$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/42820f2e-2eb1-4049-8630-b2760e0a03a1/42820f2e-2eb1-4049-8630-b2760e0a03a1.mft File: 42820f2e-2eb1-4049-8630-b2760e0a03a1.mft (raw, json) Hash identifier: pvxMw2P+9cXKvm3gry3lJ5ToGNTWENKW0yya2jeW8t4= Subject key identifier: 63:5F:AB:2F:13:86:8F:78:DC:C2:55:63:75:DB:4F:85:8B:B4:08:A8 Authority key identifier: 3C:56:42:F6:43:F2:F8:BE:9F:CF:21:54:70:FF:5F:6C:EA:16:58:1B Certificate issuer: /CN=42820f2e-2eb1-4049-8630-b2760e0a03a1 Certificate serial: 010D0C9F4328584AF46E3EA1573DAE81ABFECE40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/42820f2e-2eb1-4049-8630-b2760e0a03a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/42820f2e-2eb1-4049-8630-b2760e0a03a1/42820f2e-2eb1-4049-8630-b2760e0a03a1.mft Manifest number: 010D0C9F432858499FDDB8D8E5963D6B80EDABFA Signing time: Sat 23 Aug 2025 19:00:04 +0000 Manifest this update: Sat 23 Aug 2025 19:00:04 +0000 Manifest next update: Tue 26 Aug 2025 19:00:00 +0000 Files and hashes: 1: 42820f2e-2eb1-4049-8630-b2760e0a03a1.crl (hash: Yo+6qM4KQvwcAvhEuDGDZVATU75gkb/BeDyOxjkuSms=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/42820f2e-2eb1-4049-8630-b2760e0a03a1/42820f2e-2eb1-4049-8630-b2760e0a03a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/42820f2e-2eb1-4049-8630-b2760e0a03a1/42820f2e-2eb1-4049-8630-b2760e0a03a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/42820f2e-2eb1-4049-8630-b2760e0a03a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f4:6e:3e:a1:57:3d:ae:81:ab:fe:ce:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42820f2e-2eb1-4049-8630-b2760e0a03a1 Validity Not Before: Aug 23 19:00:04 2025 GMT Not After : Aug 26 19:00:00 2025 GMT Subject: CN=c2731e4c-2534-4a79-bd32-e74a0c22540d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:80:e4:4a:c7:b0:ac:ea:6b:57:21:9c:48:7b: 1b:3e:14:8e:71:ac:12:4f:22:5a:34:73:34:3c:86: 2e:e9:20:18:ea:9e:ce:28:92:fc:43:76:5c:ec:c4: ab:45:39:c9:34:ab:79:2f:0b:83:c0:1b:15:59:6e: 8d:7b:4b:66:b3:61:b1:cc:2a:7c:81:b2:c3:02:f0: e9:63:2b:4c:f0:df:2a:ff:74:f7:07:da:c1:5b:af: 69:44:32:ee:d6:88:7a:70:88:40:a1:18:07:08:6c: 96:24:07:4c:69:9d:b2:d2:15:d0:5f:16:43:52:d6: a7:68:16:81:f8:2e:9c:3a:f6:13:69:2a:8f:ec:8c: b6:42:a3:23:14:98:a6:0c:c2:b4:0a:17:a2:29:3e: 98:65:73:e3:92:7c:0e:05:4a:8d:d1:7a:af:6c:0f: f3:d3:5b:f2:b2:1e:3c:4f:76:0b:be:f2:43:97:da: 4a:c2:91:ad:ad:28:b2:c4:85:b0:e5:df:c7:64:a0: e2:24:80:47:ec:df:b5:3c:44:4b:8e:e5:00:87:1a: c9:0d:ff:75:c4:af:79:5c:82:0e:23:cd:d6:6d:62: cd:62:bb:4e:55:b1:0e:6b:f0:36:5e:01:ab:9b:1e: 2b:8a:96:d6:54:d0:87:81:e4:7f:5c:e4:96:79:58: 12:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:5F:AB:2F:13:86:8F:78:DC:C2:55:63:75:DB:4F:85:8B:B4:08:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/42820f2e-2eb1-4049-8630-b2760e0a03a1/42820f2e-2eb1-4049-8630-b2760e0a03a1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/42820f2e-2eb1-4049-8630-b2760e0a03a1/42820f2e-2eb1-4049-8630-b2760e0a03a1.crl