$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft File: bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft (raw, json) Hash identifier: MC2j11XqSq/w4Qass6+QnYoclqQuiDLXtgGCqMi3HlQ= Subject key identifier: 49:EF:28:52:2D:96:25:98:2A:DD:75:39:97:C3:B0:D7:58:DB:AC:79 Authority key identifier: 31:91:FF:BF:89:94:07:2D:ED:2D:AF:9A:B1:96:60:5D:17:0E:43:D1 Certificate issuer: /CN=bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1 Certificate serial: 010D0C9F4328584A5E7DBF5D9E73190FB0478600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft Manifest number: 010D0C9F4328584073A83645CACD5CF3732BE923 Signing time: Tue 01 Jul 2025 02:00:03 +0000 Manifest this update: Tue 01 Jul 2025 02:00:03 +0000 Manifest next update: Thu 03 Jul 2025 02:00:00 +0000 Files and hashes: 1: 0df970dd-1000-33b2-94cf-be4c8681560d.roa (hash: s10vUT3eujrP/09rzr40KTI+6SA6CV0Jkqh/Jpwonk8=) 2: bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.crl (hash: RI4weD57Ou6KJxSOvogn5G6sqwpev9YwDDxDVFYoaI8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:7d:bf:5d:9e:73:19:0f:b0:47:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1 Validity Not Before: Jul 1 02:00:03 2025 GMT Not After : Jul 3 02:00:00 2025 GMT Subject: CN=0d99e3e0-8531-40ab-8d84-0f5261648aeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:88:0f:66:18:26:30:ba:46:a7:35:9c:1d:f7: 11:9e:8e:28:53:26:a4:6a:64:cf:e7:3f:03:01:6d: 79:20:5b:59:cb:17:e3:69:35:db:a4:6b:2e:74:1c: 31:8c:18:ff:af:e5:6e:07:5a:56:43:66:7f:f9:6c: f6:0f:b2:60:b0:0f:c6:25:67:17:20:8d:36:31:09: a0:38:8b:04:84:4e:a7:30:bd:17:40:cd:ee:4a:d3: 1b:fe:ef:d2:83:27:9c:57:32:4f:29:ed:f7:d7:46: 65:dd:e8:90:00:98:a6:19:12:5c:e3:c9:c7:21:87: 1a:6c:b6:f2:30:3f:60:01:92:5a:a0:21:8d:ca:3b: dc:67:85:30:b9:0b:fa:5f:d8:ab:19:1a:27:9c:f4: f7:f7:02:bd:07:a2:1f:03:6c:d5:fc:6f:e8:33:4c: 6c:82:92:92:5b:23:df:3a:ed:a0:64:7e:f3:fb:4a: 63:85:5b:3f:e8:01:ff:96:8a:54:47:00:78:5c:a8: 55:7a:40:84:e5:d4:b9:a0:17:c6:85:0b:12:37:6e: 87:4f:41:63:3c:eb:f9:ae:f0:e4:45:bb:5a:f3:de: a2:3b:09:7c:49:7a:a0:bc:2a:bf:93:02:91:10:3e: 20:15:00:ac:b5:0b:eb:c6:29:41:16:37:6f:4a:e2: bf:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:EF:28:52:2D:96:25:98:2A:DD:75:39:97:C3:B0:D7:58:DB:AC:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.crl X509v3 Authority Key Identifier: keyid:31:91:FF:BF:89:94:07:2D:ED:2D:AF:9A:B1:96:60:5D:17:0E:43:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:c4:9f:17:d7:a6:63:06:c3:8d:3c:e8:c4:8d:65:84:5e:61: 