$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft File: bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft (raw, json) Hash identifier: l5JUdC7kjVHJovmPPRRiQdD2EbeaTv3n9VvXjhr9ii4= Subject key identifier: 4E:22:85:1B:21:42:6A:E4:66:C7:9E:C1:46:DE:FC:F6:26:24:D1:85 Authority key identifier: 31:91:FF:BF:89:94:07:2D:ED:2D:AF:9A:B1:96:60:5D:17:0E:43:D1 Certificate issuer: /CN=bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1 Certificate serial: 010D0C9F4328584A58E85FCCED6238E9B66CC580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft Manifest number: 010D0C9F4328584073A83645CACD5CF3732BE921 Signing time: Sun 29 Jun 2025 02:00:03 +0000 Manifest this update: Sun 29 Jun 2025 02:00:03 +0000 Manifest next update: Tue 01 Jul 2025 02:00:00 +0000 Files and hashes: 1: 0df970dd-1000-33b2-94cf-be4c8681560d.roa (hash: s10vUT3eujrP/09rzr40KTI+6SA6CV0Jkqh/Jpwonk8=) 2: bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.crl (hash: oqrM+7HGmkMppfF2cle16JS4dkJy4h2IacjedEEBnKI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:e8:5f:cc:ed:62:38:e9:b6:6c:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1 Validity Not Before: Jun 29 02:00:03 2025 GMT Not After : Jul 1 02:00:00 2025 GMT Subject: CN=b42aacf9-ebc8-4f2e-98dd-0c6d54b3fea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:99:8a:6d:b4:7d:9e:20:9f:1c:b6:c4:e5:38: ee:e0:9d:7f:ed:db:ba:ae:89:83:ea:41:70:51:83: 2e:fa:01:fe:7c:04:55:e4:e6:f7:dc:48:dc:75:1d: f6:b5:40:f4:6c:1f:48:73:a2:6d:2b:2b:73:ca:04: ea:3f:7c:2b:34:09:db:34:bd:7c:98:5b:e2:9a:98: a3:ae:58:93:b5:e7:9b:a1:c2:c4:fb:86:8b:04:e8: 4d:47:f1:0b:92:e9:a9:e5:74:43:10:2b:4b:b5:72: 79:04:64:f0:2d:47:f5:e4:0d:b9:40:a5:45:3d:51: de:de:24:8a:7a:83:07:f6:60:c8:60:b0:00:40:a1: ab:b0:45:f5:74:0d:62:b7:48:67:4a:a0:f4:41:9a: af:19:c8:f6:44:07:1f:2b:50:18:7c:a6:a9:28:1e: 7b:22:e0:32:75:2c:e6:eb:18:72:ec:71:1f:dc:c7: cb:6a:52:ad:2a:a1:03:1c:20:65:f6:9e:d7:cb:2a: 57:20:95:47:30:e3:7c:dc:f2:c7:0d:ee:0f:0f:b6: 35:66:61:ce:6a:a7:6b:ea:85:a2:50:a6:ab:ca:4f: 9b:4f:a1:a9:78:cd:d4:e9:30:8d:1b:9d:98:e1:b2: 25:13:e3:02:c9:2e:01:2f:57:0e:b4:4c:82:8e:17: 5e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:22:85:1B:21:42:6A:E4:66:C7:9E:C1:46:DE:FC:F6:26:24:D1:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.crl X509v3 Authority Key Identifier: keyid:31:91:FF:BF:89:94:07:2D:ED:2D:AF:9A:B1:96:60:5D:17:0E:43:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:d5:72:65:f5:42:92:dc:b7:65:14:36:94:19:b9:67:d9:f5: 