$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.mft File: bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.mft (raw, json) Hash identifier: p0fY1j0MEE8SWVEM5qPHqDAae0suoGckgYx+cXbcpZE= Subject key identifier: 6C:CB:DF:98:A6:E7:1B:E8:A6:DF:A3:2B:60:EB:15:0A:5D:C1:FE:A8 Authority key identifier: A8:7C:BC:02:A0:48:D4:7A:E9:DA:8D:36:46:F5:24:F2:0D:65:29:6A Certificate issuer: /CN=bf07f8a7-1a95-4127-aa54-a5c85bcca9b8 Certificate serial: 010D0C9F4328584B956BAF22FE399E9430D1BE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.mft Manifest number: 010D0C9F4328584073A850B44D23714C2A8A2B94 Signing time: Mon 20 Oct 2025 11:00:03 +0000 Manifest this update: Mon 20 Oct 2025 11:00:03 +0000 Manifest next update: Thu 23 Oct 2025 11:00:00 +0000 Files and hashes: 1: 41f5ef31-c5d9-309f-bb2c-fd3013b7f8c3.roa (hash: LHka/uP7HlplZyqCLfRNgi7TFUYRpzlTltvWzUZTM9s=) 2: bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.crl (hash: 9LiNdHM9QI8KiKlNAemG7yQ1zvMuputdUu7fF+r87A8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:6b:af:22:fe:39:9e:94:30:d1:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf07f8a7-1a95-4127-aa54-a5c85bcca9b8 Validity Not Before: Oct 20 11:00:03 2025 GMT Not After : Oct 23 11:00:00 2025 GMT Subject: CN=7c08c2ba-a3fb-4c68-8606-4b35ac54980d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3f:2c:c3:94:96:f4:6c:20:ba:ea:2a:77:f2: 68:0d:23:a7:99:2b:ef:20:46:4f:45:0f:d5:e8:98: 44:66:44:d3:c4:37:7a:a3:4d:1a:8e:c6:a4:81:04: ac:73:e6:69:56:b8:47:bd:d9:52:e6:5d:65:34:55: 3e:13:57:a0:a2:62:f6:d3:23:bf:d1:74:0b:df:84: 87:7e:4e:d4:01:b8:18:6b:43:10:5e:15:3b:0c:83: 6a:d1:ee:de:b4:83:a0:30:53:ec:d4:0e:0d:d7:8a: 22:a2:56:95:f0:0e:30:ff:d9:08:ec:16:de:4d:34: fa:b4:cd:cc:76:e0:b2:07:d1:35:33:4b:e0:1d:40: 5e:32:8e:46:a2:30:99:d5:e9:0a:e3:13:31:69:98: 9c:66:7b:09:7f:39:16:71:58:89:29:1c:aa:fb:fa: 31:32:7f:ae:82:be:5f:6e:ae:22:09:36:f9:22:a3: 6e:85:b3:77:6d:ae:ec:11:72:6d:ad:8d:ce:da:4b: ee:ac:03:32:bc:4a:b0:cb:f8:1a:27:1d:44:43:e0: e7:86:55:37:ef:90:e2:14:cf:60:7b:61:bb:3f:20: e1:6e:4b:8b:10:59:2f:4f:26:0e:2b:d3:e4:ca:e0: 1e:06:af:64:5c:44:34:0c:07:c1:bf:1d:ce:8c:3a: c7:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:CB:DF:98:A6:E7:1B:E8:A6:DF:A3:2B:60:EB:15:0A:5D:C1:FE:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.crl X509v3 Authority Key Identifier: keyid:A8:7C:BC:02:A0:48:D4:7A:E9:DA:8D:36:46:F5:24:F2:0D:65:29:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:a9:aa:b5:4c:91:bd:07:62:05:c7:80:f6:29:df:20:50:48: 