$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1/8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1.mft File: 8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1.mft (raw, json) Hash identifier: HQ8xHG9kLtqsunZTfGdcEqFn3j8a/qhb9+L4ITxKjY4= Subject key identifier: 28:4B:50:33:0B:9E:D4:55:67:8D:17:28:C1:2A:91:D7:73:74:A2:CC Authority key identifier: 09:9F:D9:1E:F3:20:0D:AB:E7:49:DF:FE:56:9F:3B:09:81:5D:D8:0C Certificate issuer: /CN=8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1 Certificate serial: 010D0C9F4328584AEB794A4950BB9974D4C8AB80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1/8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1.mft Manifest number: 010D0C9F4328584073A856E92CDFAF5F2DDFB1BF Signing time: Wed 20 Aug 2025 14:00:03 +0000 Manifest this update: Wed 20 Aug 2025 14:00:03 +0000 Manifest next update: Fri 22 Aug 2025 14:00:00 +0000 Files and hashes: 1: 8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1.crl (hash: F1CPVxmBZTCsuV0OjHuvDhWx86E8urdVqY5WySptXZU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1/8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1/8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:79:4a:49:50:bb:99:74:d4:c8:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1 Validity Not Before: Aug 20 14:00:03 2025 GMT Not After : Aug 22 14:00:00 2025 GMT Subject: CN=48e4d631-b93a-485d-b849-6019c5f55d90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:46:fa:27:93:1b:16:11:84:62:96:40:fc:2f: 10:ce:df:73:d8:5a:5e:aa:a2:f8:ea:8e:74:2c:4c: 03:c2:77:df:23:80:ce:63:33:93:e2:bb:9e:1a:06: fd:8c:fb:06:62:fd:99:1f:a9:a0:74:cc:2e:cc:91: 08:89:94:cf:f0:0b:20:12:fa:34:bd:5a:f4:29:39: fb:92:d9:4c:bc:d9:f2:8b:70:d3:18:33:40:9b:26: 5d:fa:81:07:9f:6a:88:9d:21:49:3c:1e:12:7a:99: a8:0a:98:e9:a1:bf:d2:e1:65:fb:09:d4:3a:d0:31: 0e:8d:88:6f:4c:1d:44:52:ff:c7:5e:67:48:89:54: ad:25:2c:bf:48:08:91:66:b7:28:98:ee:05:e6:f7: e8:ec:ab:f3:8f:de:54:09:71:5a:62:64:81:98:2c: 89:e0:52:85:28:99:35:ed:fe:ce:80:a9:5a:31:8b: 10:23:e6:50:a2:79:aa:15:5a:0d:ea:15:68:a9:e4: 75:fc:e0:e6:17:54:fb:e6:01:bf:c7:d7:ba:8e:19: 1f:ff:c8:1b:94:61:72:a6:b4:33:50:bb:d7:b0:b0: 8c:4c:97:09:ec:5f:4d:2a:ad:dd:3f:bc:e2:ce:10: 0c:84:5a:e7:7e:37:90:af:e6:10:ed:0a:40:82:f5: 81:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:4B:50:33:0B:9E:D4:55:67:8D:17:28:C1:2A:91:D7:73:74:A2:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1/8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1/8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1.crl X509v3 Authority Key Identifier: