$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.mft File: bd65975e-d229-45b7-bdbe-46ab8f5d4d04.mft (raw, json) Hash identifier: zytOuz4hFh9ICQcAWFbXfHtBtkEGTeUx14kwxFvAwkk= Subject key identifier: BC:00:CD:65:39:0B:FE:58:C0:C6:4E:83:2D:DE:71:24:C6:F3:4F:99 Authority key identifier: 09:4E:6C:2D:07:E8:0C:96:4C:E7:1F:D5:AD:F3:A2:E7:9E:3C:F2:93 Certificate issuer: /CN=bd65975e-d229-45b7-bdbe-46ab8f5d4d04 Certificate serial: 010D0C9F4328584BB7F7F46C9C84348D39A14180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.mft Manifest number: 010D0C9F4328584073A827C096A3F2C101EAFD21 Signing time: Sat 01 Nov 2025 20:00:08 +0000 Manifest this update: Sat 01 Nov 2025 20:00:08 +0000 Manifest next update: Mon 03 Nov 2025 20:00:00 +0000 Files and hashes: 1: 3918d96d-ec82-3d51-91a7-3a2529db41f1.roa (hash: llF92Fe7mOE+87KQzyW+ZlDtgQyh7OZhrSUW28c6qVY=) 2: bd65975e-d229-45b7-bdbe-46ab8f5d4d04.crl (hash: WmWEMZaIXOKbUNbBNkoRYqxP43LBzINBVtgdZMCwbE0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b7:f7:f4:6c:9c:84:34:8d:39:a1:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd65975e-d229-45b7-bdbe-46ab8f5d4d04 Validity Not Before: Nov 1 20:00:08 2025 GMT Not After : Nov 3 20:00:00 2025 GMT Subject: CN=d949a1a6-8d3b-4600-8573-2105bf3583e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:5a:9a:74:69:ca:cc:9b:1d:56:9b:8b:14:bc: 20:5f:41:d5:4e:b9:f1:6d:13:c9:a0:a6:d1:9c:ed: a9:7c:57:8d:ad:05:a9:25:30:ef:7d:fb:66:4f:30: f5:cd:29:b6:f3:2e:b0:a1:a1:d2:f0:66:28:f4:e5: 13:c6:4c:e5:3e:83:9f:34:05:56:4f:da:30:cb:de: 9d:d6:a1:b5:37:b8:68:3a:74:1f:4b:2d:af:31:6e: 2e:53:58:44:69:f6:ae:e7:f0:e9:57:35:4b:ee:d3: 8e:71:bd:a0:3a:3c:18:6b:2b:52:5d:dd:5b:18:b0: 75:67:07:eb:5f:f0:a1:1d:4c:09:1f:14:67:a4:c9: 41:5f:98:84:df:01:06:b6:30:3b:2e:50:2d:d4:12: cc:91:23:03:fe:05:fc:8e:36:a8:1d:c0:c0:46:03: 89:b7:19:74:3a:62:2c:3b:ce:c3:1a:6d:b6:ed:19: 01:0c:aa:bb:48:43:fd:da:d8:e2:6f:f4:7c:dd:df: 88:21:48:70:c9:8b:81:9c:2f:85:52:dc:b7:51:f0: 8d:8f:4d:73:99:34:d2:c0:4d:09:fd:29:11:1f:88: 79:8e:fb:55:af:0b:e7:6e:e6:57:c1:b3:ac:de:41: 01:6e:b6:d5:6e:fa:34:da:65:ab:f3:68:c9:65:9c: ff:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:00:CD:65:39:0B:FE:58:C0:C6:4E:83:2D:DE:71:24:C6:F3:4F:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.crl X509v3 Authority Key Identifier: keyid:09:4E:6C:2D:07:E8:0C:96:4C:E7:1F:D5:AD:F3:A2:E7:9E:3C:F2:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:e3:20:91:da:ba:cd:4c:b8:97:eb:a4:07:1b:e5:3e:90:76: 