$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.mft File: cf0a8a9b-3645-438a-a6e6-e0385bffcfef.mft (raw, json) Hash identifier: N4NzDfsBAovLDHmPI6z0iBKEv66csmmG0ZWh1AJ2RPo= Subject key identifier: 7C:CF:A9:65:2B:3C:22:7E:F3:C8:10:C9:70:C0:B6:C2:05:3C:F6:7B Authority key identifier: 8C:2B:1A:CD:7B:06:82:D8:BE:8B:14:5D:07:8E:13:B5:90:3D:5C:93 Certificate issuer: /CN=cf0a8a9b-3645-438a-a6e6-e0385bffcfef Certificate serial: 010D0C9F4328584B39DFFEBE162D48A717ECEB80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.mft Manifest number: 010D0C9F432858453FC397D9677135A132B02824 Signing time: Wed 17 Sep 2025 16:00:03 +0000 Manifest this update: Wed 17 Sep 2025 16:00:03 +0000 Manifest next update: Sat 20 Sep 2025 16:00:00 +0000 Files and hashes: 1: cf0a8a9b-3645-438a-a6e6-e0385bffcfef.crl (hash: piLKjphFjyazwuj5F+izDFv7G6ToVaPGFqDgp9j+p6s=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:df:fe:be:16:2d:48:a7:17:ec:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0a8a9b-3645-438a-a6e6-e0385bffcfef Validity Not Before: Sep 17 16:00:03 2025 GMT Not After : Sep 20 16:00:00 2025 GMT Subject: CN=6dcf0f62-8582-4a57-8b25-5f9fd5dd123d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f4:d8:0f:94:cd:e6:b9:e3:4f:4d:8e:c0:e2: f7:eb:02:c5:8c:5e:8e:60:35:09:21:3d:08:9d:a2: c9:cf:d5:cc:b7:a0:f8:42:32:6f:5c:54:d5:5a:21: 96:c5:5e:79:2c:e2:e3:f3:cb:30:28:bd:b9:11:3d: 2f:81:f4:7b:f6:41:03:62:43:49:49:dc:a4:44:e2: f8:5a:fd:9b:a5:db:7a:ce:ff:b2:d3:be:42:77:58: 0c:cb:16:ed:71:36:2d:16:3c:00:48:76:2b:cb:5e: 31:eb:a6:1c:d5:e0:c5:7b:2f:0a:d6:bd:83:63:0b: 41:aa:5d:94:62:f1:88:ab:4f:a7:81:fb:68:01:5d: 28:ee:eb:d3:79:4b:18:64:ad:b6:55:d3:a9:d8:69: c1:5c:3e:c8:a1:1d:9d:2d:bf:48:97:3e:d7:86:6b: e6:fa:d8:df:68:36:fb:36:e1:3e:18:6e:7d:62:c8: 9e:b6:d8:06:fd:62:70:c2:af:b3:f2:21:8a:bd:3b: 09:49:dc:32:71:8a:e5:ee:6c:f3:3a:94:7e:c8:dc: 7f:11:2c:41:3a:cf:3e:4f:9e:ab:27:79:06:8a:b7: ba:98:1e:83:31:35:f1:0c:20:42:13:f8:43:d1:47: cc:ea:fe:b9:da:d2:33:20:19:4a:d1:81:16:e6:28: 99:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:CF:A9:65:2B:3C:22:7E:F3:C8:10:C9:70:C0:B6:C2:05:3C:F6:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.crl X509v3 Authority Key Identifier: keyid:8C:2B:1A:CD:7B:06:82:D8:BE:8B:14:5D:07:8E:13:B5:90:3D:5C:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:d9:b8:5e:56:13:0b:53:bc:33:82:4e:d5:cb:b4:07:2e:cd: d5:47:80:39:a3:76:ca:00:1f:8b:4e:f7:99:99:c1:2b:65:73: 