$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7.mft File: be0c0ba3-5f5d-4f25-9828-23e3dd604ee7.mft (raw, json) Hash identifier: Q8w8hjBVW1dF9FF2ayfhSORLRKBJ9RYpDNaWP3gJzlc= Subject key identifier: 5E:C7:AE:D2:59:36:EF:53:52:E1:6B:B2:8C:79:46:23:14:00:5F:91 Authority key identifier: A0:F0:66:F4:C5:4F:A7:E9:1B:46:F2:18:3D:DC:96:F7:F7:D3:2B:8B Certificate issuer: /CN=be0c0ba3-5f5d-4f25-9828-23e3dd604ee7 Certificate serial: 010D0C9F4328584AC1D493F52DC379CFA34FBB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7.mft Manifest number: 010D0C9F432858452F5AD65A7D354C047D26A60C Signing time: Tue 05 Aug 2025 16:00:03 +0000 Manifest this update: Tue 05 Aug 2025 16:00:03 +0000 Manifest next update: Thu 07 Aug 2025 16:00:00 +0000 Files and hashes: 1: 1240df73-c51c-3ee8-876b-f6ef5d6e3e60.roa (hash: HwMDAPJ8D/IPbrFjHA+4y20GZfl2eixbhdk/2U63Tpg=) 2: be0c0ba3-5f5d-4f25-9828-23e3dd604ee7.crl (hash: F8sjaoGVbvbCfj4sTHrbU/7T5i6sSsFCzxZ+lNWDBC0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c1:d4:93:f5:2d:c3:79:cf:a3:4f:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be0c0ba3-5f5d-4f25-9828-23e3dd604ee7 Validity Not Before: Aug 5 16:00:03 2025 GMT Not After : Aug 7 16:00:00 2025 GMT Subject: CN=7d7f3bcc-25b2-4691-a931-0b51f43ac86d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6c:aa:0c:04:23:b7:cf:2f:c0:6d:4a:29:3c: ca:ef:52:65:43:79:ff:6c:4d:8e:8c:16:44:aa:c9: 4b:6b:42:2b:f6:1c:fa:40:7c:98:66:76:c0:23:6d: 34:d7:45:a6:37:ed:e3:3d:fb:16:3f:e4:fa:d5:0a: 9f:14:28:21:32:e8:34:7b:3e:90:0f:0c:89:c6:34: cb:77:52:05:80:f1:8a:97:26:0c:59:06:55:d0:ef: a1:46:35:36:2b:ff:7b:c7:49:0c:ad:79:22:5a:ad: 0e:ce:5c:0d:0e:7d:2d:3d:f0:2a:4e:d0:ed:fc:eb: 50:b9:a2:4c:3b:3a:9d:bb:ee:eb:cc:47:14:65:81: b0:7c:39:87:4a:f3:09:f2:70:16:f3:b5:6e:02:59: 26:76:4a:24:c4:5c:61:22:4d:03:71:39:83:71:d2: 56:1e:09:66:e7:ce:5c:5e:48:3a:a2:3c:19:f6:ac: f5:a1:e1:6c:c0:27:4e:81:36:5c:b2:7f:f6:41:46: dc:12:15:bf:84:b7:db:35:ef:30:a3:2f:1a:82:5f: a4:99:ab:65:e6:d7:27:04:0f:3f:30:fc:fb:74:12: f9:76:6b:56:43:9f:da:e4:28:51:a1:ef:42:2f:94: 3f:c3:c1:f9:ac:2d:c6:45:1d:67:88:54:37:8c:37: 3f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C7:AE:D2:59:36:EF:53:52:E1:6B:B2:8C:79:46:23:14:00:5F:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7.crl X509v3 Authority Key Identifier: keyid:A0:F0:66:F4:C5:4F:A7:E9:1B:46:F2:18:3D:DC:96:F7:F7:D3:2B:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be0c0ba3-5f5d-4f25-9828-23e3dd604ee7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:bb:4f:8d:12:b8:fe:7f:c6:89:87:a9:05:ae:13:5a:f3:74: 