$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft File: bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft (raw, json) Hash identifier: ahGV4M2lj7DEbhA+W1k6FT9a2/IQ1jQGhqvDQq4y6wg= Subject key identifier: 07:8F:86:C6:58:96:B6:E6:28:29:A5:F9:62:96:E7:A2:C3:15:91:24 Authority key identifier: BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F Certificate issuer: /CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494 Certificate serial: 010D0C9F4328584AEB794BB738F2C93675142040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft Manifest number: 010D0C9F4328584073A8581DA0CBF23298DB1EA9 Signing time: Wed 20 Aug 2025 14:00:03 +0000 Manifest this update: Wed 20 Aug 2025 14:00:03 +0000 Manifest next update: Fri 22 Aug 2025 14:00:00 +0000 Files and hashes: 1: 8b5b3f60-d94d-3b96-bd51-7ecef919a034.roa (hash: fOYzqhkRBiOUKvRCdI+/P/0VXM9H5XqF20zG+g6wLjg=) 2: bb760eff-5d50-348f-809c-0dc1a1c253a5.roa (hash: 6uSXlbcYc03Q1iqM98Y0EuHA3+TxbxzYKde/35s+qys=) 3: bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl (hash: tpOJqLThvL2fkMzCODWROBhQzVCk2eDlsmaZ8GzeA9g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:79:4b:b7:38:f2:c9:36:75:14:20:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494 Validity Not Before: Aug 20 14:00:03 2025 GMT Not After : Aug 22 14:00:00 2025 GMT Subject: CN=7dd89994-bbed-481f-9117-0c4c107c5254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8a:7a:e5:b2:14:bf:e9:4c:9b:f1:f0:3a:50: 5b:f3:33:61:87:e1:e0:19:71:8c:17:28:91:59:28: ec:a0:32:b7:dd:ec:b0:ff:0c:3d:59:a4:02:6d:08: 36:5d:5d:77:84:d1:3a:84:86:9e:3f:9b:5d:aa:c5: 85:88:3e:f3:7b:a6:5c:11:48:03:e0:b9:7c:b4:54: 0b:f3:e4:4b:67:cd:aa:7b:b3:76:ca:5f:1f:40:d8: 20:82:3d:7e:30:63:e4:a4:c1:9c:e9:37:2d:0c:c7: 35:30:79:4a:fe:fa:41:ea:6b:e1:d2:1b:a1:6f:0e: 8f:b7:b0:ea:ef:ac:e0:16:7a:9f:9b:9f:69:c3:a2: 00:1e:b9:2f:6a:c4:8a:36:bd:db:14:67:3c:4e:5b: 92:e5:cf:44:bb:40:40:09:78:a4:4e:90:ab:8d:76: 9a:8d:98:ae:3a:5a:a1:81:23:65:0b:fe:f6:fb:92: 2a:24:db:3e:11:bf:e4:28:c6:49:12:42:52:f7:f7: 71:3c:cd:43:96:18:23:37:d3:98:af:69:34:18:bb: 14:0a:67:e1:94:23:88:56:88:59:13:35:a2:79:58: 4c:61:da:e4:fd:13:5d:2c:7f:2d:11:21:00:41:8b: ef:c4:01:c9:92:6b:84:5b:07:60:01:d5:61:37:86: fa:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:8F:86:C6:58:96:B6:E6:28:29:A5:F9:62:96:E7:A2:C3:15:91:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl X509v3 Authority Key Identifier: keyid:BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:e6:df:87:13:a6:75:b1:50:2a:8a:e3:82:a5:96:3c:7a:e1: df:aa:0f:4a:93:77:3f:62:1b:b2:21:0c:bc:72:f9:6d:da:6b: f1:07:53:af:bb:09:75:f8:d6:d6:2f:2e:82:71:4d:de:43:8e: 30:41:6e:61:b3:d2:5a:e7:bb:7c:0c:5a:42:66:21:f2:9d:4e: 41:cb:02:85:bb:12:d8:a3:ca:73:60:e7:72:53:4f:b6:da:2b: 3c:0b:5a:aa:14:92:92:72:93:f6:be:3f:f8:12:36:f0:b0:47: 0d:21:2f:01:f3:d0:5a:7e:6e:b2:12:a8:ef:4a:20:5a:02:ff: 11:89:db:3d:50:d9:d8:5d:f3:52:ee:be:18:6b:fe:ac:5a:b0: 26:29:da:34:d1:3b:df:21:2f:33:92:62:c4:e5:ef:13:e4:67: ce:b3:b2:09:fb:1d:e7:cf:67:c2:48:c6:7d:96:8b:c6:ee:4a: 52:93:24:cf:8d:39:56:b4:ba:d2:69:c1:3e:b8:95:5a:c1:85: 47:f9:80:4d:35:73:fe:16:20:3f:48:8e:3e:21:7e:0e:87:04: 85:71:66:1f:81:06:58:31:35:c1:28:e7:f0:a7:5a:2a:1e:64: 21:98:5d:23:12:b4:2c:64:5f:c1:3d:a6:ff:f3:e0:70:34:c8: b4:72:f3:d6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErreUu3OPLJNnUUIEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYzYzNiZDUtM2I5NC00N2UyLTgxZmMtZjQ5MDA4MTRl NDk0MB4XDTI1MDgyMDE0MDAwM1oXDTI1MDgyMjE0MDAwMFowLzEtMCsGA1UEAxMk N2RkODk5OTQtYmJlZC00ODFmLTkxMTctMGM0YzEwN2M1MjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIp65bIUv+lMm/HwOlBb8zNhh+HgGXGMFyiR WSjsoDK33eyw/ww9WaQCbQg2XV13hNE6hIaeP5tdqsWFiD7ze6ZcEUgD4Ll8tFQL 8+RLZ82qe7N2yl8fQNgggj1+MGPkpMGc6TctDMc1MHlK/vpB6mvh0huhbw6Pt7Dq 76zgFnqfm59pw6IAHrkvasSKNr3bFGc8TluS5c9Eu0BACXikTpCrjXaajZiuOlqh gSNlC/72+5IqJNs+Eb/kKMZJEkJS9/dxPM1DlhgjN9OYr2k0GLsUCmfhlCOIVohZ EzWieVhMYdrk/RNdLH8tESEAQYvvxAHJkmuEWwdgAdVhN4b65QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAePhsZYlrbmKCml+WKW56LDFZEkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjNj M2JkNS0zYjk0LTQ3ZTItODFmYy1mNDkwMDgxNGU0OTQvYmYzYzNiZDUtM2I5NC00 N2UyLTgxZmMtZjQ5MDA4MTRlNDk0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmYzYzNiZDUtM2I5NC00N2UyLTgx ZmMtZjQ5MDA4MTRlNDk0L2JmM2MzYmQ1LTNiOTQtNDdlMi04MWZjLWY0OTAwODE0 ZTQ5NC5jcmwwHwYDVR0jBBgwFoAUv27gzbQvdJZGDC7Ndgx/FlpcgW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjNjM2JkNS0zYjk0LTQ3ZTItODFmYy1mNDkw MDgxNGU0OTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB85t+HE6Z1sVAqiuOCpZY8 euHfqg9Kk3c/YhuyIQy8cvlt2mvxB1Ovuwl1+NbWLy6CcU3eQ44wQW5hs9Ja57t8 DFpCZiHynU5BywKFuxLYo8pzYOdyU0+22is8C1qqFJKScpP2vj/4EjbwsEcNIS8B 89Bafm6yEqjvSiBaAv8Rids9UNnYXfNS7r4Ya/6sWrAmKdo00TvfIS8zkmLE5e8T 5GfOs7IJ+x3nz2fCSMZ9lovG7kpSkyTPjTlWtLrSacE+uJVawYVH+YBNNXP+FiA/ SI4+IX4OhwSFcWYfgQZYMTXBKOfwp1oqHmQhmF0jErQsZF/BPab/8+BwNMi0cvPW -----END CERTIFICATE-----Generated at Wed Aug 20 21:29:12 2025 by rpki-client