$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bf7e412f-ddf7-470c-acb4-1f6dd865230d/bf7e412f-ddf7-470c-acb4-1f6dd865230d.mft File: bf7e412f-ddf7-470c-acb4-1f6dd865230d.mft (raw, json) Hash identifier: YXwR+AQooZTU5qBUK4rqpf+HvdnxFOhxnzyoOIREiYo= Subject key identifier: 06:06:6E:6A:E1:83:54:20:51:A8:B3:E6:EA:7E:23:D1:B8:DF:E2:03 Authority key identifier: FD:96:B5:EA:84:51:92:BF:CA:3C:23:83:53:F2:EE:C7:B6:89:DA:2D Certificate issuer: /CN=bf7e412f-ddf7-470c-acb4-1f6dd865230d Certificate serial: 010D0C9F4328584BBE3FFB420EA46EE03C86F640 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bf7e412f-ddf7-470c-acb4-1f6dd865230d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bf7e412f-ddf7-470c-acb4-1f6dd865230d/bf7e412f-ddf7-470c-acb4-1f6dd865230d.mft Manifest number: 010D0C9F432858445F1E5ABAB51C32EDCCCD8F14 Signing time: Tue 04 Nov 2025 02:00:08 +0000 Manifest this update: Tue 04 Nov 2025 02:00:08 +0000 Manifest next update: Fri 07 Nov 2025 02:00:00 +0000 Files and hashes: 1: bf7e412f-ddf7-470c-acb4-1f6dd865230d.crl (hash: c4NXReO/DoVUJdAQjNAe3Ot5h1P+bSwfU+ZulFAx0mw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bf7e412f-ddf7-470c-acb4-1f6dd865230d/bf7e412f-ddf7-470c-acb4-1f6dd865230d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bf7e412f-ddf7-470c-acb4-1f6dd865230d/bf7e412f-ddf7-470c-acb4-1f6dd865230d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bf7e412f-ddf7-470c-acb4-1f6dd865230d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:3f:fb:42:0e:a4:6e:e0:3c:86:f6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7e412f-ddf7-470c-acb4-1f6dd865230d Validity Not Before: Nov 4 02:00:08 2025 GMT Not After : Nov 7 02:00:00 2025 GMT Subject: CN=31e1c22f-8db6-4c5c-aa79-07cd58670bf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d4:ac:72:f2:45:d1:c6:b2:db:f0:73:28:a2: dc:6d:09:72:12:98:85:6f:ef:b8:fd:c5:06:2f:a1: f8:a2:13:b7:f5:f4:5a:aa:7e:5a:76:0f:79:1f:c0: e7:02:9a:4b:e8:ae:78:95:7c:ec:4b:cc:7e:7f:82: d6:26:c6:61:49:69:5f:0e:4a:a1:df:01:c0:a0:04: cc:23:43:38:19:13:86:92:02:db:0e:c4:2a:88:89: 7c:f2:61:59:44:6f:8b:b9:fd:9e:3d:68:b2:ef:0a: 53:0b:53:7b:ed:e5:ea:21:ca:ab:69:7c:0a:51:31: e8:2e:ca:16:a3:43:3f:03:7d:99:e0:78:70:a3:1b: 12:45:ca:5a:d1:05:6e:a6:11:e7:ed:b3:ad:a8:e1: f0:dd:6b:6a:21:b5:b0:95:ee:ea:45:7d:56:40:87: b2:8b:31:7a:74:e8:60:25:30:cd:87:f4:cf:f1:45: ff:28:d9:af:20:f7:71:e8:45:2b:f8:3c:bd:71:40: 1e:d5:39:85:5e:bb:2c:3c:fb:9a:66:0c:de:94:3d: 87:94:f0:dd:aa:75:0f:45:96:40:d1:b7:72:06:46: af:f5:24:09:47:2d:4d:c6:5b:48:7f:cf:49:d2:93: c3:96:43:3d:4a:7d:c5:2f:b3:f7:78:53:18:7c:df: fa:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:06:6E:6A:E1:83:54:20:51:A8:B3:E6:EA:7E:23:D1:B8:DF:E2:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bf7e412f-ddf7-470c-acb4-1f6dd865230d/bf7e412f-ddf7-470c-acb4-1f6dd865230d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bf7e412f-ddf7-470c-acb4-1f6dd865230d/bf7e412f-ddf7-470c-acb4-1f6dd865230d.crl