7e:0e:2c:1f:bd:38:c9:2b:b3:34:d1:ea:e2:40:8b:69:89:91: c7:47:05:a7:c8:7f:44:e0:8b:96:0d:c6:ec:41:8d:93:47:1a: 68:48:01:5c:65:b5:91:a7:41:aa:40:48:43:fa:9d:c6:b2:7e: 8c:8d:d8:a6:d1:ad:4d:92:73:a2:1a:0a:42:59:36:e9:55:8b: 70:27:a1:ea:25:47:ed:6a:89:9f:59:09:bd:dc:bb:ea:88:cc: be:49:62:bd:dd:43:05:93:67:3c:8e:45:33:4d:98:80:f0:da: 60:33:00:19:c0:5b:9a:8e:4e:82:eb:c1:18:ae:0c:75:b7:ab: 2e:06:83:96:6d:32:66:c0:3c:5a:92:60:06:1f:a5:99:44:c2: bf:33:d4:56:47:03:b3:57:ed:74:f6:97:d8:96:21:a9:87:cd: a9:1c:2d:d8:20:c9:ca:aa:66:09:86:11:90:83:ad:75:92:20: ac:e7:63:ab:44:7b:87:87:85:67:74:57:79:d7:ce:f8:7f:81: 78:4e:00:34:21:0f:6a:f1:d5:ba:da:a0:0f:6c:c7:42:22:fb: bf:54:db:3c:a8:82:4d:cf:d2:86:4b:47:da:fc:72:b7:9b:53: e2:50:ef:10 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErB1JP1LcN5z6NPuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmUwYzBiYTMtNWY1ZC00ZjI1LTk4MjgtMjNlM2RkNjA0 ZWU3MB4XDTI1MDgwNTE2MDAwM1oXDTI1MDgwNzE2MDAwMFowLzEtMCsGA1UEAxMk N2Q3ZjNiY2MtMjViMi00NjkxLWE5MzEtMGI1MWY0M2FjODZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmyqDAQjt88vwG1KKTzK71JlQ3n/bE2OjBZE qslLa0Ir9hz6QHyYZnbAI20010WmN+3jPfsWP+T61QqfFCghMug0ez6QDwyJxjTL d1IFgPGKlyYMWQZV0O+hRjU2K/97x0kMrXkiWq0OzlwNDn0tPfAqTtDt/OtQuaJM Ozqdu+7rzEcUZYGwfDmHSvMJ8nAW87VuAlkmdkokxFxhIk0DcTmDcdJWHglm585c Xkg6ojwZ9qz1oeFswCdOgTZcsn/2QUbcEhW/hLfbNe8woy8agl+kmatl5tcnBA8/ MPz7dBL5dmtWQ5/a5ChRoe9CL5Q/w8H5rC3GRR1niFQ3jDc/OQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF7HrtJZNu9TUuFrsox5RiMUAF+RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZTBj MGJhMy01ZjVkLTRmMjUtOTgyOC0yM2UzZGQ2MDRlZTcvYmUwYzBiYTMtNWY1ZC00 ZjI1LTk4MjgtMjNlM2RkNjA0ZWU3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmUwYzBiYTMtNWY1ZC00ZjI1LTk4 MjgtMjNlM2RkNjA0ZWU3L2JlMGMwYmEzLTVmNWQtNGYyNS05ODI4LTIzZTNkZDYw NGVlNy5jcmwwHwYDVR0jBBgwFoAUoPBm9MVPp+kbRvIYPdyW9/fTK4swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZTBjMGJhMy01ZjVkLTRmMjUtOTgyOC0yM2Uz ZGQ2MDRlZTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAcu0+NErj+f8aJh6kFrhNa 83R+DiwfvTjJK7M00eriQItpiZHHRwWnyH9E4IuWDcbsQY2TRxpoSAFcZbWRp0Gq QEhD+p3Gsn6Mjdim0a1NknOiGgpCWTbpVYtwJ6HqJUftaomfWQm93LvqiMy+SWK9 3UMFk2c8jkUzTZiA8NpgMwAZwFuajk6C68EYrgx1t6suBoOWbTJmwDxakmAGH6WZ RMK/M9RWRwOzV+109pfYliGph82pHC3YIMnKqmYJhhGQg611kiCs52OrRHuHh4Vn dFd51874f4F4TgA0IQ9q8dW62qAPbMdCIvu/VNs8qIJNz9KGS0fa/HK3m1PiUO8Q -----END CERTIFICATE-----Generated at Wed Aug 6 10:04:19 2025 by rpki-client