$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/ba434fb3-146b-4bc5-a8cd-38ddf1603470.mft File: ba434fb3-146b-4bc5-a8cd-38ddf1603470.mft (raw, json) Hash identifier: cqG9DpjTxuF4b08t0pCcvNrhfhysw+kzjHQwP3zADws= Subject key identifier: 16:0F:47:55:CE:CD:4E:57:9C:91:DD:0C:A1:EB:3C:CA:21:2A:27:BD Authority key identifier: A1:E3:10:29:38:AC:67:98:DA:DC:F0:11:4E:C1:B7:64:71:5A:21:04 Certificate issuer: /CN=ba434fb3-146b-4bc5-a8cd-38ddf1603470 Certificate serial: 010D0C9F4328584AF3BB9CC5A1B98FDBBE63CD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/ba434fb3-146b-4bc5-a8cd-38ddf1603470.mft Manifest number: 010D0C9F4328584073A8555E8FD3615D57A33D58 Signing time: Sat 23 Aug 2025 13:00:08 +0000 Manifest this update: Sat 23 Aug 2025 13:00:08 +0000 Manifest next update: Tue 26 Aug 2025 13:00:00 +0000 Files and hashes: 1: 14516a78-5003-3ee4-a230-723f4f86845d.roa (hash: EyPc5e91kycT+0mtNQ06eJnr/ToUVD7JbhGO9VNd17Q=) 2: ba434fb3-146b-4bc5-a8cd-38ddf1603470.crl (hash: eIl/eERF8x7A7PzX9/Wrhhy5jlUwLCO5fhJxcgK96fQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/ba434fb3-146b-4bc5-a8cd-38ddf1603470.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/ba434fb3-146b-4bc5-a8cd-38ddf1603470.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f3:bb:9c:c5:a1:b9:8f:db:be:63:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba434fb3-146b-4bc5-a8cd-38ddf1603470 Validity Not Before: Aug 23 13:00:08 2025 GMT Not After : Aug 26 13:00:00 2025 GMT Subject: CN=dfbd7393-c4e3-438c-b00c-5b845d06d4d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bc:f8:5a:08:1c:fc:fc:8f:1f:7f:31:97:d9: ad:8e:cb:b8:75:6e:00:e9:29:87:5a:e6:39:b3:de: 44:67:fc:6d:e4:d9:c1:60:9d:58:b6:88:ca:fa:9d: 53:bf:02:ec:61:d4:28:1b:5d:a1:ac:19:dd:de:90: c7:15:e6:4f:90:20:66:e0:6d:a7:bd:3f:2a:50:06: e9:7a:dc:37:f7:a0:08:27:f4:11:da:20:d9:b8:6e: b4:01:ab:3b:cd:5e:b1:b0:5f:39:6b:78:08:46:32: 1f:78:26:d9:c3:e9:a8:99:02:5f:2f:d5:93:e4:d1: 5c:22:a7:6b:ee:14:bb:48:3f:f3:95:94:b7:d4:c7: 13:8e:de:e6:3d:0f:4e:38:45:60:6f:cb:d9:b3:80: ac:53:8d:bb:0d:b0:51:47:24:a0:86:e8:0a:96:20: e2:94:c9:bc:3e:6d:2c:cf:54:6e:47:75:67:81:d6: 5a:47:cc:39:fd:56:ea:67:4f:44:96:ca:4a:3c:e0: c4:8f:70:81:03:72:9b:97:8e:97:05:2a:2f:ab:ff: d3:7b:a2:7b:5b:06:8e:ea:44:2e:b6:fa:1c:62:9c: a0:18:ae:c6:d1:5c:5a:01:8a:9f:ce:41:49:b4:03: af:31:75:61:18:ba:23:e1:df:c0:90:23:ab:43:2f: 24:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:0F:47:55:CE:CD:4E:57:9C:91:DD:0C:A1:EB:3C:CA:21:2A:27:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/ba434fb3-146b-4bc5-a8cd-38ddf1603470.