$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/bdd46844-e081-4813-bfe2-0cfbeac92e08.mft File: bdd46844-e081-4813-bfe2-0cfbeac92e08.mft (raw, json) Hash identifier: yW02as+mlpRF2AznKiJPWXmegKy+n+0KH6yJTLzjSG8= Subject key identifier: 24:B0:FB:BF:95:DD:91:DB:3F:EE:52:BD:13:11:04:78:3F:D2:A8:AB Authority key identifier: FF:99:49:19:84:88:39:A6:03:55:7D:CC:8A:2D:A2:C6:77:B4:D5:B4 Certificate issuer: /CN=bdd46844-e081-4813-bfe2-0cfbeac92e08 Certificate serial: 010D0C9F4328584BBEF29C4C8A804514D6DEB380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/bdd46844-e081-4813-bfe2-0cfbeac92e08.mft Manifest number: 010D0C9F43285847DD1E0E87BACD33374237B80D Signing time: Tue 04 Nov 2025 08:00:03 +0000 Manifest this update: Tue 04 Nov 2025 08:00:03 +0000 Manifest next update: Fri 07 Nov 2025 08:00:00 +0000 Files and hashes: 1: bdd46844-e081-4813-bfe2-0cfbeac92e08.crl (hash: lIP4PnZtU0JvT8s3ApEQaSYdt5k8064J6PPXsaULyQk=) 2: ca4eafff-9365-3068-b787-140215783a30.roa (hash: Pk2iHWmbdccv1GkUBR62Zu+hkhuOyxHc9Hz5AGNnQ30=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/bdd46844-e081-4813-bfe2-0cfbeac92e08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/bdd46844-e081-4813-bfe2-0cfbeac92e08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:f2:9c:4c:8a:80:45:14:d6:de:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd46844-e081-4813-bfe2-0cfbeac92e08 Validity Not Before: Nov 4 08:00:03 2025 GMT Not After : Nov 7 08:00:00 2025 GMT Subject: CN=19e19971-281d-42cf-9bdf-ca13fe310e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:df:1b:94:2c:67:35:00:b9:31:f5:e0:32:25: a7:7c:9b:bb:c5:e8:77:70:8c:98:e7:d1:aa:77:fd: 36:02:ca:a0:25:f4:af:3e:0a:0a:c9:25:7e:77:69: c5:90:f7:24:5a:ee:05:86:52:2d:3c:59:e2:d7:ab: 79:95:bc:0b:6e:7d:83:99:79:ae:11:c2:67:ab:e7: 63:53:f9:b4:c9:31:77:35:0c:0f:3f:c6:43:f8:74: 06:98:cf:83:11:53:b4:bb:f8:a5:38:85:98:16:28: 5f:d6:d7:ad:9c:d7:f4:8e:78:42:67:62:6e:48:8c: dd:bc:de:25:05:ae:88:e2:66:a5:3d:2f:d5:a7:82: 52:63:b3:2b:e7:12:52:98:23:73:46:26:da:8a:99: fb:bf:47:d4:33:46:67:c6:41:db:3d:ab:d5:f4:24: 47:c3:dc:3b:fd:0c:dd:78:c3:d3:c5:e8:ef:51:fa: d2:e9:25:d3:7b:00:fb:22:97:67:80:36:86:81:b1: fb:0d:7c:17:2e:58:e8:c0:fc:c9:bc:87:e9:78:46: 27:ec:dc:2f:7b:52:84:d9:d0:92:a5:6b:b2:0f:f2: b0:66:c7:0c:cd:ee:f1:84:ca:a3:fb:84:6a:89:cd: a2:55:8b:6e:0f:5f:44:23:e9:1d:57:fe:0a:f6:cd: b9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:B0:FB:BF:95:DD:91:DB:3F:EE:52:BD:13:11:04:78:3F:D2:A8:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/bdd46844-e081-4813-bfe2-0cfbeac92e08.