$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.mft File: bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.mft (raw, json) Hash identifier: r2fMb1U46w55rPL59A2bPthhoBU6OGs2i8AO3nRNQno= Subject key identifier: F1:3A:ED:6D:2A:BC:0F:C1:C6:1D:B1:E0:8A:77:DA:35:2D:25:C6:AF Authority key identifier: A8:7C:BC:02:A0:48:D4:7A:E9:DA:8D:36:46:F5:24:F2:0D:65:29:6A Certificate issuer: /CN=bf07f8a7-1a95-4127-aa54-a5c85bcca9b8 Certificate serial: 010D0C9F4328584B76B6347299BB8A419F757400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.mft Manifest number: 010D0C9F4328584073A850B44D23714C2A8A2B88 Signing time: Thu 09 Oct 2025 11:00:08 +0000 Manifest this update: Thu 09 Oct 2025 11:00:08 +0000 Manifest next update: Sat 11 Oct 2025 11:00:00 +0000 Files and hashes: 1: 41f5ef31-c5d9-309f-bb2c-fd3013b7f8c3.roa (hash: 4SJ2TpkEIqzMpX9ZxS8gAcoURUElzf9crOVjLNb+0jQ=) 2: bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.crl (hash: x+TDXms3zNjOhrD6Kj9y4HaCbF4UHO1l+Cg6WMpZp2s=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:b6:34:72:99:bb:8a:41:9f:75:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf07f8a7-1a95-4127-aa54-a5c85bcca9b8 Validity Not Before: Oct 9 11:00:08 2025 GMT Not After : Oct 11 11:00:00 2025 GMT Subject: CN=4887df85-49f4-40ce-94d5-ac7567ff5424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:48:e3:28:31:dc:20:59:2b:e9:f0:56:3b:62: bf:8e:10:87:8b:2a:58:11:1c:82:0c:0b:81:6b:8c: 43:f3:10:14:aa:4f:5d:03:0b:af:d9:9c:72:b2:8a: 1d:43:4d:f7:84:07:27:a5:c3:6e:13:d9:ae:80:b0: 2b:8d:2f:b6:e1:0e:9a:02:fa:bc:cb:03:1c:c5:a1: 6a:4a:7d:c1:c4:44:a5:d3:21:03:3e:ee:6e:6b:03: 54:64:07:23:0a:a3:be:59:94:85:85:96:90:d9:bf: 50:3b:27:c4:77:c3:73:3e:4b:95:17:87:90:f9:93: 72:6f:a2:9f:91:6e:df:a9:e6:a8:4d:3f:12:d2:c9: 63:47:cd:82:eb:1a:56:41:74:e0:b9:d1:74:59:47: 3d:9e:7c:c4:58:f0:f9:11:9e:a8:15:3c:bb:ba:3a: ab:e9:0f:66:93:94:ab:d9:03:dd:01:c5:3c:8f:f4: 49:22:3b:a8:b3:44:78:01:19:6a:c5:bc:0a:d9:2d: cd:aa:d4:eb:bb:13:af:92:90:23:6f:58:97:64:b8: b3:98:a1:db:bd:82:9d:72:97:44:ea:5f:3d:93:86: f1:34:17:8a:ba:4b:52:13:fd:7e:3b:59:2d:ab:7b: f6:b5:5f:60:e7:ec:05:ee:fc:ab:81:30:8b:e2:df: bd:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:3A:ED:6D:2A:BC:0F:C1:C6:1D:B1:E0:8A:77:DA:35:2D:25:C6:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.crl X509v3 Authority Key Identifier: keyid:A8:7C:BC:02:A0:48:D4:7A:E9:DA:8D:36:46:F5:24:F2:0D:65:29:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf07f8a7-1a95-4127-aa54-a5c85bcca9b8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:5f:a9:1a:6f:c7:e3:fe:6f:b1:79:71:9b:e8:63:5e:d3:61: 