$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.mft File: ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.mft (raw, json) Hash identifier: YSqNTYXsJMvVF/KYtjUQ+UGBwYl8u0yBIzr97Tlx+J4= Subject key identifier: 55:08:D3:24:69:FD:52:1C:57:11:A3:72:24:16:73:2E:36:E1:E2:5C Authority key identifier: E8:1E:15:0B:75:76:40:58:B6:9A:14:2D:A7:91:10:D7:B8:85:D2:DD Certificate issuer: /CN=ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7 Certificate serial: 010D0C9F4328584A39D98517F6FAE2D809B55FC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.mft Manifest number: 010D0C9F4328584A04D37939CAB001ACD19ABB96 Signing time: Tue 17 Jun 2025 23:00:03 +0000 Manifest this update: Tue 17 Jun 2025 23:00:03 +0000 Manifest next update: Thu 19 Jun 2025 23:00:00 +0000 Files and hashes: 1: 2145dd7e-ab65-3c98-bc0d-77196940761e.roa (hash: zrIEamIBI16fPH47k0CM6lG/spYG/t0bpOUwPgnRGJQ=) 2: ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.crl (hash: xWiA/dQ80+NXhfmad6OqcE0KyINv5UXIAUIX7wshgAk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:39:d9:85:17:f6:fa:e2:d8:09:b5:5f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7 Validity Not Before: Jun 17 23:00:03 2025 GMT Not After : Jun 19 23:00:00 2025 GMT Subject: CN=91d302d0-2b43-4e36-b428-73e62d5853d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:27:15:1f:fa:bf:ab:4d:17:6c:42:c6:12:be: ae:cb:ae:07:68:54:15:58:be:e3:4c:9c:0f:16:4f: 9c:15:76:7f:40:35:48:55:e7:d7:2c:79:d4:5c:41: 45:65:0c:90:6b:ea:df:23:bb:11:ff:80:b7:87:dd: 75:4b:55:02:9f:a6:30:78:19:22:07:6d:57:b6:0c: 1c:8b:84:92:12:dd:f3:24:ee:68:fc:49:26:f2:9a: 65:ac:3a:32:f3:20:2f:ee:36:29:34:85:dd:a2:c6: e3:a9:22:1e:b5:1a:54:48:eb:97:57:e8:8a:8e:fc: dc:2e:ae:eb:f2:3b:a8:e2:d7:3b:ec:91:a8:bc:05: 02:64:91:71:06:96:f9:57:5a:5c:36:4b:f5:39:4d: ca:24:66:99:e2:81:53:90:01:29:a1:fb:16:9d:54: f7:66:3d:80:45:48:87:b7:a3:7b:00:2b:32:62:20: 13:6d:56:1f:91:37:7f:14:5f:25:ae:92:17:30:05: 1d:de:d2:46:1f:d6:b8:c1:e0:b4:e0:2b:04:9e:41: f6:76:86:7c:9a:9e:11:6d:dc:05:a5:fc:53:51:75: b7:27:3a:11:b3:6d:83:3b:99:83:3c:32:67:07:ab: b2:b5:94:8f:24:a5:48:a4:a0:be:e7:ad:f2:c5:48: 6e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:08:D3:24:69:FD:52:1C:57:11:A3:72:24:16:73:2E:36:E1:E2:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.crl X509v3 Authority Key Identifier: keyid:E8:1E:15:0B:75:76:40:58:B6:9A:14:2D:A7:91:10:D7:B8:85:D2:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:18:b5:bc:fb:55:d7:ac:28:0a:48:28:ca:24:56:e6:46:59: 