$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c/bfc0b168-b834-4192-acf1-30565a4b3e0c.mft File: bfc0b168-b834-4192-acf1-30565a4b3e0c.mft (raw, json) Hash identifier: GcW1M7+iK0OIHvLCGgQzlwm0sQc8Yr8kjfNMS9rEvag= Subject key identifier: 0B:05:8E:91:69:91:6E:37:86:AB:B3:01:00:4E:72:39:96:51:5A:76 Authority key identifier: 0B:5F:68:42:78:8A:DF:A3:B0:1A:AB:9A:E1:3D:C6:B9:1E:0F:D1:A1 Certificate issuer: /CN=bfc0b168-b834-4192-acf1-30565a4b3e0c Certificate serial: 010D0C9F4328584B7786A7671535D4E63B036A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c/bfc0b168-b834-4192-acf1-30565a4b3e0c.mft Manifest number: 010D0C9F4328584073A822049B70DB112D5CE2F2 Signing time: Thu 09 Oct 2025 18:00:08 +0000 Manifest this update: Thu 09 Oct 2025 18:00:08 +0000 Manifest next update: Sun 12 Oct 2025 18:00:00 +0000 Files and hashes: 1: bfc0b168-b834-4192-acf1-30565a4b3e0c.crl (hash: yMAnOFamhGTNr7oz/RAsX3m3gtijvGp2YNOtO7/fRuI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c/bfc0b168-b834-4192-acf1-30565a4b3e0c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c/bfc0b168-b834-4192-acf1-30565a4b3e0c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:77:86:a7:67:15:35:d4:e6:3b:03:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfc0b168-b834-4192-acf1-30565a4b3e0c Validity Not Before: Oct 9 18:00:08 2025 GMT Not After : Oct 12 18:00:00 2025 GMT Subject: CN=4a764fa5-c849-4a7e-8170-46ae4624c07f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:08:2c:f8:0a:5a:0a:fa:66:95:3e:9c:21:ab: 4b:02:2d:62:0d:ea:19:74:0c:7a:d9:e8:e3:fc:9c: d7:21:e6:bb:62:85:99:cd:c4:fb:4c:fd:cc:36:c4: 0a:0c:4d:dd:76:b6:1c:59:1c:cc:68:65:c1:a7:81: 10:f5:ad:09:f3:bb:28:0f:4f:ab:f8:82:13:88:d4: 02:b0:47:a6:35:da:ba:72:48:f0:0b:4a:b0:2a:fb: 89:bd:fe:67:a9:18:9b:a4:7f:94:e7:72:a1:1e:46: 54:14:88:29:7c:73:7d:01:03:7a:97:a4:53:0a:80: b9:e8:d3:cc:9a:18:b2:02:d8:e8:c3:a7:9b:6f:cc: 86:46:09:fa:8d:1c:52:84:30:43:f6:d2:46:dd:19: 6e:6c:c9:cb:8b:e5:e4:88:a0:2f:47:0b:45:da:3b: 4d:65:ff:d3:1a:6e:32:ca:a5:c1:d0:a8:d7:3c:31: fb:35:c0:ef:9f:90:d5:c1:6e:25:26:18:38:94:f2: cb:b2:8f:64:ac:e9:26:2e:22:ea:60:d0:71:4b:d2: 1e:bf:bc:b3:c1:1f:0c:45:a2:45:c0:6c:a9:d7:8e: c8:e1:60:0e:90:9d:01:92:d9:60:f8:dd:aa:18:d9: 2b:a9:e8:76:ea:0f:c5:48:0d:3b:78:1d:72:c8:4c: c1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:05:8E:91:69:91:6E:37:86:AB:B3:01:00:4E:72:39:96:51:5A:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c/bfc0b168-b834-4192-acf1-30565a4b3e0c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c/bfc0b168-b834-4192-acf1-30565a4b3e0c.crl X509v3 Authority Key Identifier: keyid:0B:5F:68:42:78:8A:DF:A3:B0:1A:AB:9A:E1:3D:C6:B9:1E:0F:D1:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:0d:58:b3:b2:2d:96:64:31:2c:70:cd:80:1c:71:1b:a0:da: a2:4a:07:b9:97:00:49:b5:9a:18:55:be:c9:a8:93:f0:7b:84: 7c:38:cf:d8:8d:7c:5e:b2:89:49:48:ce:3a:3d:5e:fb:13:9c: 5b:bc:07:be:ea:9b:7c:c9:81:d8:85:6d:71:5d:e1:be:36:7c: 7f:b7:eb:2e:28:0b:9a:33:b8:2d:00:6d:a0:43:75:e1:8c:c3: fc:23:ab:90:79:88:0d:45:ca:ed:d1:95:a7:1c:c3:21:31:00: 19:75:71:ab:6e:7a:58:82:c9:27:62:a6:e6:72:e1:ff:59:74: 3a:d0:96:61:d6:d5:76:e6:6e:0a:98:73:f5:8d:46:a3:b2:82: 90:9e:28:d7:df:f8:78:f3:39:06:b2:ce:c7:31:09:9f:88:f8: f6:ba:5a:f1:71:cf:7a:08:58:e6:21:32:0c:c0:48:c7:06:2c: a8:77:58:11:d3:b0:90:64:72:92:c2:78:17:c8:5a:88:19:28: 32:da:1b:24:09:c6:3a:4a:31:d2:66:c1:df:6c:14:61:3a:21: d3:92:1e:4c:b8:c6:6d:c9:18:ee:22:34:90:c9:8a:34:c3:33: fb:ed:66:4d:58:76:8a:0a:b5:83:7c:9e:bf:3a:2d:4d:46:51: b5:f2:ae:a9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt3hqdnFTXU5jsDaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmZjMGIxNjgtYjgzNC00MTkyLWFjZjEtMzA1NjVhNGIz ZTBjMB4XDTI1MTAwOTE4MDAwOFoXDTI1MTAxMjE4MDAwMFowLzEtMCsGA1UEAxMk NGE3NjRmYTUtYzg0OS00YTdlLTgxNzAtNDZhZTQ2MjRjMDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAgs+ApaCvpmlT6cIatLAi1iDeoZdAx62ejj /JzXIea7YoWZzcT7TP3MNsQKDE3ddrYcWRzMaGXBp4EQ9a0J87soD0+r+IITiNQC sEemNdq6ckjwC0qwKvuJvf5nqRibpH+U53KhHkZUFIgpfHN9AQN6l6RTCoC56NPM mhiyAtjow6ebb8yGRgn6jRxShDBD9tJG3RlubMnLi+XkiKAvRwtF2jtNZf/TGm4y yqXB0KjXPDH7NcDvn5DVwW4lJhg4lPLLso9krOkmLiLqYNBxS9Iev7yzwR8MRaJF wGyp147I4WAOkJ0Bktlg+N2qGNkrqeh26g/FSA07eB1yyEzB7QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAsFjpFpkW43hquzAQBOcjmWUVp2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iZmMw YjE2OC1iODM0LTQxOTItYWNmMS0zMDU2NWE0YjNlMGMvYmZjMGIxNjgtYjgzNC00 MTkyLWFjZjEtMzA1NjVhNGIzZTBjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYmZjMGIxNjgtYjgzNC00MTkyLWFj ZjEtMzA1NjVhNGIzZTBjL2JmYzBiMTY4LWI4MzQtNDE5Mi1hY2YxLTMwNTY1YTRi M2UwYy5jcmwwHwYDVR0jBBgwFoAUC19oQniK36OwGqua4T3GuR4P0aEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iZmMwYjE2OC1iODM0LTQxOTItYWNmMS0zMDU2 NWE0YjNlMGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQByDVizsi2WZDEscM2AHHEb oNqiSge5lwBJtZoYVb7JqJPwe4R8OM/YjXxesolJSM46PV77E5xbvAe+6pt8yYHY hW1xXeG+Nnx/t+suKAuaM7gtAG2gQ3XhjMP8I6uQeYgNRcrt0ZWnHMMhMQAZdXGr bnpYgsknYqbmcuH/WXQ60JZh1tV25m4KmHP1jUajsoKQnijX3/h48zkGss7HMQmf iPj2ulrxcc96CFjmITIMwEjHBiyod1gR07CQZHKSwngXyFqIGSgy2hskCcY6SjHS ZsHfbBRhOiHTkh5MuMZtyRjuIjSQyYo0wzP77WZNWHaKCrWDfJ6/Oi1NRlG18q6p -----END CERTIFICATE-----Generated at Fri Oct 10 18:03:26 2025 by rpki-client