$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.mft File: d1d57239-6176-4c8d-9a7e-f9fea380a1a2.mft (raw, json) Hash identifier: gAsH64YRuEKAnDYMrpRUfhdIoo/PWSwDH7ZQ1qUOmWo= Subject key identifier: A2:49:28:A0:B8:7F:D2:A6:7F:8B:5A:F3:70:CC:EE:6C:CA:93:60:0F Authority key identifier: 6D:0E:19:88:64:18:83:E1:80:8D:48:79:CD:51:23:88:2E:59:37:A1 Certificate issuer: /CN=d1d57239-6176-4c8d-9a7e-f9fea380a1a2 Certificate serial: 010D0C9F4328584AC4BD0E035A2143900183F580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.mft Manifest number: 010D0C9F4328584AB6D97DEA626003C5D3B1F305 Signing time: Wed 06 Aug 2025 17:00:03 +0000 Manifest this update: Wed 06 Aug 2025 17:00:03 +0000 Manifest next update: Fri 08 Aug 2025 17:00:00 +0000 Files and hashes: 1: d1d57239-6176-4c8d-9a7e-f9fea380a1a2.crl (hash: 1MwQIYdJktg2YiHxmxT/7eoCvS9g6B9UCtLM6lk+UMk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c4:bd:0e:03:5a:21:43:90:01:83:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1d57239-6176-4c8d-9a7e-f9fea380a1a2 Validity Not Before: Aug 6 17:00:03 2025 GMT Not After : Aug 8 17:00:00 2025 GMT Subject: CN=a0bf8f9c-65f1-4291-b49a-02f5f44a00a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2e:4b:c2:76:7f:e5:5b:33:b4:3c:05:ab:1e: cc:54:26:6b:e3:97:a6:98:09:5f:f5:5a:2c:40:35: 48:d9:ff:e9:5a:dc:ef:1f:51:d7:48:2b:43:0a:68: 43:ba:60:4f:91:d1:78:58:2e:1a:b9:c4:2b:c4:3d: f9:0b:59:cc:21:89:2e:1a:0c:b0:18:1c:42:24:31: 60:2b:4b:b8:6b:2a:6b:d6:81:25:72:d5:46:4b:0c: c4:71:a1:6c:00:53:86:41:02:84:a9:d7:79:49:10: 01:e2:df:8d:6b:fa:37:ec:98:ad:f0:9b:a1:f7:45: c9:6f:29:17:71:6c:eb:d2:65:0b:23:1c:a4:18:87: 13:b2:0e:d3:98:53:2b:68:c3:39:49:24:56:8d:97: ec:b9:e1:a8:f1:d4:a3:ae:dd:35:25:93:ba:47:36: 10:28:82:bf:30:04:68:aa:31:54:e3:3f:3d:29:47: 38:cd:bc:8a:9e:ee:11:14:09:fc:9f:48:8a:1d:db: fb:00:a7:10:8e:15:6c:64:93:46:9e:37:91:c0:45: df:38:96:ef:01:ee:e8:01:15:d3:91:0e:19:81:8a: 41:9b:4c:34:48:b6:d2:46:f9:95:d4:bb:3f:37:2c: eb:85:b0:dc:7a:98:1c:5c:5f:52:8d:2b:02:ec:3f: 59:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:49:28:A0:B8:7F:D2:A6:7F:8B:5A:F3:70:CC:EE:6C:CA:93:60:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.crl X509v3 Authority Key Identifier: keyid:6D:0E:19:88:64:18:83:E1:80:8D:48:79:CD:51:23:88:2E:59:37:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:49:f7:8c:85:fa:45:7e:56:85:4f:60:40:5f:9a:c0:14:cc: c6:6c:7b:d7:f4:ff:4c:58:13:dc:a7:9e:9f:b8:48:8f:1b:d6: 