$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bdfa3ca4-6c5e-4035-8d21-51d1607b8714/bdfa3ca4-6c5e-4035-8d21-51d1607b8714.mft File: bdfa3ca4-6c5e-4035-8d21-51d1607b8714.mft (raw, json) Hash identifier: krS8nlbUEVkPRcV5jNQrh9CfACIMIkllJrkAh4BAhjw= Subject key identifier: 62:9F:A8:D7:D2:CC:CE:B9:19:2C:9D:E8:49:18:31:B8:D4:7A:A4:D4 Authority key identifier: 33:07:DE:1E:ED:52:29:BF:DC:8A:48:06:B1:37:43:95:3D:BD:85:35 Certificate issuer: /CN=bdfa3ca4-6c5e-4035-8d21-51d1607b8714 Certificate serial: 010D0C9F4328584BBFA551EBAB09859651702DC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bdfa3ca4-6c5e-4035-8d21-51d1607b8714.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bdfa3ca4-6c5e-4035-8d21-51d1607b8714/bdfa3ca4-6c5e-4035-8d21-51d1607b8714.mft Manifest number: 010D0C9F4328584632A817014A17D9C0D1451B7D Signing time: Tue 04 Nov 2025 14:00:08 +0000 Manifest this update: Tue 04 Nov 2025 14:00:08 +0000 Manifest next update: Thu 06 Nov 2025 14:00:00 +0000 Files and hashes: 1: bdfa3ca4-6c5e-4035-8d21-51d1607b8714.crl (hash: c9l6rDHPiLmUH03HXItxpGl33bZS5szp52mQ2AByx9E=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bdfa3ca4-6c5e-4035-8d21-51d1607b8714/bdfa3ca4-6c5e-4035-8d21-51d1607b8714.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bdfa3ca4-6c5e-4035-8d21-51d1607b8714/bdfa3ca4-6c5e-4035-8d21-51d1607b8714.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bdfa3ca4-6c5e-4035-8d21-51d1607b8714.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:51:eb:ab:09:85:96:51:70:2d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdfa3ca4-6c5e-4035-8d21-51d1607b8714 Validity Not Before: Nov 4 14:00:08 2025 GMT Not After : Nov 6 14:00:00 2025 GMT Subject: CN=f995006b-8a26-4c31-a94d-9e105a14f67f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:95:36:e0:b6:86:15:8a:4d:9e:e5:f2:03:59: e4:d7:3f:3b:35:ca:f1:76:45:d6:d6:f3:93:ad:d3: 70:4d:ae:d1:9a:cf:ec:d0:5d:c5:38:84:b1:5f:0e: 9c:d4:ee:d5:b9:25:03:a3:89:ed:07:e6:36:d4:b5: 47:00:46:42:5c:28:d7:a4:8e:c3:11:cf:80:5b:d3: fc:12:e7:06:9f:96:d3:c2:29:b9:d4:87:be:f7:9b: 38:c8:14:20:16:36:18:47:30:d4:9d:d0:d0:e7:71: db:94:7b:94:59:02:35:69:a2:56:8d:f7:e8:e2:9a: f9:d7:84:5d:08:eb:5d:d0:f9:ff:ef:7e:a1:f3:44: b8:14:b4:ff:42:24:32:1d:ae:3f:63:01:ec:ab:cf: 63:a1:79:2e:52:92:34:c0:ba:03:50:ea:eb:2d:ea: 10:b9:ac:d6:25:46:ea:a1:fe:1d:22:19:ea:fb:69: 6c:e6:a7:3f:dd:6d:76:88:8a:e6:9d:22:7b:fc:b9: 12:d1:7c:aa:01:89:de:58:b7:6d:58:8e:c2:dc:22: 0e:71:74:a0:ce:35:8c:3c:fd:f2:6f:4b:0d:eb:e4: 06:c7:66:30:69:73:9d:07:04:8a:f1:9f:e2:26:9f: 6b:d4:f7:0c:7c:e8:d1:cb:b3:bf:48:85:11:a6:6d: 5b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:9F:A8:D7:D2:CC:CE:B9:19:2C:9D:E8:49:18:31:B8:D4:7A:A4:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bdfa3ca4-6c5e-4035-8d21-51d1607b8714/bdfa3ca4-6c5e-4035-8d21-51d1607b8714.