08:81:4e:5d:e1:09:cf:8a:99:68:9c:dc:2a:ac:1e:fe:7b:6c: e0:f9:fe:a2:57:95:2b:b7:8d:87:cd:49:9a:a9:e1:29:b9:94: 74:c1:a8:14:45:77:54:a6:7d:9f:3b:91:ac:5a:25:b7:6d:9f: 71:35:0c:51:33:d3:83:6c:b4:b4:56:a9:64:98:f5:e1:9b:ec: 5d:03:a0:4f:19:d1:39:fd:18:5e:37:b2:35:6d:c2:c6:ae:c3: 8c:a1:ac:d9:1a:f7:56:67:75:2b:ae:4b:58:c9:71:4f:7a:4b: 01:6f:cb:03:0a:7f:29:29:7c:f2:1c:b2:fe:bf:e7:15:5e:e5: 40:03:f3:b5:2a:4a:26:62:8b:04:1b:84:45:aa:82:77:69:78: 50:46:3a:9c:12:f8:f6:43:a4:5c:d0:a8:3a:f9:a3:17:84:4d: b0:c2:e9:7b:e4:03:f5:35:88:e4:dd:bf:5d:a5:d2:80:49:05: a2:1d:36:0b:39:cc:1f:db:01:d4:d6:0a:9c:79:04:0f:2c:26: 39:b5:46:28:ac:1b:ff:00:09:ba:ab:6d:f7:f8:e5:31:f2:37: 09:cc:cd:20:5f:02:82:e9:f0:16:7f:74:5f:76:66:97:e7:fa: 89:96:b3:72 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt2tjRymbuKQZ91dAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYwN2Y4YTctMWE5NS00MTI3LWFhNTQtYTVjODViY2Nh OWI4MB4XDTI1MTAwOTExMDAwOFoXDTI1MTAxMTExMDAwMFowLzEtMCsGA1UEAxMk NDg4N2RmODUtNDlmNC00MGNlLTk0ZDUtYWM3NTY3ZmY1NDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0jjKDHcIFkr6fBWO2K/jhCHiypYERyCDAuB a4xD8xAUqk9dAwuv2ZxysoodQ033hAcnpcNuE9mugLArjS+24Q6aAvq8ywMcxaFq Sn3BxESl0yEDPu5uawNUZAcjCqO+WZSFhZaQ2b9QOyfEd8NzPkuVF4eQ+ZNyb6Kf kW7fqeaoTT8S0sljR82C6xpWQXTgudF0WUc9nnzEWPD5EZ6oFTy7ujqr6Q9mk5Sr 2QPdAcU8j/RJIjuos0R4ARlqxbwK2S3NqtTruxOvkpAjb1iXZLizmKHbvYKdcpdE 6l89k4bxNBeKuktSE/1+O1ktq3v2tV9g5+wF7vyrgTCL4t+9xQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPE67W0qvA/Bxh2x4Ip32jUtJcavMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjA3 ZjhhNy0xYTk1LTQxMjctYWE1NC1hNWM4NWJjY2E5YjgvYmYwN2Y4YTctMWE5NS00 MTI3LWFhNTQtYTVjODViY2NhOWI4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYwN2Y4YTctMWE5NS00MTI3LWFh NTQtYTVjODViY2NhOWI4L2JmMDdmOGE3LTFhOTUtNDEyNy1hYTU0LWE1Yzg1YmNj YTliOC5jcmwwHwYDVR0jBBgwFoAUqHy8AqBI1Hrp2o02RvUk8g1lKWowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjA3ZjhhNy0xYTk1LTQxMjctYWE1NC1hNWM4 NWJjY2E5YjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAkX6kab8fj/m+xeXGb6GNe 02EIgU5d4QnPiplonNwqrB7+e2zg+f6iV5Urt42HzUmaqeEpuZR0wagURXdUpn2f O5GsWiW3bZ9xNQxRM9ODbLS0VqlkmPXhm+xdA6BPGdE5/RheN7I1bcLGrsOMoazZ GvdWZ3UrrktYyXFPeksBb8sDCn8pKXzyHLL+v+cVXuVAA/O1KkomYosEG4RFqoJ3 aXhQRjqcEvj2Q6Rc0Kg6+aMXhE2wwul75AP1NYjk3b9dpdKASQWiHTYLOcwf2wHU 1gqceQQPLCY5tUYorBv/AAm6q233+OUx8jcJzM0gXwKC6fAWf3RfdmaX5/qJlrNy -----END CERTIFICATE-----Generated at Thu Oct 9 15:35:05 2025 by rpki-client