54:3a:be:b1:6c:76:2c:e2:c9:35:f1:38:e7:8a:37:be:22:d2: a2:c1:8b:66:a5:6a:93:37:a8:9d:4d:c5:65:6c:69:87:95:a7: e9:23:8c:7d:31:36:83:9f:ff:c9:19:4f:0a:4f:a5:cf:79:58: d7:7a:3f:0f:ff:09:70:76:cb:6a:1b:74:8f:c9:0e:a8:09:db: 12:26:51:4d:f0:eb:2b:61:ba:a9:3d:d3:c3:d7:7b:3d:4a:0f: 94:09:54:b3:a8:02:bb:13:ed:83:be:ad:1f:98:37:91:41:6e: ac:77:81:46:8b:0c:31:27:31:11:13:9b:48:6f:99:b3:39:38: e2:9c:79:b8:ce:f6:64:22:41:9c:c3:08:d9:a0:9f:18:c5:93: 18:5e:ca:42:e4:af:f5:7e:92:5b:37:58:00:92:1b:9f:68:75: 32:2d:bd:7c:23:6b:da:15:27:6f:c1:d8:4e:b1:f9:0b:3a:3c: e1:da:32:43:6a:a8:78:c8:f8:c2:f4:ff:1c:13:ae:39:1e:b2: e3:30:0f:d4:24:06:95:96:ff:19:67:0c:50:7b:ef:bb:b9:fb: 65:fd:d7:51:14:ba:1c:38:7d:a6:6f:dd:b8:1d:79:72:6a:4d: 02:ed:4c:60 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu39/RsnIQ0jTmhQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmQ2NTk3NWUtZDIyOS00NWI3LWJkYmUtNDZhYjhmNWQ0 ZDA0MB4XDTI1MTEwMTIwMDAwOFoXDTI1MTEwMzIwMDAwMFowLzEtMCsGA1UEAxMk ZDk0OWExYTYtOGQzYi00NjAwLTg1NzMtMjEwNWJmMzU4M2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFqadGnKzJsdVpuLFLwgX0HVTrnxbRPJoKbR nO2pfFeNrQWpJTDvfftmTzD1zSm28y6woaHS8GYo9OUTxkzlPoOfNAVWT9owy96d 1qG1N7hoOnQfSy2vMW4uU1hEafau5/DpVzVL7tOOcb2gOjwYaytSXd1bGLB1Zwfr X/ChHUwJHxRnpMlBX5iE3wEGtjA7LlAt1BLMkSMD/gX8jjaoHcDARgOJtxl0OmIs O87DGm227RkBDKq7SEP92tjib/R83d+IIUhwyYuBnC+FUty3UfCNj01zmTTSwE0J /SkRH4h5jvtVrwvnbuZXwbOs3kEBbrbVbvo02mWr82jJZZz/PwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLwAzWU5C/5YwMZOgy3ecSTG80+ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZDY1 OTc1ZS1kMjI5LTQ1YjctYmRiZS00NmFiOGY1ZDRkMDQvYmQ2NTk3NWUtZDIyOS00 NWI3LWJkYmUtNDZhYjhmNWQ0ZDA0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmQ2NTk3NWUtZDIyOS00NWI3LWJk YmUtNDZhYjhmNWQ0ZDA0L2JkNjU5NzVlLWQyMjktNDViNy1iZGJlLTQ2YWI4ZjVk NGQwNC5jcmwwHwYDVR0jBBgwFoAUCU5sLQfoDJZM5x/VrfOi55488pMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZDY1OTc1ZS1kMjI5LTQ1YjctYmRiZS00NmFi OGY1ZDRkMDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAo4yCR2rrNTLiX66QHG+U+ kHZUOr6xbHYs4sk18Tjnije+ItKiwYtmpWqTN6idTcVlbGmHlafpI4x9MTaDn//J GU8KT6XPeVjXej8P/wlwdstqG3SPyQ6oCdsSJlFN8OsrYbqpPdPD13s9Sg+UCVSz qAK7E+2Dvq0fmDeRQW6sd4FGiwwxJzERE5tIb5mzOTjinHm4zvZkIkGcwwjZoJ8Y xZMYXspC5K/1fpJbN1gAkhufaHUyLb18I2vaFSdvwdhOsfkLOjzh2jJDaqh4yPjC 9P8cE645HrLjMA/UJAaVlv8ZZwxQe++7uftl/ddRFLocOH2mb924HXlyak0C7Uxg -----END CERTIFICATE-----Generated at Sun Nov 2 16:38:40 2025 by rpki-client