$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/521afd0e-d4dc-449b-89c3-9881a2bfd053/521afd0e-d4dc-449b-89c3-9881a2bfd053.mft File: 521afd0e-d4dc-449b-89c3-9881a2bfd053.mft (raw, json) Hash identifier: FNhs44YS+KRf4gl32X+Okpkqc/Cp/3EypxprPfUPgX8= Subject key identifier: C0:D8:65:F3:15:44:85:3C:37:AC:92:6C:F5:F0:B7:D4:FC:5B:E7:EC Authority key identifier: 41:66:D3:E4:6F:47:2B:AC:BC:A0:5D:EF:EA:52:F2:74:6F:2D:01:DA Certificate issuer: /CN=521afd0e-d4dc-449b-89c3-9881a2bfd053 Certificate serial: 010D0C9F4328584AF6FD687BE1A3E3D5ECE8FF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/521afd0e-d4dc-449b-89c3-9881a2bfd053.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/521afd0e-d4dc-449b-89c3-9881a2bfd053/521afd0e-d4dc-449b-89c3-9881a2bfd053.mft Manifest number: 010D0C9F432858472E44014E34E5BE43E57AF35B Signing time: Sun 24 Aug 2025 17:00:08 +0000 Manifest this update: Sun 24 Aug 2025 17:00:08 +0000 Manifest next update: Tue 26 Aug 2025 17:00:00 +0000 Files and hashes: 1: 521afd0e-d4dc-449b-89c3-9881a2bfd053.crl (hash: YtAWkvuWKRlnODBBaRFab3hHB4BOkE9CHjRlk5GsIaQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/521afd0e-d4dc-449b-89c3-9881a2bfd053/521afd0e-d4dc-449b-89c3-9881a2bfd053.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/521afd0e-d4dc-449b-89c3-9881a2bfd053/521afd0e-d4dc-449b-89c3-9881a2bfd053.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/521afd0e-d4dc-449b-89c3-9881a2bfd053.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:fd:68:7b:e1:a3:e3:d5:ec:e8:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521afd0e-d4dc-449b-89c3-9881a2bfd053 Validity Not Before: Aug 24 17:00:08 2025 GMT Not After : Aug 26 17:00:00 2025 GMT Subject: CN=9aa29251-2d2f-4db9-bb1f-96828b4a02e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5f:94:b8:19:1a:e2:49:98:4e:21:e8:d6:36: 98:1e:85:37:ce:d5:ff:67:52:3b:f8:c5:37:7a:30: d5:44:41:bf:f3:31:d8:fd:ff:a5:26:2c:c0:95:e0: 53:30:3c:c9:36:90:dd:c1:2a:74:71:31:3c:55:cb: df:72:3a:e3:22:83:88:0c:49:2a:3e:41:53:25:5c: a5:b9:8e:0d:de:25:66:54:f1:40:87:50:15:0a:da: 9d:d8:50:8e:c3:09:ab:08:2c:23:b5:a9:72:a7:43: ed:09:b7:8b:0c:8f:bc:7f:d6:f3:ce:c2:fc:80:3e: 9c:72:ee:87:cb:0c:c1:86:1e:28:1c:a5:a5:10:17: 49:2f:eb:c6:9c:e8:88:c7:7c:6f:99:5d:e3:be:f7: 36:91:cb:f2:1e:e7:6a:04:ad:37:85:3e:41:5f:c0: 8a:7b:22:6b:4c:85:0b:50:fd:4f:76:d7:05:63:f4: 09:3d:9b:28:50:5a:3d:27:36:dd:92:7a:aa:28:82: 0a:a1:06:be:be:88:15:64:ff:0c:37:34:50:97:09: 7c:ae:22:12:73:80:7e:88:8f:60:ee:90:ef:aa:d8: 37:f3:bb:68:55:11:83:39:cd:eb:af:ff:74:74:83: 9f:6e:fa:4a:44:25:d8:2b:57:9d:2e:18:f6:e2:41: e4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D8:65:F3:15:44:85:3C:37:AC:92:6C:F5:F0:B7:D4:FC:5B:E7:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/521afd0e-d4dc-449b-89c3-9881a2bfd053/521afd0e-d4dc-449b-89c3-9881a2bfd053.