$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bf59daf6-0ba4-4f9e-abad-6cce2c3cc4a2/bf59daf6-0ba4-4f9e-abad-6cce2c3cc4a2.mft File: bf59daf6-0ba4-4f9e-abad-6cce2c3cc4a2.mft (raw, json) Hash identifier: uh6B+Cb/OenCr1ONoqK/6zwl675JeZ1p/g9Y/877N7g= Subject key identifier: FD:6C:25:93:DD:74:2F:98:6A:DF:D2:A1:B8:96:5C:5E:BD:9C:57:6D Authority key identifier: 9D:77:53:F3:C9:F4:A0:A2:65:9B:D0:32:F6:65:9D:B7:A5:E1:F7:77 Certificate issuer: /CN=bf59daf6-0ba4-4f9e-abad-6cce2c3cc4a2 Certificate serial: 010D0C9F4328584B724B9C7CACD32674D6491180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bf59daf6-0ba4-4f9e-abad-6cce2c3cc4a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bf59daf6-0ba4-4f9e-abad-6cce2c3cc4a2/bf59daf6-0ba4-4f9e-abad-6cce2c3cc4a2.mft Manifest number: 010D0C9F4328584A9042F86DBF5AADD75DDB3CD3 Signing time: Tue 07 Oct 2025 21:02:08 +0000 Manifest this update: Tue 07 Oct 2025 21:02:08 +0000 Manifest next update: Thu 09 Oct 2025 21:00:00 +0000 Files and hashes: 1: 00b1ca98-ddee-3f35-93c1-156a8fde6738.roa (hash: 4a2PeVt605D4blOFi+kLGYfcISlhcEm/lyyTxKP8xXE=) 2: bf59daf6-0ba4-4f9e-abad-6cce2c3cc4a2.crl (hash: Aonrk8KWe6wLW9Y/pBdEoiJiEp4SOU24nGPbCzQEAvw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bf59daf6-0ba4-4f9e-abad-6cce2c3cc4a2/bf59daf6-0ba4-4f9e-abad-6cce2c3cc4a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bf59daf6-0ba4-4f9e-abad-6cce2c3cc4a2/bf59daf6-0ba4-4f9e-abad-6cce2c3cc4a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bf59daf6-0ba4-4f9e-abad-6cce2c3cc4a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:72:4b:9c:7c:ac:d3:26:74:d6:49:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf59daf6-0ba4-4f9e-abad-6cce2c3cc4a2 Validity Not Before: Oct 7 21:02:08 2025 GMT Not After : Oct 9 21:00:00 2025 GMT Subject: CN=3e7d3bbc-9271-4864-a267-d43a21610e09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:05:16:c2:52:da:f0:5e:37:b7:c4:c0:5c:d4: 98:56:49:b2:a8:a0:d0:d3:2e:67:55:3e:70:92:81: f9:12:5b:93:10:f5:44:51:ea:85:e3:cb:41:2d:c7: 50:11:3b:36:7b:1e:62:d7:c6:fc:84:a0:81:b6:04: 48:ba:2f:72:4c:a3:ce:4b:a0:31:bf:44:2d:37:a5: 97:3a:64:80:9d:0b:c2:92:bf:f7:07:d8:8c:05:ee: 91:fc:ac:d1:8f:4d:5f:f1:49:95:f7:4f:8e:fb:f6: c7:dc:ca:2b:d7:26:79:c4:c2:fa:ea:6d:c8:51:e8: 25:aa:e2:09:8f:a8:f3:3b:ef:ac:10:3c:81:62:b1: eb:0f:f9:c4:b2:92:a0:1e:ec:a8:d3:e2:e6:67:38: 76:c1:be:62:78:66:45:e1:33:11:b8:55:d8:c0:c9: 28:4f:02:c1:9e:0a:f8:e9:29:5a:83:27:85:f9:d1: 1f:02:be:eb:8a:19:61:03:45:02:77:50:ff:5d:b0: 69:36:17:f0:03:e3:89:38:cf:cb:bc:04:af:82:66: 3d:66:e7:6f:70:98:b1:ba:33:1c:90:fc:03:13:76: 79:4c:1b:21:73:13:a3:a6:82:3a:ad:6a:7b:1d:4f: b1:84:fc:de:92:a9:33:4e:9c:cd:05:a9:58:00:c8: 9a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:6C:25:93:DD:74:2F:98:6A:DF:D2:A1:B8:96:5C:5E:BD:9C:57:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bf59daf6-0ba4-4f9e-abad-6cce2c3cc4a2/bf59daf6-0ba4-4f9e-abad-6cce2c3cc4a2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bf59daf6-0ba4-4f9e-abad-6cce2c3cc4a2/bf59daf6-0ba4-4f9e-abad-6cce2c3cc4a2.crl