75:8a:64:ed:1d:05:8f:f8:9a:ce:41:ef:65:57:27:11:8a:b3: 6a:32:07:b7:04:3f:f3:14:27:85:20:34:b5:bc:2e:9b:8e:a4: d6:3b:98:a4:b4:cb:3e:77:10:55:c8:32:da:3c:3e:a0:7e:dd: 87:3f:8d:31:e9:65:3c:a5:bf:2b:cf:18:f2:d0:3b:b1:c9:2f: 9a:db:35:07:ff:ee:5a:e4:37:e1:a9:ce:b0:5a:64:b3:01:a2: 53:5a:a0:3e:50:1c:66:93:78:e6:d3:8a:b7:e3:f2:a5:c6:b0: 6b:af:82:53:b8:0d:a0:d3:6d:72:71:f1:0d:c8:d2:ce:f2:08: 2b:8a:26:ed:d8:02:ec:85:cb:c8:c0:90:e9:57:28:46:ee:f7: ff:dd:96:47:25:e7:4f:f4:36:f4:2a:ff:0d:04:4b:70:61:c6: c9:0b:ce:80:e5:2d:c0:8c:b9:ef:71:12:56:31:81:da:1a:1d: 8b:e4:83:93:59:44:01:e0:94:d8:ed:ab:b1:db:90:85:e3:ff: 89:80:84:d5:b8:29:85:83:a4:13:ab:4e:ed:38:6f:0d:c3:b3: 77:e8:c3:2b:fe:4a:3e:27:1a:96:34:32:1a:2d:64:d0:dd:48: b7:8b:12:e9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpefb9dnnMZD7BHhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFjZjNlM2QtZDJkYy00ZDFmLTllMDItZTQwN2Q5ZjZh N2IxMB4XDTI1MDcwMTAyMDAwM1oXDTI1MDcwMzAyMDAwMFowLzEtMCsGA1UEAxMk MGQ5OWUzZTAtODUzMS00MGFiLThkODQtMGY1MjYxNjQ4YWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ogPZhgmMLpGpzWcHfcRno4oUyakamTP5z8D AW15IFtZyxfjaTXbpGsudBwxjBj/r+VuB1pWQ2Z/+Wz2D7JgsA/GJWcXII02MQmg OIsEhE6nML0XQM3uStMb/u/SgyecVzJPKe3310Zl3eiQAJimGRJc48nHIYcabLby MD9gAZJaoCGNyjvcZ4UwuQv6X9irGRonnPT39wK9B6IfA2zV/G/oM0xsgpKSWyPf Ou2gZH7z+0pjhVs/6AH/lopURwB4XKhVekCE5dS5oBfGhQsSN26HT0FjPOv5rvDk Rbta896iOwl8SXqgvCq/kwKRED4gFQCstQvrxilBFjdvSuK/GQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEnvKFItliWYKt11OZfDsNdY26x5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYWNm M2UzZC1kMmRjLTRkMWYtOWUwMi1lNDA3ZDlmNmE3YjEvYmFjZjNlM2QtZDJkYy00 ZDFmLTllMDItZTQwN2Q5ZjZhN2IxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmFjZjNlM2QtZDJkYy00ZDFmLTll MDItZTQwN2Q5ZjZhN2IxL2JhY2YzZTNkLWQyZGMtNGQxZi05ZTAyLWU0MDdkOWY2 YTdiMS5jcmwwHwYDVR0jBBgwFoAUMZH/v4mUBy3tLa+asZZgXRcOQ9EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYWNmM2UzZC1kMmRjLTRkMWYtOWUwMi1lNDA3 ZDlmNmE3YjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB7xJ8X16ZjBsONPOjEjWWE XmF1imTtHQWP+JrOQe9lVycRirNqMge3BD/zFCeFIDS1vC6bjqTWO5iktMs+dxBV yDLaPD6gft2HP40x6WU8pb8rzxjy0DuxyS+a2zUH/+5a5Dfhqc6wWmSzAaJTWqA+ UBxmk3jm04q34/KlxrBrr4JTuA2g021ycfENyNLO8ggriibt2ALshcvIwJDpVyhG 7vf/3ZZHJedP9Db0Kv8NBEtwYcbJC86A5S3AjLnvcRJWMYHaGh2L5IOTWUQB4JTY 7aux25CF4/+JgITVuCmFg6QTq07tOG8Nw7N36MMr/ko+JxqWNDIaLWTQ3Ui3ixLp -----END CERTIFICATE-----Generated at Tue Jul 1 14:01:26 2025 by rpki-client