$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c/bfc0b168-b834-4192-acf1-30565a4b3e0c.mft File: bfc0b168-b834-4192-acf1-30565a4b3e0c.mft (raw, json) Hash identifier: sDeQwR4iK+x+E4PZkUpjR2XC26gUnOMXng+hyW72v5U= Subject key identifier: 8A:C4:D2:9A:16:5F:9A:A0:BB:43:57:4B:42:79:2E:BC:5F:6E:6C:2D Authority key identifier: 0B:5F:68:42:78:8A:DF:A3:B0:1A:AB:9A:E1:3D:C6:B9:1E:0F:D1:A1 Certificate issuer: /CN=bfc0b168-b834-4192-acf1-30565a4b3e0c Certificate serial: 010D0C9F4328584B90A6CF91008F92EA6111CE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c/bfc0b168-b834-4192-acf1-30565a4b3e0c.mft Manifest number: 010D0C9F4328584073A822049B70DB112D5CE2FB Signing time: Sat 18 Oct 2025 18:00:08 +0000 Manifest this update: Sat 18 Oct 2025 18:00:08 +0000 Manifest next update: Mon 20 Oct 2025 18:00:00 +0000 Files and hashes: 1: bfc0b168-b834-4192-acf1-30565a4b3e0c.crl (hash: GIy4ukyE8axh7p9+BPBS8YPZt/35bDPZXsXuM5vEc9I=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c/bfc0b168-b834-4192-acf1-30565a4b3e0c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c/bfc0b168-b834-4192-acf1-30565a4b3e0c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:90:a6:cf:91:00:8f:92:ea:61:11:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfc0b168-b834-4192-acf1-30565a4b3e0c Validity Not Before: Oct 18 18:00:08 2025 GMT Not After : Oct 20 18:00:00 2025 GMT Subject: CN=e0fa3d64-2a60-4466-a13e-172dc69a8a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6f:c1:19:56:80:27:58:e7:f3:6c:fb:79:92: d3:5b:09:b7:39:da:6f:a8:fe:ed:ef:ac:25:bd:ef: 86:bb:96:7b:d1:38:e6:0d:18:20:9a:a9:15:e5:ba: af:df:27:69:98:3b:21:c5:e5:49:5c:d7:2a:9e:ef: da:c9:97:61:38:b0:88:9d:67:e4:5d:b8:f4:a8:75: 3e:4b:d3:13:34:20:c6:69:8a:03:5e:46:87:dc:c4: 91:b4:07:40:1b:ac:a4:10:2c:ba:0e:0c:6c:a4:fa: 34:57:a6:9a:69:ad:26:75:c1:aa:72:44:64:fb:48: ee:9f:d7:e1:82:77:87:be:cd:83:c2:fb:98:fb:f8: 6d:84:bd:b1:ed:80:a4:97:56:c7:7b:10:2f:b8:04: 42:db:32:d6:d4:2a:21:7f:0b:ed:e0:a2:9e:8e:3b: a3:3c:20:7e:f5:3d:87:2d:fa:77:b4:35:de:a3:b0: 3f:90:f2:9e:47:34:00:c9:cc:98:cc:79:31:75:a1: 48:a0:21:51:7a:36:7b:dd:9f:25:4c:d1:80:a2:27: 6a:45:1a:4d:13:1f:ce:3b:13:bb:6e:e8:2c:ff:db: fe:31:08:73:5b:cd:54:13:33:d3:42:34:32:a0:40: c1:dc:35:e6:14:31:18:ae:bb:0f:4f:0d:d5:36:db: b4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C4:D2:9A:16:5F:9A:A0:BB:43:57:4B:42:79:2E:BC:5F:6E:6C:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c/bfc0b168-b834-4192-acf1-30565a4b3e0c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c/bfc0b168-b834-4192-acf1-30565a4b3e0c.crl X509v3 Authority Key Identifier: keyid:0B:5F:68:42:78:8A:DF:A3:B0:1A:AB:9A:E1:3D:C6:B9:1E:0F:D1:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:3c:c0:c9:f7:ad:2d:bd:5c:6d:43:73:03:66:00:2a:33:88: 32:10:95:32:6e:53:f5:b2:78:0b:57:3d:37:2b:17:18:0b:c0: 27:6c:f4:7d:a8:68:90:4f:62:fb:8c:71:75:c6:12:2c:0e:67: 38:0e:43:26:e9:79:99:ee:87:3f:88:27:5b:0c:03:ed:68:bd: ab:d6:f5:92:c7:f4:fc:fc:6c:29:79:31:f1:d1:a4:87:b7:85: 67:4f:6b:0d:94:4d:c5:a8:b4:b0:1d:2c:41:87:7d:37:ab:df: 4d:9a:50:37:ef:ac:3c:32:14:bc:3d:69:78:6b:f8:f7:cc:de: a5:7b:bf:42:ef:5b:03:6f:8c:96:d9:12:ac:76:3d:e7:ab:0e: 5f:78:42:71:5f:c8:9f:5c:4b:53:03:4b:4c:87:b9:fa:11:77: a5:05:2f:0b:d9:4a:6f:9d:71:4f:57:94:62:86:8b:c0:95:86: 51:4f:6e:9c:7f:f4:b0:35:d9:5e:80:c1:96:99:4f:d3:de:d2: 67:e0:50:43:20:68:64:39:57:cf:c3:7e:d3:14:3c:1c:41:90: 50:c6:fa:76:9c:ae:4c:df:48:13:30:c0:42:bd:19:8f:a0:5e: 6b:42:8c:3e:75:7a:25:a8:81:04:e6:36:61:31:1c:38:02:a6: 3b:4e:c3:95 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuQps+RAI+S6mERzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmZjMGIxNjgtYjgzNC00MTkyLWFjZjEtMzA1NjVhNGIz ZTBjMB4XDTI1MTAxODE4MDAwOFoXDTI1MTAyMDE4MDAwMFowLzEtMCsGA1UEAxMk ZTBmYTNkNjQtMmE2MC00NDY2LWExM2UtMTcyZGM2OWE4YTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnW/BGVaAJ1jn82z7eZLTWwm3OdpvqP7t76wl ve+Gu5Z70TjmDRggmqkV5bqv3ydpmDshxeVJXNcqnu/ayZdhOLCInWfkXbj0qHU+ S9MTNCDGaYoDXkaH3MSRtAdAG6ykECy6DgxspPo0V6aaaa0mdcGqckRk+0jun9fh gneHvs2DwvuY+/hthL2x7YCkl1bHexAvuARC2zLW1Cohfwvt4KKejjujPCB+9T2H Lfp3tDXeo7A/kPKeRzQAycyYzHkxdaFIoCFRejZ73Z8lTNGAoidqRRpNEx/OOxO7 bugs/9v+MQhzW81UEzPTQjQyoEDB3DXmFDEYrrsPTw3VNtu0KQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIrE0poWX5qgu0NXS0J5LrxfbmwtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iZmMw YjE2OC1iODM0LTQxOTItYWNmMS0zMDU2NWE0YjNlMGMvYmZjMGIxNjgtYjgzNC00 MTkyLWFjZjEtMzA1NjVhNGIzZTBjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYmZjMGIxNjgtYjgzNC00MTkyLWFj ZjEtMzA1NjVhNGIzZTBjL2JmYzBiMTY4LWI4MzQtNDE5Mi1hY2YxLTMwNTY1YTRi M2UwYy5jcmwwHwYDVR0jBBgwFoAUC19oQniK36OwGqua4T3GuR4P0aEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iZmMwYjE2OC1iODM0LTQxOTItYWNmMS0zMDU2 NWE0YjNlMGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA0PMDJ960tvVxtQ3MDZgAq M4gyEJUyblP1sngLVz03KxcYC8AnbPR9qGiQT2L7jHF1xhIsDmc4DkMm6XmZ7oc/ iCdbDAPtaL2r1vWSx/T8/GwpeTHx0aSHt4VnT2sNlE3FqLSwHSxBh303q99NmlA3 76w8MhS8PWl4a/j3zN6le79C71sDb4yW2RKsdj3nqw5feEJxX8ifXEtTA0tMh7n6 EXelBS8L2UpvnXFPV5RihovAlYZRT26cf/SwNdlegMGWmU/T3tJn4FBDIGhkOVfP w37TFDwcQZBQxvp2nK5M30gTMMBCvRmPoF5rQow+dXolqIEE5jZhMRw4AqY7TsOV -----END CERTIFICATE-----Generated at Sun Oct 19 15:00:20 2025 by rpki-client