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/ba434fb3-146b-4bc5-a8cd-38ddf1603470.crl X509v3 Authority Key Identifier: keyid:A1:E3:10:29:38:AC:67:98:DA:DC:F0:11:4E:C1:B7:64:71:5A:21:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:61:95:e7:64:6e:32:98:6b:cd:f1:e1:23:c4:18:f0:58:60: 53:e2:8d:92:f9:14:d3:0a:d4:45:98:7c:bc:69:0a:32:e3:75: be:60:a9:d2:7a:82:c1:b8:06:f3:b1:73:43:60:47:f9:97:1d: a1:4e:05:eb:a3:b0:89:26:60:9c:e1:d1:59:62:5d:34:61:42: e0:c4:5e:08:bf:e3:4c:c0:41:7f:c4:07:2d:3f:d4:52:5c:fb: 3e:1c:95:ba:f8:00:3d:dd:7e:47:f1:03:b8:4e:01:98:22:ce: 83:7d:e5:0d:24:14:ff:5d:9f:1f:c6:73:fe:14:d8:1b:1e:15: b9:d1:7c:12:af:e4:44:06:9d:19:39:23:4c:c0:36:b7:67:82: 2e:44:a3:73:bb:03:3f:df:0a:c0:1a:2d:c1:d1:53:78:88:f3: fa:d0:da:f9:bc:d0:77:fe:21:0f:a1:70:91:c5:a9:65:e3:aa: de:63:e1:32:bb:1e:1b:7e:34:34:87:66:a5:81:f0:cc:db:12: 64:c2:ec:e1:a3:76:d9:08:0a:71:3f:3d:1b:11:b4:be:07:c0: 00:2e:4c:5b:88:56:38:09:cf:ad:ff:4c:b2:ff:69:1f:63:ec: 24:9c:67:8e:2d:94:05:fb:92:27:fc:07:65:10:57:6b:4e:59: 1f:3c:f5:54 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErzu5zFobmP275jzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE0MzRmYjMtMTQ2Yi00YmM1LWE4Y2QtMzhkZGYxNjAz NDcwMB4XDTI1MDgyMzEzMDAwOFoXDTI1MDgyNjEzMDAwMFowLzEtMCsGA1UEAxMk ZGZiZDczOTMtYzRlMy00MzhjLWIwMGMtNWI4NDVkMDZkNGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrz4Wggc/PyPH38xl9mtjsu4dW4A6SmHWuY5 s95EZ/xt5NnBYJ1YtojK+p1TvwLsYdQoG12hrBnd3pDHFeZPkCBm4G2nvT8qUAbp etw396AIJ/QR2iDZuG60Aas7zV6xsF85a3gIRjIfeCbZw+momQJfL9WT5NFcIqdr 7hS7SD/zlZS31McTjt7mPQ9OOEVgb8vZs4CsU427DbBRRySghugKliDilMm8Pm0s z1RuR3VngdZaR8w5/VbqZ09ElspKPODEj3CBA3Kbl46XBSovq//Te6J7WwaO6kQu tvocYpygGK7G0VxaAYqfzkFJtAOvMXVhGLoj4d/AkCOrQy8kvwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBYPR1XOzU5XnJHdDKHrPMohKie9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYTQz NGZiMy0xNDZiLTRiYzUtYThjZC0zOGRkZjE2MDM0NzAvYmE0MzRmYjMtMTQ2Yi00 YmM1LWE4Y2QtMzhkZGYxNjAzNDcwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmE0MzRmYjMtMTQ2Yi00YmM1LWE4 Y2QtMzhkZGYxNjAzNDcwL2JhNDM0ZmIzLTE0NmItNGJjNS1hOGNkLTM4ZGRmMTYw MzQ3MC5jcmwwHwYDVR0jBBgwFoAUoeMQKTisZ5ja3PARTsG3ZHFaIQQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYTQzNGZiMy0xNDZiLTRiYzUtYThjZC0zOGRk ZjE2MDM0NzAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA1YZXnZG4ymGvN8eEjxBjw WGBT4o2S+RTTCtRFmHy8aQoy43W+YKnSeoLBuAbzsXNDYEf5lx2hTgXro7CJJmCc 4dFZYl00YULgxF4Iv+NMwEF/xActP9RSXPs+HJW6+AA93X5H8QO4TgGYIs6DfeUN JBT/XZ8fxnP+FNgbHhW50XwSr+REBp0ZOSNMwDa3Z4IuRKNzuwM/3wrAGi3B0VN4 iPP60Nr5vNB3/iEPoXCRxall46reY+Eyux4bfjQ0h2algfDM2xJkwuzho3bZCApx Pz0bEbS+B8AALkxbiFY4Cc+t/0yy/2kfY+wknGeOLZQF+5In/AdlEFdrTlkfPPVU -----END CERTIFICATE-----Generated at Sun Aug 24 04:57:11 2025 by rpki-client