$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a2d09c98-dc80-4f9c-a6bc-8617a7aa27e0/a2d09c98-dc80-4f9c-a6bc-8617a7aa27e0.mft File: a2d09c98-dc80-4f9c-a6bc-8617a7aa27e0.mft (raw, json) Hash identifier: 5RY/35siBwgKwk0W9oJzz0zMa/VVzkNNSvfKVy9fiUA= Subject key identifier: 47:43:9D:E2:00:E3:AB:EE:3C:3F:B1:DF:21:C2:A9:5F:3D:84:46:7F Authority key identifier: 8E:77:51:52:A4:F7:0A:15:0B:C1:51:33:43:B1:3B:CC:34:B0:C7:32 Certificate issuer: /CN=a2d09c98-dc80-4f9c-a6bc-8617a7aa27e0 Certificate serial: 010D0C9F4328584ABE3974253B2E9B1B2411D430 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a2d09c98-dc80-4f9c-a6bc-8617a7aa27e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a2d09c98-dc80-4f9c-a6bc-8617a7aa27e0/a2d09c98-dc80-4f9c-a6bc-8617a7aa27e0.mft Manifest number: 010D0C9F43285847B636238E70960D59741F0E56 Signing time: Mon 04 Aug 2025 09:00:03 +0000 Manifest this update: Mon 04 Aug 2025 09:00:03 +0000 Manifest next update: Thu 07 Aug 2025 09:00:00 +0000 Files and hashes: 1: a2d09c98-dc80-4f9c-a6bc-8617a7aa27e0.crl (hash: EpaQlEwebIWD2xvOQ833/rSuMcvqraddHXkvr1h4eA0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a2d09c98-dc80-4f9c-a6bc-8617a7aa27e0/a2d09c98-dc80-4f9c-a6bc-8617a7aa27e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a2d09c98-dc80-4f9c-a6bc-8617a7aa27e0/a2d09c98-dc80-4f9c-a6bc-8617a7aa27e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a2d09c98-dc80-4f9c-a6bc-8617a7aa27e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:be:39:74:25:3b:2e:9b:1b:24:11:d4:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2d09c98-dc80-4f9c-a6bc-8617a7aa27e0 Validity Not Before: Aug 4 09:00:03 2025 GMT Not After : Aug 7 09:00:00 2025 GMT Subject: CN=88545fe7-5709-4bb0-ac2c-4ead1663d9c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2f:59:2f:66:8c:3c:cc:47:74:22:e3:7c:23: c1:24:83:93:0c:ae:c8:79:1b:7a:71:8d:22:a8:e5: 36:03:ec:06:fb:18:3d:6f:3a:8f:dd:68:fa:af:57: ba:ef:5d:67:9f:64:22:07:6e:16:44:61:11:48:11: c8:e2:9a:e2:06:8e:92:81:20:b8:3c:20:6f:69:ce: 40:5d:f7:3e:71:c5:2c:f6:63:73:5f:8d:8e:5d:99: 72:43:ac:db:9d:da:ff:09:9c:69:e7:41:7f:d1:7a: d9:d2:02:03:a7:78:6c:29:9f:f1:1a:10:22:c4:8d: a9:07:cd:4e:60:f6:06:35:7a:1d:4c:0b:ad:2e:d2: c3:7c:6a:e7:1d:23:16:28:13:88:b7:5b:8c:46:63: cc:66:b6:85:4d:f6:29:c9:de:b3:2f:f1:f6:3c:b8: f6:28:9c:5d:7d:3e:8a:1d:4b:31:23:fb:43:6c:eb: b5:2b:c7:ab:86:26:df:f0:fe:6b:29:dc:28:c5:9d: 04:75:11:2c:d9:ee:d5:75:93:1d:80:91:83:9f:a9: 1d:e5:06:ed:95:a8:95:7c:a6:48:ca:07:7a:15:87: 68:7c:f3:37:34:03:aa:0b:0f:2b:b3:c4:99:6f:cf: d5:b6:b0:80:98:55:7c:f6:5d:00:ef:bf:ec:04:2a: 7e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:43:9D:E2:00:E3:AB:EE:3C:3F:B1:DF:21:C2:A9:5F:3D:84:46:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a2d09c98-dc80-4f9c-a6bc-8617a7aa27e0/a2d09c98-dc80-4f9c-a6bc-8617a7aa27e0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a2d09c98-dc80-4f9c-a6bc-8617a7aa27e0/a2d09c98-dc80-4f9c-a6bc-8617a7aa27e0.crl