$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fa11464a-12b6-47e7-a924-d2559e5234d3/fa11464a-12b6-47e7-a924-d2559e5234d3.mft File: fa11464a-12b6-47e7-a924-d2559e5234d3.mft (raw, json) Hash identifier: vHd+QA61QA01no9LugOBgn3Z8WRaOtS4yJkvzIbxH7U= Subject key identifier: 9D:D6:C5:61:A7:DF:D8:E4:C9:72:6D:9F:EA:2C:6E:3C:9E:A1:AB:AF Authority key identifier: 39:0C:BD:20:03:E1:D5:A1:F0:87:94:DA:EF:CA:64:AE:B3:31:8E:A9 Certificate issuer: /CN=fa11464a-12b6-47e7-a924-d2559e5234d3 Certificate serial: 010D0C9F4328584AF1DF29E7611CE919779C4A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fa11464a-12b6-47e7-a924-d2559e5234d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fa11464a-12b6-47e7-a924-d2559e5234d3/fa11464a-12b6-47e7-a924-d2559e5234d3.mft Manifest number: 010D0C9F4328584482C575F6E8D36F50A6601E2E Signing time: Fri 22 Aug 2025 21:00:08 +0000 Manifest this update: Fri 22 Aug 2025 21:00:08 +0000 Manifest next update: Mon 25 Aug 2025 21:00:00 +0000 Files and hashes: 1: fa11464a-12b6-47e7-a924-d2559e5234d3.crl (hash: q+IF3UDP4r+bf5JVByQByDXFTudfqPsWEmY40aVxZCo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fa11464a-12b6-47e7-a924-d2559e5234d3/fa11464a-12b6-47e7-a924-d2559e5234d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fa11464a-12b6-47e7-a924-d2559e5234d3/fa11464a-12b6-47e7-a924-d2559e5234d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fa11464a-12b6-47e7-a924-d2559e5234d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f1:df:29:e7:61:1c:e9:19:77:9c:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa11464a-12b6-47e7-a924-d2559e5234d3 Validity Not Before: Aug 22 21:00:08 2025 GMT Not After : Aug 25 21:00:00 2025 GMT Subject: CN=86db5056-fb61-45a1-af4e-a9480231c0d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:df:af:22:bf:28:da:b1:1b:23:30:e5:9c:c9: 68:a8:ea:3b:54:19:b8:b1:b0:af:43:3d:85:93:b0: c9:88:b6:10:00:18:e0:b6:66:08:75:68:22:3b:fd: 57:fd:cc:1b:32:88:30:35:0a:a3:73:0b:db:b3:03: f0:26:26:af:4d:fe:58:8a:43:6f:05:9f:6a:c2:7b: 82:ca:82:04:cc:5b:60:d8:d2:0a:96:b1:42:be:76: 78:8d:d0:79:9b:45:89:71:a2:57:69:70:bd:55:e4: eb:0e:bf:39:c2:96:39:a5:1a:8e:f4:a4:d9:0f:ac: 3a:c3:36:55:04:f5:7b:74:00:ee:13:e0:73:91:4b: f3:47:db:5e:f3:19:87:9d:21:05:08:40:f9:f3:56: d4:58:c6:ae:90:aa:38:cf:e4:7d:f8:c9:d1:9d:b6: 70:82:04:7f:b8:b2:f9:f5:7d:49:16:97:6d:31:f0: 37:bd:ee:ce:53:99:cd:67:b1:71:f0:22:47:70:f5: 70:73:df:57:39:b5:4f:2c:b7:3a:cb:b6:ed:76:f1: 75:ad:47:2d:53:dd:e6:dc:96:d5:35:ee:b1:8d:41: 8e:08:8a:97:9d:46:82:15:ff:47:72:ea:fb:d9:d0: 0c:3d:bf:35:62:23:96:09:4f:00:bc:6c:d5:67:e2: e4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D6:C5:61:A7:DF:D8:E4:C9:72:6D:9F:EA:2C:6E:3C:9E:A1:AB:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fa11464a-12b6-47e7-a924-d2559e5234d3/fa11464a-12b6-47e7-a924-d2559e5234d3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fa11464a-12b6-47e7-a924-d2559e5234d3/fa11464a-12b6-47e7-a924-d2559e5234d3.crl