$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bd0ce919-16d9-467e-98f3-d90c253b927a/bd0ce919-16d9-467e-98f3-d90c253b927a.mft File: bd0ce919-16d9-467e-98f3-d90c253b927a.mft (raw, json) Hash identifier: fQrAbzIn1z/8mVBRByW3YCELjTKFLq6RdBo6SfWwhio= Subject key identifier: F7:35:DA:35:4B:82:4D:CC:A4:60:3A:FB:78:3D:9B:01:14:2B:DF:B5 Authority key identifier: 94:37:0F:0E:20:B9:B1:75:4D:67:32:00:23:BD:98:10:D3:94:43:F4 Certificate issuer: /CN=bd0ce919-16d9-467e-98f3-d90c253b927a Certificate serial: 010D0C9F4328584B9406550F75FAA6C2C82BDA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bd0ce919-16d9-467e-98f3-d90c253b927a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bd0ce919-16d9-467e-98f3-d90c253b927a/bd0ce919-16d9-467e-98f3-d90c253b927a.mft Manifest number: 010D0C9F43285849390F847F1443983744D0779D Signing time: Sun 19 Oct 2025 23:00:03 +0000 Manifest this update: Sun 19 Oct 2025 23:00:03 +0000 Manifest next update: Wed 22 Oct 2025 23:00:00 +0000 Files and hashes: 1: 07c3d57e-a100-3bc3-92a3-16377b81b3db.roa (hash: TeZ9xNrEqTu9hISonnd1MH/VBvRjo7QqG4rmyIP1sC0=) 2: bd0ce919-16d9-467e-98f3-d90c253b927a.crl (hash: 55NyYYzyJYdb5+wAorhz1KVB4TyMEGCD+P9AYbyQxNk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bd0ce919-16d9-467e-98f3-d90c253b927a/bd0ce919-16d9-467e-98f3-d90c253b927a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bd0ce919-16d9-467e-98f3-d90c253b927a/bd0ce919-16d9-467e-98f3-d90c253b927a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bd0ce919-16d9-467e-98f3-d90c253b927a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:06:55:0f:75:fa:a6:c2:c8:2b:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd0ce919-16d9-467e-98f3-d90c253b927a Validity Not Before: Oct 19 23:00:03 2025 GMT Not After : Oct 22 23:00:00 2025 GMT Subject: CN=6abd4b37-ee8a-4dfa-ba63-f6d587d280aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b5:86:b3:c0:9f:b5:81:cf:14:11:d3:6f:ab: c9:02:55:0d:38:af:10:a1:f6:b8:4d:47:75:fb:e7: 62:bf:a6:9b:44:bd:fb:21:41:5d:71:35:1e:a0:d7: 1e:10:14:ab:43:90:dc:9e:ac:1a:8c:38:66:f5:ad: 7f:c3:a7:f1:d2:a3:30:a2:19:fd:68:b6:d3:87:39: 73:b8:ce:f5:01:64:8c:55:7e:2b:a8:bf:76:9b:61: 8e:42:d6:62:7f:ac:18:64:f2:fd:cc:8d:ba:fc:9d: dd:a3:46:60:57:89:ff:e0:72:8c:72:f6:88:47:ea: b7:e7:b5:1a:76:13:e6:17:5a:94:c7:e5:e2:93:68: 1a:c0:e9:2c:97:b0:7d:4b:30:26:a3:00:de:25:72: d6:24:95:40:c9:0c:f4:b5:5e:da:4b:98:c5:85:0d: c2:2b:a7:4e:1f:b8:d1:df:03:8e:17:c9:b6:56:dc: 9b:02:73:7f:b0:ec:fb:b4:c8:fd:d5:fc:b8:9b:b2: 28:e7:d6:e4:ef:72:1b:18:79:5e:4f:17:94:f4:1b: a7:37:6d:4e:59:60:a0:14:69:7a:ee:70:ff:c8:e7: 4d:48:f3:a5:b2:79:ee:c5:a9:e0:87:01:49:1e:d1: 54:7c:17:bc:86:5b:de:5c:64:ef:72:0c:d0:59:77: 83:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:35:DA:35:4B:82:4D:CC:A4:60:3A:FB:78:3D:9B:01:14:2B:DF:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bd0ce919-16d9-467e-98f3-d90c253b927a/bd0ce919-16d9-467e-98f3-d90c253b927a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bd0ce919-16d9-467e-98f3-d90c253b927a/bd0ce919-16d9-467e-98f3-d90c253b927a.crl