$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/ba434fb3-146b-4bc5-a8cd-38ddf1603470.mft File: ba434fb3-146b-4bc5-a8cd-38ddf1603470.mft (raw, json) Hash identifier: n3Cmv1/ROJF+A5CReQnkAe3el25BIWkLnvGrWJUAVNg= Subject key identifier: F4:67:86:EB:43:72:60:84:85:0E:CF:E6:81:0E:B1:B5:56:0A:E2:A6 Authority key identifier: A1:E3:10:29:38:AC:67:98:DA:DC:F0:11:4E:C1:B7:64:71:5A:21:04 Certificate issuer: /CN=ba434fb3-146b-4bc5-a8cd-38ddf1603470 Certificate serial: 010D0C9F4328584A3B7A6B3C03000D6DE92DB580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/ba434fb3-146b-4bc5-a8cd-38ddf1603470.mft Manifest number: 010D0C9F4328584073A8555E8FD3615D57A33D15 Signing time: Wed 18 Jun 2025 13:00:03 +0000 Manifest this update: Wed 18 Jun 2025 13:00:03 +0000 Manifest next update: Sat 21 Jun 2025 13:00:00 +0000 Files and hashes: 1: 14516a78-5003-3ee4-a230-723f4f86845d.roa (hash: EyPc5e91kycT+0mtNQ06eJnr/ToUVD7JbhGO9VNd17Q=) 2: ba434fb3-146b-4bc5-a8cd-38ddf1603470.crl (hash: ZpPK58bAhDgbxgbampNkA0pgjzkiCJjpzUiG0HNWl5c=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/ba434fb3-146b-4bc5-a8cd-38ddf1603470.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/ba434fb3-146b-4bc5-a8cd-38ddf1603470.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7a:6b:3c:03:00:0d:6d:e9:2d:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba434fb3-146b-4bc5-a8cd-38ddf1603470 Validity Not Before: Jun 18 13:00:03 2025 GMT Not After : Jun 21 13:00:00 2025 GMT Subject: CN=67e88d41-f3fe-4002-974c-c524483a8ce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:75:1b:50:d8:50:4c:7a:ed:69:27:de:d0:e3: 13:e9:d0:30:c0:5e:ef:68:21:a6:ad:11:0c:61:08: 93:5e:1e:cb:1a:da:1d:c2:3e:72:26:1f:38:89:7d: 86:e5:9c:ae:06:fb:d5:52:ca:7c:6c:7b:5e:c8:f6: cf:42:6a:0c:e5:12:03:da:14:a7:c8:00:01:aa:ff: b6:34:26:a9:78:54:e9:78:f7:74:72:26:7b:b3:6c: cd:3e:04:18:6c:10:f2:46:86:4f:84:33:27:c9:fd: d4:15:a8:25:c7:bf:53:2c:cd:58:92:7b:2d:5a:db: da:d4:2c:a8:4b:12:4f:8b:f6:32:e4:90:bd:b2:54: 7b:a2:05:90:44:4c:cf:d8:6c:b9:9a:2c:e8:1d:5f: 73:87:9d:e2:c1:b8:c4:6a:80:12:50:d7:99:ef:5e: d5:0c:d0:4e:49:ba:e8:3c:d4:c7:47:c5:25:bc:36: 57:44:f6:b0:94:d7:3b:84:43:7b:0f:d0:31:fc:65: 02:52:54:70:5e:b7:10:11:4c:99:44:d5:4c:d9:9e: a5:4f:80:37:e0:ec:30:fc:19:cf:43:7b:df:85:70: ea:df:ee:1e:be:fc:07:fc:15:92:d1:1d:55:91:75: d5:4e:72:fc:b9:02:b7:f8:3a:c4:46:0d:37:47:a0: e9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:67:86:EB:43:72:60:84:85:0E:CF:E6:81:0E:B1:B5:56:0A:E2:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/ba434fb3-146b-4bc5-a8cd-38ddf1603470.