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/bdd46844-e081-4813-bfe2-0cfbeac92e08.crl X509v3 Authority Key Identifier: keyid:FF:99:49:19:84:88:39:A6:03:55:7D:CC:8A:2D:A2:C6:77:B4:D5:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:d1:e7:b4:9a:1f:95:0f:6e:df:1b:ca:dd:b6:3f:b2:e6:2a: 3a:b7:15:b3:b9:77:c9:f0:a6:f2:23:83:d3:53:f4:ed:2a:14: ab:67:b5:b5:86:81:7c:5f:17:44:a3:4f:54:3a:d7:00:14:36: ac:81:f3:2c:e0:d2:c7:71:53:35:aa:c5:cd:e4:6b:67:40:e6: e1:6a:41:1b:50:74:33:8b:26:68:f0:82:93:a5:5c:0f:74:e2: 06:ca:ce:75:db:05:10:0f:a4:c3:df:f3:55:a2:e1:34:82:62: 47:39:1a:49:69:4a:7f:69:02:11:be:a3:60:ff:7a:ef:65:b6: 95:be:81:33:44:7f:1d:b1:4f:35:6e:5b:60:39:00:b5:0b:43: cf:77:42:9c:ba:a7:8d:83:ce:c2:b8:fb:81:7f:79:f9:b6:1e: 45:40:c5:6f:eb:96:40:85:20:67:76:85:a9:38:b0:e9:4c:ab: 0c:5a:8c:f7:41:84:b4:a8:e9:89:7e:f7:76:f0:41:9c:54:40: 65:9c:09:3a:4b:48:9f:37:59:73:43:78:64:78:da:b5:07:3f: 77:8e:e1:b2:b6:53:e0:63:4e:94:17:20:38:2d:54:1b:a2:93: f9:48:e1:cc:fc:cb:15:53:b4:7b:e4:4a:41:ed:1c:fb:98:59: 68:03:93:31 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+8pxMioBFFNbes4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRkNDY4NDQtZTA4MS00ODEzLWJmZTItMGNmYmVhYzky ZTA4MB4XDTI1MTEwNDA4MDAwM1oXDTI1MTEwNzA4MDAwMFowLzEtMCsGA1UEAxMk MTllMTk5NzEtMjgxZC00MmNmLTliZGYtY2ExM2ZlMzEwZTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo98blCxnNQC5MfXgMiWnfJu7xeh3cIyY59Gq d/02AsqgJfSvPgoKySV+d2nFkPckWu4FhlItPFni16t5lbwLbn2DmXmuEcJnq+dj U/m0yTF3NQwPP8ZD+HQGmM+DEVO0u/ilOIWYFihf1tetnNf0jnhCZ2JuSIzdvN4l Ba6I4malPS/Vp4JSY7Mr5xJSmCNzRibaipn7v0fUM0ZnxkHbPavV9CRHw9w7/Qzd eMPTxejvUfrS6SXTewD7IpdngDaGgbH7DXwXLljowPzJvIfpeEYn7Nwve1KE2dCS pWuyD/KwZscMze7xhMqj+4Rqic2iVYtuD19EI+kdV/4K9s25TwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCSw+7+V3ZHbP+5SvRMRBHg/0qirMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZGQ0 Njg0NC1lMDgxLTQ4MTMtYmZlMi0wY2ZiZWFjOTJlMDgvYmRkNDY4NDQtZTA4MS00 ODEzLWJmZTItMGNmYmVhYzkyZTA4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmRkNDY4NDQtZTA4MS00ODEzLWJm ZTItMGNmYmVhYzkyZTA4L2JkZDQ2ODQ0LWUwODEtNDgxMy1iZmUyLTBjZmJlYWM5 MmUwOC5jcmwwHwYDVR0jBBgwFoAU/5lJGYSIOaYDVX3Mii2ixne01bQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZGQ0Njg0NC1lMDgxLTQ4MTMtYmZlMi0wY2Zi ZWFjOTJlMDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAx0ee0mh+VD27fG8rdtj+y 5io6txWzuXfJ8KbyI4PTU/TtKhSrZ7W1hoF8XxdEo09UOtcAFDasgfMs4NLHcVM1 qsXN5GtnQObhakEbUHQziyZo8IKTpVwPdOIGys512wUQD6TD3/NVouE0gmJHORpJ aUp/aQIRvqNg/3rvZbaVvoEzRH8dsU81bltgOQC1C0PPd0KcuqeNg87CuPuBf3n5 th5FQMVv65ZAhSBndoWpOLDpTKsMWoz3QYS0qOmJfvd28EGcVEBlnAk6S0ifN1lz Q3hkeNq1Bz93juGytlPgY06UFyA4LVQbopP5SOHM/MsVU7R75EpB7Rz7mFloA5Mx -----END CERTIFICATE-----Generated at Wed Nov 5 03:56:45 2025 by rpki-client