$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.mft File: aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.mft (raw, json) Hash identifier: vXz2Urh8rVSyz8RaW0x5BgNKrgzW0ryzPHEjDS2fJRo= Subject key identifier: 07:47:EC:02:8F:23:64:44:4F:AF:9D:A3:F0:7C:67:32:D7:AE:06:DC Authority key identifier: 33:67:08:05:95:F8:CB:22:BC:11:35:A5:B5:3E:0F:59:0F:DA:FD:70 Certificate issuer: /CN=aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2 Certificate serial: 010D0C9F4328584B3EA4F859BE2E8526F0C51780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.mft Manifest number: 010D0C9F432858425E3306748870EF88DC1C902E Signing time: Fri 19 Sep 2025 09:00:08 +0000 Manifest this update: Fri 19 Sep 2025 09:00:08 +0000 Manifest next update: Mon 22 Sep 2025 09:00:00 +0000 Files and hashes: 1: aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.crl (hash: Kr0zaOMQYpTlofRvkOuxnc7HL6yiorUHygOLh+KVhb0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3e:a4:f8:59:be:2e:85:26:f0:c5:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2 Validity Not Before: Sep 19 09:00:08 2025 GMT Not After : Sep 22 09:00:00 2025 GMT Subject: CN=698e7dac-c45c-4df1-9d3e-a0a764dcc266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:0d:db:16:01:69:62:ee:cd:4f:23:b4:b1:e0: c1:e7:1a:e2:5b:31:b6:d7:2c:bc:d6:be:ac:ca:46: 15:4f:ab:22:cd:76:fe:d4:f9:3c:52:00:ef:53:e0: 34:6e:17:35:7f:75:0d:b5:c2:54:2c:7c:54:41:5a: 3b:21:68:f1:98:94:a7:4b:9e:79:58:33:5d:c6:1a: c3:e5:72:df:07:f4:63:90:ea:b1:be:a5:a2:7b:58: 8e:a1:88:ef:3c:e2:8a:0d:64:e3:06:da:2d:76:7e: 73:1c:89:10:8a:56:87:3c:bc:d0:7e:63:b3:79:0d: 11:b9:0e:56:c7:71:a0:be:1f:ad:ab:ac:16:8c:58: 85:f6:58:40:78:ee:b4:29:18:da:00:8f:47:b7:09: bb:8f:20:1b:14:11:03:87:1d:49:27:ec:fb:74:50: 9d:0e:c4:82:fe:96:53:fe:07:56:8a:99:87:e0:eb: 8e:64:36:3e:33:6f:30:8c:2d:f2:3b:e9:41:7c:be: d2:9a:0d:0f:87:49:e7:5e:12:dd:2a:7b:13:52:77: b4:b5:b9:a4:45:6b:73:ef:8f:d0:62:10:f5:b1:9b: f5:c7:45:72:cc:2d:9c:74:e4:d8:83:56:07:3d:1d: 34:1b:df:91:b3:69:b1:d5:9b:ea:17:dd:65:c7:cd: fb:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:47:EC:02:8F:23:64:44:4F:AF:9D:A3:F0:7C:67:32:D7:AE:06:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.crl X509v3 Authority Key Identifier: keyid:33:67:08:05:95:F8:CB:22:BC:11:35:A5:B5:3E:0F:59:0F:DA:FD:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:d1:09:b6:86:45:ea:00:90:0a:a9:75:20:5d:4a:ef:bb:39: d4:ab:3d:94:ae:5c:be:5e:a4:20:62:90:3a:af:d4:10:7d:b6: 16:a1:3f:00:6d:9b:db:86:7d:c0:b8:c4:f8:c0:1d:ae:81:aa: 81:e1:a9:43:f3:f7:13:3b:e2:0e:f1:85:69:9e:fc:86:58:a5: 4e:59:dc:c1:32:b0:36:a4:31:2c:73:3f:f9:2e:13:b3:97:28: 01:8c:ba:c7:3a:c8:b3:01:6e:e9:56:8e:61:11:37:ba:1e:1e: 57:14:a5:e9:a6:58:96:79:c0:52:22:c0:15:a0:04:bd:ea:a0: 9a:51:b5:3b:a3:26:20:67:36:e4:0e:96:58:bb:2b:9f:c3:ff: 84:52:37:1b:51:e5:6e:3f:a7:f4:08:d2:48:12:71:84:a6:15: 60:82:0f:bb:50:3a:cf:0f:1b:e4:55:0d:3c:0e:ae:d7:c3:99: 54:0d:33:77:90:d0:9c:e9:dc:cf:e4:5a:dd:e8:83:f4:8e:01: d3:40:8a:ea:22:82:c0:60:c0:a7:87:e8:b1:b1:13:6b:a6:11: a0:18:36:a7:d0:49:2f:0c:50:ad:e2:78:4b:90:75:de:ae:6d: c7:31:da:81:68:33:bf:51:e1:92:a9:39:6d:c5:99:0d:c6:a5: b6:06:e6:3b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEs+pPhZvi6FJvDFF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5ODQ4YWQtNWVmOS00OGIxLTkxYzUtN2ZhZjY5ZTlm NmEyMB4XDTI1MDkxOTA5MDAwOFoXDTI1MDkyMjA5MDAwMFowLzEtMCsGA1UEAxMk Njk4ZTdkYWMtYzQ1Yy00ZGYxLTlkM2UtYTBhNzY0ZGNjMjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQ3bFgFpYu7NTyO0seDB5xriWzG21yy81r6s ykYVT6sizXb+1Pk8UgDvU+A0bhc1f3UNtcJULHxUQVo7IWjxmJSnS555WDNdxhrD 5XLfB/RjkOqxvqWie1iOoYjvPOKKDWTjBtotdn5zHIkQilaHPLzQfmOzeQ0RuQ5W x3Ggvh+tq6wWjFiF9lhAeO60KRjaAI9Htwm7jyAbFBEDhx1JJ+z7dFCdDsSC/pZT /gdWipmH4OuOZDY+M28wjC3yO+lBfL7Smg0Ph0nnXhLdKnsTUne0tbmkRWtz74/Q YhD1sZv1x0VyzC2cdOTYg1YHPR00G9+Rs2mx1ZvqF91lx837lQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAdH7AKPI2RET6+do/B8ZzLXrgbcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYTk4 NDhhZC01ZWY5LTQ4YjEtOTFjNS03ZmFmNjllOWY2YTIvYWE5ODQ4YWQtNWVmOS00 OGIxLTkxYzUtN2ZhZjY5ZTlmNmEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWE5ODQ4YWQtNWVmOS00OGIxLTkx YzUtN2ZhZjY5ZTlmNmEyL2FhOTg0OGFkLTVlZjktNDhiMS05MWM1LTdmYWY2OWU5 ZjZhMi5jcmwwHwYDVR0jBBgwFoAUM2cIBZX4yyK8ETWltT4PWQ/a/XAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYTk4NDhhZC01ZWY5LTQ4YjEtOTFjNS03ZmFm NjllOWY2YTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAT0Qm2hkXqAJAKqXUgXUrv uznUqz2Urly+XqQgYpA6r9QQfbYWoT8AbZvbhn3AuMT4wB2ugaqB4alD8/cTO+IO 8YVpnvyGWKVOWdzBMrA2pDEscz/5LhOzlygBjLrHOsizAW7pVo5hETe6Hh5XFKXp pliWecBSIsAVoAS96qCaUbU7oyYgZzbkDpZYuyufw/+EUjcbUeVuP6f0CNJIEnGE phVggg+7UDrPDxvkVQ08Dq7Xw5lUDTN3kNCc6dzP5Frd6IP0jgHTQIrqIoLAYMCn h+ixsRNrphGgGDan0EkvDFCt4nhLkHXerm3HMdqBaDO/UeGSqTltxZkNxqW2BuY7 -----END CERTIFICATE-----Generated at Fri Sep 19 19:37:48 2025 by rpki-client