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bdfa3ca4-6c5e-4035-8d21-51d1607b8714/bdfa3ca4-6c5e-4035-8d21-51d1607b8714.crl X509v3 Authority Key Identifier: keyid:33:07:DE:1E:ED:52:29:BF:DC:8A:48:06:B1:37:43:95:3D:BD:85:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bdfa3ca4-6c5e-4035-8d21-51d1607b8714.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:3b:60:46:da:d4:62:e2:d6:2f:10:74:f3:8c:e6:55:0f:df: 1c:d2:b2:9a:16:b0:5d:49:48:72:7f:d0:a0:a9:73:c8:19:96: e3:76:28:74:b6:07:6c:80:f3:9b:83:35:fa:f1:16:a4:f2:ba: 3a:f3:a9:88:cd:c1:07:ef:87:90:09:2b:29:7e:b9:da:40:52: c3:ca:fc:c2:94:3c:7d:c9:bf:b4:9d:a4:bf:71:85:12:61:98: 6d:b4:38:24:8a:cf:e4:2f:7e:8c:a5:2e:ef:cb:da:48:a1:98: 0a:a5:1b:0d:b7:8d:bd:09:b0:6d:95:8f:13:4d:28:f4:40:70: 99:d2:d3:4a:65:f2:a7:33:ac:b8:57:ba:9a:3b:10:ab:31:1c: c0:15:d7:41:62:64:e6:da:a3:ee:96:f0:d1:7f:dc:a9:8b:c7: f4:e2:bd:1c:ee:10:5b:0d:80:7d:35:52:53:00:22:b1:3b:5b: 4d:2e:f5:07:2a:3c:78:7f:35:6c:44:a1:43:38:0e:7b:e8:21: b4:6b:e1:bc:34:a1:60:21:ee:b4:f0:b2:60:f0:07:58:00:37: c0:2f:ad:2c:6e:f2:82:05:53:95:ff:f6:91:3a:b7:e6:ba:50: c6:af:f1:9e:ee:a0:e7:9f:e8:d2:81:09:ac:f5:8a:e6:80:5c: 13:3a:34:4c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/pVHrqwmFllFwLcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRmYTNjYTQtNmM1ZS00MDM1LThkMjEtNTFkMTYwN2I4 NzE0MB4XDTI1MTEwNDE0MDAwOFoXDTI1MTEwNjE0MDAwMFowLzEtMCsGA1UEAxMk Zjk5NTAwNmItOGEyNi00YzMxLWE5NGQtOWUxMDVhMTRmNjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpU24LaGFYpNnuXyA1nk1z87NcrxdkXW1vOT rdNwTa7Rms/s0F3FOISxXw6c1O7VuSUDo4ntB+Y21LVHAEZCXCjXpI7DEc+AW9P8 EucGn5bTwim51Ie+95s4yBQgFjYYRzDUndDQ53HblHuUWQI1aaJWjffo4pr514Rd COtd0Pn/736h80S4FLT/QiQyHa4/YwHsq89joXkuUpI0wLoDUOrrLeoQuazWJUbq of4dIhnq+2ls5qc/3W12iIrmnSJ7/LkS0XyqAYneWLdtWI7C3CIOcXSgzjWMPP3y b0sN6+QGx2YwaXOdBwSK8Z/iJp9r1PcMfOjRy7O/SIURpm1bBQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGKfqNfSzM65GSyd6EkYMbjUeqTUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iZGZh M2NhNC02YzVlLTQwMzUtOGQyMS01MWQxNjA3Yjg3MTQvYmRmYTNjYTQtNmM1ZS00 MDM1LThkMjEtNTFkMTYwN2I4NzE0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmRmYTNjYTQtNmM1ZS00MDM1LThk MjEtNTFkMTYwN2I4NzE0L2JkZmEzY2E0LTZjNWUtNDAzNS04ZDIxLTUxZDE2MDdi ODcxNC5jcmwwHwYDVR0jBBgwFoAUMwfeHu1SKb/cikgGsTdDlT29hTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iZGZhM2NhNC02YzVlLTQwMzUtOGQyMS01MWQx NjA3Yjg3MTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB+O2BG2tRi4tYvEHTzjOZV D98c0rKaFrBdSUhyf9CgqXPIGZbjdih0tgdsgPObgzX68Rak8ro686mIzcEH74eQ CSspfrnaQFLDyvzClDx9yb+0naS/cYUSYZhttDgkis/kL36MpS7vy9pIoZgKpRsN t429CbBtlY8TTSj0QHCZ0tNKZfKnM6y4V7qaOxCrMRzAFddBYmTm2qPulvDRf9yp i8f04r0c7hBbDYB9NVJTACKxO1tNLvUHKjx4fzVsRKFDOA576CG0a+G8NKFgIe60 8LJg8AdYADfAL60sbvKCBVOV//aROrfmulDGr/Ge7qDnn+jSgQms9YrmgFwTOjRM -----END CERTIFICATE-----Generated at Wed Nov 5 14:42:40 2025 by rpki-client