$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b041840a-c00f-4348-b69f-6a3d69f88714/b041840a-c00f-4348-b69f-6a3d69f88714.mft File: b041840a-c00f-4348-b69f-6a3d69f88714.mft (raw, json) Hash identifier: pCS6pRgPQvSgnXG6dOWp1QxQpSRKJenSvOdCw+kztWc= Subject key identifier: 2F:74:CC:72:0B:CD:9D:9F:28:D7:AB:1D:42:BD:6E:3B:B6:FB:EE:20 Authority key identifier: 81:43:F2:53:7E:5B:7A:9E:A1:91:76:EA:EF:10:83:FF:06:4E:7F:C0 Certificate issuer: /CN=b041840a-c00f-4348-b69f-6a3d69f88714 Certificate serial: 010D0C9F4328584B37C80B75600097A81FFDB8C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b041840a-c00f-4348-b69f-6a3d69f88714.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b041840a-c00f-4348-b69f-6a3d69f88714/b041840a-c00f-4348-b69f-6a3d69f88714.mft Manifest number: 010D0C9F43285844BAB3F61E9D592D36F0A09753 Signing time: Tue 16 Sep 2025 22:00:08 +0000 Manifest this update: Tue 16 Sep 2025 22:00:08 +0000 Manifest next update: Thu 18 Sep 2025 22:00:00 +0000 Files and hashes: 1: b041840a-c00f-4348-b69f-6a3d69f88714.crl (hash: YUE1p7E8vQDLBaFlBkO14E6aee04zdaa1vSt++wRV8o=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b041840a-c00f-4348-b69f-6a3d69f88714/b041840a-c00f-4348-b69f-6a3d69f88714.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b041840a-c00f-4348-b69f-6a3d69f88714/b041840a-c00f-4348-b69f-6a3d69f88714.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b041840a-c00f-4348-b69f-6a3d69f88714.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:37:c8:0b:75:60:00:97:a8:1f:fd:b8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b041840a-c00f-4348-b69f-6a3d69f88714 Validity Not Before: Sep 16 22:00:08 2025 GMT Not After : Sep 18 22:00:00 2025 GMT Subject: CN=70f97b9d-197a-4a0d-8fcf-bc4daf2c13b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b4:8c:a1:aa:b7:e7:d1:58:82:1f:23:60:41: 78:08:89:7e:d3:df:25:e9:58:b7:c9:c2:d9:0b:9f: 3d:a4:be:48:86:93:19:54:f5:48:67:6d:ae:a1:2a: d6:b7:42:31:21:6e:52:09:c2:71:4f:e1:eb:16:2b: f5:fa:22:a4:01:88:05:65:29:65:b0:53:f3:00:41: 20:a5:45:c2:ed:de:26:b0:0b:d8:11:7a:fa:cd:5a: b4:22:91:e7:8d:31:dc:74:2f:36:06:6a:37:1d:c0: 91:47:4a:63:a1:c0:2a:1d:43:f2:3e:72:20:ca:06: eb:bc:0c:34:cf:8b:9f:1c:0d:c3:86:1b:ff:8f:ac: e1:b0:42:63:78:73:59:6f:43:1c:2b:74:6b:f8:1c: dc:3c:60:c1:c2:6d:58:62:ab:37:92:3b:31:fd:5c: c6:ec:90:dc:b9:21:28:c1:8e:2b:21:7d:24:8c:87: e5:a6:17:62:6f:1e:07:5b:82:56:ad:a5:15:fb:ab: ce:40:67:e3:f6:1f:be:01:fb:97:f5:2a:69:78:5f: 9c:e5:cb:ae:df:0d:44:32:9e:0b:e5:d0:80:a3:58: 95:3e:da:63:8a:ee:b1:ad:4a:1e:c5:f7:d6:79:1d: f1:db:dd:83:e5:4d:a7:04:d3:f9:ee:92:b1:18:a7: 0f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:74:CC:72:0B:CD:9D:9F:28:D7:AB:1D:42:BD:6E:3B:B6:FB:EE:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b041840a-c00f-4348-b69f-6a3d69f88714/b041840a-c00f-4348-b69f-6a3d69f88714.