$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.mft File: dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.mft (raw, json) Hash identifier: bT9PGFgbFqF4UnS4nEkZKzJW9stYZFF0vB01Zsrs0dM= Subject key identifier: D5:B5:97:D8:AF:33:74:67:DD:66:1A:EF:69:7C:30:45:5B:E4:F0:E1 Authority key identifier: C0:0C:F4:BD:06:6F:5D:05:D9:66:A6:DC:28:B9:AC:BC:BD:AB:92:91 Certificate issuer: /CN=dcd1edec-c385-49a8-822f-d4dcbe5e0e4d Certificate serial: 010D0C9F4328584AC17B48853AD08392A06A2600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.mft Manifest number: 010D0C9F4328584073A854DB5F74B2A9424A7630 Signing time: Tue 05 Aug 2025 13:00:08 +0000 Manifest this update: Tue 05 Aug 2025 13:00:08 +0000 Manifest next update: Fri 08 Aug 2025 13:00:00 +0000 Files and hashes: 1: dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.crl (hash: l11+TEjYSkca7vvb5wzRus+cIf20kPy3O7OefonB318=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c1:7b:48:85:3a:d0:83:92:a0:6a:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcd1edec-c385-49a8-822f-d4dcbe5e0e4d Validity Not Before: Aug 5 13:00:08 2025 GMT Not After : Aug 8 13:00:00 2025 GMT Subject: CN=2d7b68bf-ddfa-4be5-b992-7a790c20e479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:54:29:0c:c0:4d:98:9a:15:05:7e:bf:ce:c8: bf:5d:8d:cd:b9:9c:47:bf:88:c7:c1:67:c1:be:4a: 78:3e:82:69:94:88:b3:de:eb:d6:b9:a0:b1:1a:55: 95:3f:a2:7e:28:f6:5b:ea:52:7c:90:3b:4c:03:cd: 52:b0:c2:0f:0c:fa:e7:31:53:ee:dc:bb:35:e0:ff: f6:8e:65:f6:39:7c:24:c5:78:2d:54:e0:ca:51:73: c3:3c:19:f5:f9:0b:5a:d5:00:6b:43:a6:80:01:cb: 9f:c3:b4:df:e2:66:6d:98:d7:37:db:16:57:74:d2: 8d:ea:c1:17:db:42:d0:aa:88:cf:52:3e:8b:f0:2a: a1:93:d3:ac:98:c2:d7:62:ce:6b:27:bc:8a:3b:da: fc:55:31:30:38:71:c8:3d:2f:6a:ce:48:41:aa:4a: 98:18:55:f6:16:92:f9:29:9d:49:cd:87:30:f4:cb: 08:a3:94:8b:ae:04:e3:53:43:d1:d4:b5:8a:09:a1: ae:22:02:15:88:06:19:7e:da:64:5f:23:94:df:f1: db:fb:9a:e7:0f:02:07:99:39:98:b1:51:95:19:6a: 71:ac:5f:00:8f:0d:d4:a6:0a:b5:f6:41:38:2b:74: 4f:30:61:f4:92:25:5e:cc:94:28:78:72:e5:d0:e3: 8e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B5:97:D8:AF:33:74:67:DD:66:1A:EF:69:7C:30:45:5B:E4:F0:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.crl X509v3 Authority Key Identifier: keyid:C0:0C:F4:BD:06:6F:5D:05:D9:66:A6:DC:28:B9:AC:BC:BD:AB:92:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:8c:f8:7b:b9:48:38:13:be:73:52:a4:66:cf:87:8f:71:0b: 