$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.mft File: ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.mft (raw, json) Hash identifier: j0lyO09BUElNGowTgkIUCuS6UHezFSLaeYBdcdp7T2M= Subject key identifier: 07:30:90:4D:E9:30:69:DA:2B:13:09:61:E7:D5:C2:AD:EA:B0:07:DA Authority key identifier: E8:1E:15:0B:75:76:40:58:B6:9A:14:2D:A7:91:10:D7:B8:85:D2:DD Certificate issuer: /CN=ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7 Certificate serial: 010D0C9F4328584AF21AB357291BE3B83BFC01C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.mft Manifest number: 010D0C9F4328584A04D37939CAB001ACD19ABBD9 Signing time: Fri 22 Aug 2025 23:00:08 +0000 Manifest this update: Fri 22 Aug 2025 23:00:08 +0000 Manifest next update: Sun 24 Aug 2025 23:00:00 +0000 Files and hashes: 1: 2145dd7e-ab65-3c98-bc0d-77196940761e.roa (hash: 0d/IegpviOk65lO4euoOgT3CGcSfFQlcuoGEU077SXY=) 2: ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.crl (hash: fa6nS+saZJ1SMjCkpl4xwKJpOclB9FDoKgJY3qGAU7g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:1a:b3:57:29:1b:e3:b8:3b:fc:01:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7 Validity Not Before: Aug 22 23:00:08 2025 GMT Not After : Aug 24 23:00:00 2025 GMT Subject: CN=eedba3dd-8ddf-4285-94dc-93f8d354d6d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f0:f0:04:b7:72:54:3c:40:db:d4:45:65:a8: 38:df:99:96:d9:ed:2c:5b:4a:81:f5:ab:e5:f1:a6: 3f:d9:23:4c:46:fb:91:03:15:2e:84:d0:13:75:9f: 29:78:f4:49:c9:e0:56:1b:0c:74:02:89:37:11:9e: 32:37:18:70:75:59:ed:12:41:da:3f:47:20:40:a3: f1:56:6e:5b:91:b7:15:8c:1c:1d:bb:15:4b:b7:0d: 30:3c:ed:5f:3f:2a:4a:65:f7:0d:f0:bb:b1:de:3e: 02:7d:07:00:d2:64:ce:1a:a1:3d:56:7e:fe:e9:71: 07:c5:a3:b2:94:66:f4:48:6f:d6:c3:45:5d:40:a5: 4b:b6:03:07:dc:0a:79:a0:be:b0:d6:38:61:20:15: ec:46:dd:44:fd:18:dc:d3:57:f9:58:b2:43:c4:f6: 35:77:31:f9:ea:dc:e5:b2:c8:1c:64:63:65:4f:ed: 44:b3:a7:23:84:e2:f4:ef:54:e2:4f:2d:44:6f:fc: 0b:dd:a6:45:22:de:1e:e7:e0:9b:0a:f8:83:f5:8f: d3:25:83:84:02:48:ce:62:13:f3:b2:b6:7a:4b:27: 4f:6c:27:e9:cc:c5:5b:9c:1e:40:e3:a5:29:e1:3f: 69:53:a1:3c:f4:ef:31:12:5e:54:5e:3e:a4:5e:de: 06:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:30:90:4D:E9:30:69:DA:2B:13:09:61:E7:D5:C2:AD:EA:B0:07:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.crl X509v3 Authority Key Identifier: keyid:E8:1E:15:0B:75:76:40:58:B6:9A:14:2D:A7:91:10:D7:B8:85:D2:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:a0:e0:ed:34:23:b8:c3:dc:04:ca:a4:a1:9d:70:96:56:c2: d2:fa:54:21:52:44:5e:2a:f7:b4:e3:b0:dd:bc:d7:d6:4a:0e: 8d:ec:4c:de:3c:2f:69:20:3c:fd:d9:35:9c:c1:e3:55:ef:9f: 53:63:ca:41:b9:73:c0:81:e1:09:54:2d:ac:2d:8f:1f:4b:03: 64:3a:4f:bf:4d:c2:8d:f1:a4:77:40:87:94:62:92:c6:96:d3: b4:ef:29:52:d0:2f:f8:9e:cc:2b:27:22:8d:ea:b4:df:92:f9: 90:a4:b8:b1:87:e8:77:a0:66:11:7a:ed:6c:d4:8b:5c:7c:cb: 26:66:86:3d:35:e3:a5:96:66:df:5a:50:64:3b:54:13:4f:72: d0:f8:1e:36:5a:80:18:a9:c0:fe:f9:83:fe:15:68:3e:ab:bb: 2c:28:87:2b:6c:2c:1a:16:a2:e2:51:15:b3:4e:9d:b2:36:d9: 84:96:5b:36:8d:13:32:69:14:92:a6:e6:99:38:68:08:c5:16: f5:ce:de:91:c4:f9:f4:5c:7a:97:bb:30:3a:b6:3b:2a:bc:15: 5d:e2:2d:66:dc:19:d2:66:a4:1f:a9:2b:1c:6e:c6:ef:9e:86: 8f:23:85:c5:77:11:14:f1:49:c9:66:b9:c9:39:c0:93:09:fe: 7a:67:7d:a3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEryGrNXKRvjuDv8AcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEzNjhkYzItZGQ4YS00MGQyLWJjNTMtMGZlODdlOWQ5 ZGQ3MB4XDTI1MDgyMjIzMDAwOFoXDTI1MDgyNDIzMDAwMFowLzEtMCsGA1UEAxMk ZWVkYmEzZGQtOGRkZi00Mjg1LTk0ZGMtOTNmOGQzNTRkNmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvDwBLdyVDxA29RFZag435mW2e0sW0qB9avl 8aY/2SNMRvuRAxUuhNATdZ8pePRJyeBWGwx0Aok3EZ4yNxhwdVntEkHaP0cgQKPx Vm5bkbcVjBwduxVLtw0wPO1fPypKZfcN8Lux3j4CfQcA0mTOGqE9Vn7+6XEHxaOy lGb0SG/Ww0VdQKVLtgMH3Ap5oL6w1jhhIBXsRt1E/Rjc01f5WLJDxPY1dzH56tzl ssgcZGNlT+1Es6cjhOL071TiTy1Eb/wL3aZFIt4e5+CbCviD9Y/TJYOEAkjOYhPz srZ6SydPbCfpzMVbnB5A46Up4T9pU6E89O8xEl5UXj6kXt4GVwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAcwkE3pMGnaKxMJYefVwq3qsAfaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iYTM2 OGRjMi1kZDhhLTQwZDItYmM1My0wZmU4N2U5ZDlkZDcvYmEzNjhkYzItZGQ4YS00 MGQyLWJjNTMtMGZlODdlOWQ5ZGQ3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYmEzNjhkYzItZGQ4YS00MGQyLWJj NTMtMGZlODdlOWQ5ZGQ3L2JhMzY4ZGMyLWRkOGEtNDBkMi1iYzUzLTBmZTg3ZTlk OWRkNy5jcmwwHwYDVR0jBBgwFoAU6B4VC3V2QFi2mhQtp5EQ17iF0t0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iYTM2OGRjMi1kZDhhLTQwZDItYmM1My0wZmU4 N2U5ZDlkZDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAFoODtNCO4w9wEyqShnXCW VsLS+lQhUkReKve047DdvNfWSg6N7EzePC9pIDz92TWcweNV759TY8pBuXPAgeEJ VC2sLY8fSwNkOk+/TcKN8aR3QIeUYpLGltO07ylS0C/4nswrJyKN6rTfkvmQpLix h+h3oGYReu1s1ItcfMsmZoY9NeOllmbfWlBkO1QTT3LQ+B42WoAYqcD++YP+FWg+ q7ssKIcrbCwaFqLiURWzTp2yNtmElls2jRMyaRSSpuaZOGgIxRb1zt6RxPn0XHqX uzA6tjsqvBVd4i1m3BnSZqQfqSscbsbvnoaPI4XFdxEU8UnJZrnJOcCTCf56Z32j -----END CERTIFICATE-----Generated at Sat Aug 23 22:08:48 2025 by rpki-client