$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf23e246-3039-40e8-b878-ea33708da258/bf23e246-3039-40e8-b878-ea33708da258.mft File: bf23e246-3039-40e8-b878-ea33708da258.mft (raw, json) Hash identifier: HoZ/B9Ki/0SJY+PTZ/B92fBBrZXbOg6+2M3DRRAhAxM= Subject key identifier: 4F:60:CD:2B:E5:F1:35:52:CB:92:A1:79:16:33:57:D2:56:C5:EA:22 Authority key identifier: 90:2F:04:A5:F9:B8:C4:E2:08:CD:15:55:48:55:39:78:61:8D:D8:70 Certificate issuer: /CN=bf23e246-3039-40e8-b878-ea33708da258 Certificate serial: 010D0C9F4328584AEAE467774AA53A6AD7743E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf23e246-3039-40e8-b878-ea33708da258.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf23e246-3039-40e8-b878-ea33708da258/bf23e246-3039-40e8-b878-ea33708da258.mft Manifest number: 010D0C9F432858470916CBE02DC0FE13993311AD Signing time: Wed 20 Aug 2025 09:00:03 +0000 Manifest this update: Wed 20 Aug 2025 09:00:03 +0000 Manifest next update: Sat 23 Aug 2025 09:00:00 +0000 Files and hashes: 1: bf23e246-3039-40e8-b878-ea33708da258.crl (hash: wseg8eUeMiF/mYcOpEomqdCujjRnU4QalhN8c4jUYvU=) 2: d56b59fc-80de-3c0a-aa9b-61de5109062f.roa (hash: b6BZ+ja0O80ayhaNAMOtteLdGQUCwkB0DszqRRZAs8g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf23e246-3039-40e8-b878-ea33708da258/bf23e246-3039-40e8-b878-ea33708da258.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf23e246-3039-40e8-b878-ea33708da258/bf23e246-3039-40e8-b878-ea33708da258.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf23e246-3039-40e8-b878-ea33708da258.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ea:e4:67:77:4a:a5:3a:6a:d7:74:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf23e246-3039-40e8-b878-ea33708da258 Validity Not Before: Aug 20 09:00:03 2025 GMT Not After : Aug 23 09:00:00 2025 GMT Subject: CN=324daffb-6727-48ec-a860-a6d328653fa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:10:f8:8a:68:6f:fd:47:61:d2:c1:4b:62:bf: cb:6b:25:7f:7b:a1:98:9b:d0:aa:6a:43:02:d3:1f: 73:4e:55:e6:19:d2:3f:d2:51:75:3b:b9:f2:f6:23: 9c:16:a3:9c:16:52:19:07:61:0e:21:5b:c2:77:2d: ac:0c:13:7f:d3:85:3b:60:fc:bc:08:37:ac:4d:1d: a5:ce:71:e1:f2:99:d4:d9:a6:01:aa:a2:66:ca:40: 63:4e:2c:f4:2d:85:f0:af:69:08:08:79:e3:d7:07: ed:33:e6:f6:67:47:ae:f3:60:a8:19:89:ef:7d:8e: d5:37:91:78:70:a3:0f:4c:ac:c2:da:da:0f:cb:05: c9:e7:38:b3:86:f1:38:8c:33:50:a7:92:92:9e:a8: 68:da:c9:8a:0f:d8:60:85:6e:e6:fc:71:ed:85:b4: c3:57:fd:b0:35:54:5a:ce:85:17:f9:b0:10:4d:2c: c9:60:fe:6c:bc:f0:f5:5f:f8:df:a3:e2:16:51:d1: 55:fe:93:5d:d1:e8:60:e7:7f:1b:3e:2a:f2:bb:ed: 88:a3:a8:73:26:eb:0a:b8:8c:d0:7a:ad:3f:33:d0: f3:51:29:31:e2:a7:ed:00:c0:49:b9:10:73:76:05: 0b:34:ea:84:ba:88:0b:a8:56:bb:ec:ac:94:3c:e8: eb:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:60:CD:2B:E5:F1:35:52:CB:92:A1:79:16:33:57:D2:56:C5:EA:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf23e246-3039-40e8-b878-ea33708da258/bf23e246-3039-40e8-b878-ea33708da258.