$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3cb9bd40-c7d5-4787-b35a-bde5e711565a/3cb9bd40-c7d5-4787-b35a-bde5e711565a.mft File: 3cb9bd40-c7d5-4787-b35a-bde5e711565a.mft (raw, json) Hash identifier: GkVT0hOzB70jfQX4yj3Rm4L2Sfto0eHLdOSvjCzazj0= Subject key identifier: F0:FD:E1:89:2A:3D:2A:EC:CA:72:3D:05:BB:30:87:E4:42:65:85:16 Authority key identifier: 3F:62:FB:9C:A9:3B:51:F9:79:81:6B:83:4C:96:AD:8B:12:2B:48:AF Certificate issuer: /CN=3cb9bd40-c7d5-4787-b35a-bde5e711565a Certificate serial: 010D0C9F4328584AF756BEC4FC6BC9DBE520F300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3cb9bd40-c7d5-4787-b35a-bde5e711565a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3cb9bd40-c7d5-4787-b35a-bde5e711565a/3cb9bd40-c7d5-4787-b35a-bde5e711565a.mft Manifest number: 010D0C9F4328584073A8264A8C6A0A73B1393C84 Signing time: Sun 24 Aug 2025 20:00:08 +0000 Manifest this update: Sun 24 Aug 2025 20:00:08 +0000 Manifest next update: Wed 27 Aug 2025 20:00:00 +0000 Files and hashes: 1: 3cb9bd40-c7d5-4787-b35a-bde5e711565a.crl (hash: w1J4PBQ5WWqYlDWUXvIYtmwxbFhKEdM6RzkzFpoWy9Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3cb9bd40-c7d5-4787-b35a-bde5e711565a/3cb9bd40-c7d5-4787-b35a-bde5e711565a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3cb9bd40-c7d5-4787-b35a-bde5e711565a/3cb9bd40-c7d5-4787-b35a-bde5e711565a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3cb9bd40-c7d5-4787-b35a-bde5e711565a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:56:be:c4:fc:6b:c9:db:e5:20:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cb9bd40-c7d5-4787-b35a-bde5e711565a Validity Not Before: Aug 24 20:00:08 2025 GMT Not After : Aug 27 20:00:00 2025 GMT Subject: CN=c4b524e4-4884-4588-a5e5-9bdc64e3e297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1e:9e:b0:7d:c1:9c:06:e5:9d:fb:d1:f5:62: 22:9f:e2:61:ab:33:53:fc:f2:46:f1:52:35:be:7c: 9e:d2:88:fb:ce:1c:54:47:74:6e:2d:ee:de:23:77: c8:a5:ef:9f:6d:21:9f:54:2f:ae:80:9f:2a:a3:27: 92:ec:b9:45:9c:56:61:08:35:a8:f8:20:a5:bc:8e: b4:8c:19:7f:e2:8d:b1:14:d8:2a:e8:83:e2:11:ae: a9:4c:c2:3f:9f:e6:70:99:fd:a8:62:33:4d:9f:cd: 7c:69:7f:d1:cc:4a:cd:55:cb:cb:56:ca:45:51:9a: e2:84:d2:cf:a5:f8:89:7d:26:a6:50:e4:13:5c:62: 64:c2:1a:f0:56:7f:ed:ec:7b:5d:04:1c:1c:cd:92: c8:17:a9:80:59:fc:4b:e5:d9:fa:09:ce:23:54:74: 3a:92:27:f8:fc:05:b5:bd:77:51:20:0c:97:b2:7f: 3f:60:8a:20:47:a1:27:a4:32:26:fe:bf:b4:00:d5: 7d:e3:15:3d:1a:1f:74:eb:49:ef:79:6b:0f:31:6a: b7:a9:a5:ff:56:f2:dd:54:16:18:5f:f3:61:80:14: 43:06:88:f9:7f:a4:ab:ca:b4:59:75:b8:c0:a7:fe: 34:31:cf:bf:e0:8e:d8:81:cb:30:92:c8:ae:5d:3b: 4a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:FD:E1:89:2A:3D:2A:EC:CA:72:3D:05:BB:30:87:E4:42:65:85:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3cb9bd40-c7d5-4787-b35a-bde5e711565a/3cb9bd40-c7d5-4787-b35a-bde5e711565a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3cb9bd40-c7d5-4787-b35a-bde5e711565a/3cb9bd40-c7d5-4787-b35a-bde5e711565a.crl