$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369/bc3aa731-9547-4b21-8f65-60f3717ca369.mft File: bc3aa731-9547-4b21-8f65-60f3717ca369.mft (raw, json) Hash identifier: ocr/u9ogzzXHVic5XFFPdd9Xa41C8KS736Z6Go4v11k= Subject key identifier: 9E:63:2F:9A:33:5F:96:7E:B9:5A:EE:29:D5:49:8F:AE:C2:61:CC:C0 Authority key identifier: 51:41:76:B5:8C:94:B6:76:8B:D8:5A:30:55:62:46:17:E5:FF:27:F9 Certificate issuer: /CN=bc3aa731-9547-4b21-8f65-60f3717ca369 Certificate serial: 010D0C9F4328584BBE7B801531683F54B6C2FF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369/bc3aa731-9547-4b21-8f65-60f3717ca369.mft Manifest number: 010D0C9F432858496EAE60AF4A8023AB42775699 Signing time: Tue 04 Nov 2025 04:00:03 +0000 Manifest this update: Tue 04 Nov 2025 04:00:03 +0000 Manifest next update: Fri 07 Nov 2025 04:00:00 +0000 Files and hashes: 1: a2fefabd-2f02-3245-a2c8-36de47abeaf7.roa (hash: hRLaHpd1CxNBx5syD2JgEuIWswtb81vMorVMtH4TBDo=) 2: bc3aa731-9547-4b21-8f65-60f3717ca369.crl (hash: /f4PVFb4Ek4ldNoZKPge3Yr66uP27PeaK5KlQ3G+a/w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369/bc3aa731-9547-4b21-8f65-60f3717ca369.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369/bc3aa731-9547-4b21-8f65-60f3717ca369.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:7b:80:15:31:68:3f:54:b6:c2:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc3aa731-9547-4b21-8f65-60f3717ca369 Validity Not Before: Nov 4 04:00:03 2025 GMT Not After : Nov 7 04:00:00 2025 GMT Subject: CN=b236c35e-3bf1-4f82-bad4-8c411c6fa232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ae:bf:2e:b9:61:d3:b8:89:1c:21:db:91:f8: 5a:97:0a:1c:fe:a5:2c:63:0c:8d:af:5c:7d:13:8e: 65:bd:e6:21:c8:64:1e:e1:df:c5:50:ab:6a:3b:17: 27:39:54:13:20:a5:5d:76:71:9e:ec:49:5b:1f:5d: 63:3a:64:40:51:ee:59:a5:7a:94:63:1a:ca:17:8c: 6a:3b:fc:1e:fc:64:b9:a1:42:d5:84:1d:27:26:0a: 8e:71:5c:b2:7a:20:8f:16:64:08:14:ee:58:70:ef: ee:80:7f:df:e3:20:63:00:0a:4f:80:fd:c8:ee:7d: ce:dc:67:bd:d5:d8:e5:56:a5:d9:f0:c1:44:55:23: 31:e1:a9:4a:56:41:83:04:38:3c:5c:ab:ce:4a:65: 27:8a:f9:42:69:0e:63:06:b2:a4:af:92:97:34:9e: 41:58:44:db:f0:5a:5c:63:fd:1a:49:68:e5:80:9c: 13:93:09:bc:62:bd:a9:fd:9b:29:43:1b:3f:8d:99: 96:41:32:9f:76:ae:24:81:24:4e:48:81:ad:ec:a9: 2e:83:03:cc:69:67:01:46:79:4e:d2:14:52:64:83: f4:5f:89:17:80:4a:07:ab:d9:89:cb:5b:02:55:40: 88:0d:4a:56:36:18:ed:93:c5:af:9a:63:e7:5a:da: 25:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:63:2F:9A:33:5F:96:7E:B9:5A:EE:29:D5:49:8F:AE:C2:61:CC:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369/bc3aa731-9547-4b21-8f65-60f3717ca369.