99:6b:87:13:c0:6d:25:13:22:f9:f8:fb:dc:12:dd:60:41:a8: 87:8b:69:4d:8e:43:19:8e:32:9c:47:ba:5b:3a:3b:44:b2:20: f4:ec:57:33:70:d6:36:55:e1:f7:c5:f3:7a:39:af:86:17:0f: bf:b2:e0:b9:df:f6:e7:62:89:72:2c:d1:84:0a:8b:10:a1:23: 17:18:d3:d2:cd:70:e5:5d:df:6c:c4:f6:e9:02:f9:ba:bc:1c: f9:06:1c:97:ce:24:02:e6:45:f1:07:55:f2:39:50:20:38:d4: ea:43:62:fe:d7:aa:37:c7:2a:72:0a:c1:37:cd:71:48:0a:ad: ac:ae:ce:d1:c3:2d:d9:9b:ff:43:28:74:8c:11:a7:03:85:05: f9:23:fa:20:cb:e8:e7:6b:95:fc:f0:2d:a5:1e:9c:9f:89:64: 42:19:bb:86:11:59:05:b5:78:c4:1b:dc:e2:fe:9e:d2:79:29: 2e:0b:bf:1c:e5:1f:ee:9e:d2:f7:cb:11:32:81:d2:5c:76:8b: 04:79:db:1f:a8:db:ae:34:43:78:26:33:85:a0:fb:9f:a8:9d: 2b:e1:d3:cb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErEvQ4DWiFDkAGD9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFkNTcyMzktNjE3Ni00YzhkLTlhN2UtZjlmZWEzODBh MWEyMB4XDTI1MDgwNjE3MDAwM1oXDTI1MDgwODE3MDAwMFowLzEtMCsGA1UEAxMk YTBiZjhmOWMtNjVmMS00MjkxLWI0OWEtMDJmNWY0NGEwMGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqi5LwnZ/5VsztDwFqx7MVCZr45emmAlf9Vos QDVI2f/pWtzvH1HXSCtDCmhDumBPkdF4WC4aucQrxD35C1nMIYkuGgywGBxCJDFg K0u4aypr1oElctVGSwzEcaFsAFOGQQKEqdd5SRAB4t+Na/o37Jit8Juh90XJbykX cWzr0mULIxykGIcTsg7TmFMraMM5SSRWjZfsueGo8dSjrt01JZO6RzYQKIK/MARo qjFU4z89KUc4zbyKnu4RFAn8n0iKHdv7AKcQjhVsZJNGnjeRwEXfOJbvAe7oARXT kQ4ZgYpBm0w0SLbSRvmV1Ls/NyzrhbDcepgcXF9SjSsC7D9Z3wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKJJKKC4f9Kmf4ta83DM7mzKk2APMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kMWQ1 NzIzOS02MTc2LTRjOGQtOWE3ZS1mOWZlYTM4MGExYTIvZDFkNTcyMzktNjE3Ni00 YzhkLTlhN2UtZjlmZWEzODBhMWEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDFkNTcyMzktNjE3Ni00YzhkLTlh N2UtZjlmZWEzODBhMWEyL2QxZDU3MjM5LTYxNzYtNGM4ZC05YTdlLWY5ZmVhMzgw YTFhMi5jcmwwHwYDVR0jBBgwFoAUbQ4ZiGQYg+GAjUh5zVEjiC5ZN6EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kMWQ1NzIzOS02MTc2LTRjOGQtOWE3ZS1mOWZl YTM4MGExYTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA2SfeMhfpFflaFT2BAX5rA FMzGbHvX9P9MWBPcp56fuEiPG9aZa4cTwG0lEyL5+PvcEt1gQaiHi2lNjkMZjjKc R7pbOjtEsiD07FczcNY2VeH3xfN6Oa+GFw+/suC53/bnYolyLNGECosQoSMXGNPS zXDlXd9sxPbpAvm6vBz5BhyXziQC5kXxB1XyOVAgONTqQ2L+16o3xypyCsE3zXFI Cq2srs7Rwy3Zm/9DKHSMEacDhQX5I/ogy+jna5X88C2lHpyfiWRCGbuGEVkFtXjE G9zi/p7SeSkuC78c5R/untL3yxEygdJcdosEedsfqNuuNEN4JjOFoPufqJ0r4dPL -----END CERTIFICATE-----Generated at Thu Aug 7 14:36:41 2025 by rpki-client