X509v3 Authority Key Identifier: keyid:3F:62:FB:9C:A9:3B:51:F9:79:81:6B:83:4C:96:AD:8B:12:2B:48:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3cb9bd40-c7d5-4787-b35a-bde5e711565a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:27:ab:b0:a3:cf:d3:94:19:a2:0e:bb:da:65:36:0f:5a:7c: f5:66:c3:61:64:62:69:cb:6e:82:50:0d:6a:37:06:14:d2:e5: 36:fc:68:8a:1d:da:e4:94:68:7a:0e:d2:3b:ff:d7:04:83:a7: aa:d8:81:45:50:fb:c2:57:1d:c0:54:12:0d:ea:d9:a5:4c:9f: bd:bd:73:be:86:c0:11:04:e7:6f:b8:89:80:8e:2e:45:f9:12: 7a:c6:b7:c7:2b:d8:e3:e5:4b:be:1a:d1:8c:e0:6d:83:14:76: be:4e:e2:66:45:27:e1:38:7f:80:a3:e6:b7:87:f2:ef:0d:10: de:5f:da:d6:01:cf:ad:aa:e1:7c:3d:36:8a:87:da:3e:4a:cc: 27:51:86:de:2c:11:d9:55:9f:07:e7:63:74:96:8a:3d:87:fc: 6b:7e:d4:60:7a:ef:ff:ed:d6:8b:e8:84:84:f3:bc:65:ce:44: 41:c3:c3:7e:5e:87:3c:0b:1d:4d:c8:ed:7b:88:47:10:0c:0c: e5:49:94:ec:53:4c:6c:d3:3d:77:41:99:5c:56:25:8c:e7:5d: 84:c6:71:a1:11:c7:a0:43:1a:38:31:07:f3:38:02:28:61:b7: a6:90:9e:21:09:ca:c1:2e:da:74:12:0d:4f:55:ab:74:b5:dc: 95:eb:d9:18 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr3Vr7E/GvJ2+Ug8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2NiOWJkNDAtYzdkNS00Nzg3LWIzNWEtYmRlNWU3MTE1 NjVhMB4XDTI1MDgyNDIwMDAwOFoXDTI1MDgyNzIwMDAwMFowLzEtMCsGA1UEAxMk YzRiNTI0ZTQtNDg4NC00NTg4LWE1ZTUtOWJkYzY0ZTNlMjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkx6esH3BnAblnfvR9WIin+JhqzNT/PJG8VI1 vnye0oj7zhxUR3RuLe7eI3fIpe+fbSGfVC+ugJ8qoyeS7LlFnFZhCDWo+CClvI60 jBl/4o2xFNgq6IPiEa6pTMI/n+Zwmf2oYjNNn818aX/RzErNVcvLVspFUZrihNLP pfiJfSamUOQTXGJkwhrwVn/t7HtdBBwczZLIF6mAWfxL5dn6Cc4jVHQ6kif4/AW1 vXdRIAyXsn8/YIogR6EnpDIm/r+0ANV94xU9Gh9060nveWsPMWq3qaX/VvLdVBYY X/NhgBRDBoj5f6SryrRZdbjAp/40Mc+/4I7YgcswksiuXTtKQwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPD94YkqPSrsynI9Bbswh+RCZYUWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zY2I5 YmQ0MC1jN2Q1LTQ3ODctYjM1YS1iZGU1ZTcxMTU2NWEvM2NiOWJkNDAtYzdkNS00 Nzg3LWIzNWEtYmRlNWU3MTE1NjVhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2NiOWJkNDAtYzdkNS00Nzg3LWIz NWEtYmRlNWU3MTE1NjVhLzNjYjliZDQwLWM3ZDUtNDc4Ny1iMzVhLWJkZTVlNzEx NTY1YS5jcmwwHwYDVR0jBBgwFoAUP2L7nKk7Ufl5gWuDTJatixIrSK8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zY2I5YmQ0MC1jN2Q1LTQ3ODctYjM1YS1iZGU1 ZTcxMTU2NWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAIJ6uwo8/TlBmiDrvaZTYP Wnz1ZsNhZGJpy26CUA1qNwYU0uU2/GiKHdrklGh6DtI7/9cEg6eq2IFFUPvCVx3A VBIN6tmlTJ+9vXO+hsARBOdvuImAji5F+RJ6xrfHK9jj5Uu+GtGM4G2DFHa+TuJm RSfhOH+Ao+a3h/LvDRDeX9rWAc+tquF8PTaKh9o+SswnUYbeLBHZVZ8H52N0loo9 h/xrftRgeu//7daL6ISE87xlzkRBw8N+Xoc8Cx1NyO17iEcQDAzlSZTsU0xs0z13 QZlcViWM512ExnGhEcegQxo4MQfzOAIoYbemkJ4hCcrBLtp0Eg1PVat0tdyV69kY -----END CERTIFICATE-----Generated at Mon Aug 25 13:06:25 2025 by rpki-client