$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.mft File: bf10fe75-981f-4a3c-b77a-28e235bed9f1.mft (raw, json) Hash identifier: 3KZx2iuMxRocdO0Ug7ZXT9EzLKwlq76EOLZ1MVJMemk= Subject key identifier: C0:08:1E:6F:C1:B1:18:EE:61:E9:49:E1:FF:0A:F0:4F:E1:C5:EB:E4 Authority key identifier: 11:5E:01:9C:4C:7D:98:BB:75:92:64:5B:8D:DB:0B:38:BE:11:77:B7 Certificate issuer: /CN=bf10fe75-981f-4a3c-b77a-28e235bed9f1 Certificate serial: 010D0C9F4328584AC99FBCA0C3AB009D6C6B9E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.mft Manifest number: 010D0C9F4328584073A8508522A5167F0D7102C9 Signing time: Fri 08 Aug 2025 11:00:03 +0000 Manifest this update: Fri 08 Aug 2025 11:00:03 +0000 Manifest next update: Sun 10 Aug 2025 11:00:00 +0000 Files and hashes: 1: 4a34cd9f-1e66-36b9-ae43-e7a939ef4cb5.roa (hash: 9NO8sWbIULrt5ee0NIsfZ9eojYi3xDsBsyxqCwh8McE=) 2: bf10fe75-981f-4a3c-b77a-28e235bed9f1.crl (hash: N8Wmi342EFmSIsqxUM3J9mAbO58S498bUL+YmGQCo9I=) 3: f2ad73f3-0f80-3cc2-9399-881a9101068b.roa (hash: +CpnyctAzKaetGxUqj9C0bemLxvpbuqyLvLGaVQwRJA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:9f:bc:a0:c3:ab:00:9d:6c:6b:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf10fe75-981f-4a3c-b77a-28e235bed9f1 Validity Not Before: Aug 8 11:00:03 2025 GMT Not After : Aug 10 11:00:00 2025 GMT Subject: CN=1e97432d-8d75-4959-8d43-a6eba0227e9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5c:f8:04:84:80:d4:b1:5a:c5:b7:0b:55:18: 65:ae:51:c5:97:55:dc:12:d8:46:7d:e1:3c:5f:b1: ee:1a:c2:a4:f3:d3:6d:e7:b6:78:4c:ed:d1:c9:e9: 89:e6:f8:b6:fe:02:78:a6:50:d0:35:00:1d:2d:f6: 7c:34:d4:52:66:97:e1:6b:82:08:13:62:ff:d6:5f: 42:76:3d:f9:d8:39:a8:0c:8c:83:ac:67:61:7a:01: 8f:be:15:a7:35:56:73:c3:e8:66:91:84:30:49:e4: c7:3e:57:fc:bf:fe:d6:81:79:e5:ec:68:8f:5f:79: 27:9b:6c:66:d6:1a:9f:82:15:8b:b2:99:01:8c:e9: 83:02:f8:fe:08:9e:72:2b:45:00:92:d5:e9:0a:36: e8:69:08:6e:a1:ec:49:b5:d8:b7:67:64:64:ef:de: fa:78:d0:6f:6b:c7:2a:a8:bf:2f:4e:eb:b1:7b:8e: ba:b5:50:bd:33:e9:7d:a6:4b:72:dd:37:ba:ed:58: 70:25:20:e8:47:6b:af:d6:7b:29:22:e9:22:53:3c: 25:87:8f:62:28:a6:85:fe:4c:6b:e6:72:97:83:4c: b9:41:da:04:57:4b:77:ec:d8:20:43:b1:4c:5d:fa: 7c:c3:64:7a:e0:cd:06:e6:63:77:3a:2b:2e:9c:39: e7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:08:1E:6F:C1:B1:18:EE:61:E9:49:E1:FF:0A:F0:4F:E1:C5:EB:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.crl X509v3 Authority Key Identifier: keyid:11:5E:01:9C:4C:7D:98:BB:75:92:64:5B:8D:DB:0B:38:BE:11:77:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:90:d0:bd:da:67:fb:8a:ca:d3:10:73:1b:2b:f3:00:2d:2b: bf:6b:94:7d:8f:4c:e3:56:ec:99:f9:fd:af:40:fd:f9:d7:17: 1d:b9:f6:91:d2:eb:f5:85:75:ad:5e:5d:6d:36:c9:51:2d:ea: c6:12:bd:e5:b9:94:87:6d:34:4d:b1:71:49:0d:41:63:36:0e: d6:d3:7d:25:77:ac:b5:a2:7c:fd:10:23:ef:53:36:27:de:4c: 53:86:dc:26:65:43:dd:8e:d5:50:36:ee:32:13:70:1e:a4:53: 82:ac:6a:08:d2:9d:6b:5d:eb:6b:04:f5:6d:47:42:23:63:6a: 0d:53:e4:a4:1c:4c:36:14:52:54:43:13:e8:a7:9b:47:76:35: 1f:bd:ab:52:fb:d9:93:03:5e:4b:1c:d9:93:96:24:ce:72:fa: 9d:8a:65:06:d6:0f:cc:1f:c9:87:f1:ce:8b:d1:74:3b:5f:71: 6c:e3:fc:13:10:e6:0c:b2:e1:d1:cf:eb:fd:f5:15:b0:1a:73: 1b:8c:0e:f6:7b:7a:91:9d:75:8d:0c:c7:cd:ec:77:83:21:8a: b3:1a:6f:bb:27:c4:24:5d:0a:f3:dc:27:e8:d6:5e:2e:a2:e1: ce:ca:a0:18:b5:9b:03:ee:b7:a3:66:0b:a7:0a:78:fa:3f:d9: d3:ff:2a:e7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErJn7ygw6sAnWxrngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxMGZlNzUtOTgxZi00YTNjLWI3N2EtMjhlMjM1YmVk OWYxMB4XDTI1MDgwODExMDAwM1oXDTI1MDgxMDExMDAwMFowLzEtMCsGA1UEAxMk MWU5NzQzMmQtOGQ3NS00OTU5LThkNDMtYTZlYmEwMjI3ZTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVz4BISA1LFaxbcLVRhlrlHFl1XcEthGfeE8 X7HuGsKk89Nt57Z4TO3RyemJ5vi2/gJ4plDQNQAdLfZ8NNRSZpfha4IIE2L/1l9C dj352DmoDIyDrGdhegGPvhWnNVZzw+hmkYQwSeTHPlf8v/7WgXnl7GiPX3knm2xm 1hqfghWLspkBjOmDAvj+CJ5yK0UAktXpCjboaQhuoexJtdi3Z2Rk7976eNBva8cq qL8vTuuxe466tVC9M+l9pkty3Te67VhwJSDoR2uv1nspIukiUzwlh49iKKaF/kxr 5nKXg0y5QdoEV0t37NggQ7FMXfp8w2R64M0G5mN3OisunDnn7wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMAIHm/BsRjuYelJ4f8K8E/hxevkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjEw ZmU3NS05ODFmLTRhM2MtYjc3YS0yOGUyMzViZWQ5ZjEvYmYxMGZlNzUtOTgxZi00 YTNjLWI3N2EtMjhlMjM1YmVkOWYxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmYxMGZlNzUtOTgxZi00YTNjLWI3 N2EtMjhlMjM1YmVkOWYxL2JmMTBmZTc1LTk4MWYtNGEzYy1iNzdhLTI4ZTIzNWJl ZDlmMS5jcmwwHwYDVR0jBBgwFoAUEV4BnEx9mLt1kmRbjdsLOL4Rd7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjEwZmU3NS05ODFmLTRhM2MtYjc3YS0yOGUy MzViZWQ5ZjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQABkNC92mf7isrTEHMbK/MA LSu/a5R9j0zjVuyZ+f2vQP351xcdufaR0uv1hXWtXl1tNslRLerGEr3luZSHbTRN sXFJDUFjNg7W030ld6y1onz9ECPvUzYn3kxThtwmZUPdjtVQNu4yE3AepFOCrGoI 0p1rXetrBPVtR0IjY2oNU+SkHEw2FFJUQxPop5tHdjUfvatS+9mTA15LHNmTliTO cvqdimUG1g/MH8mH8c6L0XQ7X3Fs4/wTEOYMsuHRz+v99RWwGnMbjA72e3qRnXWN DMfN7HeDIYqzGm+7J8QkXQrz3Cfo1l4uouHOyqAYtZsD7rejZgunCnj6P9nT/yrn -----END CERTIFICATE-----Generated at Fri Aug 8 13:05:26 2025 by rpki-client