$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/bb5c0fea-fce0-4e59-a29f-79b2e265f4fd/bb5c0fea-fce0-4e59-a29f-79b2e265f4fd.mft File: bb5c0fea-fce0-4e59-a29f-79b2e265f4fd.mft (raw, json) Hash identifier: Y5khwlrnUERpALUoQL+RQ2e9el6LLYPuaDK+E/MnHIk= Subject key identifier: BE:E3:B6:5F:4B:27:DC:CA:28:5C:B5:82:32:AF:90:16:D8:8F:22:95 Authority key identifier: C2:DB:F7:5A:B4:80:FE:F3:42:0A:05:BA:CC:D5:15:ED:5D:51:95:E4 Certificate issuer: /CN=bb5c0fea-fce0-4e59-a29f-79b2e265f4fd Certificate serial: 010D0C9F4328584FB887315E4EACA17B78CCCC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/bb5c0fea-fce0-4e59-a29f-79b2e265f4fd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/bb5c0fea-fce0-4e59-a29f-79b2e265f4fd/bb5c0fea-fce0-4e59-a29f-79b2e265f4fd.mft Manifest number: 010D0C9F4328584FB8873165DD0900A5718FBDC1 Signing time: Tue 03 Nov 2026 19:56:24 +0000 Manifest this update: Tue 03 Nov 2026 19:56:24 +0000 Manifest next update: Fri 06 Nov 2026 19:00:00 +0000 Files and hashes: 1: bb5c0fea-fce0-4e59-a29f-79b2e265f4fd.crl (hash: LZgFBtXyJpjIxu3xwlZyS9xoj2pByizyyzcUrpRGMms=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/bb5c0fea-fce0-4e59-a29f-79b2e265f4fd/bb5c0fea-fce0-4e59-a29f-79b2e265f4fd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/bb5c0fea-fce0-4e59-a29f-79b2e265f4fd/bb5c0fea-fce0-4e59-a29f-79b2e265f4fd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/bb5c0fea-fce0-4e59-a29f-79b2e265f4fd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b8:87:31:5e:4e:ac:a1:7b:78:cc:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb5c0fea-fce0-4e59-a29f-79b2e265f4fd Validity Not Before: Nov 3 19:56:24 2026 GMT Not After : Nov 6 19:00:00 2026 GMT Subject: CN=381f7e04-7449-4b59-b442-47ea4d7306d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:de:f8:0c:ce:36:14:e4:b7:0e:61:ef:77:78: 9d:a8:06:f7:87:21:2c:52:7b:7f:ca:5b:ab:e2:01: 0e:a7:85:9e:25:17:9d:b0:72:88:76:50:38:bb:34: 65:46:94:f1:6d:ee:ba:5f:d6:af:b6:21:4b:c2:84: bb:58:4d:c9:e1:9c:06:9b:8e:92:a9:c8:85:83:1c: f2:e4:10:98:78:07:ba:b2:eb:bb:98:11:76:49:e9: 8d:47:c4:fc:24:ed:59:b9:30:38:2b:93:f6:5c:02: e7:96:37:42:bf:f3:e9:9c:ae:45:e8:29:6f:f9:72: 27:63:11:86:e1:90:14:fb:98:b8:a3:98:30:fa:ab: a6:ad:f5:20:90:a6:22:4a:03:a5:02:fb:97:b4:64: 37:b2:86:21:a2:ab:9f:e0:8c:26:40:31:2c:a7:19: 70:c0:ef:b1:73:a0:54:64:5f:8c:42:3a:3d:f4:16: 33:44:eb:3c:13:76:9e:d2:d2:a6:2b:92:2a:4f:77: d5:6b:e4:87:86:7a:af:3e:5d:a1:89:15:b0:21:15: bc:09:4d:03:a5:7e:9e:d9:2f:d5:a2:f9:56:33:c0: a4:26:b6:bb:50:7e:0f:6c:06:c1:00:60:a0:9c:36: 6b:3f:8d:f8:49:80:3e:7f:fd:8b:0b:37:f6:39:af: da:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:E3:B6:5F:4B:27:DC:CA:28:5C:B5:82:32:AF:90:16:D8:8F:22:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/bb5c0fea-fce0-4e59-a29f-79b2e265f4fd/bb5c0fea-fce0-4e59-a29f-79b2e265f4fd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/bb5c0fea-fce0-4e59-a29f-79b2e265f4fd/bb5c0fea-fce0-4e59-a29f-79b2e265f4fd.crl