X509v3 Authority Key Identifier: keyid:94:37:0F:0E:20:B9:B1:75:4D:67:32:00:23:BD:98:10:D3:94:43:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bd0ce919-16d9-467e-98f3-d90c253b927a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:c5:5f:13:9e:c4:09:2d:ab:60:bb:75:be:c2:a5:66:5a:be: 49:cb:ed:e6:48:a0:56:b0:6e:f3:43:de:f1:60:95:69:7b:7f: d7:c2:f5:df:58:ea:1f:7e:ee:9e:c1:fd:2f:62:3a:a9:e2:0a: f7:88:01:9f:3b:c8:c4:8b:80:08:e4:6e:e9:2e:7f:13:60:71: 9c:cc:07:35:25:7e:66:63:e5:19:d1:97:7f:b1:b5:0b:fc:64: 0e:12:2b:fd:11:db:21:99:d5:20:36:2d:ce:48:40:d8:29:ec: fe:cd:2a:71:98:02:92:da:cc:cf:60:61:58:64:be:c5:75:ec: bf:41:83:7a:08:b5:c3:bf:f5:63:f7:59:3b:58:45:94:fb:8e: 92:a3:c5:a9:8d:92:4d:c0:52:c6:29:b8:87:64:db:b9:59:58: 89:17:df:d4:9e:31:24:3d:f4:29:84:ed:c7:90:8a:7b:e5:b1: 40:e7:7f:ad:09:be:0c:92:16:00:80:30:7c:f7:6a:43:8f:19: cc:45:c2:2b:9f:20:c8:35:f0:eb:74:a5:96:90:ce:04:1b:b3: 04:9c:1e:36:4f:18:b2:5b:b2:7c:d9:e8:70:36:d0:d6:c4:27: 9c:67:66:df:15:7b:1a:31:5c:57:7c:5d:46:6c:92:d8:60:cf: 68:55:b5:12 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuUBlUPdfqmwsgr2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmQwY2U5MTktMTZkOS00NjdlLTk4ZjMtZDkwYzI1M2I5 MjdhMB4XDTI1MTAxOTIzMDAwM1oXDTI1MTAyMjIzMDAwMFowLzEtMCsGA1UEAxMk NmFiZDRiMzctZWU4YS00ZGZhLWJhNjMtZjZkNTg3ZDI4MGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbWGs8CftYHPFBHTb6vJAlUNOK8Qofa4TUd1 ++div6abRL37IUFdcTUeoNceEBSrQ5DcnqwajDhm9a1/w6fx0qMwohn9aLbThzlz uM71AWSMVX4rqL92m2GOQtZif6wYZPL9zI26/J3do0ZgV4n/4HKMcvaIR+q357Ua dhPmF1qUx+Xik2gawOksl7B9SzAmowDeJXLWJJVAyQz0tV7aS5jFhQ3CK6dOH7jR 3wOOF8m2VtybAnN/sOz7tMj91fy4m7Io59bk73IbGHleTxeU9BunN21OWWCgFGl6 7nD/yOdNSPOlsnnuxanghwFJHtFUfBe8hlveXGTvcgzQWXeDFwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPc12jVLgk3MpGA6+3g9mwEUK9+1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iZDBj ZTkxOS0xNmQ5LTQ2N2UtOThmMy1kOTBjMjUzYjkyN2EvYmQwY2U5MTktMTZkOS00 NjdlLTk4ZjMtZDkwYzI1M2I5MjdhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYmQwY2U5MTktMTZkOS00NjdlLTk4 ZjMtZDkwYzI1M2I5MjdhL2JkMGNlOTE5LTE2ZDktNDY3ZS05OGYzLWQ5MGMyNTNi OTI3YS5jcmwwHwYDVR0jBBgwFoAUlDcPDiC5sXVNZzIAI72YENOUQ/QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iZDBjZTkxOS0xNmQ5LTQ2N2UtOThmMy1kOTBj MjUzYjkyN2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBzxV8TnsQJLatgu3W+wqVm Wr5Jy+3mSKBWsG7zQ97xYJVpe3/XwvXfWOoffu6ewf0vYjqp4gr3iAGfO8jEi4AI 5G7pLn8TYHGczAc1JX5mY+UZ0Zd/sbUL/GQOEiv9EdshmdUgNi3OSEDYKez+zSpx mAKS2szPYGFYZL7Fdey/QYN6CLXDv/Vj91k7WEWU+46So8WpjZJNwFLGKbiHZNu5 WViJF9/UnjEkPfQphO3HkIp75bFA53+tCb4MkhYAgDB892pDjxnMRcIrnyDINfDr dKWWkM4EG7MEnB42TxiyW7J82ehwNtDWxCecZ2bfFXsaMVxXfF1GbJLYYM9oVbUS -----END CERTIFICATE-----Generated at Mon Oct 20 07:26:46 2025 by rpki-client