$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft File: bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft (raw, json) Hash identifier: LurQ14NvmNNuzFrreCwLtzdUzsM7L3zza61l3vbItrs= Subject key identifier: B2:04:E8:39:B1:5B:55:DB:79:39:1C:16:BA:1F:7A:E6:EC:A9:96:F5 Authority key identifier: 31:91:FF:BF:89:94:07:2D:ED:2D:AF:9A:B1:96:60:5D:17:0E:43:D1 Certificate issuer: /CN=bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1 Certificate serial: 010D0C9F4328584BBE3FFC3B68E1AA9FD86078E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft Manifest number: 010D0C9F4328584073A83645CACD5CF3732BE9A3 Signing time: Tue 04 Nov 2025 02:00:08 +0000 Manifest this update: Tue 04 Nov 2025 02:00:08 +0000 Manifest next update: Thu 06 Nov 2025 02:00:00 +0000 Files and hashes: 1: 0df970dd-1000-33b2-94cf-be4c8681560d.roa (hash: eWhTdCUZULTQbPYp9X1Zhea5pZhElgmACAZnZBuPwoc=) 2: bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.crl (hash: p+5y/PL/IZuzcZcJ9+t+DBf9+hBXV+3/FfUJIUEM5R8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:3f:fc:3b:68:e1:aa:9f:d8:60:78:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1 Validity Not Before: Nov 4 02:00:08 2025 GMT Not After : Nov 6 02:00:00 2025 GMT Subject: CN=7de98efd-6c40-4aa1-9276-bb712d9bc1e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:a6:0c:bb:d2:3d:f5:6e:aa:e4:61:db:e3:17: c4:d1:81:75:96:1a:7a:00:01:c2:28:54:39:dc:eb: ec:f0:7f:98:01:52:7c:81:83:c9:e1:df:4b:5d:13: 08:6a:02:25:98:af:6c:dc:c1:28:16:a1:8d:5d:d5: 44:f1:f0:59:63:79:d6:e1:b1:5d:e7:da:85:8c:df: 7b:83:80:3b:0e:cf:1d:6a:f7:c4:da:2c:d4:31:7c: b1:90:45:18:75:48:07:f3:b7:7a:28:f1:f2:6f:3a: 0d:28:e8:e8:70:76:65:b2:11:be:96:c3:62:eb:81: 8f:65:2b:8b:75:e0:ba:8f:b0:a8:db:38:ac:1f:09: 70:79:14:cd:a6:70:35:ef:15:12:06:87:60:63:95: a1:7b:97:24:cb:a5:26:96:81:d6:cd:b3:41:66:8c: a9:75:1a:7c:14:ca:a2:98:95:99:0f:56:a0:71:dc: ab:b0:46:47:93:92:20:d1:c3:b5:a8:a6:15:36:7c: c9:3c:12:4c:36:92:3c:5f:fc:06:c6:5d:36:da:c1: 5f:f3:0c:29:e1:dd:a2:1e:fc:47:3e:d9:5e:d7:13: e9:8a:c5:e2:a4:c6:9f:aa:d7:43:6a:b7:a3:10:2c: 2e:79:3e:f3:ce:e4:f4:89:6c:0c:8d:0b:f5:75:b2: 89:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:04:E8:39:B1:5B:55:DB:79:39:1C:16:BA:1F:7A:E6:EC:A9:96:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.crl X509v3 Authority Key Identifier: keyid:31:91:FF:BF:89:94:07:2D:ED:2D:AF:9A:B1:96:60:5D:17:0E:43:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:fa:0e:a0:ea:78:15:67:a3:1b:4a:10:21:e0:4a:47:9b:78: 