$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705/bbe97a67-0973-4bfa-934d-628e0334b705.mft File: bbe97a67-0973-4bfa-934d-628e0334b705.mft (raw, json) Hash identifier: 5wJ7y5XbRCE8BKCI4+o7av/4EBsim4+vnNmUyZCPUH8= Subject key identifier: C4:DF:99:5C:CD:EB:4A:32:90:BD:B7:63:93:6C:8B:59:BC:87:B0:09 Authority key identifier: 85:D7:28:E1:02:6D:6C:2D:08:41:45:CA:19:40:EB:08:F7:21:B3:EE Certificate issuer: /CN=bbe97a67-0973-4bfa-934d-628e0334b705 Certificate serial: 010D0C9F4328584A73A972A2FDC620941B77B640 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705/bbe97a67-0973-4bfa-934d-628e0334b705.mft Manifest number: 010D0C9F432858488DC8AA46D73A71D1228429F3 Signing time: Tue 08 Jul 2025 16:00:03 +0000 Manifest this update: Tue 08 Jul 2025 16:00:03 +0000 Manifest next update: Fri 11 Jul 2025 16:00:00 +0000 Files and hashes: 1: 36900df0-0c64-38e9-a32b-d2bf819186c9.roa (hash: 1oiJ0SRS6bTbG5M7ReboRu1mvlNykauxmh7NiWPdQ8Y=) 2: bbe97a67-0973-4bfa-934d-628e0334b705.crl (hash: 8Ufq2SNED5TOM1PbfEIq0c0kBVIcl5QvS8N50P8y21w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705/bbe97a67-0973-4bfa-934d-628e0334b705.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705/bbe97a67-0973-4bfa-934d-628e0334b705.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:a9:72:a2:fd:c6:20:94:1b:77:b6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbe97a67-0973-4bfa-934d-628e0334b705 Validity Not Before: Jul 8 16:00:03 2025 GMT Not After : Jul 11 16:00:00 2025 GMT Subject: CN=01cb7a67-54b6-4de0-b185-06a1925cc563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f9:02:5c:38:b4:32:cd:52:c9:35:c1:86:5c: 43:a1:59:f1:cc:49:5e:d2:b2:22:32:72:3a:16:16: 2d:ca:22:91:c0:7a:34:31:0a:4d:fe:ec:23:73:4b: a4:87:3e:cb:a0:e1:d5:ca:46:46:f6:aa:71:b1:dd: 03:0c:fd:f1:1a:33:46:d6:08:77:ca:15:4e:41:ee: 82:10:04:04:f8:e1:0a:f0:fe:da:1e:df:69:c6:cf: 08:19:2a:18:e1:82:c1:2a:6b:7c:c6:c3:27:b5:ee: b2:9e:53:a0:79:21:a4:c3:7b:c9:89:07:03:1a:c0: 14:da:9a:15:f7:d7:b5:96:e9:58:5c:94:32:ce:ff: 27:c9:9c:2c:c0:2d:99:2a:96:8e:b7:94:0c:7e:69: 76:56:59:42:7e:21:24:ae:a2:9f:fc:5c:30:91:f0: c1:78:c4:06:62:b8:90:14:cd:a5:f9:1d:d2:ee:85: dd:44:9c:bd:bc:6f:f3:48:a4:23:26:85:aa:04:15: 66:ea:d7:f1:98:13:34:79:ef:94:c0:af:27:02:43: 28:f2:73:cf:e1:91:fd:7e:0e:0c:48:46:71:97:4e: 25:b9:78:05:78:83:a7:14:82:cf:b0:3c:49:82:cc: a4:bc:d2:ec:4a:07:b6:32:82:7d:6f:db:18:26:4d: b0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:DF:99:5C:CD:EB:4A:32:90:BD:B7:63:93:6C:8B:59:BC:87:B0:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705/bbe97a67-0973-4bfa-934d-628e0334b705.