$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.mft File: bd65975e-d229-45b7-bdbe-46ab8f5d4d04.mft (raw, json) Hash identifier: 3Rw5FP+SRGUje4DtUCc4vp4EgaVT/MZw118uQgy6f+Y= Subject key identifier: 55:58:B5:8E:EC:73:F2:0A:40:75:66:CE:01:32:17:76:D9:F6:8C:CA Authority key identifier: 09:4E:6C:2D:07:E8:0C:96:4C:E7:1F:D5:AD:F3:A2:E7:9E:3C:F2:93 Certificate issuer: /CN=bd65975e-d229-45b7-bdbe-46ab8f5d4d04 Certificate serial: 010D0C9F4328584B93AD00E58C2834CD1D0599A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.mft Manifest number: 010D0C9F4328584073A827C096A3F2C101EAFD14 Signing time: Sun 19 Oct 2025 20:00:03 +0000 Manifest this update: Sun 19 Oct 2025 20:00:03 +0000 Manifest next update: Wed 22 Oct 2025 20:00:00 +0000 Files and hashes: 1: 3918d96d-ec82-3d51-91a7-3a2529db41f1.roa (hash: llF92Fe7mOE+87KQzyW+ZlDtgQyh7OZhrSUW28c6qVY=) 2: bd65975e-d229-45b7-bdbe-46ab8f5d4d04.crl (hash: sCDlVehijl6hiLjfh09ap1gFqtB/zjBpKlhjmQGSuYk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:ad:00:e5:8c:28:34:cd:1d:05:99:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd65975e-d229-45b7-bdbe-46ab8f5d4d04 Validity Not Before: Oct 19 20:00:03 2025 GMT Not After : Oct 22 20:00:00 2025 GMT Subject: CN=65d43e16-ec7d-45b0-b8b8-93351f00b04c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ae:e4:c1:56:f0:58:25:2e:99:76:4a:55:02: 1a:e7:eb:b3:10:4d:c6:4e:2e:3a:72:c3:b8:d4:53: ce:59:ea:95:27:09:2e:a7:29:7e:95:2d:fc:03:dd: 82:93:a9:46:b2:af:a9:13:08:52:eb:17:80:72:6c: 8d:37:57:c2:76:29:55:da:b8:d3:21:0f:0a:e6:ed: f0:53:98:b1:3a:0b:87:12:53:dd:3d:07:e3:e5:ad: d9:e6:66:b7:10:f8:f9:26:8b:c5:40:51:ea:a2:bc: 1d:d9:85:86:b1:ad:00:6b:84:42:24:66:8e:c7:b1: 6b:8b:15:36:ef:64:eb:27:51:62:bf:bf:10:fd:c7: e7:34:92:e9:cb:ea:48:12:2e:c0:c5:72:23:22:1f: 4d:70:27:9f:39:d5:3e:93:93:9c:89:98:b6:e5:a2: 50:dc:1e:37:0b:3e:d8:d1:62:90:1e:14:1b:6a:44: 67:09:5b:8b:0f:96:2a:c3:a7:07:6f:ae:90:27:ed: 5d:3b:a5:ca:12:b8:b1:af:88:19:a3:b0:4b:46:51: 7f:9f:30:c7:cd:71:a2:33:f2:58:0c:a6:78:fa:6e: 6b:d2:ec:a9:7d:e7:a1:97:6d:27:f4:a0:49:df:79: 07:ad:10:ee:3e:b9:ad:b6:98:c8:e8:62:b9:a0:c7: 7e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:58:B5:8E:EC:73:F2:0A:40:75:66:CE:01:32:17:76:D9:F6:8C:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.crl X509v3 Authority Key Identifier: keyid:09:4E:6C:2D:07:E8:0C:96:4C:E7:1F:D5:AD:F3:A2:E7:9E:3C:F2:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:bf:a8:7f:8b:22:90:c5:2e:63:82:c8:65:b5:fe:3c:28:d3: 