$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.mft File: bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.mft (raw, json) Hash identifier: rYLrH3MH2gI+slGyFvAtaO9R5I9vyOKoFpST/6Qd5SE= Subject key identifier: 32:E0:A3:CA:DF:AF:70:64:12:27:41:10:9B:54:0E:5B:0D:F2:A6:01 Authority key identifier: A8:7C:BC:02:A0:48:D4:7A:E9:DA:8D:36:46:F5:24:F2:0D:65:29:6A Certificate issuer: /CN=bf07f8a7-1a95-4127-aa54-a5c85bcca9b8 Certificate serial: 010D0C9F4328584A5CBF11931F1237A6F092F980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.mft Manifest number: 010D0C9F4328584073A850B44D23714C2A8A2B21 Signing time: Mon 30 Jun 2025 11:00:03 +0000 Manifest this update: Mon 30 Jun 2025 11:00:03 +0000 Manifest next update: Thu 03 Jul 2025 11:00:00 +0000 Files and hashes: 1: 41f5ef31-c5d9-309f-bb2c-fd3013b7f8c3.roa (hash: gOB7zk34+EBle4rmAsgZjkB33Ua9DbDp+qszqadibPI=) 2: bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.crl (hash: M7YoXtzdR/PMKycJd29luF/MJbQSFOsETrDUO2iE4n8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:bf:11:93:1f:12:37:a6:f0:92:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf07f8a7-1a95-4127-aa54-a5c85bcca9b8 Validity Not Before: Jun 30 11:00:03 2025 GMT Not After : Jul 3 11:00:00 2025 GMT Subject: CN=d9bffffe-bb4f-444a-941f-4b59d9750f8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:99:4b:4f:ef:5e:43:65:09:b8:ef:76:61:44: f5:47:2b:37:6a:23:14:08:51:65:3a:5d:2e:3b:eb: 5c:cf:40:a3:53:ea:fc:69:eb:71:b6:9a:94:2e:8b: 59:28:55:f3:5c:91:56:3e:d0:30:3e:bc:6a:bf:11: 16:91:f8:f6:12:5f:1b:1b:40:f3:85:78:21:02:3a: 53:37:94:2b:ce:fb:c1:d5:76:67:cb:c8:1b:54:98: 01:4d:bc:81:3f:53:e9:aa:4f:44:71:bd:ed:2b:87: 58:53:18:24:61:5c:d3:57:f6:fc:f9:f2:71:88:10: 09:b4:d1:ad:ec:a7:49:53:2e:f0:6f:3d:15:3e:cd: b9:04:3d:dd:88:6b:d0:c7:10:77:ad:03:1b:fd:c2: 3e:e6:9e:cd:24:7d:d8:87:e8:84:63:3c:d7:31:9d: d9:7f:8e:d7:23:b2:28:94:5b:32:c9:c9:c6:44:87: 73:45:6e:5e:a3:3f:27:20:03:1b:c3:4d:45:f8:ee: 1b:b9:46:35:03:c4:d1:74:70:f2:de:d1:c1:14:e7: 1b:47:98:bb:cf:f1:85:e6:77:17:60:70:8d:4e:85: 4b:93:ec:25:f2:0d:89:a7:e7:5a:9d:7c:94:30:d2: 8d:5d:14:54:5a:59:70:20:cd:42:b1:fe:54:a4:e5: b5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E0:A3:CA:DF:AF:70:64:12:27:41:10:9B:54:0E:5B:0D:F2:A6:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.crl X509v3 Authority Key Identifier: keyid:A8:7C:BC:02:A0:48:D4:7A:E9:DA:8D:36:46:F5:24:F2:0D:65:29:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:3a:e4:ee:02:33:94:21:2f:bb:95:c4:2c:c7:3a:42:a2:57: 