$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.mft File: 2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.mft (raw, json) Hash identifier: zqTjbyDRh39gmJdbd57E29QXaPj+ZBtIM+fu7gTYpoQ= Subject key identifier: 86:51:4C:84:E8:40:83:9C:7C:1E:7C:40:EB:87:EB:28:3B:DB:1E:AE Authority key identifier: 10:C6:66:25:99:62:62:82:33:CF:65:60:00:5C:FD:90:F2:00:67:A5 Certificate issuer: /CN=2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0 Certificate serial: 010D0C9F4328584AC393427A1C3D507D898102C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.mft Manifest number: 010D0C9F4328584073A8466E0185068C437FEFF1 Signing time: Wed 06 Aug 2025 07:00:03 +0000 Manifest this update: Wed 06 Aug 2025 07:00:03 +0000 Manifest next update: Fri 08 Aug 2025 07:00:00 +0000 Files and hashes: 1: 2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.crl (hash: VNyEmxtH9AtK3IPjRyuP92s19Hbx0M37W7UwHdkt0to=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c3:93:42:7a:1c:3d:50:7d:89:81:02:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0 Validity Not Before: Aug 6 07:00:03 2025 GMT Not After : Aug 8 07:00:00 2025 GMT Subject: CN=a1d5ecec-c886-4109-83a7-a501dc13910e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d9:3d:77:f7:12:70:c6:53:c3:d5:a2:88:a4: d9:71:b8:ec:a5:0e:5c:ff:da:27:02:33:da:25:a6: 0c:4b:3d:3b:89:4f:0c:4c:b7:7e:9a:31:08:66:cf: 7c:dc:3e:d7:dc:78:24:16:a2:73:43:f2:5a:ce:a2: 16:95:86:19:b7:ab:55:27:b6:c7:b1:b2:3e:48:47: b8:0b:ad:99:b0:b3:1a:62:ea:65:99:f4:00:48:c0: 0a:f3:3b:9f:77:56:e3:ba:cc:e4:6a:55:9a:01:37: 98:37:51:66:fe:a5:98:50:97:dc:d7:59:65:e8:af: 82:11:65:7c:22:7f:0c:bd:89:74:ac:0e:4b:a4:58: d5:dd:12:02:ca:5b:86:6c:6c:3f:6a:99:09:4d:d1: e8:0b:d3:c4:cf:fc:db:4d:a2:7f:72:0c:05:26:c1: c3:20:25:ba:b9:0a:7e:02:cf:df:92:66:60:a9:9c: 90:dc:d2:c8:53:31:bd:f8:7b:6f:a7:bd:a3:75:d7: 98:d7:44:03:ba:1c:e1:6c:a5:7b:5f:f4:23:6d:b4: d5:b2:44:5d:cc:e3:26:a8:e0:aa:21:80:23:51:bf: 36:84:1c:26:fe:aa:fe:6d:0d:24:bb:76:d6:05:f9: e2:76:b1:ca:d3:80:61:f7:33:af:a2:9d:98:3b:f9: e2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:51:4C:84:E8:40:83:9C:7C:1E:7C:40:EB:87:EB:28:3B:DB:1E:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.crl X509v3 Authority Key Identifier: keyid:10:C6:66:25:99:62:62:82:33:CF:65:60:00:5C:FD:90:F2:00:67:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2cd3973d-0d40-4ffe-baed-81ea7c7ea0b0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:2d:5f:ac:a3:64:96:4f:79:3e:3a:ce:5f:d0:ec:1d:66:3b: 