$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bacde40d-2f28-483a-8cfd-628d470b87a7/bacde40d-2f28-483a-8cfd-628d470b87a7.mft File: bacde40d-2f28-483a-8cfd-628d470b87a7.mft (raw, json) Hash identifier: vIU5sEBUEZKwanzcQXRDjlqr39PtCx8ZyD0xoTWuNRs= Subject key identifier: 14:95:EA:3B:15:A7:F5:7D:4D:0A:2E:DA:8A:D6:25:E9:CF:AF:DE:D5 Authority key identifier: 1C:DF:9D:90:58:06:5D:CB:5C:74:02:A8:30:05:43:7F:F9:06:C5:26 Certificate issuer: /CN=bacde40d-2f28-483a-8cfd-628d470b87a7 Certificate serial: 010D0C9F4328584BBFFEA9445F2401AF8CA1F5C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bacde40d-2f28-483a-8cfd-628d470b87a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bacde40d-2f28-483a-8cfd-628d470b87a7/bacde40d-2f28-483a-8cfd-628d470b87a7.mft Manifest number: 010D0C9F43285845B82F4AFC5F1B29B559F1C636 Signing time: Tue 04 Nov 2025 17:00:08 +0000 Manifest this update: Tue 04 Nov 2025 17:00:08 +0000 Manifest next update: Thu 06 Nov 2025 17:00:00 +0000 Files and hashes: 1: bacde40d-2f28-483a-8cfd-628d470b87a7.crl (hash: f2Q0Wm8Ul4IvE5I6j5Evv3BDWEKwddgjZr39jICWgG0=) 2: bdcda369-a2ec-3717-806c-908ece67ed92.roa (hash: kMUREVaYRFuObNQknLPFrwesy+hpSQzsn4CNhC5DHeg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bacde40d-2f28-483a-8cfd-628d470b87a7/bacde40d-2f28-483a-8cfd-628d470b87a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bacde40d-2f28-483a-8cfd-628d470b87a7/bacde40d-2f28-483a-8cfd-628d470b87a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bacde40d-2f28-483a-8cfd-628d470b87a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:fe:a9:44:5f:24:01:af:8c:a1:f5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bacde40d-2f28-483a-8cfd-628d470b87a7 Validity Not Before: Nov 4 17:00:08 2025 GMT Not After : Nov 6 17:00:00 2025 GMT Subject: CN=7e2401aa-2b85-41f5-8424-7e75edcaba56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d1:3d:f9:40:0b:2e:60:5a:39:28:b7:5c:60: 42:ce:c1:fe:60:08:9b:4d:e9:97:f6:97:40:82:43: f1:34:55:02:57:c5:cf:c1:6a:0a:3a:a1:c2:f2:8f: f1:a9:ed:de:dc:8d:c4:a5:17:ef:2d:2b:a0:d7:64: a6:a4:af:5e:f8:4c:5d:6c:3a:4e:33:5b:09:16:7e: 83:9a:9b:ae:ce:7a:04:5c:b8:10:89:ce:79:77:ce: 9b:f0:bf:40:75:b5:eb:f9:58:78:1f:52:4c:b0:28: 28:30:d2:c1:3d:79:f4:b2:8a:b1:76:04:d4:ba:0c: f5:20:4d:51:48:b1:d6:a7:e1:20:a8:f3:5f:b7:70: de:4a:6a:51:e9:ff:90:ec:05:f8:ae:e1:10:b8:21: cf:1f:c6:1e:98:9a:ce:13:01:fc:02:85:82:31:57: 23:16:e2:8e:06:47:68:72:de:8b:7e:a1:40:ba:28: 30:f8:a3:29:77:ad:27:42:23:5a:84:34:fb:10:45: 15:bd:7b:c7:f9:20:20:c4:94:d3:de:09:30:29:a2: ad:3d:b2:97:76:10:f1:73:a3:57:7a:0e:28:0e:6d: 9f:ae:bd:1f:e8:bc:ef:af:99:99:89:0e:01:42:1c: 0c:35:07:f7:2b:58:7b:73:31:4b:7c:d0:ab:74:e8: 4b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:95:EA:3B:15:A7:F5:7D:4D:0A:2E:DA:8A:D6:25:E9:CF:AF:DE:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bacde40d-2f28-483a-8cfd-628d470b87a7/bacde40d-2f28-483a-8cfd-628d470b87a7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bacde40d-2f28-483a-8cfd-628d470b87a7/bacde40d-2f28-483a-8cfd-628d470b87a7.crl