$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.mft File: 3e229d9a-dfd5-4a69-be96-2f27a660d4b5.mft (raw, json) Hash identifier: ubqPgORW5i1CpEVVasgm2GqthWaiUwaqV2aR7rhaeR8= Subject key identifier: 67:7B:6F:19:B5:58:C7:7E:E4:2B:6A:44:E2:2D:12:F0:4F:FB:33:7C Authority key identifier: 57:2E:D3:14:B7:20:C3:3F:3E:1B:3F:A1:B6:FE:36:E9:7D:3D:B0:9F Certificate issuer: /CN=3e229d9a-dfd5-4a69-be96-2f27a660d4b5 Certificate serial: 010D0C9F4328584B37AA3706D3BB61BA481F4480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.mft Manifest number: 010D0C9F4328584583AA4B32D28F2848E443188B Signing time: Tue 16 Sep 2025 21:00:03 +0000 Manifest this update: Tue 16 Sep 2025 21:00:03 +0000 Manifest next update: Thu 18 Sep 2025 21:00:00 +0000 Files and hashes: 1: 3e229d9a-dfd5-4a69-be96-2f27a660d4b5.crl (hash: d01acHLHwrKQC75QvKt5X1RDXazs1298OVhRdlQZFDM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:37:aa:37:06:d3:bb:61:ba:48:1f:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e229d9a-dfd5-4a69-be96-2f27a660d4b5 Validity Not Before: Sep 16 21:00:03 2025 GMT Not After : Sep 18 21:00:00 2025 GMT Subject: CN=d102b856-17dc-4e59-a4a2-3f394e23f237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:df:3c:e1:0d:fb:b5:1b:25:52:d6:c5:c7:31: 2e:ea:c5:db:b3:65:02:06:ed:54:10:cd:7a:f8:81: d8:18:92:7c:ca:87:32:19:31:67:bb:05:e2:1f:44: d1:b3:e0:3e:83:ec:aa:bd:41:32:f8:66:ee:61:c7: 39:5b:31:79:a2:db:fc:57:6f:1b:00:f2:a3:07:d2: b5:20:f2:65:7a:3d:3b:36:e2:26:a8:d6:61:40:c9: 23:55:03:f8:69:87:c7:d6:a4:fb:eb:44:79:e5:db: 61:de:36:a3:87:7c:de:f4:79:a4:b8:83:88:13:63: 1c:68:73:e3:cc:b0:ea:c6:29:3c:d5:6b:87:42:e6: 7e:c2:83:d0:25:54:51:51:b4:7d:14:e0:47:6f:a9: 35:ee:f5:a3:80:ae:cc:5e:05:4b:3f:9b:0c:75:64: f0:49:38:17:2c:d7:c1:f6:52:1c:d8:1d:a5:e2:7c: 38:b6:f2:48:30:d4:76:45:0b:3e:87:fa:3b:f6:b4: cb:a7:d2:fe:33:98:37:d7:44:08:ac:97:6a:0a:f0: 47:a6:f6:2e:21:66:32:ce:15:9d:17:49:28:b8:8f: 1d:8a:a2:19:31:44:84:06:0b:d3:2f:ba:66:3b:b7: fb:9b:8a:e8:56:f1:a9:ec:96:9d:57:83:a5:63:17: 36:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:7B:6F:19:B5:58:C7:7E:E4:2B:6A:44:E2:2D:12:F0:4F:FB:33:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.crl X509v3 Authority Key Identifier: keyid:57:2E:D3:14:B7:20:C3:3F:3E:1B:3F:A1:B6:FE:36:E9:7D:3D:B0:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:a7:ed:70:4b:f5:ab:08:88:c5:b8:7d:da:42:14:0d:5e:75: d3:10:92:5e:66:9f:db:a1:ec:76:b8:c0:6b:ac:1e:5d:b5:d4: 