$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4fa8d320-d449-4e92-b9cc-502f6f725a0b/4fa8d320-d449-4e92-b9cc-502f6f725a0b.mft File: 4fa8d320-d449-4e92-b9cc-502f6f725a0b.mft (raw, json) Hash identifier: K1gjRlwD7lY20QuHnPZTUaKXkVAKaDkR4axpNAlI3es= Subject key identifier: 96:C2:BC:96:3C:F3:12:CD:74:AA:11:85:50:33:BB:80:34:85:1A:C3 Authority key identifier: 6F:D1:B4:14:9F:83:AC:05:DB:92:A9:58:10:C2:AC:B6:39:F7:60:9F Certificate issuer: /CN=4fa8d320-d449-4e92-b9cc-502f6f725a0b Certificate serial: 010D0C9F4328584AF71B313C3B463AC61A493200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4fa8d320-d449-4e92-b9cc-502f6f725a0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4fa8d320-d449-4e92-b9cc-502f6f725a0b/4fa8d320-d449-4e92-b9cc-502f6f725a0b.mft Manifest number: 010D0C9F432858477F1321230506DECB8D5488DE Signing time: Sun 24 Aug 2025 18:00:08 +0000 Manifest this update: Sun 24 Aug 2025 18:00:08 +0000 Manifest next update: Wed 27 Aug 2025 18:00:00 +0000 Files and hashes: 1: 4fa8d320-d449-4e92-b9cc-502f6f725a0b.crl (hash: uV5hicm8gyQ6m9seZA0QcKl6sHqIxs3Cuk4zBKydshA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4fa8d320-d449-4e92-b9cc-502f6f725a0b/4fa8d320-d449-4e92-b9cc-502f6f725a0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4fa8d320-d449-4e92-b9cc-502f6f725a0b/4fa8d320-d449-4e92-b9cc-502f6f725a0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4fa8d320-d449-4e92-b9cc-502f6f725a0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:1b:31:3c:3b:46:3a:c6:1a:49:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fa8d320-d449-4e92-b9cc-502f6f725a0b Validity Not Before: Aug 24 18:00:08 2025 GMT Not After : Aug 27 18:00:00 2025 GMT Subject: CN=b1fb9fe8-0f44-4ade-af4c-e6fd37c3ce00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:e0:c0:c0:0d:fa:55:46:6f:cc:b2:b6:42:5d: 1c:3d:33:b1:27:ab:e4:9d:ce:aa:7c:b1:30:b3:9a: 5a:db:ce:48:c9:73:35:4f:f2:59:e4:b4:d8:6f:9c: 5d:17:c7:7d:79:20:cc:96:f9:b8:f5:d3:67:2c:e7: 2a:f5:e9:5d:e1:18:5f:61:77:cc:0c:cd:76:f2:1a: 2e:ac:9d:25:8d:5e:10:40:54:c2:7b:e2:d6:dd:d4: b7:82:03:c8:d4:70:d6:06:2d:d1:b2:07:96:d1:01: 8a:10:86:72:bb:8d:b1:b6:9d:05:65:17:92:ae:e4: a2:92:a9:e5:9f:9f:4e:ee:c3:28:d1:d5:cd:f7:ea: 75:65:45:3c:c6:8b:7c:be:62:5e:6f:12:0d:e2:10: fc:84:ed:48:7c:8c:8c:c8:37:07:18:ca:70:12:d1: 17:2e:0f:f0:d3:2b:1a:5c:ee:bb:78:9b:b0:05:7a: 5c:d7:c3:1a:c8:1d:b2:68:6d:e6:52:e5:66:15:7b: 80:17:d4:d2:5c:28:95:71:a2:e5:10:6b:35:ca:e3: 9f:48:97:ca:82:42:5c:6d:58:58:bc:43:09:b7:68: 14:a4:6f:6b:ee:45:32:89:14:db:96:f8:c1:2c:91: 92:19:63:e9:f2:e6:c6:c7:03:50:a4:a6:cc:50:7f: 56:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:C2:BC:96:3C:F3:12:CD:74:AA:11:85:50:33:BB:80:34:85:1A:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4fa8d320-d449-4e92-b9cc-502f6f725a0b/4fa8d320-d449-4e92-b9cc-502f6f725a0b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4fa8d320-d449-4e92-b9cc-502f6f725a0b/4fa8d320-d449-4e92-b9cc-502f6f725a0b.crl