2a:00:07:cf:db:f3:94:8c:7d:64:b7:54:a1:98:21:db:60:b0: b6:4d:78:b1:80:41:a1:2b:fe:df:31:65:0b:8c:8b:11:cf:e9: 15:55:98:2f:7b:9c:6e:28:03:f0:5b:5e:4b:c4:2f:f5:b3:d4: 06:f1:1e:f6:7d:33:27:b6:91:77:6c:38:2d:7e:ab:31:ee:b5: 1e:44:b6:00:4f:71:d1:7f:1e:6b:a0:96:11:1c:6e:d4:62:33: a3:84:4d:0c:e9:65:d2:9a:32:42:30:1e:d4:5e:92:5c:29:b5: 8d:40:73:bc:4e:08:0c:82:28:c1:b4:3e:24:d3:ea:25:90:47: 33:e5:9a:6e:6b:01:ef:eb:34:a4:52:ff:51:f3:62:50:9a:d7: 67:55:e1:f5:53:1a:21:94:8a:5b:54:fb:13:4a:48:aa:a9:b5: d6:de:b6:7d:c6:54:8e:69:db:16:1f:b5:3b:a9:f5:bd:84:d1: c6:54:bb:68:f0:4d:b2:07:9d:f9:99:50:c8:e5:c5:f6:e3:c6: 5b:d0:dc:72:2c:28:4a:cc:5d:77:30:df:7c:cb:09:88:84:56: 28:cf:90:d5:1b:46:47:99:1f:eb:e7:d5:cb:e4:1e:8d:ec:0b: db:d3:57:a3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuVa68i/jmelDDRvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYwN2Y4YTctMWE5NS00MTI3LWFhNTQtYTVjODViY2Nh OWI4MB4XDTI1MTAyMDExMDAwM1oXDTI1MTAyMzExMDAwMFowLzEtMCsGA1UEAxMk N2MwOGMyYmEtYTNmYi00YzY4LTg2MDYtNGIzNWFjNTQ5ODBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwT8sw5SW9Gwguuoqd/JoDSOnmSvvIEZPRQ/V 6JhEZkTTxDd6o00ajsakgQSsc+ZpVrhHvdlS5l1lNFU+E1egomL20yO/0XQL34SH fk7UAbgYa0MQXhU7DINq0e7etIOgMFPs1A4N14oiolaV8A4w/9kI7BbeTTT6tM3M duCyB9E1M0vgHUBeMo5GojCZ1ekK4xMxaZicZnsJfzkWcViJKRyq+/oxMn+ugr5f bq4iCTb5IqNuhbN3ba7sEXJtrY3O2kvurAMyvEqwy/gaJx1EQ+DnhlU375DiFM9g e2G7PyDhbkuLEFkvTyYOK9PkyuAeBq9kXEQ0DAfBvx3OjDrHoQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGzL35im5xvopt+jK2DrFQpdwf6oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjA3 ZjhhNy0xYTk1LTQxMjctYWE1NC1hNWM4NWJjY2E5YjgvYmYwN2Y4YTctMWE5NS00 MTI3LWFhNTQtYTVjODViY2NhOWI4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYwN2Y4YTctMWE5NS00MTI3LWFh NTQtYTVjODViY2NhOWI4L2JmMDdmOGE3LTFhOTUtNDEyNy1hYTU0LWE1Yzg1YmNj YTliOC5jcmwwHwYDVR0jBBgwFoAUqHy8AqBI1Hrp2o02RvUk8g1lKWowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjA3ZjhhNy0xYTk1LTQxMjctYWE1NC1hNWM4 NWJjY2E5YjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBVqaq1TJG9B2IFx4D2Kd8g UEgqAAfP2/OUjH1kt1ShmCHbYLC2TXixgEGhK/7fMWULjIsRz+kVVZgve5xuKAPw W15LxC/1s9QG8R72fTMntpF3bDgtfqsx7rUeRLYAT3HRfx5roJYRHG7UYjOjhE0M 6WXSmjJCMB7UXpJcKbWNQHO8TggMgijBtD4k0+olkEcz5ZpuawHv6zSkUv9R82JQ mtdnVeH1UxohlIpbVPsTSkiqqbXW3rZ9xlSOadsWH7U7qfW9hNHGVLto8E2yB535 mVDI5cX248Zb0NxyLChKzF13MN98ywmIhFYoz5DVG0ZHmR/r59XL5B6N7Avb01ej -----END CERTIFICATE-----Generated at Mon Oct 20 15:52:11 2025 by rpki-client