X509v3 Authority Key Identifier: keyid:3C:56:42:F6:43:F2:F8:BE:9F:CF:21:54:70:FF:5F:6C:EA:16:58:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/42820f2e-2eb1-4049-8630-b2760e0a03a1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:83:4b:c8:2a:e3:53:8c:09:1f:8a:3c:a0:7c:ec:89:76:db: 77:06:b2:0e:f3:dd:0d:71:71:65:c3:c7:da:a0:38:94:48:eb: 20:3f:e0:eb:0a:65:da:a3:4f:40:c5:36:21:fa:34:02:e5:8d: 89:fb:1b:ab:93:ef:f8:75:95:ca:fc:bd:8c:5f:39:86:33:98: 31:03:d2:81:f4:b7:c3:24:32:56:96:00:5c:f7:78:da:ba:e2: 0e:88:d3:42:66:1e:ae:2e:61:82:ad:1b:61:01:7d:91:33:e3: d8:8e:85:1c:c0:2d:6b:99:52:6f:b4:6a:7b:76:c8:b9:9f:77: 13:ba:9d:62:d3:a5:0f:ed:b2:2e:25:92:a1:d7:5e:97:13:9d: 3a:35:11:3f:d2:11:29:7c:b0:d6:9e:06:25:7a:69:fd:44:56: f5:a5:1b:36:15:d2:a0:85:02:26:44:5d:fd:9e:15:f6:8c:2d: 28:02:f6:c2:23:11:88:7c:c0:43:14:b5:64:11:6a:bf:31:d2: cd:be:db:36:6f:84:36:34:4a:b2:c7:ea:3d:63:49:4d:30:b9: 99:b6:3c:e8:d7:87:66:e8:d8:19:30:b7:7c:32:8d:c0:2c:78: 28:10:2c:46:d8:fd:f0:33:b5:5f:d2:a0:18:6d:64:c1:1c:27: 85:ab:42:94 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr0bj6hVz2ugav+zkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDI4MjBmMmUtMmViMS00MDQ5LTg2MzAtYjI3NjBlMGEw M2ExMB4XDTI1MDgyMzE5MDAwNFoXDTI1MDgyNjE5MDAwMFowLzEtMCsGA1UEAxMk YzI3MzFlNGMtMjUzNC00YTc5LWJkMzItZTc0YTBjMjI1NDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4DkSsewrOprVyGcSHsbPhSOcawSTyJaNHM0 PIYu6SAY6p7OKJL8Q3Zc7MSrRTnJNKt5LwuDwBsVWW6Ne0tms2GxzCp8gbLDAvDp YytM8N8q/3T3B9rBW69pRDLu1oh6cIhAoRgHCGyWJAdMaZ2y0hXQXxZDUtanaBaB +C6cOvYTaSqP7Iy2QqMjFJimDMK0CheiKT6YZXPjknwOBUqN0XqvbA/z01vysh48 T3YLvvJDl9pKwpGtrSiyxIWw5d/HZKDiJIBH7N+1PERLjuUAhxrJDf91xK95XIIO I83WbWLNYrtOVbEOa/A2XgGrmx4ripbWVNCHgeR/XOSWeVgS4QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGNfqy8Tho943MJVY3XbT4WLtAioMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80Mjgy MGYyZS0yZWIxLTQwNDktODYzMC1iMjc2MGUwYTAzYTEvNDI4MjBmMmUtMmViMS00 MDQ5LTg2MzAtYjI3NjBlMGEwM2ExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNDI4MjBmMmUtMmViMS00MDQ5LTg2 MzAtYjI3NjBlMGEwM2ExLzQyODIwZjJlLTJlYjEtNDA0OS04NjMwLWIyNzYwZTBh MDNhMS5jcmwwHwYDVR0jBBgwFoAUPFZC9kPy+L6fzyFUcP9fbOoWWBswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80MjgyMGYyZS0yZWIxLTQwNDktODYzMC1iMjc2 MGUwYTAzYTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA/g0vIKuNTjAkfijygfOyJ dtt3BrIO890NcXFlw8faoDiUSOsgP+DrCmXao09AxTYh+jQC5Y2J+xurk+/4dZXK /L2MXzmGM5gxA9KB9LfDJDJWlgBc93jauuIOiNNCZh6uLmGCrRthAX2RM+PYjoUc wC1rmVJvtGp7dsi5n3cTup1i06UP7bIuJZKh116XE506NRE/0hEpfLDWngYlemn9 RFb1pRs2FdKghQImRF39nhX2jC0oAvbCIxGIfMBDFLVkEWq/MdLNvts2b4Q2NEqy x+o9Y0lNMLmZtjzo14dm6NgZMLd8Mo3ALHgoECxG2P3wM7Vf0qAYbWTBHCeFq0KU -----END CERTIFICATE-----Generated at Sat Aug 23 23:53:22 2025 by rpki-client