$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e0ae157-3469-42c0-b61a-a35d0eddc629/3e0ae157-3469-42c0-b61a-a35d0eddc629.mft File: 3e0ae157-3469-42c0-b61a-a35d0eddc629.mft (raw, json) Hash identifier: 7/TCFURAif7xP0b1v9J37jzccVx88Ii6VCt5P6OiLyU= Subject key identifier: 4C:FC:1E:1A:D8:19:5D:79:8A:C0:08:AF:02:DA:76:35:3D:36:00:8F Authority key identifier: D4:CE:D6:A2:00:5C:7C:4E:CB:FB:E3:C1:07:2C:42:F3:B2:5A:94:A5 Certificate issuer: /CN=3e0ae157-3469-42c0-b61a-a35d0eddc629 Certificate serial: 010D0C9F4328584A73E5004B34F83D2A4ACF9800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e0ae157-3469-42c0-b61a-a35d0eddc629.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e0ae157-3469-42c0-b61a-a35d0eddc629/3e0ae157-3469-42c0-b61a-a35d0eddc629.mft Manifest number: 010D0C9F432858499FB90A657CB63C528C4983CC Signing time: Tue 08 Jul 2025 18:00:03 +0000 Manifest this update: Tue 08 Jul 2025 18:00:03 +0000 Manifest next update: Fri 11 Jul 2025 18:00:00 +0000 Files and hashes: 1: 3e0ae157-3469-42c0-b61a-a35d0eddc629.crl (hash: 5TdhliblsVCGvk88zUruEj6aQyZEzhx3k6Weyy4MKK0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e0ae157-3469-42c0-b61a-a35d0eddc629/3e0ae157-3469-42c0-b61a-a35d0eddc629.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e0ae157-3469-42c0-b61a-a35d0eddc629/3e0ae157-3469-42c0-b61a-a35d0eddc629.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e0ae157-3469-42c0-b61a-a35d0eddc629.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:e5:00:4b:34:f8:3d:2a:4a:cf:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e0ae157-3469-42c0-b61a-a35d0eddc629 Validity Not Before: Jul 8 18:00:03 2025 GMT Not After : Jul 11 18:00:00 2025 GMT Subject: CN=fb4f3de5-31f0-4ed7-a52e-e8814e8333e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9f:96:7c:ba:12:32:d8:73:e4:21:5f:75:4f: e7:66:e3:90:3d:56:35:50:ee:66:59:dd:c7:bf:56: 59:83:b3:9a:bb:4d:a2:7e:af:b4:fb:bf:ae:69:65: 4c:60:42:7d:64:b0:1d:43:98:8d:91:f3:36:de:c7: 51:54:20:b5:95:50:1e:0d:de:ec:e1:75:db:f2:6f: 79:3b:1d:56:07:a5:2a:8f:72:53:4b:a4:ba:6b:b3: 65:16:2b:e9:83:cb:69:df:96:3a:15:69:62:00:ba: e3:1e:bc:13:05:47:22:7c:7e:db:8c:47:a5:11:06: 75:80:15:db:6e:9a:d6:71:51:ca:97:79:89:43:55: e5:18:18:73:14:7a:8d:23:47:f9:62:a7:62:f1:28: b8:6e:53:c6:ef:8c:fd:d7:ce:dc:a9:b3:63:ef:b2: 57:0d:0d:e8:ca:9d:24:a1:7e:34:84:d1:78:47:1d: 29:a7:01:fa:87:91:f3:f2:28:0d:52:c9:a0:34:c1: 2d:fc:46:bb:6b:7c:ee:ea:ab:d1:9a:13:b8:c6:90: ec:34:11:e2:1d:8d:14:a0:ed:a4:33:f0:00:e5:d3: 5f:1c:dc:87:b9:16:6e:c0:8f:2c:39:57:36:68:2d: c6:2f:8c:94:86:4d:52:3d:a1:dc:ff:27:bc:ed:1d: d1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:FC:1E:1A:D8:19:5D:79:8A:C0:08:AF:02:DA:76:35:3D:36:00:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e0ae157-3469-42c0-b61a-a35d0eddc629/3e0ae157-3469-42c0-b61a-a35d0eddc629.