$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.mft File: 3e229d9a-dfd5-4a69-be96-2f27a660d4b5.mft (raw, json) Hash identifier: I+8w1c+OqwZowtUH0Vo8KRxUlYFluwlRZO1PCMKg7Lg= Subject key identifier: 2A:9B:49:D6:9E:39:06:15:31:DA:AC:52:B2:BE:C5:51:40:E7:D7:B4 Authority key identifier: 57:2E:D3:14:B7:20:C3:3F:3E:1B:3F:A1:B6:FE:36:E9:7D:3D:B0:9F Certificate issuer: /CN=3e229d9a-dfd5-4a69-be96-2f27a660d4b5 Certificate serial: 010D0C9F4328584A313DEB0E7C5D6490BFBAFA40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.mft Manifest number: 010D0C9F4328584583AA4B32D28F2848E443182D Signing time: Sat 14 Jun 2025 21:00:03 +0000 Manifest this update: Sat 14 Jun 2025 21:00:03 +0000 Manifest next update: Mon 16 Jun 2025 21:00:00 +0000 Files and hashes: 1: 3e229d9a-dfd5-4a69-be96-2f27a660d4b5.crl (hash: E7z/wkjplfi/KeOFlErPThRcXvhOlqIMC0thuL3yGQ8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:31:3d:eb:0e:7c:5d:64:90:bf:ba:fa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e229d9a-dfd5-4a69-be96-2f27a660d4b5 Validity Not Before: Jun 14 21:00:03 2025 GMT Not After : Jun 16 21:00:00 2025 GMT Subject: CN=852422b3-fd68-43d6-91eb-d43431f176a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:86:73:e7:13:78:6b:69:d7:38:7a:10:97:d4: 5a:8a:a4:32:99:4c:de:1b:aa:d6:49:1c:1a:3e:98: b4:a5:d7:8c:8a:c4:8d:1b:00:3a:6d:66:07:c8:f9: 3e:93:56:11:12:8f:23:44:b2:e8:ef:87:98:43:5f: b0:e2:27:c1:4e:28:02:de:e4:aa:4b:fc:c8:a3:5e: 88:da:8e:67:d0:d0:f9:8d:aa:6c:a4:d4:eb:80:97: 14:e0:78:4a:ea:e8:04:c3:de:03:8c:13:87:96:2f: a2:b9:3c:01:c2:0d:ef:ca:86:ca:63:c8:c3:7e:69: 34:50:da:b2:f0:dc:41:e2:dd:11:fb:aa:a8:86:98: 62:50:fa:84:3d:4b:b4:c2:72:3a:2c:ad:93:e2:c6: 0a:15:aa:5f:a9:78:90:00:0b:61:72:ce:86:44:40: 69:61:f1:23:1a:f2:f1:98:15:60:6b:ce:1f:7d:f6: e9:a5:c8:74:e7:19:48:13:38:d3:f7:d5:d2:01:df: d5:8c:0e:79:69:f3:29:3a:c5:3e:18:fd:96:78:dc: 08:c4:f5:9a:6b:00:59:68:1c:0a:d8:ba:d3:e4:e0: b7:c1:e6:25:48:e6:a5:06:1f:ce:88:af:ba:b7:ed: 26:c5:8e:e5:8e:40:05:42:10:77:57:b3:10:cd:8f: 2d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:9B:49:D6:9E:39:06:15:31:DA:AC:52:B2:BE:C5:51:40:E7:D7:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.crl X509v3 Authority Key Identifier: keyid:57:2E:D3:14:B7:20:C3:3F:3E:1B:3F:A1:B6:FE:36:E9:7D:3D:B0:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:51:a1:96:44:d5:0e:73:0c:05:3f:5f:7a:72:c1:7e:8b:fd: eb:90:ed:75:01:38:e9:df:ec:4c:c6:d1:c2:15:e9:10:dc:c7: 