14:31:86:a8:68:78:76:3f:e7:a9:bf:d9:5c:96:bd:9d:f1:b9: 49:06:19:38:3c:6f:55:3d:d6:04:9f:30:22:a4:ce:e0:d3:35: d8:12:a1:eb:8b:43:28:97:09:2c:1f:67:1e:d4:da:15:8b:75: f9:9c:c4:19:45:bc:fa:95:54:af:dc:53:e6:13:4a:bd:82:bd: 0d:bb:34:fb:a5:d8:99:20:45:72:61:f4:d8:b2:63:9b:d0:91: 24:4c:c0:70:bf:92:62:bc:a6:17:e7:08:47:90:50:a1:28:39: ec:7a:f0:28:9f:51:89:85:b0:5b:15:71:a6:b5:7e:88:f9:a1: 24:0f:05:4e:d3:36:86:c1:5c:ce:f8:22:3f:c0:8a:86:3b:a0: 2c:0e:e5:25:6c:83:ef:4b:48:01:62:18:a1:e7:97:63:0e:c3: 8f:7a:cd:0c:26:0d:3d:74:69:9b:49:4a:ca:50:a6:3d:a5:ab: 00:2c:57:d7:d1:fb:a5:eb:f7:be:74:05:e9:0b:b6:92:79:8d: 2c:03:03:b3:ed:24:9f:1a:2a:dd:0b:2e:ca:33:71:10:33:d2: 43:4b:c9:5d:40:d4:ba:bb:50:cc:07:73:91:bc:4a:c3:51:e0: e0:8d:3c:6c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpcvxGTHxI3pvCS+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYwN2Y4YTctMWE5NS00MTI3LWFhNTQtYTVjODViY2Nh OWI4MB4XDTI1MDYzMDExMDAwM1oXDTI1MDcwMzExMDAwMFowLzEtMCsGA1UEAxMk ZDliZmZmZmUtYmI0Zi00NDRhLTk0MWYtNGI1OWQ5NzUwZjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnplLT+9eQ2UJuO92YUT1Rys3aiMUCFFlOl0u O+tcz0CjU+r8aetxtpqULotZKFXzXJFWPtAwPrxqvxEWkfj2El8bG0DzhXghAjpT N5QrzvvB1XZny8gbVJgBTbyBP1Ppqk9Ecb3tK4dYUxgkYVzTV/b8+fJxiBAJtNGt 7KdJUy7wbz0VPs25BD3diGvQxxB3rQMb/cI+5p7NJH3Yh+iEYzzXMZ3Zf47XI7Io lFsyycnGRIdzRW5eoz8nIAMbw01F+O4buUY1A8TRdHDy3tHBFOcbR5i7z/GF5ncX YHCNToVLk+wl8g2Jp+danXyUMNKNXRRUWllwIM1Csf5UpOW1ZQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDLgo8rfr3BkEidBEJtUDlsN8qYBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjA3 ZjhhNy0xYTk1LTQxMjctYWE1NC1hNWM4NWJjY2E5YjgvYmYwN2Y4YTctMWE5NS00 MTI3LWFhNTQtYTVjODViY2NhOWI4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYwN2Y4YTctMWE5NS00MTI3LWFh NTQtYTVjODViY2NhOWI4L2JmMDdmOGE3LTFhOTUtNDEyNy1hYTU0LWE1Yzg1YmNj YTliOC5jcmwwHwYDVR0jBBgwFoAUqHy8AqBI1Hrp2o02RvUk8g1lKWowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjA3ZjhhNy0xYTk1LTQxMjctYWE1NC1hNWM4 NWJjY2E5YjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA2OuTuAjOUIS+7lcQsxzpC olcUMYaoaHh2P+epv9lclr2d8blJBhk4PG9VPdYEnzAipM7g0zXYEqHri0Molwks H2ce1NoVi3X5nMQZRbz6lVSv3FPmE0q9gr0NuzT7pdiZIEVyYfTYsmOb0JEkTMBw v5JivKYX5whHkFChKDnsevAon1GJhbBbFXGmtX6I+aEkDwVO0zaGwVzO+CI/wIqG O6AsDuUlbIPvS0gBYhih55djDsOPes0MJg09dGmbSUrKUKY9pasALFfX0ful6/e+ dAXpC7aSeY0sAwOz7SSfGirdCy7KM3EQM9JDS8ldQNS6u1DMB3ORvErDUeDgjTxs -----END CERTIFICATE-----Generated at Tue Jul 1 05:31:56 2025 by rpki-client