$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6.mft File: bad642f9-6daf-4edd-bf5a-bce7a69cd2e6.mft (raw, json) Hash identifier: i2fTRWf37HtGk+VbGVzUZsuKm7WvBXGlnQGCWTWq4E4= Subject key identifier: 5B:5D:75:0C:AB:7B:D1:DC:B2:B4:28:6B:5F:6B:95:79:4F:E6:B8:EA Authority key identifier: 1B:EF:E1:BF:7B:3A:50:D4:34:6C:3F:06:AE:1E:9F:4E:AF:3A:11:16 Certificate issuer: /CN=bad642f9-6daf-4edd-bf5a-bce7a69cd2e6 Certificate serial: 010D0C9F4328584B99426EDA61C0546127BAE180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6.mft Manifest number: 010D0C9F43285840D5E20FCF08444F93A82EDEEB Signing time: Tue 21 Oct 2025 20:00:09 +0000 Manifest this update: Tue 21 Oct 2025 20:00:09 +0000 Manifest next update: Thu 23 Oct 2025 20:00:00 +0000 Files and hashes: 1: bad642f9-6daf-4edd-bf5a-bce7a69cd2e6.crl (hash: 68fxu2BWDRM43BzH2XG2U8rR51sLShPAgu4fcIoWMN8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:42:6e:da:61:c0:54:61:27:ba:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bad642f9-6daf-4edd-bf5a-bce7a69cd2e6 Validity Not Before: Oct 21 20:00:09 2025 GMT Not After : Oct 23 20:00:00 2025 GMT Subject: CN=38af5187-d28d-41ab-8eb0-308fdcc36395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fe:62:e9:57:35:cf:5f:72:e3:e4:8f:1d:a0: 72:ac:3c:e4:b9:ff:17:85:a7:ac:14:b5:5b:82:9c: 26:69:57:00:c1:68:f6:b6:13:93:ec:f5:9b:7c:2d: ad:d2:9c:9c:f1:6f:6f:2d:ef:31:c3:d9:74:a9:ae: 45:df:70:08:dd:64:c6:9b:e8:f4:a4:e2:b8:f5:f1: 73:d7:da:7e:75:50:49:30:3b:5a:e1:65:c7:f6:fb: 56:ac:81:6c:47:af:b7:a6:90:83:3d:0c:a6:b5:45: 94:24:29:62:91:07:f4:91:54:c2:e3:0b:40:d4:4b: f9:8c:09:a6:8d:00:b5:da:19:31:e0:14:53:f9:85: 13:30:7c:17:9f:93:82:ab:5d:2f:ca:08:c9:89:6b: 11:25:ea:a2:a0:b5:0d:b2:f3:6e:34:a3:6b:9e:25: 7b:81:08:71:40:0e:cd:11:90:55:f7:18:14:f2:fd: 70:c7:54:d9:93:e6:9f:f1:f4:e2:72:6c:9c:07:29: 79:30:2b:71:b5:a2:12:30:ae:11:ca:29:6b:df:4b: 1d:04:d5:87:d1:7f:b7:98:58:4a:a9:f1:c0:13:34: 9d:f7:c7:61:f6:60:73:67:a1:6e:e3:9d:ca:1f:f1: 74:2f:79:e2:42:82:7f:b8:62:fa:6e:30:8b:54:27: 0b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:5D:75:0C:AB:7B:D1:DC:B2:B4:28:6B:5F:6B:95:79:4F:E6:B8:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6.crl X509v3 Authority Key Identifier: keyid:1B:EF:E1:BF:7B:3A:50:D4:34:6C:3F:06:AE:1E:9F:4E:AF:3A:11:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bad642f9-6daf-4edd-bf5a-bce7a69cd2e6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:05:e9:a0:f0:44:e0:9f:f2:be:72:df:19:4a:7f:cf:e5:96: d3:0c:49:a4:ba:8e:75:5f:82:b5:9b:81:ff:ff:9d:e1:a3:a1: 34:39:79:47:8b:8d:b2:50:ab:3e:44:f1:63:6e:59:cd:3e:8e: 29:a7:e7:ef:ee:fc:84:c0:5b:40:11:34:89:cf:68:42:c5:a0: af:75:2e:29:55:68:3b:bc:24:67:c4:4f:e1:67:09:44:5c:56: 9e:42:39:71:89:a7:87:3b:6c:c8:40:04:53:38:8d:19:e5:75: ef:bb:70:4f:72:dd:35:2b:45:b4:18:6e:20:d0:e5:89:fe:f3: ab:50:4f:47:3d:4f:b2:c9:2c:e0:6b:99:d1:71:20:1c:12:88: 40:9f:bf:82:04:e6:f2:bf:ce:bc:f7:ed:d2:0d:b5:d7:e7:e4: 0c:3b:9e:90:a7:0f:6e:b6:93:2d:32:73:19:cf:0c:b8:6c:0e: 20:a6:d9:f4:6a:32:e0:a2:be:ce:bf:bd:c0:db:5f:0a:ac:d3: 6f:5a:75:3e:d5:7b:29:ee:9b:11:85:e4:f0:7c:06:55:08:2f: 21:b8:f3:6c:1f:d6:e4:ef:0a:eb:ec:c1:f9:3a:96:cb:f5:4d: c4:d7:7f:ec:bb:d2:52:31:3e:1d:33:d1:bc:6f:f3:81:4a:d4: b9:2c:d9:5d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuZQm7aYcBUYSe64YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFkNjQyZjktNmRhZi00ZWRkLWJmNWEtYmNlN2E2OWNk MmU2MB4XDTI1MTAyMTIwMDAwOVoXDTI1MTAyMzIwMDAwMFowLzEtMCsGA1UEAxMk MzhhZjUxODctZDI4ZC00MWFiLThlYjAtMzA4ZmRjYzM2Mzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmf5i6Vc1z19y4+SPHaByrDzkuf8XhaesFLVb gpwmaVcAwWj2thOT7PWbfC2t0pyc8W9vLe8xw9l0qa5F33AI3WTGm+j0pOK49fFz 19p+dVBJMDta4WXH9vtWrIFsR6+3ppCDPQymtUWUJClikQf0kVTC4wtA1Ev5jAmm jQC12hkx4BRT+YUTMHwXn5OCq10vygjJiWsRJeqioLUNsvNuNKNrniV7gQhxQA7N EZBV9xgU8v1wx1TZk+af8fTicmycByl5MCtxtaISMK4Ryilr30sdBNWH0X+3mFhK qfHAEzSd98dh9mBzZ6Fu453KH/F0L3niQoJ/uGL6bjCLVCcLnwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFtddQyre9HcsrQoa19rlXlP5rjqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iYWQ2 NDJmOS02ZGFmLTRlZGQtYmY1YS1iY2U3YTY5Y2QyZTYvYmFkNjQyZjktNmRhZi00 ZWRkLWJmNWEtYmNlN2E2OWNkMmU2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYmFkNjQyZjktNmRhZi00ZWRkLWJm NWEtYmNlN2E2OWNkMmU2L2JhZDY0MmY5LTZkYWYtNGVkZC1iZjVhLWJjZTdhNjlj ZDJlNi5jcmwwHwYDVR0jBBgwFoAUG+/hv3s6UNQ0bD8Grh6fTq86ERYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iYWQ2NDJmOS02ZGFmLTRlZGQtYmY1YS1iY2U3 YTY5Y2QyZTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC2Bemg8ETgn/K+ct8ZSn/P 5ZbTDEmkuo51X4K1m4H//53ho6E0OXlHi42yUKs+RPFjblnNPo4pp+fv7vyEwFtA ETSJz2hCxaCvdS4pVWg7vCRnxE/hZwlEXFaeQjlxiaeHO2zIQARTOI0Z5XXvu3BP ct01K0W0GG4g0OWJ/vOrUE9HPU+yySzga5nRcSAcEohAn7+CBObyv8689+3SDbXX 5+QMO56Qpw9utpMtMnMZzwy4bA4gptn0ajLgor7Ov73A218KrNNvWnU+1Xsp7psR heTwfAZVCC8huPNsH9bk7wrr7MH5OpbL9U3E13/su9JSMT4dM9G8b/OBStS5LNld -----END CERTIFICATE-----Generated at Wed Oct 22 13:42:23 2025 by rpki-client