$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bd0ce919-16d9-467e-98f3-d90c253b927a/bd0ce919-16d9-467e-98f3-d90c253b927a.mft File: bd0ce919-16d9-467e-98f3-d90c253b927a.mft (raw, json) Hash identifier: lLfa+3Sm2F5h9XKIhPE7pYwSizUbMPihMDQzJ805mBM= Subject key identifier: A2:C4:2F:F0:17:EC:DF:2E:95:09:E2:57:10:3B:84:D4:5D:E8:2F:F0 Authority key identifier: 94:37:0F:0E:20:B9:B1:75:4D:67:32:00:23:BD:98:10:D3:94:43:F4 Certificate issuer: /CN=bd0ce919-16d9-467e-98f3-d90c253b927a Certificate serial: 010D0C9F4328584BC0B148BB899278D39885C680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bd0ce919-16d9-467e-98f3-d90c253b927a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bd0ce919-16d9-467e-98f3-d90c253b927a/bd0ce919-16d9-467e-98f3-d90c253b927a.mft Manifest number: 010D0C9F43285849390F847F1443983744D077AD Signing time: Tue 04 Nov 2025 23:00:03 +0000 Manifest this update: Tue 04 Nov 2025 23:00:03 +0000 Manifest next update: Fri 07 Nov 2025 23:00:00 +0000 Files and hashes: 1: 07c3d57e-a100-3bc3-92a3-16377b81b3db.roa (hash: TeZ9xNrEqTu9hISonnd1MH/VBvRjo7QqG4rmyIP1sC0=) 2: bd0ce919-16d9-467e-98f3-d90c253b927a.crl (hash: MH6IS/zETIixfB6TCDxpOnJ2F0XWBS7kBth3PkvxKmM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bd0ce919-16d9-467e-98f3-d90c253b927a/bd0ce919-16d9-467e-98f3-d90c253b927a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bd0ce919-16d9-467e-98f3-d90c253b927a/bd0ce919-16d9-467e-98f3-d90c253b927a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bd0ce919-16d9-467e-98f3-d90c253b927a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:b1:48:bb:89:92:78:d3:98:85:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd0ce919-16d9-467e-98f3-d90c253b927a Validity Not Before: Nov 4 23:00:03 2025 GMT Not After : Nov 7 23:00:00 2025 GMT Subject: CN=ea831eeb-5f0f-440b-9b12-95420133f97c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f7:f7:99:d0:66:f0:79:a2:5c:75:10:8e:98: 8a:47:26:41:ff:dd:17:3d:dc:bb:7e:41:0d:7d:db: f1:fa:0e:e1:65:1b:7c:d6:22:a8:7b:e3:28:e0:53: 26:b8:ad:1b:d3:b2:5a:35:85:ff:96:56:63:00:1c: d5:17:4c:ee:a4:7a:d4:6b:69:24:4e:2a:b1:c4:20: db:5d:44:ca:e1:4a:bf:65:8f:f6:9b:b8:72:d8:2a: ab:33:e8:12:7a:10:9c:de:02:18:d4:ea:0b:dd:e4: 80:8b:63:10:69:a5:38:3d:7e:7a:97:74:c7:fe:d9: 1a:94:da:68:f0:d9:3c:f1:ad:1d:8e:ee:e0:85:fe: 07:fe:08:c7:7d:0c:cd:b4:44:49:52:b9:6c:82:00: 02:ca:02:10:4e:47:6e:55:f3:3e:05:05:b5:cf:3e: 44:8e:66:71:b8:a9:3b:13:21:04:e7:0a:04:ab:b5: 6e:62:aa:af:a1:b0:80:94:2c:c2:dd:fb:ad:54:61: 98:1c:7e:a3:92:f4:0f:1f:a3:f5:34:31:62:3e:b1: cd:7c:3e:05:2e:31:96:0a:04:44:fa:6a:d2:b1:5c: ce:76:0d:9d:8c:6e:1b:4a:0e:d6:f4:2b:d1:5d:d0: b0:ac:7f:5e:9a:da:bc:22:34:f8:3c:51:ce:cc:4f: 18:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C4:2F:F0:17:EC:DF:2E:95:09:E2:57:10:3B:84:D4:5D:E8:2F:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bd0ce919-16d9-467e-98f3-d90c253b927a/bd0ce919-16d9-467e-98f3-d90c253b927a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bd0ce919-16d9-467e-98f3-d90c253b927a/bd0ce919-16d9-467e-98f3-d90c253b927a.crl