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369/bc3aa731-9547-4b21-8f65-60f3717ca369.crl X509v3 Authority Key Identifier: keyid:51:41:76:B5:8C:94:B6:76:8B:D8:5A:30:55:62:46:17:E5:FF:27:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:77:91:71:3b:d4:b5:56:12:0e:c5:cd:d7:8d:cf:2d:3d:a0: 8c:11:d3:a2:cf:68:4a:04:e3:3f:0a:ee:e8:5f:4d:ff:67:86: 2e:fc:3c:64:42:c0:9c:25:af:22:c4:ad:50:1e:0f:e7:51:6b: c4:a1:40:67:c1:06:d2:ac:06:2a:9a:d1:ec:83:63:52:ad:6f: f4:c1:07:03:65:76:27:6a:bc:b4:b3:30:ce:97:16:33:f8:11: 82:f8:3b:10:09:cc:06:6b:5d:77:2a:61:7a:7c:c5:c1:49:ff: c8:10:e2:74:df:8c:31:de:cb:8e:63:91:9f:ec:80:f6:7e:89: e8:8c:0f:d0:3d:59:54:52:dd:45:95:b3:f6:6c:19:94:48:eb: 8c:f7:16:95:da:ca:b7:b5:e7:87:67:59:8d:33:c5:bd:4a:b1: 7d:e5:5d:3a:94:94:df:a7:27:3f:94:13:bc:e9:3c:24:db:51: 34:24:67:93:c3:dd:56:2b:17:4a:2f:c7:76:07:53:49:1c:2d: 3f:81:42:98:d7:e8:52:0a:f0:3b:04:46:99:64:18:dd:d8:24: be:0b:fe:5b:a4:9e:71:53:a2:6b:c7:86:ec:13:09:14:c6:5f: 10:ab:a4:a1:56:dd:5b:51:80:ae:e5:10:60:2c:2d:d9:f1:b7: fe:87:b7:be -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+e4AVMWg/VLbC/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzYWE3MzEtOTU0Ny00YjIxLThmNjUtNjBmMzcxN2Nh MzY5MB4XDTI1MTEwNDA0MDAwM1oXDTI1MTEwNzA0MDAwMFowLzEtMCsGA1UEAxMk YjIzNmMzNWUtM2JmMS00ZjgyLWJhZDQtOGM0MTFjNmZhMjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh66/Lrlh07iJHCHbkfhalwoc/qUsYwyNr1x9 E45lveYhyGQe4d/FUKtqOxcnOVQTIKVddnGe7ElbH11jOmRAUe5ZpXqUYxrKF4xq O/we/GS5oULVhB0nJgqOcVyyeiCPFmQIFO5YcO/ugH/f4yBjAApPgP3I7n3O3Ge9 1djlVqXZ8MFEVSMx4alKVkGDBDg8XKvOSmUnivlCaQ5jBrKkr5KXNJ5BWETb8Fpc Y/0aSWjlgJwTkwm8Yr2p/ZspQxs/jZmWQTKfdq4kgSROSIGt7KkugwPMaWcBRnlO 0hRSZIP0X4kXgEoHq9mJy1sCVUCIDUpWNhjtk8WvmmPnWtolCQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJ5jL5ozX5Z+uVruKdVJj67CYczAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iYzNh YTczMS05NTQ3LTRiMjEtOGY2NS02MGYzNzE3Y2EzNjkvYmMzYWE3MzEtOTU0Ny00 YjIxLThmNjUtNjBmMzcxN2NhMzY5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYmMzYWE3MzEtOTU0Ny00YjIxLThm NjUtNjBmMzcxN2NhMzY5L2JjM2FhNzMxLTk1NDctNGIyMS04ZjY1LTYwZjM3MTdj YTM2OS5jcmwwHwYDVR0jBBgwFoAUUUF2tYyUtnaL2FowVWJGF+X/J/kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iYzNhYTczMS05NTQ3LTRiMjEtOGY2NS02MGYz NzE3Y2EzNjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB5d5FxO9S1VhIOxc3Xjc8t PaCMEdOiz2hKBOM/Cu7oX03/Z4Yu/DxkQsCcJa8ixK1QHg/nUWvEoUBnwQbSrAYq mtHsg2NSrW/0wQcDZXYnary0szDOlxYz+BGC+DsQCcwGa113KmF6fMXBSf/IEOJ0 34wx3suOY5Gf7ID2fonojA/QPVlUUt1FlbP2bBmUSOuM9xaV2sq3teeHZ1mNM8W9 SrF95V06lJTfpyc/lBO86Twk21E0JGeTw91WKxdKL8d2B1NJHC0/gUKY1+hSCvA7 BEaZZBjd2CS+C/5bpJ5xU6Jrx4bsEwkUxl8Qq6ShVt1bUYCu5RBgLC3Z8bf+h7e+ -----END CERTIFICATE-----Generated at Tue Nov 4 09:28:40 2025 by rpki-client