54:5e:9f:a0:aa:35:01:7c:6f:72:da:88:83:45:45:1e:46:90: 6f:9b:4f:61:8f:c4:74:63:91:27:43:a3:45:d5:87:19:ae:b5: 40:92:c3:23:a5:2d:db:bb:21:f0:9f:63:1b:f7:89:53:28:c7: f7:4f:b5:58:0e:be:3a:7c:a5:54:7a:57:19:ff:7a:71:28:17: 05:9b:7b:d7:f6:6f:a1:a5:14:49:c5:06:53:ed:1d:0c:85:a5: 91:64:cb:36:86:7f:d7:c7:a1:8f:60:43:2f:4d:1f:a0:e0:ba: 84:7c:2b:5e:f3:3b:e6:11:cb:78:d1:65:a1:61:56:26:a9:e5: fe:6b:fa:0e:c9:8c:56:34:05:89:f2:61:2c:af:57:08:29:0c: 57:f2:93:27:47:8d:5b:ac:10:97:87:b2:0e:36:9d:36:b1:ba: 19:e7:be:6d:a1:78:93:f6:4a:5f:0c:41:d8:97:67:02:86:a9: 6a:33:5e:53:cc:67:25:a4:76:6f:ac:ff:90:7e:27:88:c0:ab: 52:4c:c3:72:c7:63:08:97:b5:31:f3:52:4c:2d:93:b3:af:84: e5:47:75:a9:dc:e1:29:86:ba:70:2e:d0:20:04:ce:bf:9f:2a: 57:05:28:a0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErDk0J6HD1QfYmBAsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNkMzk3M2QtMGQ0MC00ZmZlLWJhZWQtODFlYTdjN2Vh MGIwMB4XDTI1MDgwNjA3MDAwM1oXDTI1MDgwODA3MDAwMFowLzEtMCsGA1UEAxMk YTFkNWVjZWMtYzg4Ni00MTA5LTgzYTctYTUwMWRjMTM5MTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNk9d/cScMZTw9WiiKTZcbjspQ5c/9onAjPa JaYMSz07iU8MTLd+mjEIZs983D7X3HgkFqJzQ/JazqIWlYYZt6tVJ7bHsbI+SEe4 C62ZsLMaYuplmfQASMAK8zufd1bjuszkalWaATeYN1Fm/qWYUJfc11ll6K+CEWV8 In8MvYl0rA5LpFjV3RICyluGbGw/apkJTdHoC9PEz/zbTaJ/cgwFJsHDICW6uQp+ As/fkmZgqZyQ3NLIUzG9+Htvp72jddeY10QDuhzhbKV7X/QjbbTVskRdzOMmqOCq IYAjUb82hBwm/qr+bQ0ku3bWBfnidrHK04Bh9zOvop2YO/ni/wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIZRTIToQIOcfB58QOuH6yg72x6uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yY2Qz OTczZC0wZDQwLTRmZmUtYmFlZC04MWVhN2M3ZWEwYjAvMmNkMzk3M2QtMGQ0MC00 ZmZlLWJhZWQtODFlYTdjN2VhMGIwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmNkMzk3M2QtMGQ0MC00ZmZlLWJh ZWQtODFlYTdjN2VhMGIwLzJjZDM5NzNkLTBkNDAtNGZmZS1iYWVkLTgxZWE3Yzdl YTBiMC5jcmwwHwYDVR0jBBgwFoAUEMZmJZliYoIzz2VgAFz9kPIAZ6UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yY2QzOTczZC0wZDQwLTRmZmUtYmFlZC04MWVh N2M3ZWEwYjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB3LV+so2SWT3k+Os5f0Owd ZjtUXp+gqjUBfG9y2oiDRUUeRpBvm09hj8R0Y5EnQ6NF1YcZrrVAksMjpS3buyHw n2Mb94lTKMf3T7VYDr46fKVUelcZ/3pxKBcFm3vX9m+hpRRJxQZT7R0MhaWRZMs2 hn/Xx6GPYEMvTR+g4LqEfCte8zvmEct40WWhYVYmqeX+a/oOyYxWNAWJ8mEsr1cI KQxX8pMnR41brBCXh7IONp02sboZ575toXiT9kpfDEHYl2cChqlqM15TzGclpHZv rP+QfieIwKtSTMNyx2MIl7Ux81JMLZOzr4TlR3Wp3OEphrpwLtAgBM6/nypXBSig -----END CERTIFICATE-----Generated at Thu Aug 7 05:02:05 2025 by rpki-client