$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bf8147cb-8b3f-4540-bca2-54d1889c2c38/bf8147cb-8b3f-4540-bca2-54d1889c2c38.mft File: bf8147cb-8b3f-4540-bca2-54d1889c2c38.mft (raw, json) Hash identifier: TkAn5fikJbPwv6bKwsm+M6r8MNJorTpNTrPCtTQ1hSk= Subject key identifier: 4F:FA:22:E4:2A:06:39:30:F6:D5:A2:02:5F:52:9A:D3:6C:34:1C:4A Authority key identifier: CC:83:65:53:A9:A2:26:FA:C4:00:D5:2C:E1:EB:51:1B:77:39:CE:6D Certificate issuer: /CN=bf8147cb-8b3f-4540-bca2-54d1889c2c38 Certificate serial: 010D0C9F4328584BC057FE1292500C816D35C880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bf8147cb-8b3f-4540-bca2-54d1889c2c38.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bf8147cb-8b3f-4540-bca2-54d1889c2c38/bf8147cb-8b3f-4540-bca2-54d1889c2c38.mft Manifest number: 010D0C9F4328584073A827AB790AEA4DEF0B2F24 Signing time: Tue 04 Nov 2025 20:00:08 +0000 Manifest this update: Tue 04 Nov 2025 20:00:08 +0000 Manifest next update: Fri 07 Nov 2025 20:00:00 +0000 Files and hashes: 1: bf8147cb-8b3f-4540-bca2-54d1889c2c38.crl (hash: p4Fe7N8dO+5tvzVzjq52nxTUemxC7LpMgX+jL5nawYs=) 2: c0835dea-69af-310b-88d8-d53e14010fd6.roa (hash: s6QXJw8MIgipBosKNdqUnsQZhxiVjUAAi8fsoYdIBxI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bf8147cb-8b3f-4540-bca2-54d1889c2c38/bf8147cb-8b3f-4540-bca2-54d1889c2c38.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bf8147cb-8b3f-4540-bca2-54d1889c2c38/bf8147cb-8b3f-4540-bca2-54d1889c2c38.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bf8147cb-8b3f-4540-bca2-54d1889c2c38.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:57:fe:12:92:50:0c:81:6d:35:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf8147cb-8b3f-4540-bca2-54d1889c2c38 Validity Not Before: Nov 4 20:00:08 2025 GMT Not After : Nov 7 20:00:00 2025 GMT Subject: CN=bb45dc42-3b12-4be5-909f-b082d2e9b68a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:93:c9:e4:d0:b4:0a:29:c2:68:27:ec:cc:b9: ec:4d:a4:ce:c5:01:9b:c2:37:bc:1d:b9:88:ee:cf: 49:47:94:d3:2b:3d:17:f8:0c:aa:04:a6:2b:b0:58: c3:8b:4b:df:f6:b2:d8:7c:17:fa:20:72:b8:e0:9b: 0d:c6:28:00:4f:55:85:23:44:ad:37:41:72:c7:e7: ee:2a:d1:05:7a:b5:6b:51:f8:fb:93:97:b8:42:d1: cf:81:fc:42:69:df:68:8d:0a:d3:77:28:88:2c:fb: 82:8d:32:57:44:3d:4e:b5:b7:2c:8f:ce:c1:01:2d: f1:d9:80:1f:40:47:b2:f9:47:5f:24:d6:ff:dd:50: 90:67:a0:f9:98:97:77:5f:02:1a:d1:9c:f5:94:fb: fe:e2:b2:f4:7f:99:0c:20:1b:8d:96:d6:ce:33:53: a1:97:95:60:56:0c:f3:f5:4c:ae:ca:77:35:a9:90: ff:39:8c:02:a0:c0:ca:bd:95:77:d6:b5:2c:83:aa: 86:76:e9:4b:2f:e5:4b:0e:03:29:c3:8c:b3:45:2c: 99:68:f6:0d:37:fb:6e:ac:00:0b:b4:f7:d8:b0:5c: d5:f7:ec:b8:b6:97:d4:86:01:99:56:eb:06:c8:3a: dc:0e:31:f7:d9:1b:86:a7:6f:9c:e9:ea:5b:a2:12: 29:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:FA:22:E4:2A:06:39:30:F6:D5:A2:02:5F:52:9A:D3:6C:34:1C:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bf8147cb-8b3f-4540-bca2-54d1889c2c38/bf8147cb-8b3f-4540-bca2-54d1889c2c38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bf8147cb-8b3f-4540-bca2-54d1889c2c38/bf8147cb-8b3f-4540-bca2-54d1889c2c38.crl X509v3 Authority Key Identifier: keyid:CC:83:65:53:A9:A2:26:FA:C4:00:D5:2C:E1:EB:51:1B:77:39:CE:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bf8147cb-8b3f-4540-bca2-54d1889c2c38.