$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft File: a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft (raw, json) Hash identifier: adEGV6VBNB8EQk/aasixlG1p0IiZOzh56E6qVEk+W5s= Subject key identifier: 75:91:8A:AC:CF:92:5D:01:EE:BD:6F:B2:44:19:D6:78:5C:B2:A8:3C Authority key identifier: 14:71:AC:1E:2B:E8:94:25:09:41:FC:D6:59:07:4C:A3:B5:CF:BB:39 Certificate issuer: /CN=a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae Certificate serial: 010D0C9F4328584AF2EB25BE28D13A1D8072E500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft Manifest number: 010D0C9F4328584073A8433349A69053F9B88CC2 Signing time: Sat 23 Aug 2025 06:00:08 +0000 Manifest this update: Sat 23 Aug 2025 06:00:08 +0000 Manifest next update: Tue 26 Aug 2025 06:00:00 +0000 Files and hashes: 1: a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.crl (hash: h2XEqYiOqar/MfKBbS8ZfdtgAUKu/7I/9RgeCUg9SkM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:eb:25:be:28:d1:3a:1d:80:72:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae Validity Not Before: Aug 23 06:00:08 2025 GMT Not After : Aug 26 06:00:00 2025 GMT Subject: CN=289338e1-b24c-4895-aa1d-cf503e23a276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:97:56:6b:bd:67:cc:b6:5b:98:aa:65:8d:30: 35:6f:63:7c:d5:c3:eb:72:9c:a0:c7:52:c0:f4:b4: a5:17:bf:ed:43:20:91:5b:2f:fb:83:f0:5a:2a:d9: 05:a2:78:f4:b2:93:45:41:10:b9:d4:98:c2:bd:43: c6:e9:04:b7:20:c9:6d:8d:51:05:39:c9:5d:21:2c: f0:05:8f:d1:7c:a3:f0:a3:e4:6b:25:05:9c:1c:1b: 7f:22:e3:33:e3:a6:94:49:d7:bf:81:3e:da:de:e6: 82:12:ca:a0:4f:37:92:df:85:5d:85:4c:ab:a9:ad: 52:44:87:ec:19:18:f0:01:47:e0:02:e4:3c:00:2f: b6:d9:ba:c3:b3:5c:e9:57:9c:a9:f6:f4:47:39:8a: e9:c8:e5:ae:4e:d2:7d:75:4e:48:a0:3c:a5:e8:b9: 68:c6:93:0c:33:27:4a:95:0b:a3:39:4d:ff:f2:e1: 76:ca:bd:6e:45:40:ff:f8:cd:12:96:3a:3f:2e:7e: f2:d8:6b:ac:cf:45:17:4f:96:b2:ee:97:ce:0f:16: 32:18:c8:d6:5b:da:9c:7c:26:69:a5:e2:fc:b0:51: d9:32:cb:38:46:e0:5b:79:b5:7f:ec:13:26:9f:02: a6:45:de:64:4c:4d:46:68:79:0f:c2:79:85:df:80: 6e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:91:8A:AC:CF:92:5D:01:EE:BD:6F:B2:44:19:D6:78:5C:B2:A8:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.crl X509v3 Authority Key Identifier: keyid:14:71:AC:1E:2B:E8:94:25:09:41:FC:D6:59:07:4C:A3:B5:CF:BB:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:20:bc:0d:0d:01:c3:0d:29:bb:f2:a2:6d:7c:25:16:05:c4: 