$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2834b5a1-c928-431a-9adf-e4de23e7245a/2834b5a1-c928-431a-9adf-e4de23e7245a.mft File: 2834b5a1-c928-431a-9adf-e4de23e7245a.mft (raw, json) Hash identifier: /bcPPtmxqkMtxyjj96zuKA9xQe4ob37gA6GjK6+wrPI= Subject key identifier: AF:A0:88:4D:FE:15:1C:BD:E8:71:8E:DA:24:8A:C5:29:A3:E7:A1:A4 Authority key identifier: AE:5D:D2:AD:9C:60:02:04:B1:77:E3:F3:78:0C:81:5D:46:D4:E2:88 Certificate issuer: /CN=2834b5a1-c928-431a-9adf-e4de23e7245a Certificate serial: 010D0C9F4328584A761AD33150FA517373BB0F60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2834b5a1-c928-431a-9adf-e4de23e7245a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2834b5a1-c928-431a-9adf-e4de23e7245a/2834b5a1-c928-431a-9adf-e4de23e7245a.mft Manifest number: 010D0C9F432858437E339F9E346CE08CB050AD6B Signing time: Wed 09 Jul 2025 13:00:08 +0000 Manifest this update: Wed 09 Jul 2025 13:00:08 +0000 Manifest next update: Fri 11 Jul 2025 13:00:00 +0000 Files and hashes: 1: 2834b5a1-c928-431a-9adf-e4de23e7245a.crl (hash: LxAxhU6UhzhwpbC2Q5fLS5PcAAfK+QXjT85RMyjjQw8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2834b5a1-c928-431a-9adf-e4de23e7245a/2834b5a1-c928-431a-9adf-e4de23e7245a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2834b5a1-c928-431a-9adf-e4de23e7245a/2834b5a1-c928-431a-9adf-e4de23e7245a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2834b5a1-c928-431a-9adf-e4de23e7245a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:1a:d3:31:50:fa:51:73:73:bb:0f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2834b5a1-c928-431a-9adf-e4de23e7245a Validity Not Before: Jul 9 13:00:08 2025 GMT Not After : Jul 11 13:00:00 2025 GMT Subject: CN=94d2cce4-a5ea-4d42-bbf9-20f8ee15ea4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5e:8a:2d:e6:9d:38:11:a7:0b:85:21:cd:02: b2:39:41:f9:8f:ac:38:2d:eb:10:1a:28:96:8b:41: 9b:c2:c6:6c:d6:be:23:0c:19:f2:7b:bb:bc:00:62: 7b:21:e4:20:df:3d:48:89:2c:ef:d1:65:55:ec:6f: d5:01:3f:12:b5:9c:dd:29:b5:1b:fb:1f:b8:0b:d5: bd:39:5d:2e:00:43:9e:bd:62:66:8d:e9:8a:6a:e4: bd:8b:52:1c:69:85:0a:86:10:79:6a:dc:96:e5:38: b7:49:cf:0c:cc:ed:61:cc:ee:05:ee:f7:b6:d5:cb: 6a:19:4f:35:db:d5:08:fb:63:f3:72:d6:e9:8b:40: 91:b8:15:53:24:8a:e0:46:19:2a:0c:dd:02:ad:5b: 12:9b:32:35:83:58:f3:73:19:18:09:a6:6a:6a:b8: 43:a7:7b:ae:69:7d:93:fc:7e:8f:be:e1:95:7a:cf: 66:0c:48:b9:9d:3d:5f:b1:cb:dd:00:9b:5f:44:39: 75:b8:53:60:bc:f5:2c:2f:cc:05:2c:7e:ed:0d:83: 14:35:5e:96:01:e6:3b:70:43:b8:65:98:35:52:8f: 18:86:6e:2f:bc:a0:21:68:f5:8a:7d:f0:aa:b4:d8: 58:84:02:da:b9:98:4c:19:e8:7b:e6:3e:5c:73:d4: 4c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A0:88:4D:FE:15:1C:BD:E8:71:8E:DA:24:8A:C5:29:A3:E7:A1:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2834b5a1-c928-431a-9adf-e4de23e7245a/2834b5a1-c928-431a-9adf-e4de23e7245a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2834b5a1-c928-431a-9adf-e4de23e7245a/2834b5a1-c928-431a-9adf-e4de23e7245a.crl