65:ad:fe:e9:58:3f:b0:8b:35:3e:37:28:7e:a0:08:e9:c3:f4: 63:d5:07:32:21:17:ad:65:67:79:c0:6f:02:14:5a:db:77:0e: 1c:cf:1f:9d:dd:d0:74:e7:c4:2a:3f:82:ce:10:60:59:50:07: 1e:29:b6:7c:e3:2a:29:9e:2e:08:40:ce:9c:e8:20:98:d4:d7: d3:13:14:ee:8e:8a:8b:25:25:19:2b:74:30:08:25:ec:31:ef: 53:8b:c6:7e:fd:2a:27:0e:eb:fc:f2:ea:ac:0e:e0:93:43:c5: 14:54:aa:88:5f:37:0f:40:fc:ba:87:64:47:b5:6d:14:b8:15: 81:74:64:1a:9b:76:70:8a:3b:6e:12:f1:96:9b:74:9b:bd:48: 77:89:73:09:47:5b:69:3f:3f:77:ae:37:01:16:ea:0b:a3:a2: 6e:c6:52:f9:b3:49:79:9a:71:b3:7b:57:a9:06:66:17:ef:08: cc:36:4c:c9:6b:4e:0a:c6:67:dc:c4:5a:56:3d:57:b9:49:a2: 37:2d:e1:84:0a:7f:9c:ac:67:a5:e0:a0:67:2d:8c:56:af:a1: dc:4d:98:4a:d7:90:78:07:3d:68:d4:58:6a:d1:8b:6f:aa:ca: e7:28:94:bb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpY6F/M7WI46bZsxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFjZjNlM2QtZDJkYy00ZDFmLTllMDItZTQwN2Q5ZjZh N2IxMB4XDTI1MDYyOTAyMDAwM1oXDTI1MDcwMTAyMDAwMFowLzEtMCsGA1UEAxMk YjQyYWFjZjktZWJjOC00ZjJlLTk4ZGQtMGM2ZDU0YjNmZWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZmKbbR9niCfHLbE5Tju4J1/7du6romD6kFw UYMu+gH+fARV5Ob33EjcdR32tUD0bB9Ic6JtKytzygTqP3wrNAnbNL18mFvimpij rliTteebocLE+4aLBOhNR/ELkump5XRDECtLtXJ5BGTwLUf15A25QKVFPVHe3iSK eoMH9mDIYLAAQKGrsEX1dA1it0hnSqD0QZqvGcj2RAcfK1AYfKapKB57IuAydSzm 6xhy7HEf3MfLalKtKqEDHCBl9p7XyypXIJVHMON83PLHDe4PD7Y1ZmHOaqdr6oWi UKaryk+bT6GpeM3U6TCNG52Y4bIlE+MCyS4BL1cOtEyCjhdekQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFE4ihRshQmrkZseewUbe/PYmJNGFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYWNm M2UzZC1kMmRjLTRkMWYtOWUwMi1lNDA3ZDlmNmE3YjEvYmFjZjNlM2QtZDJkYy00 ZDFmLTllMDItZTQwN2Q5ZjZhN2IxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmFjZjNlM2QtZDJkYy00ZDFmLTll MDItZTQwN2Q5ZjZhN2IxL2JhY2YzZTNkLWQyZGMtNGQxZi05ZTAyLWU0MDdkOWY2 YTdiMS5jcmwwHwYDVR0jBBgwFoAUMZH/v4mUBy3tLa+asZZgXRcOQ9EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYWNmM2UzZC1kMmRjLTRkMWYtOWUwMi1lNDA3 ZDlmNmE3YjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAH1XJl9UKS3LdlFDaUGbln 2fVlrf7pWD+wizU+Nyh+oAjpw/Rj1QcyIRetZWd5wG8CFFrbdw4czx+d3dB058Qq P4LOEGBZUAceKbZ84yopni4IQM6c6CCY1NfTExTujoqLJSUZK3QwCCXsMe9Ti8Z+ /SonDuv88uqsDuCTQ8UUVKqIXzcPQPy6h2RHtW0UuBWBdGQam3ZwijtuEvGWm3Sb vUh3iXMJR1tpPz93rjcBFuoLo6JuxlL5s0l5mnGze1epBmYX7wjMNkzJa04Kxmfc xFpWPVe5SaI3LeGECn+crGel4KBnLYxWr6HcTZhK15B4Bz1o1Fhq0YtvqsrnKJS7 -----END CERTIFICATE-----Generated at Sun Jun 29 21:50:41 2025 by rpki-client