$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960/9ac09e11-24a9-4451-9633-b772a7a11960.mft File: 9ac09e11-24a9-4451-9633-b772a7a11960.mft (raw, json) Hash identifier: wzFcT66Z43C6uaSabRjxxCe4qp3zHfT9Qtfhx68BdH0= Subject key identifier: 41:BA:39:09:6B:20:3C:0D:F4:0A:CD:96:EF:1B:35:AC:A6:C4:83:72 Authority key identifier: 37:3B:8B:C5:A7:B6:F6:F2:F3:42:D2:AA:1E:43:9E:99:3F:5B:84:E6 Certificate issuer: /CN=9ac09e11-24a9-4451-9633-b772a7a11960 Certificate serial: 010D0C9F4328584AEA4F81B44E5BE6C40F14DC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960/9ac09e11-24a9-4451-9633-b772a7a11960.mft Manifest number: 010D0C9F4328584073A83D34A51D88168A7088BF Signing time: Wed 20 Aug 2025 04:00:03 +0000 Manifest this update: Wed 20 Aug 2025 04:00:03 +0000 Manifest next update: Fri 22 Aug 2025 04:00:00 +0000 Files and hashes: 1: 9ac09e11-24a9-4451-9633-b772a7a11960.crl (hash: wPRWV9dsFexbIG2eDUhpnF2XSXQ2mFK96Ytyyz+wr/w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960/9ac09e11-24a9-4451-9633-b772a7a11960.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960/9ac09e11-24a9-4451-9633-b772a7a11960.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ea:4f:81:b4:4e:5b:e6:c4:0f:14:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ac09e11-24a9-4451-9633-b772a7a11960 Validity Not Before: Aug 20 04:00:03 2025 GMT Not After : Aug 22 04:00:00 2025 GMT Subject: CN=01c5892c-f601-4e86-bceb-02b42c089a42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:63:41:a7:cb:5b:6a:9e:28:b6:53:3d:22:7c: 2d:42:0a:cd:b8:ca:44:5d:7f:f0:3d:d2:12:4e:39: 1d:98:7c:36:2f:c6:2e:54:b2:fd:fd:b8:c5:82:9a: 62:b4:21:75:5e:73:c4:e1:68:65:3a:0e:af:a8:81: a3:40:71:a0:08:32:37:2b:12:1b:6f:21:fc:8f:39: 76:51:fb:70:b9:1a:1a:74:ea:b5:41:9f:30:8e:a6: 9d:de:78:3e:70:8d:3b:68:21:da:46:ae:d2:45:33: 72:23:7d:8d:08:a4:14:d1:a7:b1:c3:d7:d0:ec:c0: 0a:80:1c:0d:2b:b1:99:e1:fe:ff:6c:d1:d5:72:1a: 49:9d:ba:6d:6d:1e:7e:db:2c:15:30:35:69:39:e6: 7c:2d:ac:82:ed:47:92:c2:15:47:a5:32:8d:50:0c: 37:71:7b:d6:38:b3:bf:a0:ec:e8:cc:7c:46:79:05: b5:ed:f6:8b:d9:94:8e:eb:e2:fd:09:11:68:fc:7d: 0e:d3:33:5e:00:e1:22:a6:a8:cc:24:dc:41:28:30: ca:49:74:8e:0d:a6:84:53:38:b3:ad:a6:5f:d7:0b: bf:51:ea:04:14:6f:ce:17:c0:65:89:9b:85:1e:61: 79:81:85:7c:69:08:6b:a9:d3:0d:dc:82:b5:56:46: 0b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:BA:39:09:6B:20:3C:0D:F4:0A:CD:96:EF:1B:35:AC:A6:C4:83:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960/9ac09e11-24a9-4451-9633-b772a7a11960.