$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.mft File: ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.mft (raw, json) Hash identifier: u2a+GyFtsruHOlM/uMIl7pr7N3GSXgByY4W0C4t87YI= Subject key identifier: F1:11:59:92:69:62:C8:88:64:A8:77:9E:AD:A8:51:32:5C:CB:F0:D1 Authority key identifier: 76:8F:EA:CF:C0:A2:28:93:9E:CD:8A:8A:3B:E3:9A:2D:0A:48:36:F0 Certificate issuer: /CN=ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e Certificate serial: 010D0C9F4328584AF756BDE1D21F4173803D1EE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.mft Manifest number: 010D0C9F432858479E50A350BF51B81F78124633 Signing time: Sun 24 Aug 2025 20:00:08 +0000 Manifest this update: Sun 24 Aug 2025 20:00:08 +0000 Manifest next update: Tue 26 Aug 2025 20:00:00 +0000 Files and hashes: 1: ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.crl (hash: Tf1UaRA5z8C2qACgtgXA5zx8v2DVl3LsTN4YPSTi2zI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:56:bd:e1:d2:1f:41:73:80:3d:1e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e Validity Not Before: Aug 24 20:00:08 2025 GMT Not After : Aug 26 20:00:00 2025 GMT Subject: CN=b7ce289a-41b0-497d-be56-32e8e12a2405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:64:29:53:31:e6:da:18:58:c2:94:fd:8b:3a: fa:e5:6a:f6:69:6c:57:59:c9:cb:ca:26:cc:88:39: be:7d:b4:da:27:08:c4:fe:61:01:35:d9:bf:b8:46: b0:e9:0d:49:36:b1:b0:e5:c3:60:f5:cd:63:0f:6c: 92:98:7c:f6:d4:71:5e:eb:69:cc:08:e1:c3:24:b9: 8f:b4:f8:be:e7:06:5b:f2:3a:8f:15:70:f1:4c:8d: d3:dc:a4:67:bc:38:4a:56:1d:53:ac:fd:14:eb:7e: e9:eb:1e:dc:61:ff:42:73:88:c3:35:dc:0b:8d:76: fd:42:ca:04:8d:ac:1a:5d:34:2c:1e:a8:1e:75:b7: 78:71:f2:ff:e7:9a:de:6e:2c:a7:f4:d3:00:8c:1b: 9d:27:44:c2:43:75:66:12:0c:95:da:ae:f7:94:c8: 9b:af:bf:01:fe:99:e0:40:28:1d:d6:50:d0:30:d1: 27:5d:7f:b4:fc:9e:f7:a2:24:8e:ab:3a:f1:d8:c3: de:46:d6:ae:e7:46:29:78:aa:6c:3c:4b:df:88:d6: d6:0e:1e:67:b9:69:b5:22:3d:e7:89:f9:dd:ee:0b: d9:6a:d4:b6:ef:4f:6e:29:e0:f2:d8:08:12:3c:c8: 91:0d:25:4d:7c:0d:06:8d:ba:22:19:b7:d1:0d:df: 32:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:11:59:92:69:62:C8:88:64:A8:77:9E:AD:A8:51:32:5C:CB:F0:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.crl X509v3 Authority Key Identifier: keyid:76:8F:EA:CF:C0:A2:28:93:9E:CD:8A:8A:3B:E3:9A:2D:0A:48:36:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:f3:f9:3a:6c:9a:0c:3f:6d:7f:f9:41:8e:71:c3:f2:75:07: 