X509v3 Authority Key Identifier: keyid:8E:77:51:52:A4:F7:0A:15:0B:C1:51:33:43:B1:3B:CC:34:B0:C7:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a2d09c98-dc80-4f9c-a6bc-8617a7aa27e0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:bc:6c:8b:6a:ee:9c:53:13:26:e9:d0:f2:07:47:03:0a:22: a9:e1:c1:2b:5d:bf:ed:97:ba:73:53:d3:50:20:f0:3a:f8:29: 8b:00:37:5a:1f:40:8a:28:fa:3f:af:2c:33:51:6e:79:44:f9: 89:c2:ba:78:1e:e4:e2:30:e7:dc:96:31:15:7c:f3:69:c1:82: 9d:81:cc:3f:fe:f8:7e:62:41:c0:12:4f:8f:c2:f6:d1:26:91: a4:0a:fc:dc:26:ff:63:be:fa:c7:6a:2b:d2:5b:e6:bf:d0:03: b0:ca:63:ef:33:7a:d5:6b:83:03:6a:6e:9e:39:39:72:b4:11: 50:92:74:70:14:30:cf:a9:4f:34:42:12:0d:e2:70:76:c3:f7: e2:ad:e3:5a:3b:fb:bf:a8:c6:11:fc:91:ac:6f:6e:52:25:3c: 67:92:b6:f4:a5:08:42:8d:f5:ed:29:63:01:56:fa:89:c9:fc: 69:c3:c0:a6:4a:a1:60:16:c0:f2:aa:e7:e9:bf:66:57:8e:9e: 37:05:5a:80:63:b0:6d:ae:28:ce:ff:57:c4:9a:7c:c8:d5:02: 4f:fe:02:87:34:ac:bb:02:7d:0d:8d:fc:86:76:84:f6:25:b3: 75:e2:16:62:02:ef:f1:78:43:73:f2:eb:e6:39:5d:af:e6:7a: c6:dc:1f:75 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEq+OXQlOy6bGyQR1DAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJkMDljOTgtZGM4MC00ZjljLWE2YmMtODYxN2E3YWEy N2UwMB4XDTI1MDgwNDA5MDAwM1oXDTI1MDgwNzA5MDAwMFowLzEtMCsGA1UEAxMk ODg1NDVmZTctNTcwOS00YmIwLWFjMmMtNGVhZDE2NjNkOWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkS9ZL2aMPMxHdCLjfCPBJIOTDK7IeRt6cY0i qOU2A+wG+xg9bzqP3Wj6r1e6711nn2QiB24WRGERSBHI4priBo6SgSC4PCBvac5A Xfc+ccUs9mNzX42OXZlyQ6zbndr/CZxp50F/0XrZ0gIDp3hsKZ/xGhAixI2pB81O YPYGNXodTAutLtLDfGrnHSMWKBOIt1uMRmPMZraFTfYpyd6zL/H2PLj2KJxdfT6K HUsxI/tDbOu1K8erhibf8P5rKdwoxZ0EdREs2e7VdZMdgJGDn6kd5QbtlaiVfKZI ygd6FYdofPM3NAOqCw8rs8SZb8/VtrCAmFV89l0A77/sBCp+lQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEdDneIA46vuPD+x3yHCqV89hEZ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hMmQw OWM5OC1kYzgwLTRmOWMtYTZiYy04NjE3YTdhYTI3ZTAvYTJkMDljOTgtZGM4MC00 ZjljLWE2YmMtODYxN2E3YWEyN2UwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYTJkMDljOTgtZGM4MC00ZjljLWE2 YmMtODYxN2E3YWEyN2UwL2EyZDA5Yzk4LWRjODAtNGY5Yy1hNmJjLTg2MTdhN2Fh MjdlMC5jcmwwHwYDVR0jBBgwFoAUjndRUqT3ChULwVEzQ7E7zDSwxzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hMmQwOWM5OC1kYzgwLTRmOWMtYTZiYy04NjE3 YTdhYTI3ZTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBuvGyLau6cUxMm6dDyB0cD CiKp4cErXb/tl7pzU9NQIPA6+CmLADdaH0CKKPo/rywzUW55RPmJwrp4HuTiMOfc ljEVfPNpwYKdgcw//vh+YkHAEk+PwvbRJpGkCvzcJv9jvvrHaivSW+a/0AOwymPv M3rVa4MDam6eOTlytBFQknRwFDDPqU80QhIN4nB2w/fireNaO/u/qMYR/JGsb25S JTxnkrb0pQhCjfXtKWMBVvqJyfxpw8CmSqFgFsDyqufpv2ZXjp43BVqAY7BtrijO /1fEmnzI1QJP/gKHNKy7An0NjfyGdoT2JbN14hZiAu/xeENz8uvmOV2v5nrG3B91 -----END CERTIFICATE-----Generated at Mon Aug 4 11:12:04 2025 by rpki-client