$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c3c82f0-740b-49fe-8af2-e3786af86e3a/1c3c82f0-740b-49fe-8af2-e3786af86e3a.mft File: 1c3c82f0-740b-49fe-8af2-e3786af86e3a.mft (raw, json) Hash identifier: pMy4LVByuA2E0qqTTnYFIbjLX+OvR2U7qdyR0enLiHA= Subject key identifier: 19:95:1D:1D:5C:59:70:7B:0F:6A:93:CA:48:42:7C:B5:01:A2:47:99 Authority key identifier: AB:C5:CC:98:D3:E4:52:08:F7:D7:DF:4D:0C:F1:A0:6F:7D:19:8E:25 Certificate issuer: /CN=1c3c82f0-740b-49fe-8af2-e3786af86e3a Certificate serial: 010D0C9F4328584AEE9D5E579FBB6E50BCB48980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c3c82f0-740b-49fe-8af2-e3786af86e3a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c3c82f0-740b-49fe-8af2-e3786af86e3a/1c3c82f0-740b-49fe-8af2-e3786af86e3a.mft Manifest number: 010D0C9F432858494BDABEC65E6E60099DA05596 Signing time: Thu 21 Aug 2025 17:00:08 +0000 Manifest this update: Thu 21 Aug 2025 17:00:08 +0000 Manifest next update: Sun 24 Aug 2025 17:00:00 +0000 Files and hashes: 1: 1c3c82f0-740b-49fe-8af2-e3786af86e3a.crl (hash: PJIIZHM6ewCyaCD2ThhMX4FWuSYCx0ihuFs7+kKXrCU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c3c82f0-740b-49fe-8af2-e3786af86e3a/1c3c82f0-740b-49fe-8af2-e3786af86e3a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c3c82f0-740b-49fe-8af2-e3786af86e3a/1c3c82f0-740b-49fe-8af2-e3786af86e3a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c3c82f0-740b-49fe-8af2-e3786af86e3a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:9d:5e:57:9f:bb:6e:50:bc:b4:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c3c82f0-740b-49fe-8af2-e3786af86e3a Validity Not Before: Aug 21 17:00:08 2025 GMT Not After : Aug 24 17:00:00 2025 GMT Subject: CN=5a91842f-3aeb-47a4-aa4e-4d18ae372a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ca:9a:5f:21:a1:16:8e:bb:f1:5d:fb:44:b8: 02:f3:a2:85:15:25:51:fd:bb:03:6b:e7:0b:4b:63: 6c:16:25:05:1a:71:ae:ad:70:c7:55:48:58:fb:70: f5:ce:f7:70:b7:3a:60:a0:99:f1:9c:0a:dd:74:59: bc:4a:00:a0:0d:7e:25:d5:4b:48:77:96:8e:7f:30: b4:71:d4:47:9a:c3:e0:06:df:f4:b8:63:63:27:4d: df:cb:2d:12:c1:e3:ad:fd:86:51:6d:05:29:1b:6d: 2f:f1:a2:e1:65:1f:fd:f0:40:92:cb:ae:ac:25:3c: 4b:97:e5:6f:0d:fd:1a:27:75:22:d2:8c:9d:5a:39: 92:48:7a:8d:c2:0b:6e:df:24:57:34:e0:d2:89:10: cc:02:d3:ae:ef:f9:7c:52:58:6d:54:dc:82:85:37: 94:5e:75:d6:e6:c5:5c:b8:f6:d7:06:b8:4a:96:63: 5a:db:ee:48:52:17:87:da:9a:b3:4e:42:8a:e4:13: 8c:ad:47:c7:9f:6d:cc:7d:e8:c7:ff:6e:6a:44:25: f7:c5:ae:e6:16:45:39:9a:ff:b1:a6:d3:e1:6a:e7: c4:3f:27:43:4a:f8:76:1b:32:27:a6:bb:24:66:84: 35:aa:bf:0d:02:e9:25:7c:a3:2d:32:9a:24:0b:69: 58:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:95:1D:1D:5C:59:70:7B:0F:6A:93:CA:48:42:7C:B5:01:A2:47:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c3c82f0-740b-49fe-8af2-e3786af86e3a/1c3c82f0-740b-49fe-8af2-e3786af86e3a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c3c82f0-740b-49fe-8af2-e3786af86e3a/1c3c82f0-740b-49fe-8af2-e3786af86e3a.crl