8e:8e:55:82:2e:b9:28:5a:5b:e7:77:a9:c3:78:1f:6c:fa:b0: 4d:5d:bf:cc:3d:d6:39:0f:9c:09:ab:6e:8a:27:ea:b1:5d:74: 31:12:d8:2c:83:cc:9b:ff:e8:f7:f2:f1:72:cf:38:f1:38:7d: d6:5a:13:0e:dc:c5:73:a9:2b:f3:5b:8f:19:63:09:f5:a2:b1: 9c:b6:99:34:cc:b1:41:3d:14:81:fa:f9:79:fc:e6:36:d8:8b: 26:36:4a:1c:49:98:3d:77:a6:99:a4:9b:e0:18:ac:a5:b0:be: 94:70:4e:9b:32:ad:22:96:11:a4:b0:46:4b:66:4e:f7:81:13: fa:67:31:94:fa:70:2e:f4:17:32:eb:d5:a2:40:b3:95:be:01: 1c:0b:8a:52:38:04:3c:72:3e:52:32:ff:e6:89:09:0a:4d:96: b6:49:e0:4d:43:98:03:dc:07:8c:a2:3f:27:7e:2b:01:8d:b0: b7:89:30:af:68:fc:b7:3b:8f:57:45:17:43:2d:ec:0e:68:24: cd:15:32:d6:ca:6e:40:e2:71:c9:91:be:7d:af:7d:22:d5:46: c4:66:f2:e7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEs53/6+Fi1Ipxfs64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwYThhOWItMzY0NS00MzhhLWE2ZTYtZTAzODViZmZj ZmVmMB4XDTI1MDkxNzE2MDAwM1oXDTI1MDkyMDE2MDAwMFowLzEtMCsGA1UEAxMk NmRjZjBmNjItODU4Mi00YTU3LThiMjUtNWY5ZmQ1ZGQxMjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfTYD5TN5rnjT02OwOL36wLFjF6OYDUJIT0I naLJz9XMt6D4QjJvXFTVWiGWxV55LOLj88swKL25ET0vgfR79kEDYkNJSdykROL4 Wv2bpdt6zv+y075Cd1gMyxbtcTYtFjwASHYry14x66Yc1eDFey8K1r2DYwtBql2U YvGIq0+ngftoAV0o7uvTeUsYZK22VdOp2GnBXD7IoR2dLb9Ilz7Xhmvm+tjfaDb7 NuE+GG59YsiettgG/WJwwq+z8iGKvTsJSdwycYrl7mzzOpR+yNx/ESxBOs8+T56r J3kGire6mB6DMTXxDCBCE/hD0UfM6v652tIzIBlK0YEW5iiZpwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHzPqWUrPCJ+88gQyXDAtsIFPPZ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZjBh OGE5Yi0zNjQ1LTQzOGEtYTZlNi1lMDM4NWJmZmNmZWYvY2YwYThhOWItMzY0NS00 MzhhLWE2ZTYtZTAzODViZmZjZmVmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2YwYThhOWItMzY0NS00MzhhLWE2 ZTYtZTAzODViZmZjZmVmL2NmMGE4YTliLTM2NDUtNDM4YS1hNmU2LWUwMzg1YmZm Y2ZlZi5jcmwwHwYDVR0jBBgwFoAUjCsazXsGgti+ixRdB44TtZA9XJMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZjBhOGE5Yi0zNjQ1LTQzOGEtYTZlNi1lMDM4 NWJmZmNmZWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAk2bheVhMLU7wzgk7Vy7QH Ls3VR4A5o3bKAB+LTveZmcErZXOOjlWCLrkoWlvnd6nDeB9s+rBNXb/MPdY5D5wJ q26KJ+qxXXQxEtgsg8yb/+j38vFyzzjxOH3WWhMO3MVzqSvzW48ZYwn1orGctpk0 zLFBPRSB+vl5/OY22IsmNkocSZg9d6aZpJvgGKylsL6UcE6bMq0ilhGksEZLZk73 gRP6ZzGU+nAu9Bcy69WiQLOVvgEcC4pSOAQ8cj5SMv/miQkKTZa2SeBNQ5gD3AeM oj8nfisBjbC3iTCvaPy3O49XRRdDLewOaCTNFTLWym5A4nHJkb59r30i1UbEZvLn -----END CERTIFICATE-----Generated at Thu Sep 18 14:36:23 2025 by rpki-client