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/521afd0e-d4dc-449b-89c3-9881a2bfd053/521afd0e-d4dc-449b-89c3-9881a2bfd053.crl X509v3 Authority Key Identifier: keyid:41:66:D3:E4:6F:47:2B:AC:BC:A0:5D:EF:EA:52:F2:74:6F:2D:01:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/521afd0e-d4dc-449b-89c3-9881a2bfd053.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:b4:41:42:e9:fc:13:9e:4a:8b:93:82:0a:a8:d3:7e:30:d9: 18:9c:42:ee:2e:e4:69:91:f6:6c:6f:8a:e8:a2:5e:2e:52:9a: d5:fe:59:95:3f:79:6b:ad:1e:53:e9:4b:2b:eb:89:20:a1:61: d6:ff:83:e0:29:ec:42:52:17:b8:e3:0d:da:6c:b5:f3:70:d5: a1:34:91:25:cc:fc:20:9a:f5:02:70:74:3b:e1:a4:c8:65:7d: 6e:1d:dd:19:e2:04:dd:61:6c:da:dc:f0:67:4a:cf:6a:47:7e: a4:09:0f:18:0f:28:d5:cc:ca:c6:d1:53:d8:d0:6c:be:1f:cf: 61:90:8f:76:c5:88:d9:7f:7f:a5:0b:7f:5a:d0:60:b3:04:32: aa:22:82:44:98:ac:2e:85:f3:15:5d:61:8f:d9:c2:3d:5b:61: 02:d2:39:69:cd:3d:91:d7:9c:8b:40:9c:2b:ab:58:07:bf:f5: 89:18:5d:d2:28:a9:a9:13:50:2c:26:1b:87:f9:55:72:28:af: 20:b8:0b:44:28:da:bd:23:d4:04:cb:ea:d5:f8:54:0d:ca:c7: 36:73:9c:0a:69:79:c0:d1:57:d7:7b:15:84:14:53:7c:a7:76: d0:3d:05:c1:e5:39:2a:8a:4c:56:24:92:04:40:1a:eb:2b:64: d9:da:6e:5e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr2/Wh74aPj1ezo/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxYWZkMGUtZDRkYy00NDliLTg5YzMtOTg4MWEyYmZk MDUzMB4XDTI1MDgyNDE3MDAwOFoXDTI1MDgyNjE3MDAwMFowLzEtMCsGA1UEAxMk OWFhMjkyNTEtMmQyZi00ZGI5LWJiMWYtOTY4MjhiNGEwMmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1+UuBka4kmYTiHo1jaYHoU3ztX/Z1I7+MU3 ejDVREG/8zHY/f+lJizAleBTMDzJNpDdwSp0cTE8VcvfcjrjIoOIDEkqPkFTJVyl uY4N3iVmVPFAh1AVCtqd2FCOwwmrCCwjtalyp0PtCbeLDI+8f9bzzsL8gD6ccu6H ywzBhh4oHKWlEBdJL+vGnOiIx3xvmV3jvvc2kcvyHudqBK03hT5BX8CKeyJrTIUL UP1PdtcFY/QJPZsoUFo9JzbdknqqKIIKoQa+vogVZP8MNzRQlwl8riISc4B+iI9g 7pDvqtg387toVRGDOc3rr/90dIOfbvpKRCXYK1edLhj24kHkUQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMDYZfMVRIU8N6ySbPXwt9T8W+fsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81MjFh ZmQwZS1kNGRjLTQ0OWItODljMy05ODgxYTJiZmQwNTMvNTIxYWZkMGUtZDRkYy00 NDliLTg5YzMtOTg4MWEyYmZkMDUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNTIxYWZkMGUtZDRkYy00NDliLTg5 YzMtOTg4MWEyYmZkMDUzLzUyMWFmZDBlLWQ0ZGMtNDQ5Yi04OWMzLTk4ODFhMmJm ZDA1My5jcmwwHwYDVR0jBBgwFoAUQWbT5G9HK6y8oF3v6lLydG8tAdowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81MjFhZmQwZS1kNGRjLTQ0OWItODljMy05ODgx YTJiZmQwNTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQABtEFC6fwTnkqLk4IKqNN+ MNkYnELuLuRpkfZsb4rool4uUprV/lmVP3lrrR5T6Usr64kgoWHW/4PgKexCUhe4 4w3abLXzcNWhNJElzPwgmvUCcHQ74aTIZX1uHd0Z4gTdYWza3PBnSs9qR36kCQ8Y DyjVzMrG0VPY0Gy+H89hkI92xYjZf3+lC39a0GCzBDKqIoJEmKwuhfMVXWGP2cI9 W2EC0jlpzT2R15yLQJwrq1gHv/WJGF3SKKmpE1AsJhuH+VVyKK8guAtEKNq9I9QE y+rV+FQNysc2c5wKaXnA0VfXexWEFFN8p3bQPQXB5TkqikxWJJIEQBrrK2TZ2m5e -----END CERTIFICATE-----Generated at Mon Aug 25 09:30:07 2025 by rpki-client