37:d9:02:57:c9:0a:7d:51:db:4f:1c:24:f9:94:9a:9a:0a:c7: f3:a9:87:89:43:47:f0:61:53:9c:c7:4d:e7:30:c6:f9:c9:2d: aa:81:9e:b3:af:c9:4a:06:46:04:5c:d1:6a:b8:5f:de:9d:fd: 7c:77:5b:f1:3e:45:f5:7f:26:af:fa:b2:68:f4:13:90:dd:a8: 3f:7a:da:8d:cf:8a:6a:60:a8:51:99:8a:35:c7:16:22:79:b4: 26:7e:d4:c6:df:a0:74:36:86:99:72:cb:51:fd:25:dc:63:b7: b5:b9:47:42:32:81:f3:70:74:c2:47:92:b4:36:91:0f:74:1e: b2:06:e6:cc:2b:f2:68:3a:e8:59:c2:7f:ee:a0:33:52:e4:2a: 03:6a:d1:b6:27:fb:40:c4:7e:e0:ed:71:b8:44:7b:97:13:0e: 0e:86:e2:ea:d5:df:0b:b5:1f:c0:ff:e9:6f:e7:d0:85:e4:03: 87:c9:4a:85:b9:0a:5c:6e:a9:05:b8:ce:66:8e:70:bf:97:01: 1b:ff:9d:cc:98:b0:6f:06:12:08:c9:5b:d8:bd:6c:bb:cc:18: 46:79:56:a9:42:43:6a:09:d5:bb:e4:2c:a4:3e:0a:18:ac:ca: 1c:b2:41:96 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErBe0iFOtCDkqBqJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNkMWVkZWMtYzM4NS00OWE4LTgyMmYtZDRkY2JlNWUw ZTRkMB4XDTI1MDgwNTEzMDAwOFoXDTI1MDgwODEzMDAwMFowLzEtMCsGA1UEAxMk MmQ3YjY4YmYtZGRmYS00YmU1LWI5OTItN2E3OTBjMjBlNDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVQpDMBNmJoVBX6/zsi/XY3NuZxHv4jHwWfB vkp4PoJplIiz3uvWuaCxGlWVP6J+KPZb6lJ8kDtMA81SsMIPDPrnMVPu3Ls14P/2 jmX2OXwkxXgtVODKUXPDPBn1+Qta1QBrQ6aAAcufw7Tf4mZtmNc32xZXdNKN6sEX 20LQqojPUj6L8Cqhk9OsmMLXYs5rJ7yKO9r8VTEwOHHIPS9qzkhBqkqYGFX2FpL5 KZ1JzYcw9MsIo5SLrgTjU0PR1LWKCaGuIgIViAYZftpkXyOU3/Hb+5rnDwIHmTmY sVGVGWpxrF8Ajw3Upgq19kE4K3RPMGH0kiVezJQoeHLl0OOO7wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNW1l9ivM3Rn3WYa72l8MEVb5PDhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Qx ZWRlYy1jMzg1LTQ5YTgtODIyZi1kNGRjYmU1ZTBlNGQvZGNkMWVkZWMtYzM4NS00 OWE4LTgyMmYtZDRkY2JlNWUwZTRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNkMWVkZWMtYzM4NS00OWE4LTgy MmYtZDRkY2JlNWUwZTRkL2RjZDFlZGVjLWMzODUtNDlhOC04MjJmLWQ0ZGNiZTVl MGU0ZC5jcmwwHwYDVR0jBBgwFoAUwAz0vQZvXQXZZqbcKLmsvL2rkpEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2QxZWRlYy1jMzg1LTQ5YTgtODIyZi1kNGRj YmU1ZTBlNGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBhjPh7uUg4E75zUqRmz4eP cQs32QJXyQp9UdtPHCT5lJqaCsfzqYeJQ0fwYVOcx03nMMb5yS2qgZ6zr8lKBkYE XNFquF/enf18d1vxPkX1fyav+rJo9BOQ3ag/etqNz4pqYKhRmYo1xxYiebQmftTG 36B0NoaZcstR/SXcY7e1uUdCMoHzcHTCR5K0NpEPdB6yBubMK/JoOuhZwn/uoDNS 5CoDatG2J/tAxH7g7XG4RHuXEw4OhuLq1d8LtR/A/+lv59CF5AOHyUqFuQpcbqkF uM5mjnC/lwEb/53MmLBvBhIIyVvYvWy7zBhGeVapQkNqCdW75CykPgoYrMocskGW -----END CERTIFICATE-----Generated at Wed Aug 6 05:16:48 2025 by rpki-client