X509v3 Authority Key Identifier: keyid:39:0C:BD:20:03:E1:D5:A1:F0:87:94:DA:EF:CA:64:AE:B3:31:8E:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fa11464a-12b6-47e7-a924-d2559e5234d3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:6e:e6:97:ec:89:36:7a:4e:a5:b8:8f:04:46:cb:93:6b:94: 22:13:51:51:4a:9a:7f:cc:c7:98:5c:8b:26:53:5a:92:f0:1b: 97:4e:8c:50:52:29:1a:ff:09:b5:cd:22:ed:ba:25:a4:ea:10: 55:93:9b:07:38:59:f4:ad:c4:9f:fb:da:17:85:64:58:99:31: aa:81:74:4a:9e:ed:64:10:6b:77:28:f0:ef:c1:4c:69:ae:d4: db:74:e1:fa:b6:2c:48:e1:ea:0f:35:0e:97:49:73:11:34:a9: 1f:f4:be:58:43:2d:6b:b7:db:8a:d4:8a:7b:a4:cb:9d:ee:14: 10:07:8e:02:b7:14:0b:11:24:41:a8:fe:a9:1b:34:51:44:40: 8b:42:5c:be:21:76:74:8b:ec:da:fa:95:a4:33:26:2f:d7:e1: a1:51:8f:1f:90:8e:cf:72:b0:4b:a9:25:b5:3c:fd:ba:80:75: e8:bc:69:33:cc:b8:82:f6:2c:a9:e8:94:41:b3:52:f4:14:a7: 92:2d:76:06:a8:ba:95:16:24:c3:cf:3e:ee:ee:6b:98:36:e3: d1:b8:29:5e:99:45:10:08:08:1d:df:a2:55:ab:76:45:01:e1: 57:8d:1d:73:1a:f9:b4:cf:1c:33:0b:51:87:41:37:e5:4e:17: ce:64:60:89 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErx3ynnYRzpGXecSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmExMTQ2NGEtMTJiNi00N2U3LWE5MjQtZDI1NTllNTIz NGQzMB4XDTI1MDgyMjIxMDAwOFoXDTI1MDgyNTIxMDAwMFowLzEtMCsGA1UEAxMk ODZkYjUwNTYtZmI2MS00NWExLWFmNGUtYTk0ODAyMzFjMGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmd+vIr8o2rEbIzDlnMloqOo7VBm4sbCvQz2F k7DJiLYQABjgtmYIdWgiO/1X/cwbMogwNQqjcwvbswPwJiavTf5YikNvBZ9qwnuC yoIEzFtg2NIKlrFCvnZ4jdB5m0WJcaJXaXC9VeTrDr85wpY5pRqO9KTZD6w6wzZV BPV7dADuE+BzkUvzR9te8xmHnSEFCED581bUWMaukKo4z+R9+MnRnbZwggR/uLL5 9X1JFpdtMfA3ve7OU5nNZ7Fx8CJHcPVwc99XObVPLLc6y7btdvF1rUctU93m3JbV Ne6xjUGOCIqXnUaCFf9Hcur72dAMPb81YiOWCU8AvGzVZ+LkqQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJ3WxWGn39jkyXJtn+osbjyeoauvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mYTEx NDY0YS0xMmI2LTQ3ZTctYTkyNC1kMjU1OWU1MjM0ZDMvZmExMTQ2NGEtMTJiNi00 N2U3LWE5MjQtZDI1NTllNTIzNGQzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZmExMTQ2NGEtMTJiNi00N2U3LWE5 MjQtZDI1NTllNTIzNGQzL2ZhMTE0NjRhLTEyYjYtNDdlNy1hOTI0LWQyNTU5ZTUy MzRkMy5jcmwwHwYDVR0jBBgwFoAUOQy9IAPh1aHwh5Ta78pkrrMxjqkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mYTExNDY0YS0xMmI2LTQ3ZTctYTkyNC1kMjU1 OWU1MjM0ZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAibuaX7Ik2ek6luI8ERsuT a5QiE1FRSpp/zMeYXIsmU1qS8BuXToxQUika/wm1zSLtuiWk6hBVk5sHOFn0rcSf +9oXhWRYmTGqgXRKnu1kEGt3KPDvwUxprtTbdOH6tixI4eoPNQ6XSXMRNKkf9L5Y Qy1rt9uK1Ip7pMud7hQQB44CtxQLESRBqP6pGzRRRECLQly+IXZ0i+za+pWkMyYv 1+GhUY8fkI7PcrBLqSW1PP26gHXovGkzzLiC9iyp6JRBs1L0FKeSLXYGqLqVFiTD zz7u7muYNuPRuClemUUQCAgd36JVq3ZFAeFXjR1zGvm0zxwzC1GHQTflThfOZGCJ -----END CERTIFICATE-----Generated at Sat Aug 23 16:50:25 2025 by rpki-client