$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.mft File: bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.mft (raw, json) Hash identifier: YX7+w7hDizCavM6wXtISTV0Ab0i8KGuqs1BNbWJoJVY= Subject key identifier: BA:C0:27:5B:63:28:7D:A9:AA:62:E4:86:35:A5:76:A9:A3:20:91:6C Authority key identifier: BC:36:F0:C3:90:91:7B:B8:CB:F7:FE:00:75:72:5B:AF:FB:59:8B:01 Certificate issuer: /CN=bfe5a38f-5ff4-4b97-a459-e25cfc9caa71 Certificate serial: 010D0C9F4328584BBD33FD88CDA1443AA5ACD980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.mft Manifest number: 010D0C9F43285842ED8224AF59A78D58A1C61AC1 Signing time: Mon 03 Nov 2025 17:00:09 +0000 Manifest this update: Mon 03 Nov 2025 17:00:09 +0000 Manifest next update: Thu 06 Nov 2025 17:00:00 +0000 Files and hashes: 1: bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.crl (hash: 2BADTdXSz3mytGznSytfxigYT4GXnbMRK6I6lnvQh7k=) 2: ec4f0c2f-b502-3cac-8565-6782cedc472f.roa (hash: GP8rpqGqM+4KxtSur0lPO3ohCi+sDqiWpQnxKp83AZI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bd:33:fd:88:cd:a1:44:3a:a5:ac:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfe5a38f-5ff4-4b97-a459-e25cfc9caa71 Validity Not Before: Nov 3 17:00:09 2025 GMT Not After : Nov 6 17:00:00 2025 GMT Subject: CN=529d7e47-e2dd-4ea3-ab33-b77b7b180509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:83:72:ed:82:a2:89:f2:81:a8:bd:af:5a:c3: 16:6d:94:bf:01:d4:0f:94:e3:e6:de:30:54:29:5f: 33:f7:a4:72:ce:66:1c:02:2d:ea:e0:0a:0f:fd:02: e8:e5:31:07:63:ae:e7:e9:e2:d7:e6:b8:58:42:f6: 36:df:35:e8:6b:cc:46:6c:86:eb:16:8f:89:d9:0a: 6b:b6:57:e7:f1:06:85:a6:ca:dc:1b:04:f9:48:30: c2:ab:5d:94:d0:51:d2:be:01:ea:37:26:be:94:f4: bc:6a:7d:27:b4:3c:1c:35:8c:34:30:a6:4f:61:4d: 8b:91:13:2a:82:fb:5d:fa:91:0d:a3:f3:e1:aa:0c: bf:fb:82:89:4e:a4:e8:02:76:d6:40:b9:d0:df:f9: 60:f4:14:5f:f8:64:98:3c:55:98:fe:65:d9:e3:f0: 1c:f8:be:6c:5b:50:60:f7:4e:64:32:56:98:ce:a7: 02:af:0d:6f:01:81:a6:09:58:26:c9:9d:52:75:da: 16:1b:b5:29:3d:60:41:d6:e4:a9:c7:cf:99:f8:44: 99:25:fa:d9:bb:16:ee:ed:5d:e1:52:1a:f2:87:e3: ac:a7:ec:09:63:e8:97:00:a4:c4:d1:8f:ea:fb:68: a4:9e:c8:39:a2:28:11:eb:26:d1:dc:ab:6d:46:a9: 90:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C0:27:5B:63:28:7D:A9:AA:62:E4:86:35:A5:76:A9:A3:20:91:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.crl X509v3 Authority Key Identifier: keyid:BC:36:F0:C3:90:91:7B:B8:CB:F7:FE:00:75:72:5B:AF:FB:59:8B:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:af:e1:c8:04:de:81:4c:e4:8e:9b:17:27:9b:ba:39:bc:0e: 