38:2b:c8:05:42:91:5a:98:86:02:ae:0b:9c:06:34:ce:a9:98: 85:5e:4e:a6:27:60:c9:24:c0:55:87:92:d7:a3:1b:6c:c6:a9: 8e:00:e4:fe:cf:ce:57:e4:2e:d1:ea:e3:89:bc:e2:a3:ba:51: f5:db:60:56:e6:ba:c9:b3:7c:55:61:5e:cd:42:d4:b5:4d:8e: e7:34:20:f6:0d:4c:34:67:3d:37:35:dc:fe:07:8c:50:69:b9: e1:e4:c1:37:2f:05:be:da:85:c0:db:51:ac:59:67:b3:ab:b8: b7:eb:c4:64:0c:5b:dd:fe:f9:41:de:b9:42:8a:2c:ec:d4:49: 6f:97:59:fe:38:de:fe:7c:99:c4:c6:7d:3a:c4:6a:d0:f6:9c: 08:c7:9e:4c:85:1e:73:d2:ec:79:b6:92:5d:9f:df:78:25:cb: e7:4a:c4:ce:eb:95:3d:da:99:70:85:66:51:88:a5:c6:4b:6a: 93:41:37:f4:c4:1a:e6:8a:ea:cc:d9:9c:a5:d6:6c:ab:aa:50: 8a:b2:ae:a0:60:5d:bc:1f:2e:36:31:9c:c8:de:2b:6a:03:fe: 9f:8f:df:ca:25:d9:82:c1:c2:f9:bf:ba:c8:fa:d0:cd:9b:43: eb:fc:26:17 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr3Vr3h0h9Bc4A9HuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWNmMWJjZWEtOWJhZi00ZWVlLTk5NzktMjRiYzFmYmRm ZTFlMB4XDTI1MDgyNDIwMDAwOFoXDTI1MDgyNjIwMDAwMFowLzEtMCsGA1UEAxMk YjdjZTI4OWEtNDFiMC00OTdkLWJlNTYtMzJlOGUxMmEyNDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWQpUzHm2hhYwpT9izr65Wr2aWxXWcnLyibM iDm+fbTaJwjE/mEBNdm/uEaw6Q1JNrGw5cNg9c1jD2ySmHz21HFe62nMCOHDJLmP tPi+5wZb8jqPFXDxTI3T3KRnvDhKVh1TrP0U637p6x7cYf9Cc4jDNdwLjXb9QsoE jawaXTQsHqgedbd4cfL/55rebiyn9NMAjBudJ0TCQ3VmEgyV2q73lMibr78B/png QCgd1lDQMNEnXX+0/J73oiSOqzrx2MPeRtau50YpeKpsPEvfiNbWDh5nuWm1Ij3n ifnd7gvZatS2709uKeDy2AgSPMiRDSVNfA0GjboiGbfRDd8yCwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPERWZJpYsiIZKh3nq2oUTJcy/DRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lY2Yx YmNlYS05YmFmLTRlZWUtOTk3OS0yNGJjMWZiZGZlMWUvZWNmMWJjZWEtOWJhZi00 ZWVlLTk5NzktMjRiYzFmYmRmZTFlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZWNmMWJjZWEtOWJhZi00ZWVlLTk5 NzktMjRiYzFmYmRmZTFlL2VjZjFiY2VhLTliYWYtNGVlZS05OTc5LTI0YmMxZmJk ZmUxZS5jcmwwHwYDVR0jBBgwFoAUdo/qz8CiKJOezYqKO+OaLQpINvAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lY2YxYmNlYS05YmFmLTRlZWUtOTk3OS0yNGJj MWZiZGZlMWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBD8/k6bJoMP21/+UGOccPy dQc4K8gFQpFamIYCrgucBjTOqZiFXk6mJ2DJJMBVh5LXoxtsxqmOAOT+z85X5C7R 6uOJvOKjulH122BW5rrJs3xVYV7NQtS1TY7nNCD2DUw0Zz03Ndz+B4xQabnh5ME3 LwW+2oXA21GsWWezq7i368RkDFvd/vlB3rlCiizs1Elvl1n+ON7+fJnExn06xGrQ 9pwIx55MhR5z0ux5tpJdn994JcvnSsTO65U92plwhWZRiKXGS2qTQTf0xBrmiurM 2Zyl1myrqlCKsq6gYF28Hy42MZzI3itqA/6fj9/KJdmCwcL5v7rI+tDNm0Pr/CYX -----END CERTIFICATE-----Generated at Mon Aug 25 09:32:31 2025 by rpki-client