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705/bbe97a67-0973-4bfa-934d-628e0334b705.crl X509v3 Authority Key Identifier: keyid:85:D7:28:E1:02:6D:6C:2D:08:41:45:CA:19:40:EB:08:F7:21:B3:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:11:d4:81:ae:9b:ee:4d:82:ce:2a:92:01:3e:32:2c:75:e9: f1:36:15:ed:ea:4b:64:78:39:f8:d4:f9:44:92:2e:61:f9:4a: 4f:d9:8f:a2:3d:50:82:e1:25:d0:6b:eb:fb:7c:22:e0:85:43: e0:ad:0b:bf:cb:a8:21:f0:5e:36:3b:03:58:3e:e6:f5:25:68: 2f:f2:8b:8c:90:82:3d:dc:e6:d1:c6:b0:20:43:97:12:c5:cf: 8a:e8:bc:42:68:3c:ef:c2:3c:67:8b:80:1b:64:cb:4b:ea:6c: c3:26:aa:48:6c:f0:51:f0:82:8a:41:f0:c6:5c:77:af:3f:e8: e5:e0:d4:6f:6f:ea:72:4b:d8:33:af:a5:db:4d:c2:7f:fc:55: f2:79:94:ca:2c:d4:8a:0a:88:00:9b:3c:ac:22:fa:ff:eb:95: d7:c0:9e:6a:f9:da:de:96:4d:84:58:74:a6:1c:7d:06:4a:20: 35:a9:4f:f2:52:13:17:a8:5d:d3:33:1d:bf:d1:78:2f:52:1b: 4e:86:d8:c2:be:7d:24:12:ee:5c:61:64:88:14:48:9e:04:4a: 25:55:f7:c5:f3:00:6a:78:da:e4:1d:c7:fd:02:8f:4a:6a:cf: 68:0f:6b:6c:bf:17:74:64:83:63:92:e4:da:b7:44:fb:25:02: fa:e6:00:cf -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpzqXKi/cYglBt3tkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmJlOTdhNjctMDk3My00YmZhLTkzNGQtNjI4ZTAzMzRi NzA1MB4XDTI1MDcwODE2MDAwM1oXDTI1MDcxMTE2MDAwMFowLzEtMCsGA1UEAxMk MDFjYjdhNjctNTRiNi00ZGUwLWIxODUtMDZhMTkyNWNjNTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fkCXDi0Ms1SyTXBhlxDoVnxzEle0rIiMnI6 FhYtyiKRwHo0MQpN/uwjc0ukhz7LoOHVykZG9qpxsd0DDP3xGjNG1gh3yhVOQe6C EAQE+OEK8P7aHt9pxs8IGSoY4YLBKmt8xsMnte6ynlOgeSGkw3vJiQcDGsAU2poV 99e1lulYXJQyzv8nyZwswC2ZKpaOt5QMfml2VllCfiEkrqKf/FwwkfDBeMQGYriQ FM2l+R3S7oXdRJy9vG/zSKQjJoWqBBVm6tfxmBM0ee+UwK8nAkMo8nPP4ZH9fg4M SEZxl04luXgFeIOnFILPsDxJgsykvNLsSge2MoJ9b9sYJk2wQwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMTfmVzN60oykL23Y5Nsi1m8h7AJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iYmU5 N2E2Ny0wOTczLTRiZmEtOTM0ZC02MjhlMDMzNGI3MDUvYmJlOTdhNjctMDk3My00 YmZhLTkzNGQtNjI4ZTAzMzRiNzA1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYmJlOTdhNjctMDk3My00YmZhLTkz NGQtNjI4ZTAzMzRiNzA1L2JiZTk3YTY3LTA5NzMtNGJmYS05MzRkLTYyOGUwMzM0 YjcwNS5jcmwwHwYDVR0jBBgwFoAUhdco4QJtbC0IQUXKGUDrCPchs+4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iYmU5N2E2Ny0wOTczLTRiZmEtOTM0ZC02Mjhl MDMzNGI3MDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAuEdSBrpvuTYLOKpIBPjIs denxNhXt6ktkeDn41PlEki5h+UpP2Y+iPVCC4SXQa+v7fCLghUPgrQu/y6gh8F42 OwNYPub1JWgv8ouMkII93ObRxrAgQ5cSxc+K6LxCaDzvwjxni4AbZMtL6mzDJqpI bPBR8IKKQfDGXHevP+jl4NRvb+pyS9gzr6XbTcJ//FXyeZTKLNSKCogAmzysIvr/ 65XXwJ5q+drelk2EWHSmHH0GSiA1qU/yUhMXqF3TMx2/0XgvUhtOhtjCvn0kEu5c YWSIFEieBEolVffF8wBqeNrkHcf9Ao9Kas9oD2tsvxd0ZINjkuTat0T7JQL65gDP -----END CERTIFICATE-----Generated at Tue Jul 8 18:53:10 2025 by rpki-client