X509v3 Authority Key Identifier: keyid:AE:5D:D2:AD:9C:60:02:04:B1:77:E3:F3:78:0C:81:5D:46:D4:E2:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2834b5a1-c928-431a-9adf-e4de23e7245a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:b5:cb:1a:a4:a6:59:b0:4e:5c:58:57:bf:82:3d:5a:99:fa: ce:47:4c:d2:7f:3a:80:17:72:89:8a:c0:9f:5e:c6:06:cd:8e: 59:10:c8:a0:f3:2d:a4:d9:94:35:fd:72:f5:42:cb:f1:72:12: 3f:d3:5b:69:8e:3a:0b:4b:49:5a:0e:00:73:88:67:fa:39:4d: 0d:89:a5:36:70:4f:f7:48:e7:aa:8f:55:15:40:c2:38:d0:34: d1:cb:aa:ec:24:0d:c9:6e:e3:92:1d:2e:00:8a:5e:e4:fa:da: b1:77:0a:e3:6e:61:10:d8:3b:4f:c7:59:0f:b5:0f:5a:d1:a7: 7b:44:ef:fe:ca:5c:d8:1f:0a:b0:34:b0:10:33:f7:34:87:1c: 44:28:17:04:de:79:d6:5c:3a:aa:93:06:77:9a:b8:63:0c:4b: c3:5c:20:d5:e7:6f:c0:3f:09:7e:43:93:d4:6d:fd:64:26:27: dd:e2:73:56:0e:11:18:3b:92:92:e7:bf:58:e9:21:dc:70:5f: 71:69:fe:66:fb:22:cc:d9:19:d8:8e:03:90:9a:be:c4:d6:af: e7:f5:33:80:33:3e:cf:49:f2:58:ee:e8:a9:16:7d:cb:74:fe: 9d:04:8a:d8:21:ed:ba:bd:e8:0f:f8:26:92:0a:02:e8:7b:14: 05:00:b7:12 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEp2GtMxUPpRc3O7D2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgzNGI1YTEtYzkyOC00MzFhLTlhZGYtZTRkZTIzZTcy NDVhMB4XDTI1MDcwOTEzMDAwOFoXDTI1MDcxMTEzMDAwMFowLzEtMCsGA1UEAxMk OTRkMmNjZTQtYTVlYS00ZDQyLWJiZjktMjBmOGVlMTVlYTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnF6KLeadOBGnC4UhzQKyOUH5j6w4LesQGiiW i0GbwsZs1r4jDBnye7u8AGJ7IeQg3z1IiSzv0WVV7G/VAT8StZzdKbUb+x+4C9W9 OV0uAEOevWJmjemKauS9i1IcaYUKhhB5atyW5Ti3Sc8MzO1hzO4F7ve21ctqGU81 29UI+2Pzctbpi0CRuBVTJIrgRhkqDN0CrVsSmzI1g1jzcxkYCaZqarhDp3uuaX2T /H6PvuGVes9mDEi5nT1fscvdAJtfRDl1uFNgvPUsL8wFLH7tDYMUNV6WAeY7cEO4 ZZg1Uo8Yhm4vvKAhaPWKffCqtNhYhALauZhMGeh75j5cc9RMgwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFK+giE3+FRy96HGO2iSKxSmj56GkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yODM0 YjVhMS1jOTI4LTQzMWEtOWFkZi1lNGRlMjNlNzI0NWEvMjgzNGI1YTEtYzkyOC00 MzFhLTlhZGYtZTRkZTIzZTcyNDVhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjgzNGI1YTEtYzkyOC00MzFhLTlh ZGYtZTRkZTIzZTcyNDVhLzI4MzRiNWExLWM5MjgtNDMxYS05YWRmLWU0ZGUyM2U3 MjQ1YS5jcmwwHwYDVR0jBBgwFoAUrl3SrZxgAgSxd+PzeAyBXUbU4ogwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yODM0YjVhMS1jOTI4LTQzMWEtOWFkZi1lNGRl MjNlNzI0NWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBvtcsapKZZsE5cWFe/gj1a mfrOR0zSfzqAF3KJisCfXsYGzY5ZEMig8y2k2ZQ1/XL1QsvxchI/01tpjjoLS0la DgBziGf6OU0NiaU2cE/3SOeqj1UVQMI40DTRy6rsJA3JbuOSHS4Ail7k+tqxdwrj bmEQ2DtPx1kPtQ9a0ad7RO/+ylzYHwqwNLAQM/c0hxxEKBcE3nnWXDqqkwZ3mrhj DEvDXCDV52/APwl+Q5PUbf1kJifd4nNWDhEYO5KS579Y6SHccF9xaf5m+yLM2RnY jgOQmr7E1q/n9TOAMz7PSfJY7uipFn3LdP6dBIrYIe26vegP+CaSCgLoexQFALcS -----END CERTIFICATE-----Generated at Wed Jul 9 20:02:28 2025 by rpki-client