$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft File: bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft (raw, json) Hash identifier: erIOcNQIDeXLmBCz/nugyKHeRYlwu06w1K5wncU/NB0= Subject key identifier: 89:56:59:13:A4:71:C2:E5:BD:D5:17:7B:AE:B9:5B:59:E6:D5:52:F0 Authority key identifier: 00:96:DD:99:13:E4:C1:00:CA:66:7C:56:A6:9F:2F:41:B9:D4:5C:31 Certificate issuer: /CN=bc3951ec-0f8a-49d2-bec7-41a9657e87f5 Certificate serial: 010D0C9F4328584FBAA1306B665A20F68DAD8880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft Manifest number: 010D0C9F432858427253B358C10542724BFE74E5 Signing time: Wed 04 Nov 2026 14:00:24 +0000 Manifest this update: Wed 04 Nov 2026 14:00:24 +0000 Manifest next update: Sat 07 Nov 2026 14:00:00 +0000 Files and hashes: 1: 30556b03-38d3-3916-aa52-b8ba0322c064.roa (hash: qiVhJPGPvNW7O9kjg0o+AHvK3grz9LSlmVkz4nOP0hs=) 2: 9ff30824-1084-32e9-aa19-53c49b5db5a4.roa (hash: 5PY/GYfbqTgR5dBg1e4iGkgrQETtdnMJxSSqDjE/ibo=) 3: bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl (hash: XIqoSAqN4RhHd5KdD3jMOdCxgwV8om7wKqLDrgikDmQ=) 4: be400544-19f0-3ed1-bf3c-e5f9ab3730af.roa (hash: pAzDv8a+aFjlSCiN4dbXf4QR08ZyChQFmHyDJFUBHrM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ba:a1:30:6b:66:5a:20:f6:8d:ad:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc3951ec-0f8a-49d2-bec7-41a9657e87f5 Validity Not Before: Nov 4 14:00:24 2026 GMT Not After : Nov 7 14:00:00 2026 GMT Subject: CN=da91849b-4936-4cba-b2fd-94d67c8a2485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:36:aa:44:fa:66:97:47:f7:80:59:08:ed:e4: 2b:05:4b:74:fb:8a:15:f4:95:88:86:21:ac:c5:f3: 86:0d:1a:87:ec:7b:00:d9:6e:b5:92:fd:81:3d:36: 76:aa:99:d9:5d:e8:73:92:64:22:e0:a9:76:e7:de: ed:56:ad:fa:24:b4:dc:2b:d4:e1:8c:0e:ac:ca:73: 72:bf:e1:39:66:6c:f0:c2:e9:4d:23:3b:27:8c:20: da:db:6e:7a:41:d6:12:88:ee:32:fd:ad:28:62:8a: 45:ae:f9:a0:2e:3d:83:ed:8a:45:99:35:15:77:10: 33:98:d2:44:ff:99:aa:0a:a4:26:c9:ca:17:de:b6: 5e:46:e4:65:b2:ed:85:a4:22:6a:c8:6e:9b:02:92: 8e:e6:04:ac:33:31:af:21:70:12:0a:c8:8d:e4:c5: 7b:89:56:4e:f1:df:46:47:07:a7:d7:0c:55:9f:42: 20:74:a1:fc:f5:cc:86:3b:af:f5:bf:0e:15:4f:59: 03:61:39:5e:1c:8c:3e:7e:8c:00:1a:0d:ca:39:30: bf:3a:5e:dc:6e:be:d9:0f:d1:7b:4b:33:68:23:b6: a5:7c:65:f5:d9:aa:04:30:0f:27:dd:8c:71:11:8b: 34:1f:a2:72:8d:d9:cd:a1:16:e1:1d:d5:93:14:a0: 06:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:56:59:13:A4:71:C2:E5:BD:D5:17:7B:AE:B9:5B:59:E6:D5:52:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl X509v3 Authority Key Identifier: keyid:00:96:DD:99:13:E4:C1:00:CA:66:7C:56:A6:9F:2F:41:B9:D4:5C:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:6a:35:4e:e3:fc:0a:57:81:60:73:fe:c9:28:3a:71:a9:f6: d3:96:8e:72:bf:ea:81:54:76:0c:15:f8:fc:7a:6a:16:af:c1: e5:55:d3:2b:a2:9c:5e:f2:dd:e1:6a:9c:4f:96:bb:71:f9:33: bf:cf:20:0f:04:28:98:44:b6:f2:e3:d1:06:47:a6:e7:7c:be: 59:46:91:00:66:ab:fe:08:be:fc:7d:50:15:6b:bd:be:0e:e0: 53:65:d5:73:40:32:e1:65:6c:19:ad:6f:9a:8c:6f:4e:6c:9d: 06:09:3f:98:7e:80:71:7b:41:c2:26:b1:14:c9:a9:60:b6:0b: bd:88:dc:7f:1d:db:ee:94:10:65:dc:f0:31:5b:2f:93:f2:89: 1e:f9:15:a0:0f:c8:35:03:54:3d:82:3c:e9:1e:16:3e:ea:e5: f0:3a:6c:59:86:9e:eb:fe:91:07:8e:8e:08:a4:46:ae:9a:09: 12:49:54:7d:31:41:c3:d5:6e:97:61:36:4d:c3:6a:99:d6:04: 3b:c4:0b:5b:5d:8a:cc:d0:db:21:ab:c3:8e:c0:d7:a4:19:16: 9c:30:b2:22:61:82:4c:24:e3:82:c7:32:fd:08:7e:8b:7a:65: fb:f0:04:af:cc:97:08:08:d1:fb:3c:d4:61:03:53:83:9d:ee: 87:d5:c9:4a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+6oTBrZlog9o2tiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzOTUxZWMtMGY4YS00OWQyLWJlYzctNDFhOTY1N2U4 N2Y1MB4XDTI2MTEwNDE0MDAyNFoXDTI2MTEwNzE0MDAwMFowLzEtMCsGA1UEAxMk ZGE5MTg0OWItNDkzNi00Y2JhLWIyZmQtOTRkNjdjOGEyNDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDaqRPpml0f3gFkI7eQrBUt0+4oV9JWIhiGs xfOGDRqH7HsA2W61kv2BPTZ2qpnZXehzkmQi4Kl2597tVq36JLTcK9ThjA6synNy v+E5ZmzwwulNIzsnjCDa2256QdYSiO4y/a0oYopFrvmgLj2D7YpFmTUVdxAzmNJE /5mqCqQmycoX3rZeRuRlsu2FpCJqyG6bApKO5gSsMzGvIXASCsiN5MV7iVZO8d9G Rwen1wxVn0IgdKH89cyGO6/1vw4VT1kDYTleHIw+fowAGg3KOTC/Ol7cbr7ZD9F7 SzNoI7alfGX12aoEMA8n3YxxEYs0H6JyjdnNoRbhHdWTFKAGbwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIlWWROkccLlvdUXe665W1nm1VLwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iYzM5 NTFlYy0wZjhhLTQ5ZDItYmVjNy00MWE5NjU3ZTg3ZjUvYmMzOTUxZWMtMGY4YS00 OWQyLWJlYzctNDFhOTY1N2U4N2Y1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYmMzOTUxZWMtMGY4YS00OWQyLWJl YzctNDFhOTY1N2U4N2Y1L2JjMzk1MWVjLTBmOGEtNDlkMi1iZWM3LTQxYTk2NTdl ODdmNS5jcmwwHwYDVR0jBBgwFoAUAJbdmRPkwQDKZnxWpp8vQbnUXDEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iYzM5NTFlYy0wZjhhLTQ5ZDItYmVjNy00MWE5 NjU3ZTg3ZjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBXajVO4/wKV4Fgc/7JKDpx qfbTlo5yv+qBVHYMFfj8emoWr8HlVdMropxe8t3hapxPlrtx+TO/zyAPBCiYRLby 49EGR6bnfL5ZRpEAZqv+CL78fVAVa72+DuBTZdVzQDLhZWwZrW+ajG9ObJ0GCT+Y foBxe0HCJrEUyalgtgu9iNx/HdvulBBl3PAxWy+T8oke+RWgD8g1A1Q9gjzpHhY+ 6uXwOmxZhp7r/pEHjo4IpEaumgkSSVR9MUHD1W6XYTZNw2qZ1gQ7xAtbXYrM0Nsh q8OOwNekGRacMLIiYYJMJOOCxzL9CH6LemX78ASvzJcICNH7PNRhA1ODne6H1clK -----END CERTIFICATE-----Generated at Thu Nov 5 12:21:34 2026 by rpki-client