$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.mft File: 3e229d9a-dfd5-4a69-be96-2f27a660d4b5.mft (raw, json) Hash identifier: w5ozkb/dDgr1uMkE0drcfkKxJYQvPreLlaoA7KbSYas= Subject key identifier: A3:90:11:49:7D:F2:EC:F1:48:CB:B4:BB:D5:DC:79:FB:73:7C:20:26 Authority key identifier: 57:2E:D3:14:B7:20:C3:3F:3E:1B:3F:A1:B6:FE:36:E9:7D:3D:B0:9F Certificate issuer: /CN=3e229d9a-dfd5-4a69-be96-2f27a660d4b5 Certificate serial: 010D0C9F4328584A585383D982110FBEFEB8F900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.mft Manifest number: 010D0C9F4328584583AA4B32D28F2848E443183B Signing time: Sat 28 Jun 2025 21:00:08 +0000 Manifest this update: Sat 28 Jun 2025 21:00:08 +0000 Manifest next update: Mon 30 Jun 2025 21:00:00 +0000 Files and hashes: 1: 3e229d9a-dfd5-4a69-be96-2f27a660d4b5.crl (hash: eRpCeN71hT2W3xRMSYHT3EkopYoNbQ/qVrbXpZk6Y7o=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:53:83:d9:82:11:0f:be:fe:b8:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e229d9a-dfd5-4a69-be96-2f27a660d4b5 Validity Not Before: Jun 28 21:00:08 2025 GMT Not After : Jun 30 21:00:00 2025 GMT Subject: CN=6f1cb04b-0578-4fd0-a7c2-b17795d961c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:21:6a:d3:59:e9:64:42:d0:ea:c1:eb:b0:3d: a6:c3:e1:8e:c7:07:e3:95:43:23:d6:56:3a:68:9e: 81:e2:c6:7a:07:c3:8a:06:b6:f8:c4:4f:12:3e:ef: 82:c3:8a:e0:3b:52:a0:ca:87:65:bb:41:14:f1:40: 35:5d:60:c1:0b:56:6f:c3:45:96:30:a7:21:7f:3c: 70:cb:20:49:65:cd:75:4b:2d:36:15:18:03:a0:74: 02:f2:46:c9:7f:d0:8a:e1:32:d7:64:88:3d:24:e9: f0:1b:99:75:b3:ff:cb:b3:92:53:ff:c8:90:d9:5b: f7:56:7a:64:72:70:c3:7d:e1:e9:4d:b3:13:9f:a0: 09:7b:ea:d0:18:1a:34:2a:42:aa:36:12:46:f1:5a: 1b:b8:6e:f2:3f:e9:32:59:88:bc:2a:cb:4c:a9:37: 3f:7c:59:81:1c:81:00:4b:b0:38:67:6d:94:36:a3: 34:97:2e:61:61:7d:ba:c8:54:41:b5:fd:d0:ff:98: 80:39:fb:a4:e5:c3:a3:9a:47:15:50:c8:3f:0f:4d: 99:cf:45:5f:7e:2e:a6:97:0c:2d:bd:98:40:51:f8: 29:5a:a4:f2:8b:75:f4:bb:3c:d7:42:1e:bb:bf:9b: 0c:0a:de:2c:02:47:f0:f4:62:25:65:d8:de:8a:23: c8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:90:11:49:7D:F2:EC:F1:48:CB:B4:BB:D5:DC:79:FB:73:7C:20:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.crl X509v3 Authority Key Identifier: keyid:57:2E:D3:14:B7:20:C3:3F:3E:1B:3F:A1:B6:FE:36:E9:7D:3D:B0:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e229d9a-dfd5-4a69-be96-2f27a660d4b5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:f8:b2:78:04:51:1e:8b:b6:64:17:8d:2b:62:7c:6c:ea:67: d4:1d:81:95:4f:c8:a7:6b:1a:fd:be:b8:1f:67:15:49:09:9b: f1:a4:bb:08:c9:b8:14:21:ec:08:e3:21:56:be:42:e2:c8:28: bc:8d:51:1e:05:3c:80:a0:14:42:79:67:b5:26:09:32:f9:dd: ea:1e:3a:01:f6:ac:82:e1:1c:13:79:85:11:c8:97:66:0c:d7: b2:ad:c6:2c:fc:20:dc:2d:da:25:21:e7:93:8e:47:b4:9a:0c: d1:73:f7:d6:74:d5:c7:6a:31:02:a0:4a:6d:60:1d:be:25:9f: dd:fa:78:38:91:9f:0d:f4:1d:40:ef:d6:bf:9d:c0:e7:5a:fb: 3a:a1:d4:d6:af:a1:73:cb:2d:3f:8c:b2:d0:bf:b1:9d:b0:8f: 19:a3:c9:0b:18:fb:6d:35:15:7f:74:e0:d6:ba:04:f7:fd:c1: 59:ea:f7:0d:21:d0:d1:01:06:33:6a:22:3b:76:14:36:61:a6: 26:3c:55:f5:21:75:fb:dd:a5:38:76:24:ca:d7:61:9d:c5:ea: f3:21:bc:72:25:b5:da:65:90:e4:33:fb:f7:e1:27:45:ca:d2: 90:93:9d:9a:cb:b3:02:3f:5a:4c:63:a1:2b:a3:2e:73:f8:d7: a7:ed:26:ab -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpYU4PZghEPvv64+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2UyMjlkOWEtZGZkNS00YTY5LWJlOTYtMmYyN2E2NjBk NGI1MB4XDTI1MDYyODIxMDAwOFoXDTI1MDYzMDIxMDAwMFowLzEtMCsGA1UEAxMk NmYxY2IwNGItMDU3OC00ZmQwLWE3YzItYjE3Nzk1ZDk2MWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCFq01npZELQ6sHrsD2mw+GOxwfjlUMj1lY6 aJ6B4sZ6B8OKBrb4xE8SPu+Cw4rgO1Kgyodlu0EU8UA1XWDBC1Zvw0WWMKchfzxw yyBJZc11Sy02FRgDoHQC8kbJf9CK4TLXZIg9JOnwG5l1s//Ls5JT/8iQ2Vv3Vnpk cnDDfeHpTbMTn6AJe+rQGBo0KkKqNhJG8VobuG7yP+kyWYi8KstMqTc/fFmBHIEA S7A4Z22UNqM0ly5hYX26yFRBtf3Q/5iAOfuk5cOjmkcVUMg/D02Zz0Vffi6mlwwt vZhAUfgpWqTyi3X0uzzXQh67v5sMCt4sAkfw9GIlZdjeiiPIhQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKOQEUl98uzxSMu0u9XceftzfCAmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZTIy OWQ5YS1kZmQ1LTRhNjktYmU5Ni0yZjI3YTY2MGQ0YjUvM2UyMjlkOWEtZGZkNS00 YTY5LWJlOTYtMmYyN2E2NjBkNGI1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2UyMjlkOWEtZGZkNS00YTY5LWJl OTYtMmYyN2E2NjBkNGI1LzNlMjI5ZDlhLWRmZDUtNGE2OS1iZTk2LTJmMjdhNjYw ZDRiNS5jcmwwHwYDVR0jBBgwFoAUVy7TFLcgwz8+Gz+htv426X09sJ8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZTIyOWQ5YS1kZmQ1LTRhNjktYmU5Ni0yZjI3 YTY2MGQ0YjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA5+LJ4BFEei7ZkF40rYnxs 6mfUHYGVT8inaxr9vrgfZxVJCZvxpLsIybgUIewI4yFWvkLiyCi8jVEeBTyAoBRC eWe1Jgky+d3qHjoB9qyC4RwTeYURyJdmDNeyrcYs/CDcLdolIeeTjke0mgzRc/fW dNXHajECoEptYB2+JZ/d+ng4kZ8N9B1A79a/ncDnWvs6odTWr6Fzyy0/jLLQv7Gd sI8Zo8kLGPttNRV/dODWugT3/cFZ6vcNIdDRAQYzaiI7dhQ2YaYmPFX1IXX73aU4 diTK12GdxerzIbxyJbXaZZDkM/v34SdFytKQk52ay7MCP1pMY6Eroy5z+Nen7Sar -----END CERTIFICATE-----Generated at Sun Jun 29 18:14:24 2025 by rpki-client