$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.mft File: ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.mft (raw, json) Hash identifier: jC0ZJE5q4mWkpO1f+LEs7u8sTZKatxoztorYsEBDim0= Subject key identifier: A6:88:55:14:41:67:AB:5E:BA:86:79:9D:10:BA:E2:88:4E:F8:12:0F Authority key identifier: E8:1E:15:0B:75:76:40:58:B6:9A:14:2D:A7:91:10:D7:B8:85:D2:DD Certificate issuer: /CN=ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7 Certificate serial: 010D0C9F4328584BBDE69A2BB5555B71B14DC800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.mft Manifest number: 010D0C9F4328584A04D37939CAB001ACD19ABC24 Signing time: Mon 03 Nov 2025 23:00:03 +0000 Manifest this update: Mon 03 Nov 2025 23:00:03 +0000 Manifest next update: Thu 06 Nov 2025 23:00:00 +0000 Files and hashes: 1: 2145dd7e-ab65-3c98-bc0d-77196940761e.roa (hash: 0d/IegpviOk65lO4euoOgT3CGcSfFQlcuoGEU077SXY=) 2: a5aae8bc-a6ed-382f-af18-c5e191e02393.roa (hash: ga9JQIZqENXGUpL9oEj1zvGO1Ccc4E+yR6kdU0kljFo=) 3: ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.crl (hash: 9K/NlvwMLcyouO/ro2sZNB1zOheP0gNAd2dXnZET09U=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bd:e6:9a:2b:b5:55:5b:71:b1:4d:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7 Validity Not Before: Nov 3 23:00:03 2025 GMT Not After : Nov 6 23:00:00 2025 GMT Subject: CN=5a2684e6-1338-427a-9719-06c2614b88ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8f:22:ed:17:e2:53:ca:b3:c4:d6:d8:73:3d: 55:bd:3b:97:b4:fa:55:cd:b4:3d:e9:8b:f7:aa:a9: 8a:22:25:00:0e:d6:08:57:39:d0:bc:e8:cf:a4:7b: ed:dd:97:6d:23:a9:91:66:8e:48:5c:79:6e:83:76: e5:d9:e7:49:69:3e:b1:aa:04:35:8e:0f:4f:db:d4: 98:51:c4:c3:e1:f0:76:48:fa:1e:6b:6c:06:64:e7: 78:85:35:4d:d4:c7:56:4e:75:22:0b:8b:09:37:36: c7:ac:33:9f:16:5d:af:74:bc:c6:2d:cd:48:2b:9d: 89:ee:9f:89:76:fd:d9:63:a2:d5:ed:64:ca:e0:73: 32:72:e2:0e:d7:6f:c0:1e:fb:7f:f3:20:df:e6:46: 71:be:24:eb:d9:45:f6:d4:86:87:37:bd:1f:b6:a5: 2c:6d:3f:f9:fe:a1:cf:af:c9:aa:d9:87:29:2d:a6: 0a:f1:e9:0a:04:45:5e:aa:74:f9:a6:43:68:84:ae: 37:03:24:95:ae:28:10:a6:93:82:6d:06:f8:a8:ce: bd:32:d5:5e:77:6e:e1:f6:bd:42:a6:65:d5:5f:ac: c3:1b:bc:79:2c:b5:df:5f:7d:14:74:28:ec:6f:18: d0:0e:b4:87:b9:9b:c2:fb:bb:01:23:17:1f:50:0b: ff:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:88:55:14:41:67:AB:5E:BA:86:79:9D:10:BA:E2:88:4E:F8:12:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.crl X509v3 Authority Key Identifier: keyid:E8:1E:15:0B:75:76:40:58:B6:9A:14:2D:A7:91:10:D7:B8:85:D2:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:3f:c7:7e:70:d4:58:2e:af:84:e9:65:9a:61:45:66:14:2f: 