X509v3 Authority Key Identifier: keyid:FD:96:B5:EA:84:51:92:BF:CA:3C:23:83:53:F2:EE:C7:B6:89:DA:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bf7e412f-ddf7-470c-acb4-1f6dd865230d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:6c:d8:b5:03:a7:8a:96:38:b6:ef:8b:04:0b:de:93:de:e1: 54:42:d0:66:da:8b:3a:a9:ea:9e:08:29:94:b3:37:80:2a:23: 0e:cf:ab:e2:1c:35:81:cf:f7:1e:1c:78:7e:41:25:7c:65:ad: 0b:93:e1:e2:57:67:32:9d:73:7f:48:1a:74:e7:16:b2:f0:a9: d8:2d:79:d8:6d:a0:57:8e:1a:9e:83:95:5d:96:ae:30:00:f5: ab:b5:cf:50:4b:6e:22:b0:b6:03:f2:b9:62:fb:dc:99:f0:8a: e9:7a:63:d4:43:b5:f7:e8:6a:95:b2:91:66:c7:b8:96:8d:ca: 53:c0:0e:37:a6:e3:8d:ce:44:3b:f0:ab:db:66:48:78:35:4f: c3:0d:bd:fa:f3:c9:71:1b:21:84:a7:20:5a:d0:ab:80:05:28: e3:5e:ea:67:2f:ab:50:3e:a1:c7:ab:33:c9:6d:f5:4e:6e:4d: aa:52:ce:d5:ce:5d:8d:64:22:f5:e1:ab:1b:35:7b:e0:ad:38: 34:ce:6f:49:3b:33:41:bf:e3:46:ee:20:24:d4:88:e6:40:28: 1f:74:35:7b:a2:c2:ba:b2:1b:c0:56:dc:04:9e:6f:02:cd:c1: 6d:ae:87:06:f6:64:bf:88:df:6e:ea:52:e3:f3:5a:90:c4:5b: f9:67:d3:a9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+P/tCDqRu4DyG9kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3ZTQxMmYtZGRmNy00NzBjLWFjYjQtMWY2ZGQ4NjUy MzBkMB4XDTI1MTEwNDAyMDAwOFoXDTI1MTEwNzAyMDAwMFowLzEtMCsGA1UEAxMk MzFlMWMyMmYtOGRiNi00YzVjLWFhNzktMDdjZDU4NjcwYmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNSscvJF0cay2/BzKKLcbQlyEpiFb++4/cUG L6H4ohO39fRaqn5adg95H8DnAppL6K54lXzsS8x+f4LWJsZhSWlfDkqh3wHAoATM I0M4GROGkgLbDsQqiIl88mFZRG+Luf2ePWiy7wpTC1N77eXqIcqraXwKUTHoLsoW o0M/A32Z4HhwoxsSRcpa0QVuphHn7bOtqOHw3WtqIbWwle7qRX1WQIeyizF6dOhg JTDNh/TP8UX/KNmvIPdx6EUr+Dy9cUAe1TmFXrssPPuaZgzelD2HlPDdqnUPRZZA 0bdyBkav9SQJRy1NxltIf89J0pPDlkM9Sn3FL7P3eFMYfN/6MwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAYGbmrhg1QgUaiz5up+I9G43+IDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iZjdl NDEyZi1kZGY3LTQ3MGMtYWNiNC0xZjZkZDg2NTIzMGQvYmY3ZTQxMmYtZGRmNy00 NzBjLWFjYjQtMWY2ZGQ4NjUyMzBkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmY3ZTQxMmYtZGRmNy00NzBjLWFj YjQtMWY2ZGQ4NjUyMzBkL2JmN2U0MTJmLWRkZjctNDcwYy1hY2I0LTFmNmRkODY1 MjMwZC5jcmwwHwYDVR0jBBgwFoAU/Za16oRRkr/KPCODU/Lux7aJ2i0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iZjdlNDEyZi1kZGY3LTQ3MGMtYWNiNC0xZjZk ZDg2NTIzMGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAfbNi1A6eKlji274sEC96T 3uFUQtBm2os6qeqeCCmUszeAKiMOz6viHDWBz/ceHHh+QSV8Za0Lk+HiV2cynXN/ SBp05xay8KnYLXnYbaBXjhqeg5Vdlq4wAPWrtc9QS24isLYD8rli+9yZ8IrpemPU Q7X36GqVspFmx7iWjcpTwA43puONzkQ78KvbZkh4NU/DDb3688lxGyGEpyBa0KuA BSjjXupnL6tQPqHHqzPJbfVObk2qUs7Vzl2NZCL14asbNXvgrTg0zm9JOzNBv+NG 7iAk1IjmQCgfdDV7osK6shvAVtwEnm8CzcFtrocG9mS/iN9u6lLj81qQxFv5Z9Op -----END CERTIFICATE-----Generated at Tue Nov 4 21:53:15 2025 by rpki-client