2d:b6:24:b6:a7:84:6c:5e:e2:06:b9:68:2c:66:05:4a:fb:b9: ce:66:9e:dc:57:22:f8:31:32:f4:be:5f:27:c8:21:6a:e8:c5: bf:e6:9e:06:c0:d8:73:94:3e:c0:87:c1:27:a8:5b:eb:fe:ab: d7:cd:aa:4f:be:74:12:f2:be:07:68:16:4f:b6:c5:56:92:de: c3:b0:e1:da:40:a5:3a:52:6a:b4:07:6d:36:a6:9c:8f:a2:88: b9:61:62:dd:33:83:54:55:9a:43:36:20:04:3b:df:8d:c0:bc: 17:29:a9:d4:6e:6c:26:13:77:37:da:18:6c:04:72:9f:12:c2: 7d:72:e1:f6:6b:07:4e:98:73:b9:7d:62:08:5c:60:8e:c5:df: 71:17:79:3e:21:b8:f3:5b:23:e8:c7:14:32:df:e4:5d:b8:75: bd:7a:d8:6b:63:59:0b:9e:51:f7:82:0c:ce:5e:05:a7:42:d0: 4b:ae:14:41:82:f5:42:57:63:7d:e4:87:54:72:f7:48:dc:3b: 69:b6:53:77:23:de:11:7c:3d:97:58:cb:5c:77:b4:fd:ac:46: 3d:b3:a3:92:34:26:2f:0d:c0:6a:b3:79:7f:bf:d9:b7:80:3e: 66:af:56:a7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+P/w7aOGqn9hgeOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFjZjNlM2QtZDJkYy00ZDFmLTllMDItZTQwN2Q5ZjZh N2IxMB4XDTI1MTEwNDAyMDAwOFoXDTI1MTEwNjAyMDAwMFowLzEtMCsGA1UEAxMk N2RlOThlZmQtNmM0MC00YWExLTkyNzYtYmI3MTJkOWJjMWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6qYMu9I99W6q5GHb4xfE0YF1lhp6AAHCKFQ5 3Ovs8H+YAVJ8gYPJ4d9LXRMIagIlmK9s3MEoFqGNXdVE8fBZY3nW4bFd59qFjN97 g4A7Ds8davfE2izUMXyxkEUYdUgH87d6KPHybzoNKOjocHZlshG+lsNi64GPZSuL deC6j7Co2zisHwlweRTNpnA17xUSBodgY5Whe5cky6UmloHWzbNBZoypdRp8FMqi mJWZD1agcdyrsEZHk5Ig0cO1qKYVNnzJPBJMNpI8X/wGxl022sFf8wwp4d2iHvxH Ptle1xPpisXipMafqtdDarejECwueT7zzuT0iWwMjQv1dbKJXQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLIE6DmxW1XbeTkcFrofeubsqZb1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYWNm M2UzZC1kMmRjLTRkMWYtOWUwMi1lNDA3ZDlmNmE3YjEvYmFjZjNlM2QtZDJkYy00 ZDFmLTllMDItZTQwN2Q5ZjZhN2IxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmFjZjNlM2QtZDJkYy00ZDFmLTll MDItZTQwN2Q5ZjZhN2IxL2JhY2YzZTNkLWQyZGMtNGQxZi05ZTAyLWU0MDdkOWY2 YTdiMS5jcmwwHwYDVR0jBBgwFoAUMZH/v4mUBy3tLa+asZZgXRcOQ9EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYWNmM2UzZC1kMmRjLTRkMWYtOWUwMi1lNDA3 ZDlmNmE3YjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBf+g6g6ngVZ6MbShAh4EpH m3gttiS2p4RsXuIGuWgsZgVK+7nOZp7cVyL4MTL0vl8nyCFq6MW/5p4GwNhzlD7A h8EnqFvr/qvXzapPvnQS8r4HaBZPtsVWkt7DsOHaQKU6Umq0B202ppyPooi5YWLd M4NUVZpDNiAEO9+NwLwXKanUbmwmE3c32hhsBHKfEsJ9cuH2awdOmHO5fWIIXGCO xd9xF3k+IbjzWyPoxxQy3+RduHW9ethrY1kLnlH3ggzOXgWnQtBLrhRBgvVCV2N9 5IdUcvdI3DtptlN3I94RfD2XWMtcd7T9rEY9s6OSNCYvDcBqs3l/v9m3gD5mr1an -----END CERTIFICATE-----Generated at Wed Nov 5 01:09:50 2025 by rpki-client