X509v3 Authority Key Identifier: keyid:6F:D1:B4:14:9F:83:AC:05:DB:92:A9:58:10:C2:AC:B6:39:F7:60:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4fa8d320-d449-4e92-b9cc-502f6f725a0b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:02:d4:d9:2e:6b:aa:8c:63:46:b3:ec:ac:85:9e:6e:d7:03: e8:f7:35:ce:a2:ea:ce:b4:48:72:c9:6d:5e:06:29:fa:a8:24: dc:3c:ce:d4:c5:e2:40:e8:c1:e0:2c:be:8b:ff:a9:cb:17:d6: ab:c3:42:36:83:e6:5a:2f:7f:62:c0:30:eb:9a:c8:2d:bc:ce: 6e:86:a2:6b:7c:37:c0:3b:33:53:92:f1:8d:93:61:f0:68:19: c2:25:2f:02:b1:96:e4:9d:dc:96:c4:84:93:47:05:e8:33:81: d4:89:9f:74:6b:9e:68:bf:81:f8:54:3e:db:bb:3e:97:7f:86: ed:5a:07:48:ab:c8:6e:32:18:97:05:c5:14:02:04:32:f4:9d: af:87:1e:85:31:ae:4f:e1:7b:39:15:50:e2:ea:b8:0e:82:0d: 50:ed:93:c2:a3:fe:4c:90:f9:4d:27:5c:f1:b5:34:6c:3c:a4: ed:cb:7b:c2:8e:88:cb:26:0c:55:3c:a4:7f:a7:6c:8d:3f:5b: c6:f8:84:55:4d:a5:8e:5b:1e:d8:a0:46:8e:22:14:d0:fe:7e: 2e:69:76:62:5d:60:41:b9:ec:7b:68:f4:c0:61:47:51:70:77: 95:97:02:bf:dd:55:f1:eb:97:cc:1a:14:2f:a8:b3:94:d7:a9: b7:53:b7:40 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr3GzE8O0Y6xhpJMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZhOGQzMjAtZDQ0OS00ZTkyLWI5Y2MtNTAyZjZmNzI1 YTBiMB4XDTI1MDgyNDE4MDAwOFoXDTI1MDgyNzE4MDAwMFowLzEtMCsGA1UEAxMk YjFmYjlmZTgtMGY0NC00YWRlLWFmNGMtZTZmZDM3YzNjZTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9+DAwA36VUZvzLK2Ql0cPTOxJ6vknc6qfLEw s5pa285IyXM1T/JZ5LTYb5xdF8d9eSDMlvm49dNnLOcq9eld4RhfYXfMDM128hou rJ0ljV4QQFTCe+LW3dS3ggPI1HDWBi3RsgeW0QGKEIZyu42xtp0FZReSruSikqnl n59O7sMo0dXN9+p1ZUU8xot8vmJebxIN4hD8hO1IfIyMyDcHGMpwEtEXLg/w0ysa XO67eJuwBXpc18MayB2yaG3mUuVmFXuAF9TSXCiVcaLlEGs1yuOfSJfKgkJcbVhY vEMJt2gUpG9r7kUyiRTblvjBLJGSGWPp8ubGxwNQpKbMUH9WcwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJbCvJY88xLNdKoRhVAzu4A0hRrDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80ZmE4 ZDMyMC1kNDQ5LTRlOTItYjljYy01MDJmNmY3MjVhMGIvNGZhOGQzMjAtZDQ0OS00 ZTkyLWI5Y2MtNTAyZjZmNzI1YTBiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNGZhOGQzMjAtZDQ0OS00ZTkyLWI5 Y2MtNTAyZjZmNzI1YTBiLzRmYThkMzIwLWQ0NDktNGU5Mi1iOWNjLTUwMmY2Zjcy NWEwYi5jcmwwHwYDVR0jBBgwFoAUb9G0FJ+DrAXbkqlYEMKstjn3YJ8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80ZmE4ZDMyMC1kNDQ5LTRlOTItYjljYy01MDJm NmY3MjVhMGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBtAtTZLmuqjGNGs+yshZ5u 1wPo9zXOourOtEhyyW1eBin6qCTcPM7UxeJA6MHgLL6L/6nLF9arw0I2g+ZaL39i wDDrmsgtvM5uhqJrfDfAOzNTkvGNk2HwaBnCJS8CsZbkndyWxISTRwXoM4HUiZ90 a55ov4H4VD7buz6Xf4btWgdIq8huMhiXBcUUAgQy9J2vhx6FMa5P4Xs5FVDi6rgO gg1Q7ZPCo/5MkPlNJ1zxtTRsPKTty3vCjojLJgxVPKR/p2yNP1vG+IRVTaWOWx7Y oEaOIhTQ/n4uaXZiXWBBuex7aPTAYUdRcHeVlwK/3VXx65fMGhQvqLOU16m3U7dA -----END CERTIFICATE-----Generated at Mon Aug 25 09:41:19 2025 by rpki-client