$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft File: bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft (raw, json) Hash identifier: pG3W4Dg0JxNPMPkbKvGqFLxT2iLGlQxNBWkdBnEnyVk= Subject key identifier: 7D:04:73:17:57:AA:FE:59:59:FC:23:32:BA:62:99:75:33:10:8F:99 Authority key identifier: 00:96:DD:99:13:E4:C1:00:CA:66:7C:56:A6:9F:2F:41:B9:D4:5C:31 Certificate issuer: /CN=bc3951ec-0f8a-49d2-bec7-41a9657e87f5 Certificate serial: 010D0C9F4328584BBA0FF80FF08DEA1911ABB360 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft Manifest number: 010D0C9F432858427253B358C10542724BFE736C Signing time: Sun 02 Nov 2025 14:00:09 +0000 Manifest this update: Sun 02 Nov 2025 14:00:09 +0000 Manifest next update: Tue 04 Nov 2025 14:00:00 +0000 Files and hashes: 1: 30556b03-38d3-3916-aa52-b8ba0322c064.roa (hash: Ob/n8LcukeZenibjevTGwSexbF8jv5FlDF0VRk6/UuY=) 2: 9ff30824-1084-32e9-aa19-53c49b5db5a4.roa (hash: BAc2QcgyHx2PycSwauTEkv20bMsGzHRXfL5DAtOnnuc=) 3: bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl (hash: +gqp22uXV1RkWBXZyfIQM2m3iiihg3/DjHZz60gEakE=) 4: be400544-19f0-3ed1-bf3c-e5f9ab3730af.roa (hash: re6y9Uy6BCDQ8ERYjcfbeAOBmklGfLFtZlkGXhH0wRE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:0f:f8:0f:f0:8d:ea:19:11:ab:b3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc3951ec-0f8a-49d2-bec7-41a9657e87f5 Validity Not Before: Nov 2 14:00:09 2025 GMT Not After : Nov 4 14:00:00 2025 GMT Subject: CN=8d0ce510-0bdf-4cce-bfff-cbb02c897fdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:1c:b7:b5:3c:85:ef:b8:b4:ed:86:26:94:9d: 09:27:b8:03:d5:6a:95:53:39:f9:dd:23:ce:fc:4a: 10:1a:2c:65:10:90:13:b6:26:3e:ef:3b:1e:bf:82: 19:a5:dc:f0:50:f5:36:40:e4:ae:9d:af:73:72:e7: 98:e1:a6:1b:fa:b4:1e:12:88:5c:51:df:11:9b:67: 8c:d0:3f:d1:37:f4:97:16:a2:91:58:c0:0b:d1:d7: dd:09:24:e6:66:b9:bf:f7:fd:69:2a:50:ef:74:47: 9f:19:61:b8:56:6a:ab:f7:01:41:f3:5b:0e:80:bc: e2:ad:5a:92:7d:2d:82:cd:8a:8e:5e:83:cd:23:a2: a8:56:18:53:46:3f:83:a3:db:f2:a5:3e:54:5b:24: 87:62:1f:e4:68:c9:5b:63:81:7a:0c:f3:c4:fd:26: 94:e2:aa:d4:a5:f0:9b:8c:f8:5d:38:44:3e:ed:3e: 1b:c1:98:52:f0:77:b8:d6:78:db:73:a8:9e:c2:c4: 73:38:83:9c:6c:6b:a7:d2:af:c0:a4:40:42:05:63: 9c:d2:d9:9f:65:df:ef:17:d2:a3:d8:5c:8b:28:7f: 8f:81:c3:64:9f:38:22:4d:f9:f7:27:00:36:cb:54: c5:89:1d:a7:8e:6b:56:b3:bc:00:00:b1:ac:86:c1: 7d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:04:73:17:57:AA:FE:59:59:FC:23:32:BA:62:99:75:33:10:8F:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl X509v3 Authority Key Identifier: keyid:00:96:DD:99:13:E4:C1:00:CA:66:7C:56:A6:9F:2F:41:B9:D4:5C:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:3e:95:51:5a:de:aa:60:43:2c:bd:5e:8d:7b:29:e5:79:1e: ea:20:b8:cb:9d:5b:09:09:d5:92:03:c6:e4:ae:01:3d:a7:c1: 98:9c:40:de:34:1f:81:de:5a:3c:86:67:40:74:05:22:02:56: 1b:12:9b:ca:f0:5a:91:a6:ef:8b:91:75:cd:cb:4f:0b:b9:93: 80:af:95:04:41:94:9f:b0:8e:df:6b:23:59:55:e2:7e:ec:82: 4c:45:02:cd:2d:2c:76:6d:1b:b9:49:1f:50:f6:64:00:f2:85: 59:b6:32:e0:aa:5f:b1:e3:8e:51:73:ba:4e:4a:ff:6f:57:7c: 43:4c:ad:92:55:9e:f5:1c:5e:6b:a5:43:ff:e8:5e:d7:98:3f: 06:db:24:59:75:bd:2b:31:dc:64:c1:08:0a:96:8d:4a:fc:b6: 0e:61:64:02:59:dd:e7:80:bc:37:9e:a4:ee:39:69:1d:08:ca: a8:54:bf:b0:cf:a2:91:5e:53:59:5c:3b:45:57:d7:46:b8:86: 88:04:32:2a:f6:9e:b8:36:7c:da:66:f4:4b:35:1f:59:22:3a: e2:68:0c:24:81:65:80:9c:57:a5:49:a1:eb:33:9d:65:3a:82: 67:e2:ca:77:f8:8b:53:4f:43:7a:f7:e8:19:38:3a:cb:f9:70: 16:1e:a2:e0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu6D/gP8I3qGRGrs2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzOTUxZWMtMGY4YS00OWQyLWJlYzctNDFhOTY1N2U4 N2Y1MB4XDTI1MTEwMjE0MDAwOVoXDTI1MTEwNDE0MDAwMFowLzEtMCsGA1UEAxMk OGQwY2U1MTAtMGJkZi00Y2NlLWJmZmYtY2JiMDJjODk3ZmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBy3tTyF77i07YYmlJ0JJ7gD1WqVUzn53SPO /EoQGixlEJATtiY+7zsev4IZpdzwUPU2QOSuna9zcueY4aYb+rQeEohcUd8Rm2eM 0D/RN/SXFqKRWMAL0dfdCSTmZrm/9/1pKlDvdEefGWG4Vmqr9wFB81sOgLzirVqS fS2CzYqOXoPNI6KoVhhTRj+Do9vypT5UWySHYh/kaMlbY4F6DPPE/SaU4qrUpfCb jPhdOEQ+7T4bwZhS8He41njbc6iewsRzOIOcbGun0q/ApEBCBWOc0tmfZd/vF9Kj 2FyLKH+PgcNknzgiTfn3JwA2y1TFiR2njmtWs7wAALGshsF9/QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFH0EcxdXqv5ZWfwjMrpimXUzEI+ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iYzM5 NTFlYy0wZjhhLTQ5ZDItYmVjNy00MWE5NjU3ZTg3ZjUvYmMzOTUxZWMtMGY4YS00 OWQyLWJlYzctNDFhOTY1N2U4N2Y1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYmMzOTUxZWMtMGY4YS00OWQyLWJl YzctNDFhOTY1N2U4N2Y1L2JjMzk1MWVjLTBmOGEtNDlkMi1iZWM3LTQxYTk2NTdl ODdmNS5jcmwwHwYDVR0jBBgwFoAUAJbdmRPkwQDKZnxWpp8vQbnUXDEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iYzM5NTFlYy0wZjhhLTQ5ZDItYmVjNy00MWE5 NjU3ZTg3ZjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAxPpVRWt6qYEMsvV6Neynl eR7qILjLnVsJCdWSA8bkrgE9p8GYnEDeNB+B3lo8hmdAdAUiAlYbEpvK8FqRpu+L kXXNy08LuZOAr5UEQZSfsI7fayNZVeJ+7IJMRQLNLSx2bRu5SR9Q9mQA8oVZtjLg ql+x445Rc7pOSv9vV3xDTK2SVZ71HF5rpUP/6F7XmD8G2yRZdb0rMdxkwQgKlo1K /LYOYWQCWd3ngLw3nqTuOWkdCMqoVL+wz6KRXlNZXDtFV9dGuIaIBDIq9p64Nnza ZvRLNR9ZIjriaAwkgWWAnFelSaHrM51lOoJn4sp3+ItTT0N69+gZODrL+XAWHqLg -----END CERTIFICATE-----Generated at Mon Nov 3 07:56:01 2025 by rpki-client