$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705/bbe97a67-0973-4bfa-934d-628e0334b705.mft File: bbe97a67-0973-4bfa-934d-628e0334b705.mft (raw, json) Hash identifier: kY5bHCE3H9y1EfgGhUkyEE+7QRs04BrMmG5RVtjuC+8= Subject key identifier: 99:B0:29:27:4A:3D:F0:26:80:45:B1:CE:F0:11:85:7D:EA:8C:75:68 Authority key identifier: 85:D7:28:E1:02:6D:6C:2D:08:41:45:CA:19:40:EB:08:F7:21:B3:EE Certificate issuer: /CN=bbe97a67-0973-4bfa-934d-628e0334b705 Certificate serial: 010D0C9F4328584BBFE0D935C8AFC2AE14022880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705/bbe97a67-0973-4bfa-934d-628e0334b705.mft Manifest number: 010D0C9F432858488DC8AA46D73A71D122842A6C Signing time: Tue 04 Nov 2025 16:00:04 +0000 Manifest this update: Tue 04 Nov 2025 16:00:04 +0000 Manifest next update: Thu 06 Nov 2025 16:00:00 +0000 Files and hashes: 1: 36900df0-0c64-38e9-a32b-d2bf819186c9.roa (hash: 8yl+rX0TWnyqmeKlPt2DQcS3UZcYXgpwPMN81anMQws=) 2: bbe97a67-0973-4bfa-934d-628e0334b705.crl (hash: j6u+BRZEI5vrM0xyjssvWhCpSY+UbSuM0Hg0KVXMykQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705/bbe97a67-0973-4bfa-934d-628e0334b705.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705/bbe97a67-0973-4bfa-934d-628e0334b705.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:e0:d9:35:c8:af:c2:ae:14:02:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbe97a67-0973-4bfa-934d-628e0334b705 Validity Not Before: Nov 4 16:00:04 2025 GMT Not After : Nov 6 16:00:00 2025 GMT Subject: CN=fe0047e3-76a4-462e-8b1e-e9faa37f5856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:b6:48:e3:b0:4d:99:49:5e:11:0f:65:86:16: 2a:49:75:00:a5:b7:56:d0:f3:d4:e9:3c:44:7f:b0: 56:6e:52:12:2c:a1:64:b0:2c:cb:37:2a:b2:29:12: 90:2a:cd:0d:f5:9b:05:dc:e8:ae:84:a7:96:f1:25: 0e:00:67:12:39:15:35:81:8c:e4:4b:c4:43:15:d7: 2a:46:f1:e9:f9:2d:4a:45:34:fb:3a:eb:40:5a:f2: ad:82:2d:46:47:84:01:f2:c5:30:2b:ee:b3:fb:4c: bc:a3:6e:88:74:8d:c1:cd:8a:4f:a6:dc:75:1e:74: 73:af:2a:2f:54:da:d5:b2:52:10:d1:c1:59:5a:45: e0:ae:1d:11:14:85:e8:cc:c0:d8:e0:ca:87:3e:d0: e0:8a:91:4c:f2:60:ce:66:97:e9:5b:18:37:73:ed: 01:0d:5a:d5:e6:5e:3b:25:1d:63:41:d1:fb:65:d1: f7:26:e9:e7:24:81:84:db:6c:74:3f:1f:5d:b1:b9: c2:41:01:87:ea:7a:46:0b:f7:75:92:db:4a:4a:97: 0f:82:ad:f4:2f:45:f0:1e:58:8c:94:3c:5d:ed:5f: 47:c6:1f:42:cd:f2:d7:21:3b:8f:3c:2b:f8:f0:4e: 36:58:d8:c7:27:59:9b:e3:71:16:18:33:1a:11:7b: e1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B0:29:27:4A:3D:F0:26:80:45:B1:CE:F0:11:85:7D:EA:8C:75:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705/bbe97a67-0973-4bfa-934d-628e0334b705.