$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/ba434fb3-146b-4bc5-a8cd-38ddf1603470.mft File: ba434fb3-146b-4bc5-a8cd-38ddf1603470.mft (raw, json) Hash identifier: XKrnBu+KH+N69XsJdVmMiB/PcPpzvYI5nOn4Lker/Nk= Subject key identifier: 06:FB:39:BB:07:BA:9D:7A:FF:23:A1:81:40:D8:C3:7A:BE:73:DF:CE Authority key identifier: A1:E3:10:29:38:AC:67:98:DA:DC:F0:11:4E:C1:B7:64:71:5A:21:04 Certificate issuer: /CN=ba434fb3-146b-4bc5-a8cd-38ddf1603470 Certificate serial: 010D0C9F4328584A629007C573ABC6456100BF40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/ba434fb3-146b-4bc5-a8cd-38ddf1603470.mft Manifest number: 010D0C9F4328584073A8555E8FD3615D57A33D24 Signing time: Wed 02 Jul 2025 13:00:08 +0000 Manifest this update: Wed 02 Jul 2025 13:00:08 +0000 Manifest next update: Sat 05 Jul 2025 13:00:00 +0000 Files and hashes: 1: 14516a78-5003-3ee4-a230-723f4f86845d.roa (hash: EyPc5e91kycT+0mtNQ06eJnr/ToUVD7JbhGO9VNd17Q=) 2: ba434fb3-146b-4bc5-a8cd-38ddf1603470.crl (hash: 0UO0pztJzjTs1kFIv3rDRmymyUWxo/Dz5T9RpJ5awfM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/ba434fb3-146b-4bc5-a8cd-38ddf1603470.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/ba434fb3-146b-4bc5-a8cd-38ddf1603470.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:07:c5:73:ab:c6:45:61:00:bf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba434fb3-146b-4bc5-a8cd-38ddf1603470 Validity Not Before: Jul 2 13:00:08 2025 GMT Not After : Jul 5 13:00:00 2025 GMT Subject: CN=f8bb189c-2dc5-4212-bcb4-abbe1930bd11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:90:b8:06:b5:f6:f2:09:5f:e0:73:e4:6a:49: 28:2b:07:6a:9a:a2:dc:40:d2:3c:28:b7:a5:00:9d: 34:c8:ff:83:7c:6b:4e:e9:04:c6:f1:a9:21:52:b0: c5:27:df:a4:aa:54:a0:20:9d:1f:ad:f0:4a:98:cf: c5:1f:94:3e:c0:05:e1:a1:50:0d:39:e8:0d:d1:91: 4c:c9:d0:db:c3:a0:4a:01:a2:f0:96:1a:19:86:b0: 0d:74:41:d2:6e:e5:0b:42:e2:22:ba:8e:f2:55:40: a0:34:99:ce:40:65:8b:ae:e8:2e:99:4b:8e:4f:59: d8:51:e8:d1:fa:41:71:f5:05:30:32:e6:12:15:05: 67:0d:d9:f4:1a:87:6d:70:49:0e:98:6f:c4:0f:03: 75:b4:c7:bb:5a:cb:f5:99:5f:38:bd:8b:ee:70:1a: b9:df:c0:2f:d5:ff:f5:fe:07:e6:81:c5:7c:48:52: 03:ab:ac:26:bf:06:7a:cf:ec:34:81:76:44:c0:ac: 80:c3:9f:8d:99:48:14:e4:f4:1a:5f:90:1d:26:ef: 0f:fc:67:56:0f:e8:98:0c:8b:f1:04:77:52:d6:c7: d7:2f:08:c1:32:50:a1:5a:44:52:fa:08:bf:8e:93: 7e:76:57:cc:13:18:41:01:e7:cc:11:78:24:28:0d: bf:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:FB:39:BB:07:BA:9D:7A:FF:23:A1:81:40:D8:C3:7A:BE:73:DF:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/ba434fb3-146b-4bc5-a8cd-38ddf1603470.