55:96:09:41:22:3a:9b:fe:1f:75:14:65:63:01:e7:2a:e2:57: 22:e0:fa:f2:87:f6:73:19:8d:e4:7d:18:bc:88:15:02:33:61: e8:52:41:f6:98:cb:b5:83:29:77:42:f2:68:b9:88:53:32:b4: f0:27:59:36:cd:7c:b8:2f:24:ff:59:29:33:f7:d2:9e:ae:dd: 33:20:7e:6e:ef:c0:97:aa:c4:04:00:b2:37:2a:89:dd:8c:7f: 79:c9:60:3d:89:6c:a4:30:a1:32:93:50:96:01:f5:6c:bd:00: ec:ba:02:61:09:14:d0:af:49:b6:3c:bf:58:df:93:eb:4d:bf: 29:46:22:29:05:8c:04:f1:04:ee:3a:8a:7f:b0:c7:cb:0f:d5: a4:74:11:8e:db:3e:c3:42:b3:15:c4:3a:ec:2b:e3:3e:dd:c7: fb:52:1c:e5:02:fa:c2:0c:ee:f2:fe:7a:e4:05:aa:90:9b:32: 20:b1:8c:de:57:0b:94:a5:52:9e:b1:26:66:85:be:8b:14:36: 5a:67:f4:2d:7f:6e:fb:26:82:11:8f:a8:2e:14:4c:1c:35:35: 84:d6:56:a6:f2:86:c8:0f:ae:bc:e5:d9:01:1e:09:5f:dc:b7: 5a:a4:59:96 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuTrQDljCg0zR0FmaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmQ2NTk3NWUtZDIyOS00NWI3LWJkYmUtNDZhYjhmNWQ0 ZDA0MB4XDTI1MTAxOTIwMDAwM1oXDTI1MTAyMjIwMDAwMFowLzEtMCsGA1UEAxMk NjVkNDNlMTYtZWM3ZC00NWIwLWI4YjgtOTMzNTFmMDBiMDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArK7kwVbwWCUumXZKVQIa5+uzEE3GTi46csO4 1FPOWeqVJwkupyl+lS38A92Ck6lGsq+pEwhS6xeAcmyNN1fCdilV2rjTIQ8K5u3w U5ixOguHElPdPQfj5a3Z5ma3EPj5JovFQFHqorwd2YWGsa0Aa4RCJGaOx7FrixU2 72TrJ1Fiv78Q/cfnNJLpy+pIEi7AxXIjIh9NcCefOdU+k5OciZi25aJQ3B43Cz7Y 0WKQHhQbakRnCVuLD5Yqw6cHb66QJ+1dO6XKErixr4gZo7BLRlF/nzDHzXGiM/JY DKZ4+m5r0uypfeehl20n9KBJ33kHrRDuPrmttpjI6GK5oMd+cwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFVYtY7sc/IKQHVmzgEyF3bZ9ozKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZDY1 OTc1ZS1kMjI5LTQ1YjctYmRiZS00NmFiOGY1ZDRkMDQvYmQ2NTk3NWUtZDIyOS00 NWI3LWJkYmUtNDZhYjhmNWQ0ZDA0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmQ2NTk3NWUtZDIyOS00NWI3LWJk YmUtNDZhYjhmNWQ0ZDA0L2JkNjU5NzVlLWQyMjktNDViNy1iZGJlLTQ2YWI4ZjVk NGQwNC5jcmwwHwYDVR0jBBgwFoAUCU5sLQfoDJZM5x/VrfOi55488pMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZDY1OTc1ZS1kMjI5LTQ1YjctYmRiZS00NmFi OGY1ZDRkMDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA8v6h/iyKQxS5jgshltf48 KNNVlglBIjqb/h91FGVjAecq4lci4Pryh/ZzGY3kfRi8iBUCM2HoUkH2mMu1gyl3 QvJouYhTMrTwJ1k2zXy4LyT/WSkz99Kert0zIH5u78CXqsQEALI3KondjH95yWA9 iWykMKEyk1CWAfVsvQDsugJhCRTQr0m2PL9Y35PrTb8pRiIpBYwE8QTuOop/sMfL D9WkdBGO2z7DQrMVxDrsK+M+3cf7UhzlAvrCDO7y/nrkBaqQmzIgsYzeVwuUpVKe sSZmhb6LFDZaZ/Qtf277JoIRj6guFEwcNTWE1lam8obID6685dkBHglf3LdapFmW -----END CERTIFICATE-----Generated at Mon Oct 20 12:39:31 2025 by rpki-client