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705/bbe97a67-0973-4bfa-934d-628e0334b705.crl X509v3 Authority Key Identifier: keyid:85:D7:28:E1:02:6D:6C:2D:08:41:45:CA:19:40:EB:08:F7:21:B3:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:a3:34:41:bf:ad:c4:94:2d:64:32:f3:68:28:bc:4c:5e:1e: 74:53:36:13:9b:29:21:db:7d:ba:dc:f0:0c:d0:fd:cd:75:dd: 4c:c2:5b:7c:b0:c1:20:cd:96:4d:25:eb:4f:23:a5:94:23:04: b5:2e:ca:c6:05:aa:f8:a8:d5:55:94:fc:0f:67:e1:dd:7d:a7: a9:76:b9:5f:fc:49:93:9c:6a:6d:67:fd:7e:0a:b0:d6:3e:f5: 4e:73:52:f8:db:cd:f4:42:09:19:d1:b6:89:22:83:f4:85:82: 0f:26:36:2d:d5:de:8f:8c:70:bc:0b:11:06:0a:75:10:9d:3c: 7d:72:92:f7:b5:96:ac:a9:ba:71:a5:b7:c2:8a:5e:98:d8:5d: 9f:fb:bf:e5:bb:1a:b1:d6:20:4b:c2:90:6f:14:3f:11:08:6a: 0e:45:81:8d:ca:9e:f0:fa:cd:ae:eb:c1:0a:09:5c:c3:f3:15: f7:21:20:6d:27:71:9d:a2:dc:15:42:4a:a7:8b:67:68:e0:71: 69:c8:43:5e:63:3a:f0:8d:99:f8:f1:d1:33:d8:6c:8e:81:fa: f0:56:60:95:2b:9b:6e:42:6b:1c:c7:78:4a:15:37:47:25:20: cc:d6:5f:d2:99:0c:ef:02:40:e3:0d:8e:3f:18:4b:ee:ed:6f: db:e1:cc:bd -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/4Nk1yK/CrhQCKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmJlOTdhNjctMDk3My00YmZhLTkzNGQtNjI4ZTAzMzRi NzA1MB4XDTI1MTEwNDE2MDAwNFoXDTI1MTEwNjE2MDAwMFowLzEtMCsGA1UEAxMk ZmUwMDQ3ZTMtNzZhNC00NjJlLThiMWUtZTlmYWEzN2Y1ODU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9LZI47BNmUleEQ9lhhYqSXUApbdW0PPU6TxE f7BWblISLKFksCzLNyqyKRKQKs0N9ZsF3OiuhKeW8SUOAGcSORU1gYzkS8RDFdcq RvHp+S1KRTT7OutAWvKtgi1GR4QB8sUwK+6z+0y8o26IdI3BzYpPptx1HnRzryov VNrVslIQ0cFZWkXgrh0RFIXozMDY4MqHPtDgipFM8mDOZpfpWxg3c+0BDVrV5l47 JR1jQdH7ZdH3JunnJIGE22x0Px9dsbnCQQGH6npGC/d1kttKSpcPgq30L0XwHliM lDxd7V9Hxh9CzfLXITuPPCv48E42WNjHJ1mb43EWGDMaEXvhvwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJmwKSdKPfAmgEWxzvARhX3qjHVoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iYmU5 N2E2Ny0wOTczLTRiZmEtOTM0ZC02MjhlMDMzNGI3MDUvYmJlOTdhNjctMDk3My00 YmZhLTkzNGQtNjI4ZTAzMzRiNzA1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYmJlOTdhNjctMDk3My00YmZhLTkz NGQtNjI4ZTAzMzRiNzA1L2JiZTk3YTY3LTA5NzMtNGJmYS05MzRkLTYyOGUwMzM0 YjcwNS5jcmwwHwYDVR0jBBgwFoAUhdco4QJtbC0IQUXKGUDrCPchs+4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iYmU5N2E2Ny0wOTczLTRiZmEtOTM0ZC02Mjhl MDMzNGI3MDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAYozRBv63ElC1kMvNoKLxM Xh50UzYTmykh23263PAM0P3Ndd1Mwlt8sMEgzZZNJetPI6WUIwS1LsrGBar4qNVV lPwPZ+Hdfaepdrlf/EmTnGptZ/1+CrDWPvVOc1L42830QgkZ0baJIoP0hYIPJjYt 1d6PjHC8CxEGCnUQnTx9cpL3tZasqbpxpbfCil6Y2F2f+7/luxqx1iBLwpBvFD8R CGoORYGNyp7w+s2u68EKCVzD8xX3ISBtJ3GdotwVQkqni2do4HFpyENeYzrwjZn4 8dEz2GyOgfrwVmCVK5tuQmscx3hKFTdHJSDM1l/SmQzvAkDjDY4/GEvu7W/b4cy9 -----END CERTIFICATE-----Generated at Wed Nov 5 08:48:03 2025 by rpki-client