$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6.mft File: bad642f9-6daf-4edd-bf5a-bce7a69cd2e6.mft (raw, json) Hash identifier: UkG35vcBkjx0x1xkWG/k61EVazKAcFId01O3hDJR/Iw= Subject key identifier: E7:CB:44:5B:DF:FF:21:C7:5C:42:F6:14:DD:A8:C5:6D:27:B3:92:52 Authority key identifier: 1B:EF:E1:BF:7B:3A:50:D4:34:6C:3F:06:AE:1E:9F:4E:AF:3A:11:16 Certificate issuer: /CN=bad642f9-6daf-4edd-bf5a-bce7a69cd2e6 Certificate serial: 010D0C9F4328584BC05800E8FA7044D73A10C300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6.mft Manifest number: 010D0C9F43285840D5E20FCF08444F93A82EDEF9 Signing time: Tue 04 Nov 2025 20:00:08 +0000 Manifest this update: Tue 04 Nov 2025 20:00:08 +0000 Manifest next update: Thu 06 Nov 2025 20:00:00 +0000 Files and hashes: 1: bad642f9-6daf-4edd-bf5a-bce7a69cd2e6.crl (hash: OaXxkTLVZaENvKpkcwcpwJ68RZeNovegPLoN+SjgiHA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:58:00:e8:fa:70:44:d7:3a:10:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bad642f9-6daf-4edd-bf5a-bce7a69cd2e6 Validity Not Before: Nov 4 20:00:08 2025 GMT Not After : Nov 6 20:00:00 2025 GMT Subject: CN=7b779a96-5b4a-41d6-bab3-dea67d1f83ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:29:12:6e:41:97:c7:a8:c8:e7:a2:36:49:9a: 3a:2d:bd:ec:31:57:7e:b7:13:1b:a1:b0:44:34:97: 92:3e:9b:13:63:98:31:b2:c0:d9:a3:24:41:d7:d2: 60:7f:a1:94:5e:bb:3d:28:1d:89:e0:e4:da:d3:98: f9:6e:43:b3:c1:48:6e:25:96:41:da:2c:a1:16:ea: f0:83:22:8b:07:00:c8:69:7d:6f:90:21:a1:d2:fe: b5:52:49:72:9c:40:78:3b:93:c1:cb:df:13:e0:d9: f0:c9:2a:0e:69:1a:ca:2e:3e:cb:28:f4:b8:19:61: c6:fe:c8:53:f4:66:87:bf:32:bb:fc:91:7c:a3:83: a7:b6:24:81:a2:8d:b8:b9:c0:c2:90:55:37:bc:14: af:23:77:a8:54:58:c3:d9:68:1a:71:c4:e0:8d:29: 2b:a8:81:ef:e0:69:83:50:f7:fd:e2:2f:ee:1c:c9: 44:2f:0b:3c:d9:13:21:d2:fb:11:d2:05:fc:0d:ce: 36:ff:2f:de:67:52:5e:84:37:1a:2c:ab:06:be:d5: aa:9e:b4:a8:47:69:4f:57:59:88:91:1f:75:ac:ee: 33:0e:35:61:05:07:20:d4:3a:30:5f:d0:0a:17:4f: 96:96:81:ce:b2:21:c9:e8:08:fb:d7:35:9c:fb:c1: 6d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:CB:44:5B:DF:FF:21:C7:5C:42:F6:14:DD:A8:C5:6D:27:B3:92:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6.crl X509v3 Authority Key Identifier: keyid:1B:EF:E1:BF:7B:3A:50:D4:34:6C:3F:06:AE:1E:9F:4E:AF:3A:11:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:f6:d0:e9:94:f3:13:2b:42:52:e2:e8:ea:30:72:69:06:bb: cf:ef:5f:b9:6e:16:6b:47:6b:62:cc:1b:b6:27:5f:f5:61:7a: