$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/bb223f7f-f28b-4df4-b6da-cab48558c2cd.mft File: bb223f7f-f28b-4df4-b6da-cab48558c2cd.mft (raw, json) Hash identifier: oaMyBY9vT/tegGwo4MxKz55a5llGAB8Vx96c/awFIO0= Subject key identifier: B5:F0:C4:71:2F:B5:C3:B4:BA:68:A2:C4:D6:92:9D:08:2E:3E:E8:6F Authority key identifier: 1C:B4:00:9E:47:2B:68:26:87:FE:C2:5E:72:62:46:1F:5D:22:E4:74 Certificate issuer: /CN=bb223f7f-f28b-4df4-b6da-cab48558c2cd Certificate serial: 010D0C9F4328584B956BABB9A2D6714E4570DE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/bb223f7f-f28b-4df4-b6da-cab48558c2cd.mft Manifest number: 010D0C9F4328584481AA90A7F37F162B5DB29F19 Signing time: Mon 20 Oct 2025 11:00:03 +0000 Manifest this update: Mon 20 Oct 2025 11:00:03 +0000 Manifest next update: Wed 22 Oct 2025 11:00:00 +0000 Files and hashes: 1: 0643f9f7-9d02-32fe-847d-014edce56609.roa (hash: jnWPt/rKci906Ko2HWC6vbzI430SrA5rG5sDzCO7S78=) 2: 57c5f4f5-c728-3a3e-ad36-b77b88ab34ea.roa (hash: Zn13Erdo4faMNHu+1kGbuyD+kQwdey6O5tYPfRclWHc=) 3: bb223f7f-f28b-4df4-b6da-cab48558c2cd.crl (hash: /oMPxOczwYfNZBggbfu/ePppX4uiFAoU8GBx6tBYUbU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/bb223f7f-f28b-4df4-b6da-cab48558c2cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/bb223f7f-f28b-4df4-b6da-cab48558c2cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:6b:ab:b9:a2:d6:71:4e:45:70:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb223f7f-f28b-4df4-b6da-cab48558c2cd Validity Not Before: Oct 20 11:00:03 2025 GMT Not After : Oct 22 11:00:00 2025 GMT Subject: CN=2f58e537-17cd-4920-a226-fa5e6c93d6a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ee:da:3a:83:cb:ea:08:b8:40:75:36:d1:27: 3c:93:55:a7:cc:cf:73:4c:ee:b8:8e:ec:f2:38:1a: 26:6b:df:b2:21:a4:14:f4:3e:8b:42:8c:ee:5a:aa: 65:b2:4a:f1:eb:69:e3:ef:ad:26:92:71:bf:1d:d9: c9:48:ce:1e:bf:12:5c:41:31:e6:69:03:13:bd:fe: bb:c2:b3:66:65:99:1b:ae:38:cd:b9:6a:91:98:f4: 2a:e8:a0:da:2b:3b:93:fc:c7:cd:80:57:23:f0:a4: 0d:c7:90:96:4e:16:be:86:07:a1:bd:6d:44:3c:85: ff:31:58:18:99:6a:17:95:3e:3f:e8:e9:8d:3d:ca: 30:05:3d:ea:e8:f0:4d:e0:3c:67:1f:a3:73:6f:2e: 1e:30:80:e5:70:8f:4e:2c:1c:bc:67:e6:99:ce:a8: 49:28:36:1e:d3:15:24:f4:22:53:0c:ae:e6:50:34: 78:ab:ae:fe:54:c8:f7:ba:08:12:46:31:b9:c3:e7: 1f:a1:ca:c2:51:99:65:02:e7:d8:7a:c1:4a:e9:cd: 64:41:7b:f6:61:39:63:65:d7:cb:97:64:6b:6b:a6: 5e:c5:ed:e4:20:ec:a7:f7:a4:9d:ba:a9:ca:a0:dd: f4:93:ac:1d:fa:a5:ab:a5:6a:44:a2:db:f5:71:82: 37:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F0:C4:71:2F:B5:C3:B4:BA:68:A2:C4:D6:92:9D:08:2E:3E:E8:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/bb223f7f-f28b-4df4-b6da-cab48558c2cd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/bb223f7f-f28b-4df4-b6da-cab48558c2cd.crl