$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft File: a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft (raw, json) Hash identifier: Iz/q23EAHUuvIgLg+lrOpUA0pOFBScobFYVVFetgJwo= Subject key identifier: DD:88:9A:89:A6:81:96:D9:CA:AC:20:11:9A:81:27:11:9C:7A:B3:5B Authority key identifier: 14:71:AC:1E:2B:E8:94:25:09:41:FC:D6:59:07:4C:A3:B5:CF:BB:39 Certificate issuer: /CN=a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae Certificate serial: 010D0C9F4328584AEA8B108F563B1BC8DA5C75F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft Manifest number: 010D0C9F4328584073A8433349A69053F9B88CBF Signing time: Wed 20 Aug 2025 06:00:03 +0000 Manifest this update: Wed 20 Aug 2025 06:00:03 +0000 Manifest next update: Fri 22 Aug 2025 06:00:00 +0000 Files and hashes: 1: a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.crl (hash: qO1zOgrCYsD2KNu0ojMRw2XQUiLKC7DaTl5G6YV+oMo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ea:8b:10:8f:56:3b:1b:c8:da:5c:75:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae Validity Not Before: Aug 20 06:00:03 2025 GMT Not After : Aug 22 06:00:00 2025 GMT Subject: CN=3c0a034a-e42e-497e-8dc5-6e2457f759c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b3:a5:e0:ab:b6:1d:67:e6:ba:3a:e4:cc:f6: 98:c5:06:e3:10:c3:5b:7c:c0:c7:12:c7:15:c7:16: 4e:3d:41:64:14:74:3c:16:34:bd:b9:44:4f:e6:b7: 47:9b:14:23:4f:29:4b:af:f6:54:9d:47:03:bd:0d: 00:79:88:12:16:dd:7b:4e:5e:92:12:44:c2:d0:bb: c0:93:70:0f:48:5e:33:f5:db:ca:77:22:0e:84:0e: 90:14:ec:a4:9a:2e:f2:5a:61:e8:66:13:a0:ba:2e: f0:13:e1:50:84:5f:bd:b0:85:f5:0a:2a:e5:79:eb: a3:e4:f2:66:d5:26:4c:0f:cb:2a:da:af:50:e2:d3: ff:af:71:23:1f:f8:cc:9f:ed:8b:0a:d0:b1:ec:5c: 4e:97:7b:21:14:63:1b:90:5b:b0:72:19:4c:c0:9d: 36:60:3d:1b:3b:17:97:22:19:fe:95:85:e6:df:8d: 51:ea:c3:f3:f8:15:01:91:60:ce:f7:52:f6:8e:04: 10:d7:c4:5d:bb:81:9e:55:b3:a9:11:0b:91:7c:06: 72:e7:54:04:db:aa:fb:23:c5:e6:06:b2:65:64:01: 2f:41:96:37:41:d7:ce:d3:5a:a3:81:93:55:76:8f: 3f:35:3d:23:ce:9e:65:aa:25:4d:a2:92:d6:2f:7c: e8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:88:9A:89:A6:81:96:D9:CA:AC:20:11:9A:81:27:11:9C:7A:B3:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.crl X509v3 Authority Key Identifier: keyid:14:71:AC:1E:2B:E8:94:25:09:41:FC:D6:59:07:4C:A3:B5:CF:BB:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:b2:94:51:b0:c8:88:65:66:9e:a7:df:e3:e4:3b:01:63:aa: 