50:09:81:53:d0:e2:1d:90:71:e6:fa:76:ee:cb:6e:4d:2c:69: 6f:58:e5:47:8a:f7:5e:c8:63:ac:21:cc:54:6e:e9:c9:94:be: 17:56:fd:e2:8e:aa:92:60:ce:6d:37:fa:2c:f8:af:55:10:75: eb:e5:63:dd:56:d1:67:16:1d:e7:7a:f6:ee:37:84:99:ab:d8: f8:8f:24:7c:b1:78:e1:e7:e8:e8:3d:7a:e6:80:f6:fd:74:06: 8a:b1:e4:cc:e9:6c:7c:7e:f7:9b:33:bf:01:b4:fe:a3:c9:08: 77:d9:ce:9a:12:8f:38:30:1a:43:25:8c:2e:f7:1e:c3:5a:35: 0e:a7:9d:70:7c:c1:ee:d2:81:04:26:c6:98:52:75:ac:0b:6a: 1a:05:7e:b4:0d:73:9c:e2:92:e9:82:be:5c:cc:a7:87:dd:27: c9:3a:fb:f0:ce:6d:7b:c7:e3:c2:d3:ae:b5:34:e9:2e:37:b7: 7f:27:fa:79:58:90:09:b6:25:77:31:4f:a7:98:95:b3:f2:54: cf:92:6f:a2:19:ac:09:e8:46:4c:38:30:e3:0f:3c:65:11:0a: 7a:fe:f0:1d:dd:69:bc:49:c6:85:86:9f:e2:ce:96:c8:3f:42: 78:bd:ce:a5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEry6yW+KNE6HYBy5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJhMWNmMzQtOWRlNi00M2IyLThjNmUtZWZiMjdhOWFj NWFlMB4XDTI1MDgyMzA2MDAwOFoXDTI1MDgyNjA2MDAwMFowLzEtMCsGA1UEAxMk Mjg5MzM4ZTEtYjI0Yy00ODk1LWFhMWQtY2Y1MDNlMjNhMjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZdWa71nzLZbmKpljTA1b2N81cPrcpygx1LA 9LSlF7/tQyCRWy/7g/BaKtkFonj0spNFQRC51JjCvUPG6QS3IMltjVEFOcldISzw BY/RfKPwo+RrJQWcHBt/IuMz46aUSde/gT7a3uaCEsqgTzeS34VdhUyrqa1SRIfs GRjwAUfgAuQ8AC+22brDs1zpV5yp9vRHOYrpyOWuTtJ9dU5IoDyl6LloxpMMMydK lQujOU3/8uF2yr1uRUD/+M0Sljo/Ln7y2Gusz0UXT5ay7pfODxYyGMjWW9qcfCZp peL8sFHZMss4RuBbebV/7BMmnwKmRd5kTE1GaHkPwnmF34BupwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHWRiqzPkl0B7r1vskQZ1nhcsqg8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMmEx Y2YzNC05ZGU2LTQzYjItOGM2ZS1lZmIyN2E5YWM1YWUvYTJhMWNmMzQtOWRlNi00 M2IyLThjNmUtZWZiMjdhOWFjNWFlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTJhMWNmMzQtOWRlNi00M2IyLThj NmUtZWZiMjdhOWFjNWFlL2EyYTFjZjM0LTlkZTYtNDNiMi04YzZlLWVmYjI3YTlh YzVhZS5jcmwwHwYDVR0jBBgwFoAUFHGsHivolCUJQfzWWQdMo7XPuzkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hMmExY2YzNC05ZGU2LTQzYjItOGM2ZS1lZmIy N2E5YWM1YWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQChILwNDQHDDSm78qJtfCUW BcRQCYFT0OIdkHHm+nbuy25NLGlvWOVHivdeyGOsIcxUbunJlL4XVv3ijqqSYM5t N/os+K9VEHXr5WPdVtFnFh3nevbuN4SZq9j4jyR8sXjh5+joPXrmgPb9dAaKseTM 6Wx8fvebM78BtP6jyQh32c6aEo84MBpDJYwu9x7DWjUOp51wfMHu0oEEJsaYUnWs C2oaBX60DXOc4pLpgr5czKeH3SfJOvvwzm17x+PC0661NOkuN7d/J/p5WJAJtiV3 MU+nmJWz8lTPkm+iGawJ6EZMODDjDzxlEQp6/vAd3Wm8ScaFhp/izpbIP0J4vc6l -----END CERTIFICATE-----Generated at Sat Aug 23 18:38:26 2025 by rpki-client