$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft File: bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft (raw, json) Hash identifier: S/jck3pCJEo/4B3mwGM3vX8Gfo3kslb1w3+gEvHkj1Y= Subject key identifier: 0A:10:07:32:9F:85:67:23:73:07:7D:41:0A:AE:FD:35:AE:9A:80:98 Authority key identifier: 31:91:FF:BF:89:94:07:2D:ED:2D:AF:9A:B1:96:60:5D:17:0E:43:D1 Certificate issuer: /CN=bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1 Certificate serial: 010D0C9F4328584B945FAB954D832C80DDC80380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft Manifest number: 010D0C9F4328584073A83645CACD5CF3732BE994 Signing time: Mon 20 Oct 2025 02:00:03 +0000 Manifest this update: Mon 20 Oct 2025 02:00:03 +0000 Manifest next update: Thu 23 Oct 2025 02:00:00 +0000 Files and hashes: 1: 0df970dd-1000-33b2-94cf-be4c8681560d.roa (hash: eWhTdCUZULTQbPYp9X1Zhea5pZhElgmACAZnZBuPwoc=) 2: bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.crl (hash: 3JQUxlrP4rVPbcPWJvgvTBOAo5X/eaoVwlqgxPSBR8w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:5f:ab:95:4d:83:2c:80:dd:c8:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1 Validity Not Before: Oct 20 02:00:03 2025 GMT Not After : Oct 23 02:00:00 2025 GMT Subject: CN=5cc3a604-1507-4a9e-a1e2-1619e05ee3b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:36:2f:73:2c:28:29:67:22:da:43:a7:1a:cf: 1e:58:45:b5:9a:c9:ad:20:2b:12:c4:8c:41:b2:8c: 1e:af:38:b7:9c:44:c1:c8:f0:ac:ba:74:40:4e:3c: a7:f9:68:8a:4c:40:5a:07:a6:bc:be:e8:6b:c7:05: b0:d4:be:aa:0c:6e:3f:82:49:fb:64:43:28:ca:d0: 10:de:3a:2a:43:9c:1c:0f:25:5c:e5:d1:eb:86:26: bb:f6:d5:fa:26:20:e0:f6:92:d1:f6:85:f1:4b:cd: 23:b5:95:0f:9a:5d:9c:fe:78:28:d3:73:6e:8c:b4: b1:db:3b:cc:90:fa:00:42:fc:fa:80:22:16:f5:a4: bf:4b:f1:3a:92:14:6a:a6:09:16:89:c5:44:4d:ee: 6b:e8:42:43:43:bf:5b:f9:94:dd:72:ae:4f:21:2c: b5:66:08:dd:dc:3b:86:df:c9:bf:4f:04:12:db:5e: 93:60:f1:07:ea:8c:ed:1e:b8:84:c5:aa:ab:fb:fb: b6:63:85:d9:e2:df:ac:da:b7:0b:bb:82:90:b8:ec: d3:a7:d0:d1:08:6f:51:79:6d:89:a5:74:06:2a:2c: 25:08:39:aa:0d:7c:e3:2f:c8:ea:a4:e4:82:ef:2c: 39:67:84:91:bf:42:84:1b:04:07:ab:ef:28:da:94: d2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:10:07:32:9F:85:67:23:73:07:7D:41:0A:AE:FD:35:AE:9A:80:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.crl X509v3 Authority Key Identifier: keyid:31:91:FF:BF:89:94:07:2D:ED:2D:AF:9A:B1:96:60:5D:17:0E:43:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:d1:2b:d7:63:c0:52:7d:8e:1d:f6:65:44:d2:73:5c:bf:9c: 