$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.mft File: a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.mft (raw, json) Hash identifier: FSluQJ6DSMzwp3UEFvVVjE/V5RfZTT7cVdLTOlrsSYE= Subject key identifier: FA:AD:3A:10:66:D7:88:77:56:31:01:2B:84:34:A4:EF:A4:F3:C1:C0 Authority key identifier: 4B:18:E3:0E:AB:8D:D8:29:99:4E:6D:88:30:0F:C7:55:F6:2E:FB:31 Certificate issuer: /CN=a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b Certificate serial: 010D0C9F4328584AF414EEBF8AE97B606861A840 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.mft Manifest number: 010D0C9F4328584073A81AEA59FA9E40F91E9D59 Signing time: Sat 23 Aug 2025 16:00:08 +0000 Manifest this update: Sat 23 Aug 2025 16:00:08 +0000 Manifest next update: Mon 25 Aug 2025 16:00:00 +0000 Files and hashes: 1: a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.crl (hash: xKsKYPM/RyeZot6qvGSK8/natbjFfjggnAHc4x7E2rA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f4:14:ee:bf:8a:e9:7b:60:68:61:a8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b Validity Not Before: Aug 23 16:00:08 2025 GMT Not After : Aug 25 16:00:00 2025 GMT Subject: CN=b20c2f55-ce91-41c7-b734-bc5879d4a6dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5f:eb:a9:94:63:99:f0:33:f4:2b:79:9a:f6: e5:48:cd:9e:0a:40:4a:82:41:43:ab:90:81:ca:54: 86:1c:88:03:d2:fe:20:fe:11:57:c7:cd:21:69:0a: 41:0a:89:b5:26:51:cf:dd:f1:8b:ac:5f:b4:46:cb: 05:5f:34:49:d0:61:dc:f9:c7:28:8d:02:3e:b2:4c: c4:63:75:6d:83:e3:e9:3b:60:b3:10:23:5a:55:ab: 95:9a:f3:54:0f:20:d1:9f:db:a2:b6:17:ed:e0:6e: cf:da:74:39:b0:7a:6e:7e:e6:ec:da:e2:fc:28:60: 9e:66:d4:42:e3:9a:fb:8f:0c:7c:de:3c:12:87:ff: fd:14:0d:fa:1d:a1:c3:39:53:9a:03:23:ff:8e:33: 50:bd:e7:60:c0:d3:37:35:bc:24:4b:cc:aa:c4:ab: b5:a7:ba:bb:81:14:62:d4:c0:67:be:ae:92:90:0f: 1d:67:31:9a:7a:ef:dd:1c:2d:d0:ad:0b:b1:88:0e: 4a:18:58:fa:14:4c:da:95:ff:1f:2f:24:bc:a6:31: 99:e6:5d:c9:5e:6a:f0:68:73:a9:ce:4c:9c:d2:f4: 1a:ca:b5:68:c7:34:b2:71:21:99:db:57:51:47:6f: d8:5a:64:bf:61:ee:b0:2e:ca:7e:ad:bd:25:af:ea: a8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:AD:3A:10:66:D7:88:77:56:31:01:2B:84:34:A4:EF:A4:F3:C1:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.crl X509v3 Authority Key Identifier: keyid:4B:18:E3:0E:AB:8D:D8:29:99:4E:6D:88:30:0F:C7:55:F6:2E:FB:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a5cc89d6-709e-432b-9a6e-28a7e3fe4c2b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:6a:e0:87:33:7c:b4:d2:ee:04:7c:2d:9a:9d:ba:13:4b:2c: e1:7f:b3:05:67:a8:fc:85:78:c7:75:0a:9f:b3:38:0b:2c:39: d1:2a:cd:28:60:15:9a:d5:11:ae:a3:b6:cb:04:5d:9b:26:cf: 0f:95:0c:75:b6:e6:27:78:0d:42:39:a5:f1:30:0f:84:e0:9f: 76:5d:ba:ff:67:e8:ef:70:06:c4:a1:d6:c9:42:0c:7d:dd:a5: ff:18:d1:51:68:26:68:e4:1f:89:49:11:61:78:d8:44:6c:6d: 91:8b:c8:25:51:5a:35:b2:e6:12:9c:46:63:f3:3e:81:12:fa: 3c:06:bf:0f:1b:6a:a6:91:9a:40:ee:1e:13:27:49:48:cf:dd: 0d:e5:80:21:0b:32:82:fa:49:13:0b:01:28:cf:e8:17:c0:9c: 22:28:02:f3:54:b3:72:10:d8:92:f5:59:94:a0:34:d7:65:e8: 17:36:31:9f:86:71:50:bc:1f:d6:5d:b4:c8:9b:ca:98:b2:f7: f1:47:6d:bf:4a:ed:09:4f:8c:92:b0:f5:b7:60:a3:1c:20:11: b9:e3:37:57:b1:fe:c8:fd:b9:75:da:58:7e:72:44:28:37:34: 3b:e6:47:e3:b8:96:db:b6:95:2c:b1:14:53:a2:33:fc:75:4b: d5:c5:40:8b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr0FO6/iul7YGhhqEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTVjYzg5ZDYtNzA5ZS00MzJiLTlhNmUtMjhhN2UzZmU0 YzJiMB4XDTI1MDgyMzE2MDAwOFoXDTI1MDgyNTE2MDAwMFowLzEtMCsGA1UEAxMk YjIwYzJmNTUtY2U5MS00MWM3LWI3MzQtYmM1ODc5ZDRhNmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1/rqZRjmfAz9Ct5mvblSM2eCkBKgkFDq5CB ylSGHIgD0v4g/hFXx80haQpBCom1JlHP3fGLrF+0RssFXzRJ0GHc+ccojQI+skzE Y3Vtg+PpO2CzECNaVauVmvNUDyDRn9uithft4G7P2nQ5sHpufubs2uL8KGCeZtRC 45r7jwx83jwSh//9FA36HaHDOVOaAyP/jjNQvedgwNM3NbwkS8yqxKu1p7q7gRRi 1MBnvq6SkA8dZzGaeu/dHC3QrQuxiA5KGFj6FEzalf8fLyS8pjGZ5l3JXmrwaHOp zkyc0vQayrVoxzSycSGZ21dRR2/YWmS/Ye6wLsp+rb0lr+qomQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPqtOhBm14h3VjEBK4Q0pO+k88HAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNWNj ODlkNi03MDllLTQzMmItOWE2ZS0yOGE3ZTNmZTRjMmIvYTVjYzg5ZDYtNzA5ZS00 MzJiLTlhNmUtMjhhN2UzZmU0YzJiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTVjYzg5ZDYtNzA5ZS00MzJiLTlh NmUtMjhhN2UzZmU0YzJiL2E1Y2M4OWQ2LTcwOWUtNDMyYi05YTZlLTI4YTdlM2Zl NGMyYi5jcmwwHwYDVR0jBBgwFoAUSxjjDquN2CmZTm2IMA/HVfYu+zEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNWNjODlkNi03MDllLTQzMmItOWE2ZS0yOGE3 ZTNmZTRjMmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCjauCHM3y00u4EfC2anboT Syzhf7MFZ6j8hXjHdQqfszgLLDnRKs0oYBWa1RGuo7bLBF2bJs8PlQx1tuYneA1C OaXxMA+E4J92Xbr/Z+jvcAbEodbJQgx93aX/GNFRaCZo5B+JSRFheNhEbG2Ri8gl UVo1suYSnEZj8z6BEvo8Br8PG2qmkZpA7h4TJ0lIz90N5YAhCzKC+kkTCwEoz+gX wJwiKALzVLNyENiS9VmUoDTXZegXNjGfhnFQvB/WXbTIm8qYsvfxR22/Su0JT4yS sPW3YKMcIBG54zdXsf7I/bl12lh+ckQoNzQ75kfjuJbbtpUssRRTojP8dUvVxUCL -----END CERTIFICATE-----Generated at Sat Aug 23 23:15:03 2025 by rpki-client