$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft File: bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft (raw, json) Hash identifier: hr3k0XuIjEYY1F5LsmL9ETNr5Kr98fTvme8Dw5wZUaU= Subject key identifier: 91:60:36:FF:F8:D0:2E:46:AE:C4:41:5B:1A:28:7F:FF:64:CB:C5:85 Authority key identifier: 00:96:DD:99:13:E4:C1:00:CA:66:7C:56:A6:9F:2F:41:B9:D4:5C:31 Certificate issuer: /CN=bc3951ec-0f8a-49d2-bec7-41a9657e87f5 Certificate serial: 010D0C9F4328584B340F1483BEA966ECBD0AEF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft Manifest number: 010D0C9F432858427253B358C10542724BFE733B Signing time: Mon 15 Sep 2025 14:00:03 +0000 Manifest this update: Mon 15 Sep 2025 14:00:03 +0000 Manifest next update: Wed 17 Sep 2025 14:00:00 +0000 Files and hashes: 1: 30556b03-38d3-3916-aa52-b8ba0322c064.roa (hash: Ob/n8LcukeZenibjevTGwSexbF8jv5FlDF0VRk6/UuY=) 2: 9ff30824-1084-32e9-aa19-53c49b5db5a4.roa (hash: BAc2QcgyHx2PycSwauTEkv20bMsGzHRXfL5DAtOnnuc=) 3: bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl (hash: wsibXbYHUi6XwUZoC5ciP32cf3JOlUrvzr7gar8tims=) 4: be400544-19f0-3ed1-bf3c-e5f9ab3730af.roa (hash: re6y9Uy6BCDQ8ERYjcfbeAOBmklGfLFtZlkGXhH0wRE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:34:0f:14:83:be:a9:66:ec:bd:0a:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc3951ec-0f8a-49d2-bec7-41a9657e87f5 Validity Not Before: Sep 15 14:00:03 2025 GMT Not After : Sep 17 14:00:00 2025 GMT Subject: CN=fb070552-d0ea-4e23-b712-b75e2ed7bfa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:12:6d:ea:7d:a2:ab:2d:cc:0a:73:fb:74:a7: 72:97:d2:12:af:e3:47:72:e3:87:18:1b:a9:6b:66: bc:b0:80:42:d3:fd:ce:01:4f:29:1b:08:0f:7e:6c: 0b:d8:af:5d:36:21:5a:47:97:18:df:b7:9f:ff:51: f1:93:c0:a7:43:aa:71:a8:03:8d:93:6f:79:35:67: 18:af:33:f9:6d:a6:79:3e:fb:5c:24:72:c8:0e:54: bb:64:4d:bc:dd:b6:a2:dd:4d:ff:25:cf:c8:b6:c1: 65:8d:04:12:d9:5d:38:c1:a0:78:75:2f:21:48:34: b8:cc:54:9d:8f:1c:e6:c0:e3:fe:b4:cf:ee:51:21: 28:ea:0d:02:da:9a:19:a1:c0:ae:5c:bc:11:37:d1: 11:da:fb:94:d2:3d:c4:a6:c6:48:39:86:6b:5f:98: e9:ed:29:46:a8:17:2c:8a:74:6e:3e:c5:58:5c:71: 5f:15:7c:b2:19:7b:04:ab:00:e6:9f:45:78:e9:76: a7:e3:78:a2:db:4d:e5:09:51:d6:79:ea:15:e3:1f: 8f:5f:fd:e2:32:85:35:6f:ca:8c:44:13:7a:7c:88: c8:4f:d4:40:3c:ac:7c:52:b6:0f:7d:f3:a6:d6:b5: 28:55:25:39:91:99:33:11:cb:5c:a8:00:70:fb:0d: 86:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:60:36:FF:F8:D0:2E:46:AE:C4:41:5B:1A:28:7F:FF:64:CB:C5:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl X509v3 Authority Key Identifier: keyid:00:96:DD:99:13:E4:C1:00:CA:66:7C:56:A6:9F:2F:41:B9:D4:5C:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:61:90:e3:83:ed:b9:4b:1e:db:7b:68:f3:ec:81:f2:62:a8: 1c:c8:3c:d9:f1:00:3f:b2:0f:51:de:1c:f1:c1:b9:04:9d:86: f6:d8:6e:20:48:9a:d5:d0:d3:7a:42:66:16:d3:3a:6e:9a:9b: f2:46:96:e7:73:66:1e:41:93:8d:7b:47:45:84:66:af:95:84: ca:03:dc:5a:fb:d8:1c:8e:7b:f2:35:3d:92:f4:d8:0e:a7:09: c3:6c:92:63:e8:b1:45:a5:66:4f:8e:43:de:46:2c:5f:46:8b: e6:39:19:bb:a5:55:53:00:52:78:db:b4:65:e5:7c:78:95:59: 80:cc:bf:33:e9:0c:d2:f0:6a:30:ae:a7:26:fd:ae:f6:85:15: 85:b1:73:c4:ac:7b:3a:f7:a6:c9:07:8e:60:bc:fc:3c:b4:df: 79:d4:ae:19:9c:46:58:0d:16:0a:55:09:63:9f:c7:7a:4b:38: 62:35:2a:64:b3:52:8e:09:a2:22:3b:13:a9:3b:c3:88:5b:a9: bd:a3:c5:2e:43:63:fd:55:40:0b:17:94:9d:e2:9d:82:92:0c: 67:91:92:ea:db:50:3f:74:c4:ff:5b:3e:4c:d0:98:96:1e:83: b1:aa:77:48:ab:22:f4:e3:8b:33:55:f7:5d:c8:7b:c1:91:67: 9a:a9:7e:ba -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEs0DxSDvqlm7L0K74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzOTUxZWMtMGY4YS00OWQyLWJlYzctNDFhOTY1N2U4 N2Y1MB4XDTI1MDkxNTE0MDAwM1oXDTI1MDkxNzE0MDAwMFowLzEtMCsGA1UEAxMk ZmIwNzA1NTItZDBlYS00ZTIzLWI3MTItYjc1ZTJlZDdiZmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxJt6n2iqy3MCnP7dKdyl9ISr+NHcuOHGBup a2a8sIBC0/3OAU8pGwgPfmwL2K9dNiFaR5cY37ef/1Hxk8CnQ6pxqAONk295NWcY rzP5baZ5PvtcJHLIDlS7ZE283bai3U3/Jc/ItsFljQQS2V04waB4dS8hSDS4zFSd jxzmwOP+tM/uUSEo6g0C2poZocCuXLwRN9ER2vuU0j3EpsZIOYZrX5jp7SlGqBcs inRuPsVYXHFfFXyyGXsEqwDmn0V46Xan43ii203lCVHWeeoV4x+PX/3iMoU1b8qM RBN6fIjIT9RAPKx8UrYPffOm1rUoVSU5kZkzEctcqABw+w2GPwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJFgNv/40C5GrsRBWxoof/9ky8WFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iYzM5 NTFlYy0wZjhhLTQ5ZDItYmVjNy00MWE5NjU3ZTg3ZjUvYmMzOTUxZWMtMGY4YS00 OWQyLWJlYzctNDFhOTY1N2U4N2Y1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYmMzOTUxZWMtMGY4YS00OWQyLWJl YzctNDFhOTY1N2U4N2Y1L2JjMzk1MWVjLTBmOGEtNDlkMi1iZWM3LTQxYTk2NTdl ODdmNS5jcmwwHwYDVR0jBBgwFoAUAJbdmRPkwQDKZnxWpp8vQbnUXDEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iYzM5NTFlYy0wZjhhLTQ5ZDItYmVjNy00MWE5 NjU3ZTg3ZjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCNYZDjg+25Sx7be2jz7IHy YqgcyDzZ8QA/sg9R3hzxwbkEnYb22G4gSJrV0NN6QmYW0zpumpvyRpbnc2YeQZON e0dFhGavlYTKA9xa+9gcjnvyNT2S9NgOpwnDbJJj6LFFpWZPjkPeRixfRovmORm7 pVVTAFJ427Rl5Xx4lVmAzL8z6QzS8Gowrqcm/a72hRWFsXPErHs696bJB45gvPw8 tN951K4ZnEZYDRYKVQljn8d6SzhiNSpks1KOCaIiOxOpO8OIW6m9o8UuQ2P9VUAL F5Sd4p2CkgxnkZLq21A/dMT/Wz5M0JiWHoOxqndIqyL044szVfddyHvBkWeaqX66 -----END CERTIFICATE-----Generated at Tue Sep 16 02:19:00 2025 by rpki-client