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/ba434fb3-146b-4bc5-a8cd-38ddf1603470.crl X509v3 Authority Key Identifier: keyid:A1:E3:10:29:38:AC:67:98:DA:DC:F0:11:4E:C1:B7:64:71:5A:21:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:9c:8f:0a:e2:5d:eb:6d:23:7e:52:38:10:10:52:ef:d1:c8: b4:0c:e4:e6:19:76:09:ce:03:d1:07:6a:a2:c6:16:2c:61:dd: e8:a6:8c:df:96:8a:81:04:49:49:f1:40:a4:7b:f4:94:30:19: de:86:a7:96:01:2d:22:99:f7:82:5f:30:a1:5d:57:db:32:3f: 7d:3d:23:1b:cf:e3:fc:31:a5:60:47:87:c8:f2:77:bd:9a:80: 77:51:86:93:fd:82:4f:72:a3:3c:fd:6e:a7:d7:bc:72:6d:5b: e6:b3:7c:d6:3f:30:db:e7:12:a2:4a:fb:bc:2b:07:a7:45:1a: 30:fe:aa:b8:11:97:80:cd:99:bf:ca:8f:55:5e:43:8f:37:bf: d1:8d:d3:08:a7:b2:da:f5:2e:aa:41:d7:b4:cd:7e:0a:b5:d4: b2:2c:87:12:80:5f:1b:42:a6:b2:af:e9:c8:07:aa:da:51:d8: 66:1d:3f:a6:75:01:e2:08:47:31:f0:34:3f:6a:69:85:69:c5: fe:a6:fb:34:4e:4b:ca:c7:a5:b9:6e:7e:57:25:9f:84:17:39: 00:87:4f:7d:16:db:31:ef:8c:bb:78:29:55:93:cc:28:de:e7: a2:20:96:09:34:e9:f2:81:c5:fe:6a:24:83:9d:46:94:31:57: 82:96:08:93 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpikAfFc6vGRWEAv0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE0MzRmYjMtMTQ2Yi00YmM1LWE4Y2QtMzhkZGYxNjAz NDcwMB4XDTI1MDcwMjEzMDAwOFoXDTI1MDcwNTEzMDAwMFowLzEtMCsGA1UEAxMk ZjhiYjE4OWMtMmRjNS00MjEyLWJjYjQtYWJiZTE5MzBiZDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJC4BrX28glf4HPkakkoKwdqmqLcQNI8KLel AJ00yP+DfGtO6QTG8akhUrDFJ9+kqlSgIJ0frfBKmM/FH5Q+wAXhoVANOegN0ZFM ydDbw6BKAaLwlhoZhrANdEHSbuULQuIiuo7yVUCgNJnOQGWLrugumUuOT1nYUejR +kFx9QUwMuYSFQVnDdn0GodtcEkOmG/EDwN1tMe7Wsv1mV84vYvucBq538Av1f/1 /gfmgcV8SFIDq6wmvwZ6z+w0gXZEwKyAw5+NmUgU5PQaX5AdJu8P/GdWD+iYDIvx BHdS1sfXLwjBMlChWkRS+gi/jpN+dlfMExhBAefMEXgkKA2/HwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAb7ObsHup16/yOhgUDYw3q+c9/OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYTQz NGZiMy0xNDZiLTRiYzUtYThjZC0zOGRkZjE2MDM0NzAvYmE0MzRmYjMtMTQ2Yi00 YmM1LWE4Y2QtMzhkZGYxNjAzNDcwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmE0MzRmYjMtMTQ2Yi00YmM1LWE4 Y2QtMzhkZGYxNjAzNDcwL2JhNDM0ZmIzLTE0NmItNGJjNS1hOGNkLTM4ZGRmMTYw MzQ3MC5jcmwwHwYDVR0jBBgwFoAUoeMQKTisZ5ja3PARTsG3ZHFaIQQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYTQzNGZiMy0xNDZiLTRiYzUtYThjZC0zOGRk ZjE2MDM0NzAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBNnI8K4l3rbSN+UjgQEFLv 0ci0DOTmGXYJzgPRB2qixhYsYd3opozfloqBBElJ8UCke/SUMBnehqeWAS0imfeC XzChXVfbMj99PSMbz+P8MaVgR4fI8ne9moB3UYaT/YJPcqM8/W6n17xybVvms3zW PzDb5xKiSvu8KwenRRow/qq4EZeAzZm/yo9VXkOPN7/RjdMIp7La9S6qQde0zX4K tdSyLIcSgF8bQqayr+nIB6raUdhmHT+mdQHiCEcx8DQ/ammFacX+pvs0TkvKx6W5 bn5XJZ+EFzkAh099Ftsx74y7eClVk8wo3ueiIJYJNOnygcX+aiSDnUaUMVeClgiT -----END CERTIFICATE-----Generated at Wed Jul 2 20:51:42 2025 by rpki-client