X509v3 Authority Key Identifier: keyid:C2:DB:F7:5A:B4:80:FE:F3:42:0A:05:BA:CC:D5:15:ED:5D:51:95:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/bb5c0fea-fce0-4e59-a29f-79b2e265f4fd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:35:51:34:71:c8:eb:d6:15:60:a6:05:99:ca:85:ea:0d:c3: c6:8a:a9:0a:5f:77:51:4c:2d:41:bd:f2:39:af:6e:a5:7b:70: 8d:aa:af:87:dc:75:ee:11:93:23:74:c1:31:d2:8b:4b:7b:09: a2:e8:c9:52:e7:8d:de:25:f9:bb:6b:52:c5:d1:a2:92:04:28: 16:b3:71:12:92:48:70:f2:2e:92:91:51:3e:5b:22:f9:f5:49: af:81:22:36:cc:25:73:ec:f1:3f:c8:f7:df:62:e2:04:14:c8: 3c:6d:26:dd:bb:8e:ac:47:70:92:8e:8c:ca:44:46:f6:89:d8: 63:01:ba:df:07:e3:cb:31:ee:b1:46:c4:e4:ff:ed:4c:38:50: b4:02:e9:23:e1:ac:0e:a2:ef:76:33:f9:98:b5:73:6b:47:ea: 07:e4:54:d4:0a:00:9b:3b:01:53:bb:09:8c:a0:62:13:9d:5c: f0:e7:48:1d:59:e8:8a:57:06:ad:64:e3:35:64:8a:19:51:1a: 55:ac:f6:b9:1d:bb:7f:2a:4a:7e:2e:9d:52:13:0b:88:d8:d4: 33:ef:20:4e:c2:be:33:b9:0e:6a:e7:97:5e:4b:3c:db:23:76: dc:da:a4:66:21:fd:ce:db:9b:4a:39:63:47:da:ae:30:77:4f: e6:73:89:cc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+4hzFeTqyhe3jMzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmI1YzBmZWEtZmNlMC00ZTU5LWEyOWYtNzliMmUyNjVm NGZkMB4XDTI2MTEwMzE5NTYyNFoXDTI2MTEwNjE5MDAwMFowLzEtMCsGA1UEAxMk MzgxZjdlMDQtNzQ0OS00YjU5LWI0NDItNDdlYTRkNzMwNmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp974DM42FOS3DmHvd3idqAb3hyEsUnt/ylur 4gEOp4WeJRedsHKIdlA4uzRlRpTxbe66X9avtiFLwoS7WE3J4ZwGm46SqciFgxzy 5BCYeAe6suu7mBF2SemNR8T8JO1ZuTA4K5P2XALnljdCv/PpnK5F6Clv+XInYxGG 4ZAU+5i4o5gw+qumrfUgkKYiSgOlAvuXtGQ3soYhoquf4IwmQDEspxlwwO+xc6BU ZF+MQjo99BYzROs8E3ae0tKmK5IqT3fVa+SHhnqvPl2hiRWwIRW8CU0DpX6e2S/V ovlWM8CkJra7UH4PbAbBAGCgnDZrP434SYA+f/2LCzf2Oa/a7wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL7jtl9LJ9zKKFy1gjKvkBbYjyKVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9iYjVj MGZlYS1mY2UwLTRlNTktYTI5Zi03OWIyZTI2NWY0ZmQvYmI1YzBmZWEtZmNlMC00 ZTU5LWEyOWYtNzliMmUyNjVmNGZkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzc1MjZhMC1m ZTRlLTQ3NDEtYjM5Yi0zMjMzNTNhMWViZjIvYmI1YzBmZWEtZmNlMC00ZTU5LWEy OWYtNzliMmUyNjVmNGZkL2JiNWMwZmVhLWZjZTAtNGU1OS1hMjlmLTc5YjJlMjY1 ZjRmZC5jcmwwHwYDVR0jBBgwFoAUwtv3WrSA/vNCCgW6zNUV7V1RleQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0 MS1iMzliLTMyMzM1M2ExZWJmMi9iYjVjMGZlYS1mY2UwLTRlNTktYTI5Zi03OWIy ZTI2NWY0ZmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQASNVE0ccjr1hVgpgWZyoXq DcPGiqkKX3dRTC1BvfI5r26le3CNqq+H3HXuEZMjdMEx0otLewmi6MlS543eJfm7 a1LF0aKSBCgWs3ESkkhw8i6SkVE+WyL59UmvgSI2zCVz7PE/yPffYuIEFMg8bSbd u46sR3CSjozKREb2idhjAbrfB+PLMe6xRsTk/+1MOFC0Aukj4awOou92M/mYtXNr R+oH5FTUCgCbOwFTuwmMoGITnVzw50gdWeiKVwatZOM1ZIoZURpVrPa5Hbt/Kkp+ Lp1SEwuI2NQz7yBOwr4zuQ5q55deSzzbI3bc2qRmIf3O25tKOWNH2q4wd0/mc4nM -----END CERTIFICATE-----Generated at Wed Nov 4 22:17:48 2026 by rpki-client