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e0ae157-3469-42c0-b61a-a35d0eddc629/3e0ae157-3469-42c0-b61a-a35d0eddc629.crl X509v3 Authority Key Identifier: keyid:D4:CE:D6:A2:00:5C:7C:4E:CB:FB:E3:C1:07:2C:42:F3:B2:5A:94:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e0ae157-3469-42c0-b61a-a35d0eddc629.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:74:77:b9:f8:31:9b:1d:3b:19:f5:19:09:3b:99:26:1a:80: ca:6f:90:5e:7b:05:9f:c6:e3:03:e9:1e:f1:59:fd:00:d8:76: 6f:10:41:b4:58:ff:51:62:19:30:a1:02:7b:c2:20:27:a5:32: 31:0b:6c:cd:2d:3e:87:7f:e0:8c:c5:d2:7a:db:0f:87:c6:ab: 3e:6e:63:b9:e7:4d:f3:de:84:74:ac:a8:9a:56:e7:ae:d5:e9: fc:67:c9:54:19:41:05:f8:24:3b:ad:4b:eb:9e:a2:32:3b:ce: 50:66:d3:b4:34:4d:71:38:c7:d5:87:01:d1:67:98:5d:16:d7: 06:a7:48:df:c0:1d:68:c4:7c:2b:b4:0b:80:a7:31:10:79:73: b3:5e:8c:79:04:66:3a:36:ee:52:6e:37:02:39:35:97:87:d3: be:4b:63:e6:6b:fe:b9:8f:e6:67:86:1a:a5:02:50:b1:02:d3: 86:08:44:bc:08:f2:a1:62:77:68:84:ea:d2:a3:42:63:12:aa: 89:04:15:b7:91:13:d8:5d:2c:2c:9d:94:bc:00:a4:70:01:06: 5f:ff:42:c4:01:7e:76:e9:27:ca:aa:b0:74:14:41:84:f8:d4: ce:83:ba:b3:2e:d4:3b:c3:5d:48:a7:73:82:da:48:f8:d5:2f: 18:25:b0:3e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpz5QBLNPg9KkrPmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2UwYWUxNTctMzQ2OS00MmMwLWI2MWEtYTM1ZDBlZGRj NjI5MB4XDTI1MDcwODE4MDAwM1oXDTI1MDcxMTE4MDAwMFowLzEtMCsGA1UEAxMk ZmI0ZjNkZTUtMzFmMC00ZWQ3LWE1MmUtZTg4MTRlODMzM2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZ+WfLoSMthz5CFfdU/nZuOQPVY1UO5mWd3H v1ZZg7Oau02ifq+0+7+uaWVMYEJ9ZLAdQ5iNkfM23sdRVCC1lVAeDd7s4XXb8m95 Ox1WB6Uqj3JTS6S6a7NlFivpg8tp35Y6FWliALrjHrwTBUcifH7bjEelEQZ1gBXb bprWcVHKl3mJQ1XlGBhzFHqNI0f5Yqdi8Si4blPG74z9187cqbNj77JXDQ3oyp0k oX40hNF4Rx0ppwH6h5Hz8igNUsmgNMEt/Ea7a3zu6qvRmhO4xpDsNBHiHY0UoO2k M/AA5dNfHNyHuRZuwI8sOVc2aC3GL4yUhk1SPaHc/ye87R3RQwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEz8HhrYGV15isAIrwLadjU9NgCPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZTBh ZTE1Ny0zNDY5LTQyYzAtYjYxYS1hMzVkMGVkZGM2MjkvM2UwYWUxNTctMzQ2OS00 MmMwLWI2MWEtYTM1ZDBlZGRjNjI5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2UwYWUxNTctMzQ2OS00MmMwLWI2 MWEtYTM1ZDBlZGRjNjI5LzNlMGFlMTU3LTM0NjktNDJjMC1iNjFhLWEzNWQwZWRk YzYyOS5jcmwwHwYDVR0jBBgwFoAU1M7WogBcfE7L++PBByxC87JalKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZTBhZTE1Ny0zNDY5LTQyYzAtYjYxYS1hMzVk MGVkZGM2MjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAYdHe5+DGbHTsZ9RkJO5km GoDKb5BeewWfxuMD6R7xWf0A2HZvEEG0WP9RYhkwoQJ7wiAnpTIxC2zNLT6Hf+CM xdJ62w+Hxqs+bmO5503z3oR0rKiaVueu1en8Z8lUGUEF+CQ7rUvrnqIyO85QZtO0 NE1xOMfVhwHRZ5hdFtcGp0jfwB1oxHwrtAuApzEQeXOzXox5BGY6Nu5SbjcCOTWX h9O+S2Pma/65j+ZnhhqlAlCxAtOGCES8CPKhYndohOrSo0JjEqqJBBW3kRPYXSws nZS8AKRwAQZf/0LEAX526SfKqrB0FEGE+NTOg7qzLtQ7w11Ip3OC2kj41S8YJbA+ -----END CERTIFICATE-----Generated at Tue Jul 8 21:39:21 2025 by rpki-client