$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.mft File: b7c1ab35-d3f2-44da-8a41-717b538ab7e5.mft (raw, json) Hash identifier: mp0VGsHyoUzfFf7Ru4tlyJ/LY+XMvdlZiiQlmadvSBE= Subject key identifier: 20:4A:4A:7B:04:45:2B:1B:D1:B7:24:C1:4F:21:82:CA:57:3C:5D:2D Authority key identifier: 05:A1:DC:9A:A7:39:EA:4A:18:E0:FF:87:6A:FF:43:44:A9:04:AE:22 Certificate issuer: /CN=b7c1ab35-d3f2-44da-8a41-717b538ab7e5 Certificate serial: 010D0C9F4328584AF1C16205D8811A43B33C0C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.mft Manifest number: 010D0C9F43285841536EFDB53F2B26BB04F92DD2 Signing time: Fri 22 Aug 2025 20:00:08 +0000 Manifest this update: Fri 22 Aug 2025 20:00:08 +0000 Manifest next update: Mon 25 Aug 2025 20:00:00 +0000 Files and hashes: 1: b7c1ab35-d3f2-44da-8a41-717b538ab7e5.crl (hash: r8Seod/cjWLyPqGkM6uba0GHYEasRG9+LHUdPVzHlEw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f1:c1:62:05:d8:81:1a:43:b3:3c:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7c1ab35-d3f2-44da-8a41-717b538ab7e5 Validity Not Before: Aug 22 20:00:08 2025 GMT Not After : Aug 25 20:00:00 2025 GMT Subject: CN=bbbd4179-4bb1-4a13-8d01-4571acddbb76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c9:96:a4:e6:d2:0f:21:77:ec:dc:e5:a4:b5: 2c:f6:6d:0a:de:b4:c1:06:32:9a:b1:2c:09:7b:2d: 3e:db:2d:28:81:46:01:79:8d:95:0c:c1:82:22:a8: fc:4c:f1:0f:71:e6:c4:88:9d:65:97:2a:2a:95:a3: 88:f7:06:27:a0:fa:6d:33:51:6b:ef:7b:c4:02:05: aa:af:26:2e:da:91:69:7e:cc:2e:b1:cf:9e:bb:a0: c5:4f:d1:fb:f5:11:eb:d8:a1:32:d0:51:70:62:f3: b3:70:ef:81:60:7c:35:b8:48:40:22:84:53:ad:02: 5a:89:47:5d:52:26:15:8f:f6:34:37:11:c6:81:18: ac:2c:87:ff:d5:de:45:3c:3d:35:19:62:4d:46:92: 8f:a8:59:b0:0e:5b:ce:71:4b:71:39:e2:33:cd:61: 0d:da:b5:9f:ce:f9:fc:80:b8:07:7f:01:91:46:59: 78:5b:57:8f:b9:a7:4e:6c:b8:d3:07:d7:36:e7:67: 29:4d:54:0d:e5:e2:9a:9c:9f:db:b5:c8:c3:b3:60: a2:d2:ac:2c:9d:74:8d:df:ed:7d:17:fc:bc:be:ca: e7:ab:cb:76:6a:06:64:84:cf:94:8d:24:ba:e6:94: 9e:5f:07:8b:6a:08:22:01:3c:08:00:06:05:c4:3b: 6b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:4A:4A:7B:04:45:2B:1B:D1:B7:24:C1:4F:21:82:CA:57:3C:5D:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.crl X509v3 Authority Key Identifier: keyid:05:A1:DC:9A:A7:39:EA:4A:18:E0:FF:87:6A:FF:43:44:A9:04:AE:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:d4:bd:eb:e9:bb:69:f4:45:c7:3b:18:b5:e8:34:ae:e9:ba: fb:7f:f0:89:f3:5d:c2:30:bf:26:4d:33:8d:6a:01:d2:66:e4: b7:71:8b:fb:39:42:50:04:07:15:19:03:09:7a:2d:b7:6a:c9: ef:fe:45:02:4b:49:38:49:06:f6:98:e4:15:43:4b:65:54:e4: 21:81:d8:62:10:4e:9c:ff:54:8e:1e:fb:95:ed:82:43:a1:f3: c1:b1:b5:40:96:e5:99:9a:dd:c3:25:15:de:e4:f7:54:24:bf: d6:31:d3:eb:a4:24:07:f0:5c:ac:5b:b6:f6:8f:0f:5c:54:3e: 85:53:0b:9d:53:ed:d8:22:f1:3a:1d:89:2f:c1:9e:f3:64:3f: 24:bc:fc:49:cb:b7:e4:d4:5d:5d:fb:ca:ba:f2:e3:ed:95:9c: 0a:0c:2a:c8:8b:e3:44:27:c8:c6:c8:8a:68:58:47:3d:8c:48: 7f:d1:ea:bd:a3:a8:d4:09:91:cf:df:56:8a:33:87:73:45:4c: ed:88:df:2c:cc:09:e9:d7:36:56:fc:6b:25:1f:b7:74:89:56: 06:e3:dd:87:75:5e:72:8d:2c:af:2d:dd:d2:55:7d:d0:55:0e: 81:dd:ee:b6:f9:bf:73:9f:a7:25:25:c1:36:ef:8f:38:09:75: b1:cc:8a:68 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErxwWIF2IEaQ7M8DIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdjMWFiMzUtZDNmMi00NGRhLThhNDEtNzE3YjUzOGFi N2U1MB4XDTI1MDgyMjIwMDAwOFoXDTI1MDgyNTIwMDAwMFowLzEtMCsGA1UEAxMk YmJiZDQxNzktNGJiMS00YTEzLThkMDEtNDU3MWFjZGRiYjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcmWpObSDyF37NzlpLUs9m0K3rTBBjKasSwJ ey0+2y0ogUYBeY2VDMGCIqj8TPEPcebEiJ1llyoqlaOI9wYnoPptM1Fr73vEAgWq ryYu2pFpfswusc+eu6DFT9H79RHr2KEy0FFwYvOzcO+BYHw1uEhAIoRTrQJaiUdd UiYVj/Y0NxHGgRisLIf/1d5FPD01GWJNRpKPqFmwDlvOcUtxOeIzzWEN2rWfzvn8 gLgHfwGRRll4W1ePuadObLjTB9c252cpTVQN5eKanJ/btcjDs2Ci0qwsnXSN3+19 F/y8vsrnq8t2agZkhM+UjSS65pSeXweLaggiATwIAAYFxDtrxQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCBKSnsERSsb0bckwU8hgspXPF0tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iN2Mx YWIzNS1kM2YyLTQ0ZGEtOGE0MS03MTdiNTM4YWI3ZTUvYjdjMWFiMzUtZDNmMi00 NGRhLThhNDEtNzE3YjUzOGFiN2U1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjdjMWFiMzUtZDNmMi00NGRhLThh NDEtNzE3YjUzOGFiN2U1L2I3YzFhYjM1LWQzZjItNDRkYS04YTQxLTcxN2I1Mzhh YjdlNS5jcmwwHwYDVR0jBBgwFoAUBaHcmqc56koY4P+Hav9DRKkEriIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iN2MxYWIzNS1kM2YyLTQ0ZGEtOGE0MS03MTdi NTM4YWI3ZTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA91L3r6btp9EXHOxi16DSu 6br7f/CJ813CML8mTTONagHSZuS3cYv7OUJQBAcVGQMJei23asnv/kUCS0k4SQb2 mOQVQ0tlVOQhgdhiEE6c/1SOHvuV7YJDofPBsbVAluWZmt3DJRXe5PdUJL/WMdPr pCQH8FysW7b2jw9cVD6FUwudU+3YIvE6HYkvwZ7zZD8kvPxJy7fk1F1d+8q68uPt lZwKDCrIi+NEJ8jGyIpoWEc9jEh/0eq9o6jUCZHP31aKM4dzRUztiN8szAnp1zZW /GslH7d0iVYG492HdV5yjSyvLd3SVX3QVQ6B3e62+b9zn6clJcE27484CXWxzIpo -----END CERTIFICATE-----Generated at Sat Aug 23 18:13:25 2025 by rpki-client