X509v3 Authority Key Identifier: keyid:1C:DF:9D:90:58:06:5D:CB:5C:74:02:A8:30:05:43:7F:F9:06:C5:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bacde40d-2f28-483a-8cfd-628d470b87a7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:94:7b:c0:1e:b8:b0:42:f8:f8:3f:e1:03:10:40:57:c7:64: e3:1c:86:71:58:03:65:a1:2f:ee:18:9c:e6:1b:f2:97:32:31: 11:10:58:1d:1c:c3:79:22:2e:25:07:74:07:5f:2b:2c:a7:a0: 18:ef:6b:85:4a:97:4e:af:cb:a0:c8:55:4c:47:4e:80:c0:c9: 7f:ae:f1:2f:af:a7:23:25:eb:24:c4:a8:17:91:95:10:42:eb: aa:62:ac:0e:28:38:b2:92:21:1e:ee:8a:3d:d6:ab:5b:df:66: 9d:6e:27:f1:d3:6e:aa:40:d3:96:5e:3e:0d:8e:13:d1:1e:31: 7d:af:f4:2f:83:1c:12:8a:8c:93:43:d1:07:b3:54:d4:48:db: 42:87:4b:2d:da:da:e5:cf:af:0f:ea:ae:72:c6:ea:bc:af:2c: e3:84:b8:1f:bb:98:20:f2:c7:90:ef:e3:07:c4:5a:61:38:69: 69:b9:d9:be:c2:25:f1:f8:e4:fd:88:c4:cb:ae:b1:32:52:0b: 51:be:d8:54:b9:bc:79:1a:25:e0:f6:83:49:16:91:b0:b4:63: 11:cb:50:f9:03:61:4f:62:c0:50:85:e2:25:c3:5e:84:49:96: 78:21:b8:a6:e4:22:90:d2:76:f1:c2:24:4b:52:2f:d0:cc:9d: f8:fd:31:f6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu//qlEXyQBr4yh9cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFjZGU0MGQtMmYyOC00ODNhLThjZmQtNjI4ZDQ3MGI4 N2E3MB4XDTI1MTEwNDE3MDAwOFoXDTI1MTEwNjE3MDAwMFowLzEtMCsGA1UEAxMk N2UyNDAxYWEtMmI4NS00MWY1LTg0MjQtN2U3NWVkY2FiYTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NE9+UALLmBaOSi3XGBCzsH+YAibTemX9pdA gkPxNFUCV8XPwWoKOqHC8o/xqe3e3I3EpRfvLSug12SmpK9e+ExdbDpOM1sJFn6D mpuuznoEXLgQic55d86b8L9AdbXr+Vh4H1JMsCgoMNLBPXn0soqxdgTUugz1IE1R SLHWp+EgqPNft3DeSmpR6f+Q7AX4ruEQuCHPH8YemJrOEwH8AoWCMVcjFuKOBkdo ct6LfqFAuigw+KMpd60nQiNahDT7EEUVvXvH+SAgxJTT3gkwKaKtPbKXdhDxc6NX eg4oDm2frr0f6Lzvr5mZiQ4BQhwMNQf3K1h7czFLfNCrdOhLeQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBSV6jsVp/V9TQou2orWJenPr97VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYWNk ZTQwZC0yZjI4LTQ4M2EtOGNmZC02MjhkNDcwYjg3YTcvYmFjZGU0MGQtMmYyOC00 ODNhLThjZmQtNjI4ZDQ3MGI4N2E3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmFjZGU0MGQtMmYyOC00ODNhLThj ZmQtNjI4ZDQ3MGI4N2E3L2JhY2RlNDBkLTJmMjgtNDgzYS04Y2ZkLTYyOGQ0NzBi ODdhNy5jcmwwHwYDVR0jBBgwFoAUHN+dkFgGXctcdAKoMAVDf/kGxSYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYWNkZTQwZC0yZjI4LTQ4M2EtOGNmZC02Mjhk NDcwYjg3YTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBLlHvAHriwQvj4P+EDEEBX x2TjHIZxWANloS/uGJzmG/KXMjEREFgdHMN5Ii4lB3QHXyssp6AY72uFSpdOr8ug yFVMR06AwMl/rvEvr6cjJeskxKgXkZUQQuuqYqwOKDiykiEe7oo91qtb32adbifx 026qQNOWXj4NjhPRHjF9r/QvgxwSioyTQ9EHs1TUSNtCh0st2trlz68P6q5yxuq8 ryzjhLgfu5gg8seQ7+MHxFphOGlpudm+wiXx+OT9iMTLrrEyUgtRvthUubx5GiXg 9oNJFpGwtGMRy1D5A2FPYsBQheIlw16ESZZ4Ibim5CKQ0nbxwiRLUi/QzJ34/TH2 -----END CERTIFICATE-----Generated at Wed Nov 5 11:04:40 2025 by rpki-client