$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/bdd46844-e081-4813-bfe2-0cfbeac92e08.mft File: bdd46844-e081-4813-bfe2-0cfbeac92e08.mft (raw, json) Hash identifier: kQi9R5mav04C0odCSCLuilsVKpAY2ZmDGv/2ZJgUw+I= Subject key identifier: F1:25:B1:64:15:F7:67:D7:CC:FD:8C:19:BD:C3:27:91:57:77:D0:22 Authority key identifier: FF:99:49:19:84:88:39:A6:03:55:7D:CC:8A:2D:A2:C6:77:B4:D5:B4 Certificate issuer: /CN=bdd46844-e081-4813-bfe2-0cfbeac92e08 Certificate serial: 010D0C9F4328584AF326ACE957A4C08B3F7C6320 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/bdd46844-e081-4813-bfe2-0cfbeac92e08.mft Manifest number: 010D0C9F43285847DD1E0E87BACD33374237B7C2 Signing time: Sat 23 Aug 2025 08:00:03 +0000 Manifest this update: Sat 23 Aug 2025 08:00:03 +0000 Manifest next update: Mon 25 Aug 2025 08:00:00 +0000 Files and hashes: 1: bdd46844-e081-4813-bfe2-0cfbeac92e08.crl (hash: Y5BMTiJNJ8EBGmWzqBoOUCUhTWE36iKdI1pn4leIfaM=) 2: ca4eafff-9365-3068-b787-140215783a30.roa (hash: gWUwN37JREzNlpfzO2ZNyv4c39i2AhrZ3i/UMbqMc5o=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/bdd46844-e081-4813-bfe2-0cfbeac92e08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/bdd46844-e081-4813-bfe2-0cfbeac92e08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f3:26:ac:e9:57:a4:c0:8b:3f:7c:63:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd46844-e081-4813-bfe2-0cfbeac92e08 Validity Not Before: Aug 23 08:00:03 2025 GMT Not After : Aug 25 08:00:00 2025 GMT Subject: CN=52e95b44-25a2-463a-88cd-d1840cf5a104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:15:15:48:ea:6f:a1:4d:2f:83:9d:84:91:46: 23:13:2b:ee:6d:3b:b3:ca:16:ec:98:d4:57:ec:21: 62:77:78:34:e3:f5:1e:39:ff:fe:41:91:84:0f:03: 3d:7e:75:b3:b3:cb:32:60:30:9f:7a:bc:49:44:9e: bf:bf:89:f4:90:eb:12:e3:ee:46:a7:e1:28:76:98: b2:c0:d1:07:ca:a3:a2:90:88:18:af:6a:eb:97:21: d8:50:bf:34:6d:f3:33:44:f1:70:98:be:62:e5:44: 67:d1:06:48:91:e9:01:56:ed:ac:4a:93:e8:95:10: 33:89:48:c6:d7:99:36:39:ec:f5:8a:72:c5:3a:15: 18:ce:e1:4e:4f:84:91:6c:a4:35:6d:26:91:6b:71: d1:4a:40:d2:48:d4:cd:75:12:e3:0f:c4:e7:4d:c0: 3f:c3:69:7a:33:34:68:47:07:b2:7f:63:1a:cc:0c: 0c:0f:5a:49:aa:d4:57:b8:bf:5d:18:65:bf:8e:53: 6e:43:86:8a:a1:a1:7b:37:6d:37:a6:34:f8:5f:6f: 1f:f7:c5:85:63:7c:5f:47:1b:a0:f8:e9:87:e5:57: 41:07:1e:f0:6b:64:33:ed:68:22:73:9d:46:6b:52: f9:2d:c9:54:10:bc:6e:dd:fa:34:68:26:01:30:33: f7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:25:B1:64:15:F7:67:D7:CC:FD:8C:19:BD:C3:27:91:57:77:D0:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/bdd46844-e081-4813-bfe2-0cfbeac92e08.