06:da:74:1e:6a:b7:2a:3b:fb:b0:15:17:b8:33:24:45:d8:4e: 17:27:12:4d:c3:38:23:8b:f6:d1:15:48:2c:c9:f0:f8:81:d6: c7:99:6b:75:30:19:fe:a3:3d:69:21:17:ae:77:aa:ba:aa:aa: 34:55:10:62:b6:03:9f:b2:c6:41:39:32:e0:da:42:56:54:ed: d7:af:6b:10:49:a6:8a:5e:54:18:50:ea:8b:4b:59:34:7c:19: a8:a9:12:66:19:0b:f2:2c:81:a0:1c:48:da:3c:9c:a0:77:54: 7c:4a:82:ab:e9:f8:f5:23:6c:e8:84:21:bc:bd:b1:96:7c:60: 99:ef:13:63:fe:1b:bd:d1:07:da:7e:be:d6:d0:98:24:15:9d: b3:a0:6c:28:27:cc:c1:ed:23:51:cd:43:af:b6:4c:03:af:71: 8f:56:06:9d:46:e3:a3:36:2f:c6:47:88:06:17:74:c8:9c:1d: d6:e3:ba:47:05:f5:87:14:ec:07:8c:a5:36:d5:04:50:4b:a4: 9a:ca:99:7f:9c:28:74:72:b1:2b:52:14:ce:b9:e9:c1:de:58: 7e:f4:ec:28 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEoxPesOfF1kkL+6+kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2UyMjlkOWEtZGZkNS00YTY5LWJlOTYtMmYyN2E2NjBk NGI1MB4XDTI1MDYxNDIxMDAwM1oXDTI1MDYxNjIxMDAwMFowLzEtMCsGA1UEAxMk ODUyNDIyYjMtZmQ2OC00M2Q2LTkxZWItZDQzNDMxZjE3NmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYZz5xN4a2nXOHoQl9RaiqQymUzeG6rWSRwa Ppi0pdeMisSNGwA6bWYHyPk+k1YREo8jRLLo74eYQ1+w4ifBTigC3uSqS/zIo16I 2o5n0ND5japspNTrgJcU4HhK6ugEw94DjBOHli+iuTwBwg3vyobKY8jDfmk0UNqy 8NxB4t0R+6qohphiUPqEPUu0wnI6LK2T4sYKFapfqXiQAAthcs6GREBpYfEjGvLx mBVga84fffbppch05xlIEzjT99XSAd/VjA55afMpOsU+GP2WeNwIxPWaawBZaBwK 2LrT5OC3weYlSOalBh/OiK+6t+0mxY7ljkAFQhB3V7MQzY8tJwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCqbSdaeOQYVMdqsUrK+xVFA59e0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZTIy OWQ5YS1kZmQ1LTRhNjktYmU5Ni0yZjI3YTY2MGQ0YjUvM2UyMjlkOWEtZGZkNS00 YTY5LWJlOTYtMmYyN2E2NjBkNGI1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2UyMjlkOWEtZGZkNS00YTY5LWJl OTYtMmYyN2E2NjBkNGI1LzNlMjI5ZDlhLWRmZDUtNGE2OS1iZTk2LTJmMjdhNjYw ZDRiNS5jcmwwHwYDVR0jBBgwFoAUVy7TFLcgwz8+Gz+htv426X09sJ8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZTIyOWQ5YS1kZmQ1LTRhNjktYmU5Ni0yZjI3 YTY2MGQ0YjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCIUaGWRNUOcwwFP196csF+ i/3rkO11ATjp3+xMxtHCFekQ3McG2nQearcqO/uwFRe4MyRF2E4XJxJNwzgji/bR FUgsyfD4gdbHmWt1MBn+oz1pIReud6q6qqo0VRBitgOfssZBOTLg2kJWVO3Xr2sQ SaaKXlQYUOqLS1k0fBmoqRJmGQvyLIGgHEjaPJygd1R8SoKr6fj1I2zohCG8vbGW fGCZ7xNj/hu90Qfafr7W0JgkFZ2zoGwoJ8zB7SNRzUOvtkwDr3GPVgadRuOjNi/G R4gGF3TInB3W47pHBfWHFOwHjKU21QRQS6Saypl/nCh0crErUhTOuenB3lh+9Owo -----END CERTIFICATE-----Generated at Sun Jun 15 19:27:58 2025 by rpki-client