X509v3 Authority Key Identifier: keyid:1C:B4:00:9E:47:2B:68:26:87:FE:C2:5E:72:62:46:1F:5D:22:E4:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:2a:f4:98:fa:ae:ad:49:f3:c6:29:70:0a:78:69:d1:0b:a4: 99:09:8f:18:cb:f6:b2:2f:db:90:23:4d:77:eb:12:50:09:f6: 89:35:4c:bb:d9:a0:98:3c:1f:5a:f0:c9:49:17:e5:7a:b4:00: 4d:c6:68:cd:46:6a:c8:bf:b4:80:24:07:5f:2d:86:39:a9:49: 91:ac:3f:a2:ed:de:1d:c6:1d:77:a4:31:34:ac:1d:82:07:be: ea:45:c8:49:37:cc:4c:c8:af:b7:a1:6f:4f:d1:2d:a1:fb:fe: e8:c9:89:95:3d:50:69:31:0f:96:00:6f:af:0c:a1:70:ac:9d: f6:20:d2:53:3e:fe:bf:55:00:47:0c:71:a2:e9:fb:17:e1:a2: 48:b9:a9:71:a3:0e:62:0b:a0:53:21:0f:91:74:6e:8e:43:a1: c9:9d:60:b0:e6:bc:3b:67:b6:f0:62:6c:fd:61:6b:b4:a4:95: 15:8e:f3:ab:f4:c0:58:02:a7:7b:2f:a9:f1:35:0b:49:90:8b: 8f:ea:3b:7e:c4:ca:ba:c7:ee:8d:55:40:68:b4:61:01:9f:0f: dc:66:05:70:9f:97:15:a5:37:8c:de:ef:51:bf:f0:d0:6f:06: 97:70:7f:62:cb:c5:38:b1:58:68:85:66:52:16:f2:06:43:7c: 09:41:ed:a4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuVa6u5otZxTkVw3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmIyMjNmN2YtZjI4Yi00ZGY0LWI2ZGEtY2FiNDg1NThj MmNkMB4XDTI1MTAyMDExMDAwM1oXDTI1MTAyMjExMDAwMFowLzEtMCsGA1UEAxMk MmY1OGU1MzctMTdjZC00OTIwLWEyMjYtZmE1ZTZjOTNkNmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhu7aOoPL6gi4QHU20Sc8k1WnzM9zTO64juzy OBoma9+yIaQU9D6LQozuWqplskrx62nj760mknG/HdnJSM4evxJcQTHmaQMTvf67 wrNmZZkbrjjNuWqRmPQq6KDaKzuT/MfNgFcj8KQNx5CWTha+hgehvW1EPIX/MVgY mWoXlT4/6OmNPcowBT3q6PBN4DxnH6Nzby4eMIDlcI9OLBy8Z+aZzqhJKDYe0xUk 9CJTDK7mUDR4q67+VMj3uggSRjG5w+cfocrCUZllAufYesFK6c1kQXv2YTljZdfL l2Rra6Zexe3kIOyn96SduqnKoN30k6wd+qWrpWpEotv1cYI3BwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLXwxHEvtcO0umiixNaSnQguPuhvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iYjIy M2Y3Zi1mMjhiLTRkZjQtYjZkYS1jYWI0ODU1OGMyY2QvYmIyMjNmN2YtZjI4Yi00 ZGY0LWI2ZGEtY2FiNDg1NThjMmNkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmIyMjNmN2YtZjI4Yi00ZGY0LWI2 ZGEtY2FiNDg1NThjMmNkL2JiMjIzZjdmLWYyOGItNGRmNC1iNmRhLWNhYjQ4NTU4 YzJjZC5jcmwwHwYDVR0jBBgwFoAUHLQAnkcraCaH/sJecmJGH10i5HQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iYjIyM2Y3Zi1mMjhiLTRkZjQtYjZkYS1jYWI0 ODU1OGMyY2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCOKvSY+q6tSfPGKXAKeGnR C6SZCY8Yy/ayL9uQI0136xJQCfaJNUy72aCYPB9a8MlJF+V6tABNxmjNRmrIv7SA JAdfLYY5qUmRrD+i7d4dxh13pDE0rB2CB77qRchJN8xMyK+3oW9P0S2h+/7oyYmV PVBpMQ+WAG+vDKFwrJ32INJTPv6/VQBHDHGi6fsX4aJIualxow5iC6BTIQ+RdG6O Q6HJnWCw5rw7Z7bwYmz9YWu0pJUVjvOr9MBYAqd7L6nxNQtJkIuP6jt+xMq6x+6N VUBotGEBnw/cZgVwn5cVpTeM3u9Rv/DQbwaXcH9iy8U4sVhohWZSFvIGQ3wJQe2k -----END CERTIFICATE-----Generated at Mon Oct 20 20:44:06 2025 by rpki-client