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960/9ac09e11-24a9-4451-9633-b772a7a11960.crl X509v3 Authority Key Identifier: keyid:37:3B:8B:C5:A7:B6:F6:F2:F3:42:D2:AA:1E:43:9E:99:3F:5B:84:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:f3:3b:b4:68:05:23:e8:6f:67:aa:d2:4a:3e:17:f2:e2:14: 4d:c3:a0:37:51:ad:36:c6:f6:75:c4:0b:68:76:d0:d3:d1:c0: 1d:fe:30:b4:ba:85:52:93:08:44:42:cf:f1:08:79:72:5b:37: 06:da:7b:77:12:23:7a:78:55:f8:64:63:03:17:5a:d3:03:3c: 33:84:3b:ac:d7:c3:af:34:66:a3:ae:3e:b2:57:7a:47:c5:b5: 03:8b:0f:06:a3:29:d2:fa:d3:f3:c8:01:ad:cb:fb:35:78:21: 7d:61:72:a5:f9:2b:b6:d6:ef:84:db:bc:f2:a4:e3:9b:03:4e: 45:ed:1e:6c:83:92:ca:61:e6:b9:33:93:1f:1f:6e:99:31:8a: 5f:6b:c5:06:48:4b:2d:04:d7:ce:bd:b7:b4:ae:06:38:f9:39: 01:11:a0:09:b2:92:95:b3:31:7a:bf:6f:f4:da:15:c2:f8:09: 27:2f:17:4a:ea:19:c8:e4:b1:0d:20:99:1a:02:27:86:75:43: 12:41:3f:77:b6:58:a6:76:fc:08:c7:4a:68:41:6d:3f:ca:ae: 59:8a:66:db:1c:67:62:bd:63:1a:7e:7b:41:04:bc:fe:25:0d: 43:77:5c:89:c7:a5:fd:32:07:f6:cb:9d:81:bc:0d:93:b1:cb: e3:04:ca:ce -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErqT4G0TlvmxA8U3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFjMDllMTEtMjRhOS00NDUxLTk2MzMtYjc3MmE3YTEx OTYwMB4XDTI1MDgyMDA0MDAwM1oXDTI1MDgyMjA0MDAwMFowLzEtMCsGA1UEAxMk MDFjNTg5MmMtZjYwMS00ZTg2LWJjZWItMDJiNDJjMDg5YTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWNBp8tbap4otlM9InwtQgrNuMpEXX/wPdIS TjkdmHw2L8YuVLL9/bjFgppitCF1XnPE4WhlOg6vqIGjQHGgCDI3KxIbbyH8jzl2 UftwuRoadOq1QZ8wjqad3ng+cI07aCHaRq7SRTNyI32NCKQU0aexw9fQ7MAKgBwN K7GZ4f7/bNHVchpJnbptbR5+2ywVMDVpOeZ8LayC7UeSwhVHpTKNUAw3cXvWOLO/ oOzozHxGeQW17faL2ZSO6+L9CRFo/H0O0zNeAOEipqjMJNxBKDDKSXSODaaEUziz raZf1wu/UeoEFG/OF8BliZuFHmF5gYV8aQhrqdMN3IK1VkYLYwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEG6OQlrIDwN9ArNlu8bNaymxINyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85YWMw OWUxMS0yNGE5LTQ0NTEtOTYzMy1iNzcyYTdhMTE5NjAvOWFjMDllMTEtMjRhOS00 NDUxLTk2MzMtYjc3MmE3YTExOTYwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOWFjMDllMTEtMjRhOS00NDUxLTk2 MzMtYjc3MmE3YTExOTYwLzlhYzA5ZTExLTI0YTktNDQ1MS05NjMzLWI3NzJhN2Ex MTk2MC5jcmwwHwYDVR0jBBgwFoAUNzuLxae29vLzQtKqHkOemT9bhOYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85YWMwOWUxMS0yNGE5LTQ0NTEtOTYzMy1iNzcy YTdhMTE5NjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCI8zu0aAUj6G9nqtJKPhfy 4hRNw6A3Ua02xvZ1xAtodtDT0cAd/jC0uoVSkwhEQs/xCHlyWzcG2nt3EiN6eFX4 ZGMDF1rTAzwzhDus18OvNGajrj6yV3pHxbUDiw8GoynS+tPzyAGty/s1eCF9YXKl +Su21u+E27zypOObA05F7R5sg5LKYea5M5MfH26ZMYpfa8UGSEstBNfOvbe0rgY4 +TkBEaAJspKVszF6v2/02hXC+AknLxdK6hnI5LENIJkaAieGdUMSQT93tlimdvwI x0poQW0/yq5ZimbbHGdivWMafntBBLz+JQ1Dd1yJx6X9Mgf2y52BvA2TscvjBMrO -----END CERTIFICATE-----Generated at Wed Aug 20 17:26:45 2025 by rpki-client