1e:18:07:a2:54:76:05:05:be:a7:40:23:62:bb:d8:da:ca:0d: 28:98:4f:31:23:b0:11:cc:bd:40:2e:ac:e9:48:28:75:ac:3b: cb:e6:88:d6:83:6b:3e:ca:ef:65:6b:2d:67:c9:80:df:23:b1: 8d:01:00:f8:92:b1:68:03:4a:f2:71:f3:d8:08:a8:f7:67:7d: dd:21:5f:a7:5a:22:a0:9e:76:f0:fd:5b:1d:e1:af:09:8a:32: 16:0c:0e:b9:ed:fe:77:79:d9:a2:b9:14:48:96:97:6c:4f:5e: 00:60:1f:49:d1:72:56:5d:c6:be:0c:6f:cd:30:19:d3:a3:01: be:71:8d:a1:55:c3:c1:3d:20:a7:77:0d:59:6e:64:f7:b1:e2: de:9b:2d:bc:c4:f2:d9:bb:c8:57:aa:1f:f9:c8:30:c9:06:09: fd:17:5b:9d:57:a8:02:fe:e5:43:a7:41:9e:4d:6f:57:e6:b8: 4d:e0:2b:9a:12:93:85:5c:25:8f:0f:ec:24:f9:6c:09:3c:8a: 7c:19:16:1b:97:17:d8:94:6c:58:ab:f0:52:6e:c6:b7:48:48: 25:df:3c:c2:63:08:22:a8:6e:6a:b9:67:d5:b1:26:68:88:0f: 26:a9:28:26 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu95portVVbcbFNyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEzNjhkYzItZGQ4YS00MGQyLWJjNTMtMGZlODdlOWQ5 ZGQ3MB4XDTI1MTEwMzIzMDAwM1oXDTI1MTEwNjIzMDAwMFowLzEtMCsGA1UEAxMk NWEyNjg0ZTYtMTMzOC00MjdhLTk3MTktMDZjMjYxNGI4OGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY8i7RfiU8qzxNbYcz1VvTuXtPpVzbQ96Yv3 qqmKIiUADtYIVznQvOjPpHvt3ZdtI6mRZo5IXHlug3bl2edJaT6xqgQ1jg9P29SY UcTD4fB2SPoea2wGZOd4hTVN1MdWTnUiC4sJNzbHrDOfFl2vdLzGLc1IK52J7p+J dv3ZY6LV7WTK4HMycuIO12/AHvt/8yDf5kZxviTr2UX21IaHN70ftqUsbT/5/qHP r8mq2YcpLaYK8ekKBEVeqnT5pkNohK43AySVrigQppOCbQb4qM69MtVed27h9r1C pmXVX6zDG7x5LLXfX30UdCjsbxjQDrSHuZvC+7sBIxcfUAv/VQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKaIVRRBZ6teuoZ5nRC64ohO+BIPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iYTM2 OGRjMi1kZDhhLTQwZDItYmM1My0wZmU4N2U5ZDlkZDcvYmEzNjhkYzItZGQ4YS00 MGQyLWJjNTMtMGZlODdlOWQ5ZGQ3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYmEzNjhkYzItZGQ4YS00MGQyLWJj NTMtMGZlODdlOWQ5ZGQ3L2JhMzY4ZGMyLWRkOGEtNDBkMi1iYzUzLTBmZTg3ZTlk OWRkNy5jcmwwHwYDVR0jBBgwFoAU6B4VC3V2QFi2mhQtp5EQ17iF0t0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iYTM2OGRjMi1kZDhhLTQwZDItYmM1My0wZmU4 N2U5ZDlkZDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA6P8d+cNRYLq+E6WWaYUVm FC8eGAeiVHYFBb6nQCNiu9jayg0omE8xI7ARzL1ALqzpSCh1rDvL5ojWg2s+yu9l ay1nyYDfI7GNAQD4krFoA0rycfPYCKj3Z33dIV+nWiKgnnbw/Vsd4a8JijIWDA65 7f53edmiuRRIlpdsT14AYB9J0XJWXca+DG/NMBnTowG+cY2hVcPBPSCndw1ZbmT3 seLemy28xPLZu8hXqh/5yDDJBgn9F1udV6gC/uVDp0GeTW9X5rhN4CuaEpOFXCWP D+wk+WwJPIp8GRYblxfYlGxYq/BSbsa3SEgl3zzCYwgiqG5quWfVsSZoiA8mqSgm -----END CERTIFICATE-----Generated at Tue Nov 4 01:06:44 2025 by rpki-client