X509v3 Authority Key Identifier: keyid:9D:77:53:F3:C9:F4:A0:A2:65:9B:D0:32:F6:65:9D:B7:A5:E1:F7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bf59daf6-0ba4-4f9e-abad-6cce2c3cc4a2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:0a:7c:31:24:98:fd:9a:fe:33:ff:72:4d:77:1a:52:d2:ec: 66:91:8e:c2:9d:6a:d5:de:3f:41:fb:7a:58:12:9b:fa:81:30: 13:40:b7:4b:a5:b6:16:0f:77:6a:b9:cd:7f:92:35:f1:99:53: 27:dd:57:0d:20:b8:8b:43:8e:17:35:ca:7a:bd:40:dd:31:73: 24:e0:e7:64:5c:fe:8b:ba:af:f2:5c:b8:b2:41:e6:cf:96:56: c2:c4:4f:ec:0c:cd:c9:e1:4a:70:ad:f4:5d:da:b1:f1:df:95: 23:46:f2:6a:27:50:d2:d3:5a:c6:ae:83:d4:75:30:3c:58:dc: a4:5c:84:5c:7d:28:81:8e:7c:a5:44:b7:d7:df:b5:b7:86:76: 3f:4b:fd:cc:f3:4a:c8:85:72:56:01:a4:1e:4b:1c:5b:80:42: 99:8e:63:3b:0f:19:60:4d:b6:50:51:a8:ba:37:38:18:d1:b6: da:e9:5e:ed:3a:8e:ed:43:cb:c6:9c:ee:4d:db:c0:e4:f4:2a: 04:fc:74:29:a8:1e:ea:7f:5c:00:16:a5:a0:79:bc:b3:f8:14: 6f:b8:55:96:c8:dc:bb:3a:14:6a:53:0e:4f:58:9b:64:a9:6b: 36:d8:e9:e5:14:e1:03:59:28:19:1a:29:03:00:7f:75:9d:af: ae:24:db:58 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEtyS5x8rNMmdNZJEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY1OWRhZjYtMGJhNC00ZjllLWFiYWQtNmNjZTJjM2Nj NGEyMB4XDTI1MTAwNzIxMDIwOFoXDTI1MTAwOTIxMDAwMFowLzEtMCsGA1UEAxMk M2U3ZDNiYmMtOTI3MS00ODY0LWEyNjctZDQzYTIxNjEwZTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwUWwlLa8F43t8TAXNSYVkmyqKDQ0y5nVT5w koH5EluTEPVEUeqF48tBLcdQETs2ex5i18b8hKCBtgRIui9yTKPOS6Axv0QtN6WX OmSAnQvCkr/3B9iMBe6R/KzRj01f8UmV90+O+/bH3Mor1yZ5xML66m3IUeglquIJ j6jzO++sEDyBYrHrD/nEspKgHuyo0+LmZzh2wb5ieGZF4TMRuFXYwMkoTwLBngr4 6SlagyeF+dEfAr7rihlhA0UCd1D/XbBpNhfwA+OJOM/LvASvgmY9ZudvcJixujMc kPwDE3Z5TBshcxOjpoI6rWp7HU+xhPzekqkzTpzNBalYAMialQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFP1sJZPddC+Yat/SobiWXF69nFdtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iZjU5 ZGFmNi0wYmE0LTRmOWUtYWJhZC02Y2NlMmMzY2M0YTIvYmY1OWRhZjYtMGJhNC00 ZjllLWFiYWQtNmNjZTJjM2NjNGEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYmY1OWRhZjYtMGJhNC00ZjllLWFi YWQtNmNjZTJjM2NjNGEyL2JmNTlkYWY2LTBiYTQtNGY5ZS1hYmFkLTZjY2UyYzNj YzRhMi5jcmwwHwYDVR0jBBgwFoAUnXdT88n0oKJlm9Ay9mWdt6Xh93cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iZjU5ZGFmNi0wYmE0LTRmOWUtYWJhZC02Y2Nl MmMzY2M0YTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA1CnwxJJj9mv4z/3JNdxpS 0uxmkY7CnWrV3j9B+3pYEpv6gTATQLdLpbYWD3dquc1/kjXxmVMn3VcNILiLQ44X Ncp6vUDdMXMk4OdkXP6Luq/yXLiyQebPllbCxE/sDM3J4UpwrfRd2rHx35UjRvJq J1DS01rGroPUdTA8WNykXIRcfSiBjnylRLfX37W3hnY/S/3M80rIhXJWAaQeSxxb gEKZjmM7DxlgTbZQUai6NzgY0bba6V7tOo7tQ8vGnO5N28Dk9CoE/HQpqB7qf1wA FqWgebyz+BRvuFWWyNy7OhRqUw5PWJtkqWs22OnlFOEDWSgZGikDAH91na+uJNtY -----END CERTIFICATE-----Generated at Wed Oct 8 17:27:54 2025 by rpki-client