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf23e246-3039-40e8-b878-ea33708da258/bf23e246-3039-40e8-b878-ea33708da258.crl X509v3 Authority Key Identifier: keyid:90:2F:04:A5:F9:B8:C4:E2:08:CD:15:55:48:55:39:78:61:8D:D8:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf23e246-3039-40e8-b878-ea33708da258.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:e4:0d:ea:6c:8c:bd:d0:38:64:95:97:34:35:88:57:83:30: 75:87:a2:d7:b9:2c:ca:5b:c5:af:02:bd:c4:2c:c0:c5:da:ab: e9:01:cc:f0:6d:81:e5:b9:1d:73:fe:25:7e:c5:5f:e0:ca:ab: 4e:a5:9f:0f:8b:ed:55:c1:a9:dc:50:a3:85:e2:5a:71:fc:5c: 82:5a:0b:4c:34:43:4d:57:97:b7:54:f9:78:7a:ee:86:e5:5e: 68:f4:ea:52:94:c2:64:f6:d5:b1:1f:12:db:fc:11:0a:42:39: 12:71:bc:42:15:c0:7d:a3:76:b8:4b:85:94:a6:47:96:a5:f5: 22:87:77:90:0c:fa:0b:40:99:6d:31:d9:25:84:78:7c:ff:7b: 46:c0:88:7f:5f:55:67:d4:30:9b:34:ee:d8:96:21:b4:fa:00: b5:9d:dc:97:33:e0:40:7f:7c:dc:6d:89:07:95:55:c3:8e:eb: c4:2f:ad:03:21:89:a8:b8:a6:f1:d1:43:b9:69:22:95:da:95: 78:e2:ab:52:8b:f1:37:17:20:1a:6a:a9:da:b6:a8:46:84:d3: 95:65:70:49:b3:34:38:6e:f1:81:97:81:26:37:f2:1b:65:41: c5:c2:2d:f0:93:e4:e8:7c:0c:06:86:22:44:cb:13:b5:0f:de: 61:98:63:3f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErq5Gd3SqU6atd0PoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYyM2UyNDYtMzAzOS00MGU4LWI4NzgtZWEzMzcwOGRh MjU4MB4XDTI1MDgyMDA5MDAwM1oXDTI1MDgyMzA5MDAwMFowLzEtMCsGA1UEAxMk MzI0ZGFmZmItNjcyNy00OGVjLWE4NjAtYTZkMzI4NjUzZmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRD4imhv/Udh0sFLYr/LayV/e6GYm9CqakMC 0x9zTlXmGdI/0lF1O7ny9iOcFqOcFlIZB2EOIVvCdy2sDBN/04U7YPy8CDesTR2l znHh8pnU2aYBqqJmykBjTiz0LYXwr2kICHnj1wftM+b2Z0eu82CoGYnvfY7VN5F4 cKMPTKzC2toPywXJ5zizhvE4jDNQp5KSnqho2smKD9hghW7m/HHthbTDV/2wNVRa zoUX+bAQTSzJYP5svPD1X/jfo+IWUdFV/pNd0ehg538bPiryu+2Io6hzJusKuIzQ eq0/M9DzUSkx4qftAMBJuRBzdgULNOqEuogLqFa77KyUPOjr2QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFE9gzSvl8TVSy5KheRYzV9JWxeoiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iZjIz ZTI0Ni0zMDM5LTQwZTgtYjg3OC1lYTMzNzA4ZGEyNTgvYmYyM2UyNDYtMzAzOS00 MGU4LWI4NzgtZWEzMzcwOGRhMjU4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmYyM2UyNDYtMzAzOS00MGU4LWI4 NzgtZWEzMzcwOGRhMjU4L2JmMjNlMjQ2LTMwMzktNDBlOC1iODc4LWVhMzM3MDhk YTI1OC5jcmwwHwYDVR0jBBgwFoAUkC8Epfm4xOIIzRVVSFU5eGGN2HAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iZjIzZTI0Ni0zMDM5LTQwZTgtYjg3OC1lYTMz NzA4ZGEyNTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAa5A3qbIy90DhklZc0NYhX gzB1h6LXuSzKW8WvAr3ELMDF2qvpAczwbYHluR1z/iV+xV/gyqtOpZ8Pi+1Vwanc UKOF4lpx/FyCWgtMNENNV5e3VPl4eu6G5V5o9OpSlMJk9tWxHxLb/BEKQjkScbxC FcB9o3a4S4WUpkeWpfUih3eQDPoLQJltMdklhHh8/3tGwIh/X1Vn1DCbNO7YliG0 +gC1ndyXM+BAf3zcbYkHlVXDjuvEL60DIYmouKbx0UO5aSKV2pV44qtSi/E3FyAa aqnatqhGhNOVZXBJszQ4bvGBl4EmN/IbZUHFwi3wk+TofAwGhiJEyxO1D95hmGM/ -----END CERTIFICATE-----Generated at Wed Aug 20 13:16:01 2025 by rpki-client