99:ac:73:5d:c2:c0:35:66:03:e0:38:fb:0f:d0:4f:e6:da:18: 1e:2d:68:82:10:cd:ed:f0:63:36:f9:63:cc:b3:1c:a1:08:3f: 49:8d:be:32:90:01:83:59:bd:b0:7b:f9:55:87:70:d8:00:57: 94:d8:34:dc:45:95:40:6d:77:d8:4e:87:2a:2d:29:1d:5b:a9: 79:7e:8a:eb:dc:6a:f6:8c:d3:fa:1d:cc:fb:4f:ea:a6:6f:06: 33:70:32:59:c8:f0:ed:83:74:6d:bd:5b:c0:ec:cb:4e:d0:97: e1:ea:6f:f3:38:b3:f1:c9:58:6e:8c:e5:c0:71:23:40:87:4c: d6:aa:dc:ce:29:d2:f3:c9:0b:2e:0b:1f:8d:37:d5:d0:01:e7: e7:56:b5:71:f1:d6:2b:66:58:c9:0a:95:b4:93:40:79:5c:2e: 2d:64:29:16:41:bc:92:a6:df:af:b8:d7:fb:ba:73:d9:18:16: 3f:a5:c0:b2:54:ef:01:9f:a1:84:1d:b1:d6:e4:c3:06:c6:23: f1:db:a2:6a:22:ce:a4:0d:8f:ba:15:c0:6d:23:25:c4:5d:ad: f2:9e:7b:1e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEs3qjcG07thukgfRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2UyMjlkOWEtZGZkNS00YTY5LWJlOTYtMmYyN2E2NjBk NGI1MB4XDTI1MDkxNjIxMDAwM1oXDTI1MDkxODIxMDAwMFowLzEtMCsGA1UEAxMk ZDEwMmI4NTYtMTdkYy00ZTU5LWE0YTItM2YzOTRlMjNmMjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN884Q37tRslUtbFxzEu6sXbs2UCBu1UEM16 +IHYGJJ8yocyGTFnuwXiH0TRs+A+g+yqvUEy+GbuYcc5WzF5otv8V28bAPKjB9K1 IPJlej07NuImqNZhQMkjVQP4aYfH1qT760R55dth3jajh3ze9HmkuIOIE2McaHPj zLDqxik81WuHQuZ+woPQJVRRUbR9FOBHb6k17vWjgK7MXgVLP5sMdWTwSTgXLNfB 9lIc2B2l4nw4tvJIMNR2RQs+h/o79rTLp9L+M5g310QIrJdqCvBHpvYuIWYyzhWd F0kouI8diqIZMUSEBgvTL7pmO7f7m4roVvGp7JadV4OlYxc2/QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGd7bxm1WMd+5CtqROItEvBP+zN8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZTIy OWQ5YS1kZmQ1LTRhNjktYmU5Ni0yZjI3YTY2MGQ0YjUvM2UyMjlkOWEtZGZkNS00 YTY5LWJlOTYtMmYyN2E2NjBkNGI1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2UyMjlkOWEtZGZkNS00YTY5LWJl OTYtMmYyN2E2NjBkNGI1LzNlMjI5ZDlhLWRmZDUtNGE2OS1iZTk2LTJmMjdhNjYw ZDRiNS5jcmwwHwYDVR0jBBgwFoAUVy7TFLcgwz8+Gz+htv426X09sJ8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZTIyOWQ5YS1kZmQ1LTRhNjktYmU5Ni0yZjI3 YTY2MGQ0YjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBSp+1wS/WrCIjFuH3aQhQN XnXTEJJeZp/boex2uMBrrB5dtdSZrHNdwsA1ZgPgOPsP0E/m2hgeLWiCEM3t8GM2 +WPMsxyhCD9Jjb4ykAGDWb2we/lVh3DYAFeU2DTcRZVAbXfYTocqLSkdW6l5forr 3Gr2jNP6Hcz7T+qmbwYzcDJZyPDtg3RtvVvA7MtO0Jfh6m/zOLPxyVhujOXAcSNA h0zWqtzOKdLzyQsuCx+NN9XQAefnVrVx8dYrZljJCpW0k0B5XC4tZCkWQbySpt+v uNf7unPZGBY/pcCyVO8Bn6GEHbHW5MMGxiPx26JqIs6kDY+6FcBtIyXEXa3ynnse -----END CERTIFICATE-----Generated at Wed Sep 17 18:40:36 2025 by rpki-client