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b041840a-c00f-4348-b69f-6a3d69f88714/b041840a-c00f-4348-b69f-6a3d69f88714.crl X509v3 Authority Key Identifier: keyid:81:43:F2:53:7E:5B:7A:9E:A1:91:76:EA:EF:10:83:FF:06:4E:7F:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b041840a-c00f-4348-b69f-6a3d69f88714.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:d6:a1:3c:34:b1:d7:b4:2f:56:d3:62:c5:7b:27:03:e7:ca: a1:e6:05:b5:7d:2d:00:36:e8:0b:58:cd:0f:dd:18:4f:33:d7: 75:90:4c:73:b3:c8:c5:8f:dc:69:1d:4e:4b:b5:60:73:10:59: e0:48:6e:aa:6c:03:c2:a6:21:f0:c4:e4:c8:69:96:7b:d3:ef: e6:95:6e:fd:8f:7d:b8:bc:a4:77:1d:1d:67:6e:dc:0a:c5:81: f7:1e:89:69:12:6c:cc:31:39:7e:bf:25:c6:a5:68:11:9b:08: a2:9c:65:a4:11:ed:6e:0d:3d:7d:d9:e9:ee:b2:2e:7e:17:3a: 2b:f6:3e:cc:c3:e7:da:16:af:2b:e6:17:e3:c3:68:43:89:d5: e7:4d:91:77:e2:79:05:ae:e8:e5:c7:5f:3c:1c:15:cc:c9:d1: 91:95:b3:98:5e:6e:76:b5:4d:57:84:4a:3d:07:1c:1f:50:08: 67:8d:ba:be:0f:c9:d1:60:79:86:ef:d4:7a:ea:6a:44:ae:50: 56:46:f3:d6:47:a0:59:85:13:7c:9b:81:c1:51:44:22:39:8c: 3e:4e:ca:55:4b:fb:e6:0a:df:e7:ef:bd:69:38:04:dd:a1:c3: b3:66:9e:7b:29:60:99:8f:67:78:fa:09:98:dc:a4:e1:fd:bc: 91:87:f4:c8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEs3yAt1YACXqB/9uMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjA0MTg0MGEtYzAwZi00MzQ4LWI2OWYtNmEzZDY5Zjg4 NzE0MB4XDTI1MDkxNjIyMDAwOFoXDTI1MDkxODIyMDAwMFowLzEtMCsGA1UEAxMk NzBmOTdiOWQtMTk3YS00YTBkLThmY2YtYmM0ZGFmMmMxM2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorSMoaq359FYgh8jYEF4CIl+098l6Vi3ycLZ C589pL5IhpMZVPVIZ22uoSrWt0IxIW5SCcJxT+HrFiv1+iKkAYgFZSllsFPzAEEg pUXC7d4msAvYEXr6zVq0IpHnjTHcdC82Bmo3HcCRR0pjocAqHUPyPnIgygbrvAw0 z4ufHA3Dhhv/j6zhsEJjeHNZb0McK3Rr+BzcPGDBwm1YYqs3kjsx/VzG7JDcuSEo wY4rIX0kjIflphdibx4HW4JWraUV+6vOQGfj9h++AfuX9SppeF+c5cuu3w1EMp4L 5dCAo1iVPtpjiu6xrUoexffWeR3x292D5U2nBNP57pKxGKcPkwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFC90zHILzZ2fKNerHUK9bju2++4gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMDQx ODQwYS1jMDBmLTQzNDgtYjY5Zi02YTNkNjlmODg3MTQvYjA0MTg0MGEtYzAwZi00 MzQ4LWI2OWYtNmEzZDY5Zjg4NzE0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjA0MTg0MGEtYzAwZi00MzQ4LWI2 OWYtNmEzZDY5Zjg4NzE0L2IwNDE4NDBhLWMwMGYtNDM0OC1iNjlmLTZhM2Q2OWY4 ODcxNC5jcmwwHwYDVR0jBBgwFoAUgUPyU35bep6hkXbq7xCD/wZOf8AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iMDQxODQwYS1jMDBmLTQzNDgtYjY5Zi02YTNk NjlmODg3MTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAI1qE8NLHXtC9W02LFeycD 58qh5gW1fS0ANugLWM0P3RhPM9d1kExzs8jFj9xpHU5LtWBzEFngSG6qbAPCpiHw xOTIaZZ70+/mlW79j324vKR3HR1nbtwKxYH3HolpEmzMMTl+vyXGpWgRmwiinGWk Ee1uDT192enusi5+Fzor9j7Mw+faFq8r5hfjw2hDidXnTZF34nkFrujlx188HBXM ydGRlbOYXm52tU1XhEo9BxwfUAhnjbq+D8nRYHmG79R66mpErlBWRvPWR6BZhRN8 m4HBUUQiOYw+TspVS/vmCt/n771pOATdocOzZp57KWCZj2d4+gmY3KTh/byRh/TI -----END CERTIFICATE-----Generated at Wed Sep 17 19:12:24 2025 by rpki-client