48:fd:1f:5c:7b:b9:8a:0f:3a:03:d2:4d:2c:f5:93:79:1a:d9: 60:dd:ce:d0:17:10:86:be:22:d1:72:2a:bc:5a:b1:d2:e8:25: 6a:eb:8f:bb:d2:89:af:28:84:10:11:db:22:24:b2:a2:07:81: f3:70:7d:84:f0:b0:cd:b5:3b:dd:5d:a6:65:69:68:20:44:f2: da:91:85:eb:68:df:1d:1c:8d:ee:3e:3c:7e:6c:af:a7:12:12: ac:7a:20:e8:02:d5:c2:f2:3a:0a:11:de:58:96:df:9a:05:6f: 6f:25:77:2e:6c:10:a8:f5:d9:4e:1c:4a:f8:1a:49:10:ba:f7: b9:30:be:42:58:9f:43:53:ae:f1:e6:e8:87:f5:f3:91:c9:38: cc:db:b6:10:74:52:51:bd:71:79:f5:ba:d0:e2:fb:22:ed:6e: f2:d1:e1:27:77:3a:d7:26:77:74:d1:17:63:9b:a9:9d:80:d8: 42:8f:a7:c5:1c:11:6f:8f:d6:9f:8b:16:a2:13:e9:cd:02:14: 8c:ff:8c:76:ec:5e:ae:be:0f:d5:29:b2:8c:da:62:6b:35:89: 73:7e:1f:af:7b:44:b6:03:a5:5f:5c:4c:5c:72:a3:8f:33:b9: 84:2e:f9:ce -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuUX6uVTYMsgN3IA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFjZjNlM2QtZDJkYy00ZDFmLTllMDItZTQwN2Q5ZjZh N2IxMB4XDTI1MTAyMDAyMDAwM1oXDTI1MTAyMzAyMDAwMFowLzEtMCsGA1UEAxMk NWNjM2E2MDQtMTUwNy00YTllLWExZTItMTYxOWUwNWVlM2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzYvcywoKWci2kOnGs8eWEW1msmtICsSxIxB sowerzi3nETByPCsunRATjyn+WiKTEBaB6a8vuhrxwWw1L6qDG4/gkn7ZEMoytAQ 3joqQ5wcDyVc5dHrhia79tX6JiDg9pLR9oXxS80jtZUPml2c/ngo03NujLSx2zvM kPoAQvz6gCIW9aS/S/E6khRqpgkWicVETe5r6EJDQ79b+ZTdcq5PISy1Zgjd3DuG 38m/TwQS216TYPEH6oztHriExaqr+/u2Y4XZ4t+s2rcLu4KQuOzTp9DRCG9ReW2J pXQGKiwlCDmqDXzjL8jqpOSC7yw5Z4SRv0KEGwQHq+8o2pTSTwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAoQBzKfhWcjcwd9QQqu/TWumoCYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYWNm M2UzZC1kMmRjLTRkMWYtOWUwMi1lNDA3ZDlmNmE3YjEvYmFjZjNlM2QtZDJkYy00 ZDFmLTllMDItZTQwN2Q5ZjZhN2IxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmFjZjNlM2QtZDJkYy00ZDFmLTll MDItZTQwN2Q5ZjZhN2IxL2JhY2YzZTNkLWQyZGMtNGQxZi05ZTAyLWU0MDdkOWY2 YTdiMS5jcmwwHwYDVR0jBBgwFoAUMZH/v4mUBy3tLa+asZZgXRcOQ9EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYWNmM2UzZC1kMmRjLTRkMWYtOWUwMi1lNDA3 ZDlmNmE3YjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBc0SvXY8BSfY4d9mVE0nNc v5xI/R9ce7mKDzoD0k0s9ZN5Gtlg3c7QFxCGviLRciq8WrHS6CVq64+70omvKIQQ EdsiJLKiB4HzcH2E8LDNtTvdXaZlaWggRPLakYXraN8dHI3uPjx+bK+nEhKseiDo AtXC8joKEd5Ylt+aBW9vJXcubBCo9dlOHEr4GkkQuve5ML5CWJ9DU67x5uiH9fOR yTjM27YQdFJRvXF59brQ4vsi7W7y0eEndzrXJnd00Rdjm6mdgNhCj6fFHBFvj9af ixaiE+nNAhSM/4x27F6uvg/VKbKM2mJrNYlzfh+ve0S2A6VfXExccqOPM7mELvnO -----END CERTIFICATE-----Generated at Tue Oct 21 01:58:44 2025 by rpki-client