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/ba434fb3-146b-4bc5-a8cd-38ddf1603470.crl X509v3 Authority Key Identifier: keyid:A1:E3:10:29:38:AC:67:98:DA:DC:F0:11:4E:C1:B7:64:71:5A:21:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:f1:54:f7:f2:07:92:f5:af:a7:ae:8e:c5:fa:dc:18:d9:58: 3c:76:e0:c1:25:51:f3:98:1f:fe:f3:a6:bc:63:cc:3b:13:c9: 2b:c9:8d:fa:88:b7:e7:32:f3:ff:00:cc:c1:51:b2:a4:5a:24: 65:fa:ec:97:06:32:22:f6:c4:62:69:cb:fe:24:5a:16:67:41: 45:bb:41:22:bd:f5:3f:ae:a1:96:03:1d:20:ef:59:62:04:5a: 8f:b7:f4:fe:1c:73:73:86:8e:33:0f:c0:06:2d:c8:7b:57:2d: f3:f8:2b:74:f0:f4:65:8f:2f:70:c1:25:22:81:e7:fd:48:73: 8d:4f:a2:69:1b:c7:89:c6:0d:2a:01:fc:f4:0d:5a:d1:31:8d: 12:dd:23:71:95:09:69:32:d0:d3:d6:21:ce:d9:8a:84:bb:d8: 00:7b:b7:d2:04:fb:a3:99:25:98:64:7e:58:27:4a:f8:a9:b0: 4c:a3:0e:2f:68:f4:37:d3:a7:4f:4b:92:5b:f2:ba:43:14:cf: 82:04:2b:27:07:26:c5:31:2b:90:45:7c:df:bb:64:28:33:59: 45:5b:41:c7:8e:6d:b3:44:e1:1b:d7:fa:87:ac:3e:5c:d5:13: 01:c8:36:c4:bf:ba:09:75:d7:21:b0:44:da:23:b1:d8:fe:31: 48:71:bd:13 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEo7ems8AwANbekttYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE0MzRmYjMtMTQ2Yi00YmM1LWE4Y2QtMzhkZGYxNjAz NDcwMB4XDTI1MDYxODEzMDAwM1oXDTI1MDYyMTEzMDAwMFowLzEtMCsGA1UEAxMk NjdlODhkNDEtZjNmZS00MDAyLTk3NGMtYzUyNDQ4M2E4Y2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3UbUNhQTHrtaSfe0OMT6dAwwF7vaCGmrREM YQiTXh7LGtodwj5yJh84iX2G5ZyuBvvVUsp8bHteyPbPQmoM5RID2hSnyAABqv+2 NCapeFTpePd0ciZ7s2zNPgQYbBDyRoZPhDMnyf3UFaglx79TLM1YknstWtva1Cyo SxJPi/Yy5JC9slR7ogWQREzP2Gy5mizoHV9zh53iwbjEaoASUNeZ717VDNBOSbro PNTHR8UlvDZXRPawlNc7hEN7D9Ax/GUCUlRwXrcQEUyZRNVM2Z6lT4A34Oww/BnP Q3vfhXDq3+4evvwH/BWS0R1VkXXVTnL8uQK3+DrERg03R6Dp4wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPRnhutDcmCEhQ7P5oEOsbVWCuKmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYTQz NGZiMy0xNDZiLTRiYzUtYThjZC0zOGRkZjE2MDM0NzAvYmE0MzRmYjMtMTQ2Yi00 YmM1LWE4Y2QtMzhkZGYxNjAzNDcwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmE0MzRmYjMtMTQ2Yi00YmM1LWE4 Y2QtMzhkZGYxNjAzNDcwL2JhNDM0ZmIzLTE0NmItNGJjNS1hOGNkLTM4ZGRmMTYw MzQ3MC5jcmwwHwYDVR0jBBgwFoAUoeMQKTisZ5ja3PARTsG3ZHFaIQQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYTQzNGZiMy0xNDZiLTRiYzUtYThjZC0zOGRk ZjE2MDM0NzAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBs8VT38geS9a+nro7F+twY 2Vg8duDBJVHzmB/+86a8Y8w7E8kryY36iLfnMvP/AMzBUbKkWiRl+uyXBjIi9sRi acv+JFoWZ0FFu0EivfU/rqGWAx0g71liBFqPt/T+HHNzho4zD8AGLch7Vy3z+Ct0 8PRljy9wwSUigef9SHONT6JpG8eJxg0qAfz0DVrRMY0S3SNxlQlpMtDT1iHO2YqE u9gAe7fSBPujmSWYZH5YJ0r4qbBMow4vaPQ306dPS5Jb8rpDFM+CBCsnBybFMSuQ RXzfu2QoM1lFW0HHjm2zROEb1/qHrD5c1RMByDbEv7oJddchsETaI7HY/jFIcb0T -----END CERTIFICATE-----Generated at Thu Jun 19 06:24:52 2025 by rpki-client