X509v3 Authority Key Identifier: keyid:94:37:0F:0E:20:B9:B1:75:4D:67:32:00:23:BD:98:10:D3:94:43:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bd0ce919-16d9-467e-98f3-d90c253b927a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:ea:04:5e:f5:fd:81:f0:d6:bd:12:c0:79:f6:22:be:33:b6: ee:76:24:2a:45:71:85:a1:48:5e:2e:7c:40:2d:3e:16:52:0f: 6a:33:52:eb:da:54:85:22:cc:5f:54:20:cd:10:ae:ca:52:46: 8a:e5:6a:cf:d4:cb:fd:36:a4:c6:f5:7e:d9:6d:2e:89:65:28: 06:38:4d:2a:59:27:52:24:5d:24:e8:81:7d:6a:1a:78:50:64: 2c:a7:21:11:3b:8d:46:7b:ee:d0:a2:56:3a:3b:89:02:15:fe: da:68:01:69:3c:c1:36:69:cf:b0:02:ee:da:cf:17:8d:ba:11: 5d:d8:f1:94:1d:f5:b3:4d:3f:38:2e:94:ee:4d:82:0a:b9:f8: 25:02:13:83:64:f5:c1:89:41:2d:25:b7:f8:b7:35:d9:85:93: a1:c0:a7:12:cb:51:be:6e:6e:b2:54:a0:6d:09:61:34:a9:4a: 0b:c4:65:37:35:45:bc:d6:01:b3:7f:5b:97:ab:e4:19:3e:db: 11:4e:4a:de:37:54:63:df:c2:af:ed:95:83:0c:88:39:32:ec: dd:46:d6:09:25:68:1d:f2:01:d5:12:c1:ef:be:88:38:74:34: ed:f8:b1:15:3a:cf:27:77:df:36:a1:ed:dd:8a:45:0f:c8:0e: 43:93:6b:92 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAsUi7iZJ405iFxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmQwY2U5MTktMTZkOS00NjdlLTk4ZjMtZDkwYzI1M2I5 MjdhMB4XDTI1MTEwNDIzMDAwM1oXDTI1MTEwNzIzMDAwMFowLzEtMCsGA1UEAxMk ZWE4MzFlZWItNWYwZi00NDBiLTliMTItOTU0MjAxMzNmOTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvf3mdBm8HmiXHUQjpiKRyZB/90XPdy7fkEN fdvx+g7hZRt81iKoe+Mo4FMmuK0b07JaNYX/llZjABzVF0zupHrUa2kkTiqxxCDb XUTK4Uq/ZY/2m7hy2CqrM+gSehCc3gIY1OoL3eSAi2MQaaU4PX56l3TH/tkalNpo 8Nk88a0dju7ghf4H/gjHfQzNtERJUrlsggACygIQTkduVfM+BQW1zz5EjmZxuKk7 EyEE5woEq7VuYqqvobCAlCzC3futVGGYHH6jkvQPH6P1NDFiPrHNfD4FLjGWCgRE +mrSsVzOdg2djG4bSg7W9CvRXdCwrH9emtq8IjT4PFHOzE8Y2QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKLEL/AX7N8ulQniVxA7hNRd6C/wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iZDBj ZTkxOS0xNmQ5LTQ2N2UtOThmMy1kOTBjMjUzYjkyN2EvYmQwY2U5MTktMTZkOS00 NjdlLTk4ZjMtZDkwYzI1M2I5MjdhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYmQwY2U5MTktMTZkOS00NjdlLTk4 ZjMtZDkwYzI1M2I5MjdhL2JkMGNlOTE5LTE2ZDktNDY3ZS05OGYzLWQ5MGMyNTNi OTI3YS5jcmwwHwYDVR0jBBgwFoAUlDcPDiC5sXVNZzIAI72YENOUQ/QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iZDBjZTkxOS0xNmQ5LTQ2N2UtOThmMy1kOTBj MjUzYjkyN2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAD6gRe9f2B8Na9EsB59iK+ M7budiQqRXGFoUheLnxALT4WUg9qM1Lr2lSFIsxfVCDNEK7KUkaK5WrP1Mv9NqTG 9X7ZbS6JZSgGOE0qWSdSJF0k6IF9ahp4UGQspyERO41Ge+7QolY6O4kCFf7aaAFp PME2ac+wAu7azxeNuhFd2PGUHfWzTT84LpTuTYIKufglAhODZPXBiUEtJbf4tzXZ hZOhwKcSy1G+bm6yVKBtCWE0qUoLxGU3NUW81gGzf1uXq+QZPtsRTkreN1Rj38Kv 7ZWDDIg5MuzdRtYJJWgd8gHVEsHvvog4dDTt+LEVOs8nd982oe3dikUPyA5Dk2uS -----END CERTIFICATE-----Generated at Wed Nov 5 10:46:42 2025 by rpki-client