$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft File: bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft (raw, json) Hash identifier: WRIcqcA5/Z47hFPufA6MP+SBDTf5j1ZdT0vC3e5ikJ4= Subject key identifier: 70:57:D1:32:A1:18:5A:9C:4C:F7:AF:43:60:62:02:96:4B:7B:86:87 Authority key identifier: 31:91:FF:BF:89:94:07:2D:ED:2D:AF:9A:B1:96:60:5D:17:0E:43:D1 Certificate issuer: /CN=bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1 Certificate serial: 010D0C9F4328584AC5C91A9EFF261067EF330BB0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft Manifest number: 010D0C9F4328584073A83645CACD5CF3732BE948 Signing time: Thu 07 Aug 2025 02:00:08 +0000 Manifest this update: Thu 07 Aug 2025 02:00:08 +0000 Manifest next update: Sun 10 Aug 2025 02:00:00 +0000 Files and hashes: 1: 0df970dd-1000-33b2-94cf-be4c8681560d.roa (hash: s10vUT3eujrP/09rzr40KTI+6SA6CV0Jkqh/Jpwonk8=) 2: bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.crl (hash: iDc6YxJ8Uti8PTfPHweVHtgnD5lhaKUdtm8jS/jeZ/o=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:c9:1a:9e:ff:26:10:67:ef:33:0b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1 Validity Not Before: Aug 7 02:00:08 2025 GMT Not After : Aug 10 02:00:00 2025 GMT Subject: CN=108c2254-c54c-40d2-bca4-be51d161edbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:89:92:57:42:d0:4d:82:7d:6a:8b:e9:38:41: b1:c9:0b:91:76:0d:7e:ed:69:85:a8:c5:61:79:91: 31:81:69:50:10:1f:53:66:4a:78:6b:6a:f9:e2:42: be:df:eb:b6:af:bd:b7:28:25:33:f2:14:1f:35:cb: 29:6c:8c:b0:a7:d5:a6:16:9e:6c:c7:26:65:e1:e3: 55:1a:d6:49:e2:97:0e:66:4a:2e:32:4d:50:63:9c: a9:f4:59:3c:39:6a:84:c0:5d:9c:3d:de:6b:5a:4c: 29:b7:1a:49:5e:c3:f5:f2:09:c2:eb:ef:89:6d:19: fa:ae:64:a4:4c:fa:69:22:48:72:68:30:e8:32:20: 63:74:1b:e6:29:d0:04:d0:86:22:42:be:39:4d:eb: c8:ec:1e:43:f3:11:0f:42:70:3e:f0:63:24:08:da: 68:0e:07:e0:7f:fb:7c:cb:49:4a:e7:dd:20:71:54: f0:73:2e:63:31:d4:31:bd:8d:68:7b:d5:d2:fb:f2: 6e:64:ab:61:2b:07:e8:76:00:a0:31:6a:f7:f6:ab: 67:8b:fe:0a:bc:eb:2d:8b:b7:d8:f6:32:7f:a3:7e: cb:d8:af:13:7e:32:c1:4c:cb:f2:a1:c5:7e:0d:00: ac:48:17:37:4e:d4:51:a0:66:63:14:1e:5d:2b:e4: 9a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:57:D1:32:A1:18:5A:9C:4C:F7:AF:43:60:62:02:96:4B:7B:86:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.crl X509v3 Authority Key Identifier: keyid:31:91:FF:BF:89:94:07:2D:ED:2D:AF:9A:B1:96:60:5D:17:0E:43:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:d9:81:61:b4:a8:3c:73:16:d5:94:b8:23:d4:99:43:83:90: a6:1c:05:c9:e6:a0:5b:14:af:87:52:fb:55:98:eb:06:24:88: 47:c2:00:a4:a0:3c:22:a7:99:0c:b5:19:e7:a5:52:b2:37:ee: 06:e9:cd:4d:5b:df:da:9d:de:2b:5e:96:18:22:e4:a0:27:d7: 2d:d3:c9:1a:fc:db:31:e4:bd:08:44:66:da:1d:a4:fd:c0:7c: e6:4e:f7:8c:c8:30:6d:5d:7b:49:be:b3:b5:5b:ce:09:3b:43: ab:ba:d5:f4:f0:32:38:d6:a5:89:4e:42:5a:74:67:d7:01:b6: 8e:16:16:07:63:3b:61:7d:36:6a:0a:ce:32:3c:e6:d6:b6:c3: 73:bf:42:5b:b2:e0:15:3f:a5:6d:c7:1f:64:d6:95:0a:ff:91: a6:bb:d1:b2:a4:da:b6:42:fa:42:24:ab:a5:7f:ae:5b:c1:a2: 50:df:07:70:e7:d2:18:67:bc:12:47:b5:74:11:ba:3c:60:b1: 21:71:74:12:91:ca:b4:09:90:e0:c8:a5:85:64:0a:66:be:a9: 62:14:25:9a:e0:37:76:2e:7c:ce:f1:ab:13:f3:c2:68:e8:5c: 51:75:0d:07:01:22:15:d6:a6:ef:ca:63:39:d9:2c:c5:2c:80: a4:88:39:11 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErFyRqe/yYQZ+8zC7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFjZjNlM2QtZDJkYy00ZDFmLTllMDItZTQwN2Q5ZjZh N2IxMB4XDTI1MDgwNzAyMDAwOFoXDTI1MDgxMDAyMDAwMFowLzEtMCsGA1UEAxMk MTA4YzIyNTQtYzU0Yy00MGQyLWJjYTQtYmU1MWQxNjFlZGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4mSV0LQTYJ9aovpOEGxyQuRdg1+7WmFqMVh eZExgWlQEB9TZkp4a2r54kK+3+u2r723KCUz8hQfNcspbIywp9WmFp5sxyZl4eNV GtZJ4pcOZkouMk1QY5yp9Fk8OWqEwF2cPd5rWkwptxpJXsP18gnC6++JbRn6rmSk TPppIkhyaDDoMiBjdBvmKdAE0IYiQr45TevI7B5D8xEPQnA+8GMkCNpoDgfgf/t8 y0lK590gcVTwcy5jMdQxvY1oe9XS+/JuZKthKwfodgCgMWr39qtni/4KvOsti7fY 9jJ/o37L2K8TfjLBTMvyocV+DQCsSBc3TtRRoGZjFB5dK+SapwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHBX0TKhGFqcTPevQ2BiApZLe4aHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYWNm M2UzZC1kMmRjLTRkMWYtOWUwMi1lNDA3ZDlmNmE3YjEvYmFjZjNlM2QtZDJkYy00 ZDFmLTllMDItZTQwN2Q5ZjZhN2IxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmFjZjNlM2QtZDJkYy00ZDFmLTll MDItZTQwN2Q5ZjZhN2IxL2JhY2YzZTNkLWQyZGMtNGQxZi05ZTAyLWU0MDdkOWY2 YTdiMS5jcmwwHwYDVR0jBBgwFoAUMZH/v4mUBy3tLa+asZZgXRcOQ9EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYWNmM2UzZC1kMmRjLTRkMWYtOWUwMi1lNDA3 ZDlmNmE3YjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAy2YFhtKg8cxbVlLgj1JlD g5CmHAXJ5qBbFK+HUvtVmOsGJIhHwgCkoDwip5kMtRnnpVKyN+4G6c1NW9/and4r XpYYIuSgJ9ct08ka/Nsx5L0IRGbaHaT9wHzmTveMyDBtXXtJvrO1W84JO0OrutX0 8DI41qWJTkJadGfXAbaOFhYHYzthfTZqCs4yPObWtsNzv0JbsuAVP6Vtxx9k1pUK /5Gmu9GypNq2QvpCJKulf65bwaJQ3wdw59IYZ7wSR7V0Ebo8YLEhcXQSkcq0CZDg yKWFZApmvqliFCWa4Dd2LnzO8asT88Jo6FxRdQ0HASIV1qbvymM52SzFLICkiDkR -----END CERTIFICATE-----Generated at Fri Aug 8 00:16:36 2025 by rpki-client