X509v3 Authority Key Identifier: keyid:AB:C5:CC:98:D3:E4:52:08:F7:D7:DF:4D:0C:F1:A0:6F:7D:19:8E:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c3c82f0-740b-49fe-8af2-e3786af86e3a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:d1:78:bb:aa:de:2a:fc:8c:3a:e3:d1:33:86:4c:0b:b0:5f: 3b:d7:35:64:33:94:d1:8c:1a:43:96:1b:1b:3d:b4:ab:2e:58: 83:98:e0:a8:ec:d7:c6:c7:f0:d6:76:07:c9:7c:eb:f4:3c:21: 70:c5:95:ab:79:e6:e0:7c:4f:3e:35:2f:73:94:67:ce:98:4d: 09:79:28:4d:da:66:52:cc:e1:3b:13:fb:28:09:b1:78:64:76: 02:c9:20:31:17:be:59:8d:a8:b8:77:21:14:5e:d4:21:06:eb: d8:7c:7d:01:c2:5e:29:81:1d:64:53:0b:70:1f:69:d2:be:8d: 83:23:ec:ef:ec:ba:d1:9f:e6:07:a0:d7:3f:3c:17:a6:e9:b5: 94:ef:00:db:7a:5d:19:a0:8a:95:54:51:11:24:d3:8d:5e:2d: a6:40:b0:42:56:1a:3c:d1:a8:8c:4b:30:c5:61:cc:f2:70:f8: da:47:9f:6c:77:da:03:48:fc:46:8d:13:9a:ac:b2:ad:fd:4b: fa:93:28:86:ca:a1:64:5a:8b:5b:17:0b:79:62:f1:16:86:75: 0c:e0:97:22:86:13:4b:00:21:a2:97:2d:b1:ca:7c:70:b0:19: d2:ab:8b:60:3e:93:5f:2d:ca:29:93:ae:45:4e:c5:32:32:51: eb:34:c6:ac -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErunV5Xn7tuULy0iYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWMzYzgyZjAtNzQwYi00OWZlLThhZjItZTM3ODZhZjg2 ZTNhMB4XDTI1MDgyMTE3MDAwOFoXDTI1MDgyNDE3MDAwMFowLzEtMCsGA1UEAxMk NWE5MTg0MmYtM2FlYi00N2E0LWFhNGUtNGQxOGFlMzcyYThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8qaXyGhFo678V37RLgC86KFFSVR/bsDa+cL S2NsFiUFGnGurXDHVUhY+3D1zvdwtzpgoJnxnArddFm8SgCgDX4l1UtId5aOfzC0 cdRHmsPgBt/0uGNjJ03fyy0SweOt/YZRbQUpG20v8aLhZR/98ECSy66sJTxLl+Vv Df0aJ3Ui0oydWjmSSHqNwgtu3yRXNODSiRDMAtOu7/l8UlhtVNyChTeUXnXW5sVc uPbXBrhKlmNa2+5IUheH2pqzTkKK5BOMrUfHn23MfejH/25qRCX3xa7mFkU5mv+x ptPhaufEPydDSvh2GzInprskZoQ1qr8NAuklfKMtMpokC2lYMQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBmVHR1cWXB7D2qTykhCfLUBokeZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xYzNj ODJmMC03NDBiLTQ5ZmUtOGFmMi1lMzc4NmFmODZlM2EvMWMzYzgyZjAtNzQwYi00 OWZlLThhZjItZTM3ODZhZjg2ZTNhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWMzYzgyZjAtNzQwYi00OWZlLThh ZjItZTM3ODZhZjg2ZTNhLzFjM2M4MmYwLTc0MGItNDlmZS04YWYyLWUzNzg2YWY4 NmUzYS5jcmwwHwYDVR0jBBgwFoAUq8XMmNPkUgj3199NDPGgb30ZjiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xYzNjODJmMC03NDBiLTQ5ZmUtOGFmMi1lMzc4 NmFmODZlM2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAE0Xi7qt4q/Iw649EzhkwL sF871zVkM5TRjBpDlhsbPbSrLliDmOCo7NfGx/DWdgfJfOv0PCFwxZWreebgfE8+ NS9zlGfOmE0JeShN2mZSzOE7E/soCbF4ZHYCySAxF75Zjai4dyEUXtQhBuvYfH0B wl4pgR1kUwtwH2nSvo2DI+zv7LrRn+YHoNc/PBem6bWU7wDbel0ZoIqVVFERJNON Xi2mQLBCVho80aiMSzDFYczycPjaR59sd9oDSPxGjROarLKt/Uv6kyiGyqFkWotb Fwt5YvEWhnUM4JcihhNLACGily2xynxwsBnSq4tgPpNfLcopk65FTsUyMlHrNMas -----END CERTIFICATE-----Generated at Fri Aug 22 01:11:59 2025 by rpki-client