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/bdd46844-e081-4813-bfe2-0cfbeac92e08.crl X509v3 Authority Key Identifier: keyid:FF:99:49:19:84:88:39:A6:03:55:7D:CC:8A:2D:A2:C6:77:B4:D5:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:61:23:06:38:f1:18:e2:52:5e:ab:d5:b5:fc:c7:5c:f8:75: 09:23:a9:fd:1d:8e:c4:23:f1:29:97:2d:cc:09:24:52:e6:e6: 28:45:48:6e:dd:bd:5a:8c:32:79:84:5f:ad:ad:73:cf:cf:92: 4a:71:1a:30:78:29:99:a9:2e:53:8e:44:5e:18:64:7e:2c:16: 3f:4d:2b:f4:36:3f:88:0f:a6:79:f7:c6:84:22:67:70:5c:21: 86:3f:c3:db:38:e9:6a:0c:c2:53:ee:c3:10:34:77:e5:84:64: 89:f9:72:2c:83:c5:ed:6b:4c:11:c5:fb:01:dc:3b:c3:ae:79: 0a:40:f7:c1:37:4c:7a:d7:3f:a6:6d:8e:cb:df:74:05:17:67: 7f:bd:6c:e5:29:63:e3:ac:ab:21:d2:52:59:c2:e9:60:39:e3: e4:42:79:d8:19:85:78:fd:76:67:ba:c1:a7:fe:96:40:57:b3: f6:78:ce:3c:d1:eb:12:4c:8d:0a:10:9c:db:4a:26:21:e0:f0: 1f:e5:40:4c:70:44:d5:30:5e:81:12:6e:48:de:40:a6:84:c5: e4:68:4b:36:f3:56:e0:22:31:c3:25:fa:30:fd:31:2d:71:46: d3:4a:3b:13:44:da:fb:55:9f:cb:04:f2:c7:43:6b:39:0b:23: 3b:d9:ad:23 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErzJqzpV6TAiz98YyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRkNDY4NDQtZTA4MS00ODEzLWJmZTItMGNmYmVhYzky ZTA4MB4XDTI1MDgyMzA4MDAwM1oXDTI1MDgyNTA4MDAwMFowLzEtMCsGA1UEAxMk NTJlOTViNDQtMjVhMi00NjNhLTg4Y2QtZDE4NDBjZjVhMTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphUVSOpvoU0vg52EkUYjEyvubTuzyhbsmNRX 7CFid3g04/UeOf/+QZGEDwM9fnWzs8syYDCferxJRJ6/v4n0kOsS4+5Gp+Eodpiy wNEHyqOikIgYr2rrlyHYUL80bfMzRPFwmL5i5URn0QZIkekBVu2sSpPolRAziUjG 15k2Oez1inLFOhUYzuFOT4SRbKQ1bSaRa3HRSkDSSNTNdRLjD8TnTcA/w2l6MzRo Rweyf2MazAwMD1pJqtRXuL9dGGW/jlNuQ4aKoaF7N203pjT4X28f98WFY3xfRxug +OmH5VdBBx7wa2Qz7Wgic51Ga1L5LclUELxu3fo0aCYBMDP3BwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPElsWQV92fXzP2MGb3DJ5FXd9AiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZGQ0 Njg0NC1lMDgxLTQ4MTMtYmZlMi0wY2ZiZWFjOTJlMDgvYmRkNDY4NDQtZTA4MS00 ODEzLWJmZTItMGNmYmVhYzkyZTA4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmRkNDY4NDQtZTA4MS00ODEzLWJm ZTItMGNmYmVhYzkyZTA4L2JkZDQ2ODQ0LWUwODEtNDgxMy1iZmUyLTBjZmJlYWM5 MmUwOC5jcmwwHwYDVR0jBBgwFoAU/5lJGYSIOaYDVX3Mii2ixne01bQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZGQ0Njg0NC1lMDgxLTQ4MTMtYmZlMi0wY2Zi ZWFjOTJlMDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAsYSMGOPEY4lJeq9W1/Mdc +HUJI6n9HY7EI/Eply3MCSRS5uYoRUhu3b1ajDJ5hF+trXPPz5JKcRoweCmZqS5T jkReGGR+LBY/TSv0Nj+ID6Z598aEImdwXCGGP8PbOOlqDMJT7sMQNHflhGSJ+XIs g8Xta0wRxfsB3DvDrnkKQPfBN0x61z+mbY7L33QFF2d/vWzlKWPjrKsh0lJZwulg OePkQnnYGYV4/XZnusGn/pZAV7P2eM480esSTI0KEJzbSiYh4PAf5UBMcETVMF6B Em5I3kCmhMXkaEs281bgIjHDJfow/TEtcUbTSjsTRNr7VZ/LBPLHQ2s5CyM72a0j -----END CERTIFICATE-----Generated at Sat Aug 23 23:39:17 2025 by rpki-client