0jBBgwFoAUufpX3ttk7SBqXo1BLS6GNNdjSxQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYzhhOTcxZi1kN2RjLTRlOTUtYmM2ZS1hMGRi MTVmODBhODQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCatl/sdKFLsSKdUQJWJmJJ AahaZAOvm1+098lSTeK1LfCOOnA8nuJ5O1fGarffF+wnikQAcsJTVg4Rs5q+FVtq BP3VCb37ZMDzKQmOpZZQYX/Ksn8NKF5SCcHV9Y/TbGSuk0FLwnSpgv/wU6xAPo/p FqpJc+PPr1Cdm3rBkEVk9Cimj7TIjRQcXhBRhTLxUZKDvk3TUjfr3BWeY0GAzBcS soSMUX6DSLaIYp0uqnuwugciiqZV876t//ClOTFB3tkdfNwVdJfByKNS0pqQpFZT DAuXR0bd19u2LC6hBTqmhMawYZbGsU/T1smnIaleL0TRsOoG7IjD5xEzMrPA0d4P -----END CERTIFICATE-----Generated at Sat Aug 23 21:50:24 2025 by rpki-client