30:d0:8e:a2:47:38:fe:5d:86:ae:71:b2:97:7e:5e:27:db:f9: 62:60:81:49:f1:7f:79:f2:3d:49:1d:6d:38:29:29:b8:b4:c5: e0:8f:63:be:bd:bc:a2:ab:c3:68:25:39:19:08:44:3b:cf:59: f9:51:d2:f8:2c:c5:cf:97:9b:fb:75:a5:6b:ea:cf:66:68:02: ee:b3:c6:a7:48:5d:ae:17:bb:f3:a2:8b:c9:97:7d:8a:d7:92: 24:ec:03:2d:7f:d1:7f:16:3a:6c:78:cf:d9:ee:51:55:b3:0b: 02:d2:51:c8:10:2d:4c:f1:e0:4a:3b:8c:23:6e:ca:f8:d0:68: 20:43:ca:15:e5:86:97:26:51:0c:63:1d:99:dd:2d:92:d4:97: 4b:85:ce:e0:9e:47:e3:88:89:8c:68:40:67:9c:82:7f:0f:00: b1:25:a6:b5:3d:18:cb:8b:96:77:48:60:0d:9f:80:0b:0a:36: 78:49:ee:5c:27:75:4f:ec:6d:8a:80:2c:62:ba:ea:39:bd:b6: 80:a7:bf:d0:e8:3a:ae:25:71:3c:47:d5:91:30:66:40:a1:9d: f6:a2:6e:90:b1:c5:55:81:04:5f:6c:d3:f5:8b:46:a0:08:34: 77:2b:9f:2a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEo52YUX9vri2Am1X8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEzNjhkYzItZGQ4YS00MGQyLWJjNTMtMGZlODdlOWQ5 ZGQ3MB4XDTI1MDYxNzIzMDAwM1oXDTI1MDYxOTIzMDAwMFowLzEtMCsGA1UEAxMk OTFkMzAyZDAtMmI0My00ZTM2LWI0MjgtNzNlNjJkNTg1M2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhicVH/q/q00XbELGEr6uy64HaFQVWL7jTJwP Fk+cFXZ/QDVIVefXLHnUXEFFZQyQa+rfI7sR/4C3h911S1UCn6YweBkiB21Xtgwc i4SSEt3zJO5o/Ekm8pplrDoy8yAv7jYpNIXdosbjqSIetRpUSOuXV+iKjvzcLq7r 8juo4tc77JGovAUCZJFxBpb5V1pcNkv1OU3KJGaZ4oFTkAEpofsWnVT3Zj2ARUiH t6N7ACsyYiATbVYfkTd/FF8lrpIXMAUd3tJGH9a4weC04CsEnkH2doZ8mp4RbdwF pfxTUXW3JzoRs22DO5mDPDJnB6uytZSPJKVIpKC+563yxUhubwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFUI0yRp/VIcVxGjciQWcy424eJcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iYTM2 OGRjMi1kZDhhLTQwZDItYmM1My0wZmU4N2U5ZDlkZDcvYmEzNjhkYzItZGQ4YS00 MGQyLWJjNTMtMGZlODdlOWQ5ZGQ3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYmEzNjhkYzItZGQ4YS00MGQyLWJj NTMtMGZlODdlOWQ5ZGQ3L2JhMzY4ZGMyLWRkOGEtNDBkMi1iYzUzLTBmZTg3ZTlk OWRkNy5jcmwwHwYDVR0jBBgwFoAU6B4VC3V2QFi2mhQtp5EQ17iF0t0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iYTM2OGRjMi1kZDhhLTQwZDItYmM1My0wZmU4 N2U5ZDlkZDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBRGLW8+1XXrCgKSCjKJFbm Rlkw0I6iRzj+XYaucbKXfl4n2/liYIFJ8X958j1JHW04KSm4tMXgj2O+vbyiq8No JTkZCEQ7z1n5UdL4LMXPl5v7daVr6s9maALus8anSF2uF7vzoovJl32K15Ik7AMt f9F/FjpseM/Z7lFVswsC0lHIEC1M8eBKO4wjbsr40GggQ8oV5YaXJlEMYx2Z3S2S 1JdLhc7gnkfjiImMaEBnnIJ/DwCxJaa1PRjLi5Z3SGANn4ALCjZ4Se5cJ3VP7G2K gCxiuuo5vbaAp7/Q6DquJXE8R9WRMGZAoZ32om6QscVVgQRfbNP1i0agCDR3K58q -----END CERTIFICATE-----Generated at Wed Jun 18 14:04:24 2025 by rpki-client