5e:13:b1:8a:ce:79:58:5d:bb:06:2f:5c:23:4a:b5:66:58:2c: 9d:82:64:6c:07:e0:4a:90:2e:0c:1b:11:45:cf:fa:d4:d8:fa: 11:1c:6e:3a:a3:05:c8:9a:fb:12:5c:8d:99:89:dd:8a:a7:51: ac:39:68:d6:d8:6d:90:70:91:f7:c7:42:0a:be:a8:17:b8:a1: f1:ce:98:c7:31:81:a8:61:48:be:dc:c3:0d:a6:43:3a:e7:9c: 94:dc:c9:59:2d:c3:cc:8e:de:08:8c:b8:c9:97:d3:a0:cd:56: 9d:76:49:a0:cf:0f:18:ed:8b:2f:18:a2:da:16:a0:ae:d3:76: 9a:c2:ea:17:68:29:54:44:58:fa:da:f5:59:3e:0e:51:94:b1: 8b:31:8e:56:14:2e:65:74:52:98:8a:23:d1:1a:e0:23:3b:7d: 86:73:6b:4b:4d:67:29:b7:04:fa:56:6c:a6:3b:ad:ce:8a:71: 6a:49:1c:40:c5:bd:7e:2e:d9:53:dd:5f:bc:63:f2:36:f4:89: 15:10:8a:d1:6c:17:e8:35:75:18:51:97:97:07:0f:fb:1b:92: 17:aa:ed:36:aa:a5:ab:d3:48:e9:b6:2a:12:42:d6:70:2c:a6: 39:06:67:e8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErqixCPVjsbyNpcdfgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJhMWNmMzQtOWRlNi00M2IyLThjNmUtZWZiMjdhOWFj NWFlMB4XDTI1MDgyMDA2MDAwM1oXDTI1MDgyMjA2MDAwMFowLzEtMCsGA1UEAxMk M2MwYTAzNGEtZTQyZS00OTdlLThkYzUtNmUyNDU3Zjc1OWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7Ol4Ku2HWfmujrkzPaYxQbjEMNbfMDHEscV xxZOPUFkFHQ8FjS9uURP5rdHmxQjTylLr/ZUnUcDvQ0AeYgSFt17Tl6SEkTC0LvA k3APSF4z9dvKdyIOhA6QFOykmi7yWmHoZhOgui7wE+FQhF+9sIX1Cirleeuj5PJm 1SZMD8sq2q9Q4tP/r3EjH/jMn+2LCtCx7FxOl3shFGMbkFuwchlMwJ02YD0bOxeX Ihn+lYXm341R6sPz+BUBkWDO91L2jgQQ18Rdu4GeVbOpEQuRfAZy51QE26r7I8Xm BrJlZAEvQZY3QdfO01qjgZNVdo8/NT0jzp5lqiVNopLWL3zo7wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFN2ImommgZbZyqwgEZqBJxGcerNbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMmEx Y2YzNC05ZGU2LTQzYjItOGM2ZS1lZmIyN2E5YWM1YWUvYTJhMWNmMzQtOWRlNi00 M2IyLThjNmUtZWZiMjdhOWFjNWFlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTJhMWNmMzQtOWRlNi00M2IyLThj NmUtZWZiMjdhOWFjNWFlL2EyYTFjZjM0LTlkZTYtNDNiMi04YzZlLWVmYjI3YTlh YzVhZS5jcmwwHwYDVR0jBBgwFoAUFHGsHivolCUJQfzWWQdMo7XPuzkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hMmExY2YzNC05ZGU2LTQzYjItOGM2ZS1lZmIy N2E5YWM1YWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCKspRRsMiIZWaep9/j5DsB Y6peE7GKznlYXbsGL1wjSrVmWCydgmRsB+BKkC4MGxFFz/rU2PoRHG46owXImvsS XI2Zid2Kp1GsOWjW2G2QcJH3x0IKvqgXuKHxzpjHMYGoYUi+3MMNpkM655yU3MlZ LcPMjt4IjLjJl9OgzVaddkmgzw8Y7YsvGKLaFqCu03aawuoXaClURFj62vVZPg5R lLGLMY5WFC5ldFKYiiPRGuAjO32Gc2tLTWcptwT6VmymO63OinFqSRxAxb1+LtlT 3V+8Y/I29IkVEIrRbBfoNXUYUZeXBw/7G5IXqu02qqWr00jptioSQtZwLKY5Bmfo -----END CERTIFICATE-----Generated at Wed Aug 20 17:15:09 2025 by rpki-client