keyid:09:9F:D9:1E:F3:20:0D:AB:E7:49:DF:FE:56:9F:3B:09:81:5D:D8:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:88:38:e3:9b:b3:5a:90:53:9b:1c:bf:3f:1a:95:84:3a:43: 90:f4:44:b9:f0:e6:65:8c:55:c4:bc:f5:c8:dc:78:9f:1b:49: d5:79:35:93:64:e7:a5:9a:db:f3:1d:58:8c:53:50:c8:88:68: f0:6b:a2:bf:c4:b7:85:3c:58:5e:c0:58:98:4b:be:d5:64:5b: bc:bf:43:9f:9e:77:c0:01:84:4c:e5:d9:36:f2:39:25:92:f9: e8:72:5d:06:8c:c1:d6:c6:98:d9:49:7d:69:47:58:a0:25:7c: 23:a1:31:20:77:75:f3:f2:ae:f3:ad:64:72:e9:35:43:92:6a: 31:5a:35:1a:1d:e3:4d:9a:9d:19:1e:96:5d:24:99:85:66:7c: ad:e2:46:e2:fd:29:84:a0:bb:b2:e5:b4:de:c1:47:76:7c:cb: bc:5f:c8:8a:a8:66:47:4f:9a:8c:b9:95:2f:32:da:21:ba:d4: b9:c6:ba:f1:e1:01:c9:c1:62:6b:8e:3f:f2:32:91:1c:19:d5: 42:1e:5d:2c:39:b6:de:3f:56:78:99:0c:ae:e2:37:05:51:8d: 4d:c4:39:04:d4:2e:0c:a1:7a:4d:02:b1:e9:62:a7:d9:61:bf: e2:64:8d:cb:5c:c6:a3:e7:0e:15:4f:f3:27:d5:f4:8b:d2:61: 60:ac:fe:61 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErreUpJULuZdNTIq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGIzNzI4YzctNmVmZC00ZDI0LWIwYTktZGMyOWNlNmVl OGQxMB4XDTI1MDgyMDE0MDAwM1oXDTI1MDgyMjE0MDAwMFowLzEtMCsGA1UEAxMk NDhlNGQ2MzEtYjkzYS00ODVkLWI4NDktNjAxOWM1ZjU1ZDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0b6J5MbFhGEYpZA/C8Qzt9z2FpeqqL46o50 LEwDwnffI4DOYzOT4rueGgb9jPsGYv2ZH6mgdMwuzJEIiZTP8AsgEvo0vVr0KTn7 ktlMvNnyi3DTGDNAmyZd+oEHn2qInSFJPB4SepmoCpjpob/S4WX7CdQ60DEOjYhv TB1EUv/HXmdIiVStJSy/SAiRZrcomO4F5vfo7Kvzj95UCXFaYmSBmCyJ4FKFKJk1 7f7OgKlaMYsQI+ZQonmqFVoN6hVoqeR1/ODmF1T75gG/x9e6jhkf/8gblGFyprQz ULvXsLCMTJcJ7F9NKq3dP7zizhAMhFrnfjeQr+YQ7QpAgvWBnQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFChLUDMLntRVZ40XKMEqkddzdKLMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84YjM3 MjhjNy02ZWZkLTRkMjQtYjBhOS1kYzI5Y2U2ZWU4ZDEvOGIzNzI4YzctNmVmZC00 ZDI0LWIwYTktZGMyOWNlNmVlOGQxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGIzNzI4YzctNmVmZC00ZDI0LWIw YTktZGMyOWNlNmVlOGQxLzhiMzcyOGM3LTZlZmQtNGQyNC1iMGE5LWRjMjljZTZl ZThkMS5jcmwwHwYDVR0jBBgwFoAUCZ/ZHvMgDavnSd/+Vp87CYFd2AwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84YjM3MjhjNy02ZWZkLTRkMjQtYjBhOS1kYzI5 Y2U2ZWU4ZDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCIiDjjm7NakFObHL8/GpWE OkOQ9ES58OZljFXEvPXI3HifG0nVeTWTZOelmtvzHViMU1DIiGjwa6K/xLeFPFhe wFiYS77VZFu8v0OfnnfAAYRM5dk28jklkvnocl0GjMHWxpjZSX1pR1igJXwjoTEg d3Xz8q7zrWRy6TVDkmoxWjUaHeNNmp0ZHpZdJJmFZnyt4kbi/SmEoLuy5bTewUd2 fMu8X8iKqGZHT5qMuZUvMtohutS5xrrx4QHJwWJrjj/yMpEcGdVCHl0sObbeP1Z4 mQyu4jcFUY1NxDkE1C4MoXpNArHpYqfZYb/iZI3LXMaj5w4VT/Mn1fSL0mFgrP5h -----END CERTIFICATE-----Generated at Wed Aug 20 23:03:47 2025 by rpki-client