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:26:c3:f9:25:79:6a:79:07:b8:6e:0c:a3:cf:9f:f8:45:f7: 0f:17:9f:30:3b:65:01:2e:bd:b6:53:22:a0:e8:71:82:71:e6: 0e:14:31:ff:d5:21:a0:07:0f:b1:4a:98:f7:e9:3f:e5:12:71: 13:38:ed:15:73:30:e5:6d:31:27:e2:0c:ad:56:ca:22:09:af: f5:ef:c9:8f:1c:30:77:b3:0b:7c:e9:b9:ac:38:bb:16:93:bc: 59:0a:d1:72:bb:c0:5c:2b:bd:d9:db:9b:ed:19:9e:45:03:ee: 1b:08:50:ba:8c:8f:05:37:f4:57:c9:ec:56:a1:6a:5b:94:7a: ea:d8:2a:2f:6f:68:89:79:62:61:b8:71:d3:ff:ca:59:da:01: ef:e8:47:94:39:97:b6:f2:91:16:5d:1c:af:d2:fe:ff:e9:13: dd:d0:d0:60:9a:d1:c0:be:c7:d7:43:d6:17:0a:c0:2e:3e:b6: f4:27:60:9b:72:97:16:35:c7:71:9a:69:d5:80:da:62:02:f0: aa:e8:2f:74:40:01:a7:0b:21:b0:4f:48:90:f4:91:c2:3c:a8: c3:2b:fb:10:f8:2e:5f:45:c9:ec:45:10:05:0a:00:3b:20:df: c7:6d:d1:c8:48:66:28:4b:d4:67:e5:40:9d:40:0b:0c:42:56: b8:da:51:32 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAV/4SklAMgW01yIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY4MTQ3Y2ItOGIzZi00NTQwLWJjYTItNTRkMTg4OWMy YzM4MB4XDTI1MTEwNDIwMDAwOFoXDTI1MTEwNzIwMDAwMFowLzEtMCsGA1UEAxMk YmI0NWRjNDItM2IxMi00YmU1LTkwOWYtYjA4MmQyZTliNjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5PJ5NC0CinCaCfszLnsTaTOxQGbwje8HbmI 7s9JR5TTKz0X+AyqBKYrsFjDi0vf9rLYfBf6IHK44JsNxigAT1WFI0StN0Fyx+fu KtEFerVrUfj7k5e4QtHPgfxCad9ojQrTdyiILPuCjTJXRD1Otbcsj87BAS3x2YAf QEey+UdfJNb/3VCQZ6D5mJd3XwIa0Zz1lPv+4rL0f5kMIBuNltbOM1Ohl5VgVgzz 9Uyuync1qZD/OYwCoMDKvZV31rUsg6qGdulLL+VLDgMpw4yzRSyZaPYNN/turAAL tPfYsFzV9+y4tpfUhgGZVusGyDrcDjH32RuGp2+c6epbohIpgQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFE/6IuQqBjkw9tWiAl9SmtNsNBxKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iZjgx NDdjYi04YjNmLTQ1NDAtYmNhMi01NGQxODg5YzJjMzgvYmY4MTQ3Y2ItOGIzZi00 NTQwLWJjYTItNTRkMTg4OWMyYzM4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmY4MTQ3Y2ItOGIzZi00NTQwLWJj YTItNTRkMTg4OWMyYzM4L2JmODE0N2NiLThiM2YtNDU0MC1iY2EyLTU0ZDE4ODlj MmMzOC5jcmwwHwYDVR0jBBgwFoAUzINlU6miJvrEANUs4etRG3c5zm0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iZjgxNDdjYi04YjNmLTQ1NDAtYmNhMi01NGQx ODg5YzJjMzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA3JsP5JXlqeQe4bgyjz5/4 RfcPF58wO2UBLr22UyKg6HGCceYOFDH/1SGgBw+xSpj36T/lEnETOO0VczDlbTEn 4gytVsoiCa/178mPHDB3swt86bmsOLsWk7xZCtFyu8BcK73Z25vtGZ5FA+4bCFC6 jI8FN/RXyexWoWpblHrq2Covb2iJeWJhuHHT/8pZ2gHv6EeUOZe28pEWXRyv0v7/ 6RPd0NBgmtHAvsfXQ9YXCsAuPrb0J2CbcpcWNcdxmmnVgNpiAvCq6C90QAGnCyGw T0iQ9JHCPKjDK/sQ+C5fRcnsRRAFCgA7IN/HbdHISGYoS9Rn5UCdQAsMQla42lEy -----END CERTIFICATE-----Generated at Tue Nov 4 21:33:58 2025 by rpki-client