$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft File: bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft (raw, json) Hash identifier: SwVTvlOO8MfGf1clGk21TnKP76DKQCKKz+eE5d+pRis= Subject key identifier: E5:33:A0:55:1B:EC:5F:67:7C:C8:F6:85:B8:2A:4F:8D:B9:4C:DD:CA Authority key identifier: BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F Certificate issuer: /CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494 Certificate serial: 010D0C9F4328584A5FE320F473ECEFEB8E645920 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft Manifest number: 010D0C9F4328584073A8581DA0CBF23298DB1E75 Signing time: Tue 01 Jul 2025 14:00:08 +0000 Manifest this update: Tue 01 Jul 2025 14:00:08 +0000 Manifest next update: Thu 03 Jul 2025 14:00:00 +0000 Files and hashes: 1: 8b5b3f60-d94d-3b96-bd51-7ecef919a034.roa (hash: fOYzqhkRBiOUKvRCdI+/P/0VXM9H5XqF20zG+g6wLjg=) 2: bb760eff-5d50-348f-809c-0dc1a1c253a5.roa (hash: 8lihjOoLjNCbDRQRHBZFayHIcAPAwJP7sqXd97aTjL4=) 3: bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl (hash: nnPq+izc5DvtLCzQQgzuepUA+v1PwkAl0a7fBOVl5ys=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:e3:20:f4:73:ec:ef:eb:8e:64:59:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494 Validity Not Before: Jul 1 14:00:08 2025 GMT Not After : Jul 3 14:00:00 2025 GMT Subject: CN=b22ebe6c-8017-422a-8a6a-e08060be52f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:10:06:b5:e0:bd:53:b3:29:5c:a7:cf:4b:63: 43:ec:a1:33:04:e0:0b:03:c0:b8:78:1f:9d:da:ad: 23:ca:9b:7b:c4:54:ed:7d:42:d2:60:b7:cc:af:41: 01:8d:b4:f5:fe:db:0a:be:3d:53:8b:21:72:5c:17: e2:46:3c:46:9f:2f:da:d5:92:c7:76:f2:89:66:62: ae:2d:90:21:c8:06:34:26:18:19:de:e2:7e:02:90: b6:b0:ff:b4:c8:cc:b4:48:26:f2:66:28:e0:45:7c: eb:11:81:8d:47:02:d0:01:f6:e0:3c:8f:5a:95:d5: d6:09:a3:c2:e1:1c:c0:97:dc:1c:6c:90:6f:65:bd: f9:2a:22:2c:b7:b8:31:31:aa:f5:43:c3:93:92:46: f0:f6:b8:4a:26:6b:25:3a:76:66:27:a3:0a:a8:38: 54:37:fd:09:ec:9a:76:ff:e4:49:bf:1e:df:76:00: d4:79:12:e1:37:b1:4b:53:47:c3:32:54:68:47:ca: a8:62:63:e2:bb:1e:ad:40:e6:d4:7b:9a:21:ef:7f: 38:b7:2b:4d:a9:f0:ef:dc:70:40:b3:7f:4d:45:c0: 2c:1d:da:32:e8:cf:80:d6:39:d0:37:c9:fa:42:ba: d6:45:dc:2b:d5:89:70:fd:43:31:e9:8c:07:96:74: 57:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:33:A0:55:1B:EC:5F:67:7C:C8:F6:85:B8:2A:4F:8D:B9:4C:DD:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl X509v3 Authority Key Identifier: keyid:BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:bd:28:3d:0f:b5:cc:ce:cf:16:95:26:0a:32:17:f7:8d:67: de:22:27:4a:3f:fc:89:88:b9:22:8d:40:76:a7:d8:9b:5c:a3: 58:a6:37:85:11:46:56:7f:5d:27:d0:7e:f6:f7:90:00:ec:04: 6c:62:a2:51:d7:75:4c:87:c5:2d:b5:12:db:06:73:f6:6d:42: 86:a1:55:02:85:20:73:33:f0:ff:c2:a6:cb:be:ff:78:47:39: c7:09:07:e6:db:23:22:e1:74:65:08:32:b3:15:e7:35:29:3d: 0b:30:79:f4:72:ff:3c:95:b3:85:aa:3e:60:42:1c:28:30:02: 08:e0:f0:35:e6:a0:43:af:17:c0:e7:72:a3:7d:70:08:b2:47: 71:23:b3:6d:e4:0f:17:ca:24:5f:78:ba:eb:bd:fa:86:df:38: fe:e9:14:c7:fa:29:f8:f0:be:59:4a:a3:a7:88:50:bf:de:cf: a2:08:6c:aa:d5:da:45:10:30:04:6c:41:bc:b0:f1:d1:4d:7f: cc:85:f4:42:7d:90:55:9d:35:f1:93:1d:20:f8:13:9b:2e:4d: b3:b5:7b:a0:8b:26:7d:6f:7e:4a:c7:ec:58:b0:e2:7c:ba:ef: f6:0b:f4:26:4c:ab:9b:28:7f:1f:04:80:6d:56:de:5e:06:54: 44:52:54:47 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpf4yD0c+zv645kWSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYzYzNiZDUtM2I5NC00N2UyLTgxZmMtZjQ5MDA4MTRl NDk0MB4XDTI1MDcwMTE0MDAwOFoXDTI1MDcwMzE0MDAwMFowLzEtMCsGA1UEAxMk YjIyZWJlNmMtODAxNy00MjJhLThhNmEtZTA4MDYwYmU1MmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRAGteC9U7MpXKfPS2ND7KEzBOALA8C4eB+d 2q0jypt7xFTtfULSYLfMr0EBjbT1/tsKvj1TiyFyXBfiRjxGny/a1ZLHdvKJZmKu LZAhyAY0JhgZ3uJ+ApC2sP+0yMy0SCbyZijgRXzrEYGNRwLQAfbgPI9aldXWCaPC 4RzAl9wcbJBvZb35KiIst7gxMar1Q8OTkkbw9rhKJmslOnZmJ6MKqDhUN/0J7Jp2 /+RJvx7fdgDUeRLhN7FLU0fDMlRoR8qoYmPiux6tQObUe5oh7384tytNqfDv3HBA s39NRcAsHdoy6M+A1jnQN8n6QrrWRdwr1Ylw/UMx6YwHlnRXYQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOUzoFUb7F9nfMj2hbgqT425TN3KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjNj M2JkNS0zYjk0LTQ3ZTItODFmYy1mNDkwMDgxNGU0OTQvYmYzYzNiZDUtM2I5NC00 N2UyLTgxZmMtZjQ5MDA4MTRlNDk0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmYzYzNiZDUtM2I5NC00N2UyLTgx ZmMtZjQ5MDA4MTRlNDk0L2JmM2MzYmQ1LTNiOTQtNDdlMi04MWZjLWY0OTAwODE0 ZTQ5NC5jcmwwHwYDVR0jBBgwFoAUv27gzbQvdJZGDC7Ndgx/FlpcgW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjNjM2JkNS0zYjk0LTQ3ZTItODFmYy1mNDkw MDgxNGU0OTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQByvSg9D7XMzs8WlSYKMhf3 jWfeIidKP/yJiLkijUB2p9ibXKNYpjeFEUZWf10n0H7295AA7ARsYqJR13VMh8Ut tRLbBnP2bUKGoVUChSBzM/D/wqbLvv94RznHCQfm2yMi4XRlCDKzFec1KT0LMHn0 cv88lbOFqj5gQhwoMAII4PA15qBDrxfA53KjfXAIskdxI7Nt5A8XyiRfeLrrvfqG 3zj+6RTH+in48L5ZSqOniFC/3s+iCGyq1dpFEDAEbEG8sPHRTX/MhfRCfZBVnTXx kx0g+BObLk2ztXugiyZ9b35Kx+xYsOJ8uu/2C/QmTKubKH8fBIBtVt5eBlREUlRH -----END CERTIFICATE-----Generated at Wed Jul 2 11:38:32 2025 by rpki-client