9d:d6:8b:dd:14:b7:cc:4d:ae:93:6d:b6:d1:ce:b4:e9:5e:c4: 61:80:cf:80:c2:d8:94:fd:68:24:21:9a:ed:83:e5:dd:eb:60: d5:34:05:1e:f9:0d:44:58:b9:bd:9a:87:10:2f:20:df:a4:d7: a2:95:32:c7:f4:02:fc:31:e6:ea:98:2e:fe:59:dc:2f:a7:e0: 43:21:4e:9b:b3:8b:29:77:f2:b3:42:43:8b:6d:a9:e7:31:86: 99:c2:d0:de:0a:9b:99:98:35:9b:f9:54:da:ab:42:b7:9c:e2: 68:db:11:99:7b:58:3f:04:09:b5:67:5d:09:d3:d8:cb:0a:36: f2:65:61:e2:2c:c0:82:b9:34:00:ad:29:44:b6:87:39:1e:ad: 8b:a7:f1:2e:fb:26:54:90:7b:82:5d:57:d1:be:83:c0:d9:b7: c2:cf:2f:ea:86:d5:39:b9:71:de:45:e1:98:d4:b8:d0:14:9e: f9:43:a0:4c:ca:dc:ea:9e:b2:f2:ef:ae:28:fe:0f:37:6e:8d: 1a:54:32:dd:09:c1:f9:47:d7:cc:7f:c3:1a:24:47:d2:ff:cf: 3f:23:ec:06:7d:df:a4:4c:4a:37:38:a7:e6:bd:53:37:f6:fe: ea:c2:b7:63 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu9M/2IzaFEOqWs2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmZlNWEzOGYtNWZmNC00Yjk3LWE0NTktZTI1Y2ZjOWNh YTcxMB4XDTI1MTEwMzE3MDAwOVoXDTI1MTEwNjE3MDAwMFowLzEtMCsGA1UEAxMk NTI5ZDdlNDctZTJkZC00ZWEzLWFiMzMtYjc3YjdiMTgwNTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyINy7YKiifKBqL2vWsMWbZS/AdQPlOPm3jBU KV8z96RyzmYcAi3q4AoP/QLo5TEHY67n6eLX5rhYQvY23zXoa8xGbIbrFo+J2Qpr tlfn8QaFpsrcGwT5SDDCq12U0FHSvgHqNya+lPS8an0ntDwcNYw0MKZPYU2LkRMq gvtd+pENo/Phqgy/+4KJTqToAnbWQLnQ3/lg9BRf+GSYPFWY/mXZ4/Ac+L5sW1Bg 905kMlaYzqcCrw1vAYGmCVgmyZ1SddoWG7UpPWBB1uSpx8+Z+ESZJfrZuxbu7V3h Uhryh+Osp+wJY+iXAKTE0Y/q+2iknsg5oigR6ybR3KttRqmQIwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLrAJ1tjKH2pqmLkhjWldqmjIJFsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iZmU1 YTM4Zi01ZmY0LTRiOTctYTQ1OS1lMjVjZmM5Y2FhNzEvYmZlNWEzOGYtNWZmNC00 Yjk3LWE0NTktZTI1Y2ZjOWNhYTcxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYmZlNWEzOGYtNWZmNC00Yjk3LWE0 NTktZTI1Y2ZjOWNhYTcxL2JmZTVhMzhmLTVmZjQtNGI5Ny1hNDU5LWUyNWNmYzlj YWE3MS5jcmwwHwYDVR0jBBgwFoAUvDbww5CRe7jL9/4AdXJbr/tZiwEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iZmU1YTM4Zi01ZmY0LTRiOTctYTQ1OS1lMjVj ZmM5Y2FhNzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAfr+HIBN6BTOSOmxcnm7o5 vA6d1ovdFLfMTa6TbbbRzrTpXsRhgM+AwtiU/WgkIZrtg+Xd62DVNAUe+Q1EWLm9 mocQLyDfpNeilTLH9AL8MebqmC7+Wdwvp+BDIU6bs4spd/KzQkOLbannMYaZwtDe CpuZmDWb+VTaq0K3nOJo2xGZe1g/BAm1Z10J09jLCjbyZWHiLMCCuTQArSlEtoc5 Hq2Lp/Eu+yZUkHuCXVfRvoPA2bfCzy/qhtU5uXHeReGY1LjQFJ75Q6BMytzqnrLy 764o/g83bo0aVDLdCcH5R9fMf8MaJEfS/88/I+wGfd+kTEo3OKfmvVM39v7qwrdj -----END CERTIFICATE-----Generated at Tue Nov 4 05:15:05 2025 by rpki-client