fd:42:b8:5d:84:7a:d8:ba:41:70:43:df:70:5b:a1:11:c9:53: 3c:c5:29:bd:e3:0b:45:b5:12:60:63:45:29:0c:98:9f:da:3a: ec:7e:f0:77:7d:3c:7b:63:43:7f:8e:10:3f:2c:89:de:8f:8d: 15:cb:41:06:af:88:7e:a1:12:93:b6:dd:56:f8:17:1a:82:84: 85:17:40:3d:11:80:c0:25:d9:a9:5a:82:4e:74:18:9a:8a:74: 70:78:0f:11:3e:3a:77:fe:2c:01:4d:5d:6e:65:5d:ef:38:e8: 95:73:18:f4:c5:12:48:b7:32:27:e7:c4:f2:32:26:9f:75:08: 27:67:ee:0f:06:d5:5d:e5:e1:26:1b:93:81:ba:e9:7a:7a:2c: 03:cf:ae:81:69:64:24:b0:a4:46:6a:e1:97:7d:97:a8:82:d6: 3a:1b:de:36:8f:58:d4:4e:a6:f5:79:68:9f:e1:7b:7a:f8:c4: 34:61:48:6e:c1:e6:d8:39:00:20:82:a9:3d:07:0d:2b:f3:b9: b7:67:61:02:32:a7:ea:18:d6:5d:8d:75:35:3a:da:23:07:d7: 93:0f:31:f7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAWADo+nBE1zoQwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFkNjQyZjktNmRhZi00ZWRkLWJmNWEtYmNlN2E2OWNk MmU2MB4XDTI1MTEwNDIwMDAwOFoXDTI1MTEwNjIwMDAwMFowLzEtMCsGA1UEAxMk N2I3NzlhOTYtNWI0YS00MWQ2LWJhYjMtZGVhNjdkMWY4M2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsikSbkGXx6jI56I2SZo6Lb3sMVd+txMbobBE NJeSPpsTY5gxssDZoyRB19Jgf6GUXrs9KB2J4OTa05j5bkOzwUhuJZZB2iyhFurw gyKLBwDIaX1vkCGh0v61UklynEB4O5PBy98T4NnwySoOaRrKLj7LKPS4GWHG/shT 9GaHvzK7/JF8o4OntiSBoo24ucDCkFU3vBSvI3eoVFjD2WgaccTgjSkrqIHv4GmD UPf94i/uHMlELws82RMh0vsR0gX8Dc42/y/eZ1JehDcaLKsGvtWqnrSoR2lPV1mI kR91rO4zDjVhBQcg1DowX9AKF0+WloHOsiHJ6Aj71zWc+8FtoQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOfLRFvf/yHHXEL2FN2oxW0ns5JSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iYWQ2 NDJmOS02ZGFmLTRlZGQtYmY1YS1iY2U3YTY5Y2QyZTYvYmFkNjQyZjktNmRhZi00 ZWRkLWJmNWEtYmNlN2E2OWNkMmU2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYmFkNjQyZjktNmRhZi00ZWRkLWJm NWEtYmNlN2E2OWNkMmU2L2JhZDY0MmY5LTZkYWYtNGVkZC1iZjVhLWJjZTdhNjlj ZDJlNi5jcmwwHwYDVR0jBBgwFoAUG+/hv3s6UNQ0bD8Grh6fTq86ERYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iYWQ2NDJmOS02ZGFmLTRlZGQtYmY1YS1iY2U3 YTY5Y2QyZTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAd9tDplPMTK0JS4ujqMHJp BrvP71+5bhZrR2tizBu2J1/1YXr9QrhdhHrYukFwQ99wW6ERyVM8xSm94wtFtRJg Y0UpDJif2jrsfvB3fTx7Y0N/jhA/LInej40Vy0EGr4h+oRKTtt1W+BcagoSFF0A9 EYDAJdmpWoJOdBiainRweA8RPjp3/iwBTV1uZV3vOOiVcxj0xRJItzIn58TyMiaf dQgnZ+4PBtVd5eEmG5OBuul6eiwDz66BaWQksKRGauGXfZeogtY6G942j1jUTqb1 eWif4Xt6+MQ0YUhuwebYOQAggqk9Bw0r87m3Z2ECMqfqGNZdjXU1OtojB9eTDzH3 -----END CERTIFICATE-----Generated at Wed Nov 5 07:08:49 2025 by rpki-client