$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft File: bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft (raw, json) Hash identifier: 6f5z1mvaE8HgxsOG8NZuXVSiSHk+aZFjRMZN8saEwPI= Subject key identifier: 96:E7:F5:46:DC:76:9C:A6:35:CB:37:96:68:FF:5F:16:9D:16:2F:11 Authority key identifier: 00:96:DD:99:13:E4:C1:00:CA:66:7C:56:A6:9F:2F:41:B9:D4:5C:31 Certificate issuer: /CN=bc3951ec-0f8a-49d2-bec7-41a9657e87f5 Certificate serial: 010D0C9F4328584ABECE5AA5FAA67468526B8080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft Manifest number: 010D0C9F432858427253B358C10542724BFE7310 Signing time: Mon 04 Aug 2025 14:00:03 +0000 Manifest this update: Mon 04 Aug 2025 14:00:03 +0000 Manifest next update: Wed 06 Aug 2025 14:00:00 +0000 Files and hashes: 1: 30556b03-38d3-3916-aa52-b8ba0322c064.roa (hash: A3pemVR+y32EceWc45OE4Yi83UmUdMgb2HUDDFUvNjY=) 2: 9ff30824-1084-32e9-aa19-53c49b5db5a4.roa (hash: Vu9mdSIJp8JiTdeUtMZJcePASWdfNE+yXPEQFEqEp6o=) 3: bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl (hash: oWH4ReaY2OVGdkVhWWyTKx/5/TQB/psU41EUERNfxKg=) 4: be400544-19f0-3ed1-bf3c-e5f9ab3730af.roa (hash: sHd4iOoxfyregfLI4g3rQ3gLBKFb54fsCbxdj2Ze2ws=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:be:ce:5a:a5:fa:a6:74:68:52:6b:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc3951ec-0f8a-49d2-bec7-41a9657e87f5 Validity Not Before: Aug 4 14:00:03 2025 GMT Not After : Aug 6 14:00:00 2025 GMT Subject: CN=86c6689f-ac16-46b1-910a-4c1e3c71688e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d1:c4:9d:db:0c:01:59:58:33:db:d6:30:57: 37:3e:c2:ff:21:08:dd:d1:9e:f8:f2:de:88:91:4b: fb:46:a5:13:1a:d4:fe:cc:78:0e:bf:35:dc:e4:f3: cf:03:76:c3:98:93:f8:5f:05:29:33:01:7d:f6:00: 17:c5:cd:e3:56:83:a3:5e:56:67:e1:81:8f:b1:f2: 80:73:86:1d:64:08:69:cc:98:ec:97:ae:f5:1d:e4: de:2c:6c:fd:25:ef:5b:39:58:ef:24:96:76:00:e1: a7:22:d0:07:57:a7:df:11:d0:36:89:cd:1e:a6:54: db:58:69:da:0b:01:d5:98:cc:f7:69:e1:4e:ff:61: c4:23:26:2b:40:10:c1:af:cf:32:89:92:56:36:d6: af:a4:97:ef:fd:7b:03:df:75:7d:57:08:e1:bc:30: 7c:75:d9:65:75:0a:6d:3c:c7:4a:1b:7a:09:ea:69: 56:30:5b:ac:7b:78:a9:66:2c:4c:12:a9:8b:b1:07: ea:cd:bc:49:3d:d6:f7:89:fb:74:12:06:97:10:3c: 95:4d:c8:c0:42:a9:42:59:54:47:d2:2c:c5:c7:0e: d8:2d:9f:6b:ec:fc:ac:07:a9:d4:8f:c2:ca:5a:6f: 7c:e7:64:15:f7:73:6b:7f:b2:a7:08:cb:d9:75:48: 92:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E7:F5:46:DC:76:9C:A6:35:CB:37:96:68:FF:5F:16:9D:16:2F:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl X509v3 Authority Key Identifier: keyid:00:96:DD:99:13:E4:C1:00:CA:66:7C:56:A6:9F:2F:41:B9:D4:5C:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:47:cd:ef:c4:24:c9:63:69:07:0c:5f:6e:55:26:31:7c:15: 5e:cf:cb:e2:fe:e0:24:71:12:1d:79:7c:56:bd:63:bf:d1:07: 93:3e:17:cd:c7:a7:93:fc:36:97:18:90:10:d7:6f:d6:98:36: f9:a4:a5:a2:93:24:a2:c2:54:05:85:ed:5c:6f:ab:7e:8c:4d: 3d:83:28:51:a7:0f:9c:e1:42:c1:cc:03:94:12:cc:2f:8f:1d: 91:8d:fc:3c:bc:d3:81:0c:62:bf:86:e3:9a:d5:2c:7d:d8:c1: dc:67:1f:58:f2:e3:21:c3:33:53:67:76:a0:6d:08:dc:b6:dd: 26:2b:dd:0c:05:95:e9:19:03:d6:65:97:f7:d6:96:20:c5:a5: 9f:b5:07:30:c5:57:ef:06:36:a8:ce:b6:3c:07:72:7e:31:bc: d4:01:ef:7e:4d:7e:74:ea:e9:4d:5f:11:33:26:fd:33:4a:ab: aa:54:07:24:f1:8b:af:87:c6:b9:27:a3:41:3d:f5:08:63:9e: 58:69:0e:c5:15:32:d2:3c:6a:d7:c8:4e:bf:34:70:cf:a5:d5: 9e:c9:cc:23:1d:03:94:b0:73:5a:c3:66:c0:89:a1:ae:67:04: 4a:ba:6f:51:68:1e:dd:be:2e:da:c3:37:e7:33:ab:b5:08:13: 2e:6c:2c:c5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEq+zlql+qZ0aFJrgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzOTUxZWMtMGY4YS00OWQyLWJlYzctNDFhOTY1N2U4 N2Y1MB4XDTI1MDgwNDE0MDAwM1oXDTI1MDgwNjE0MDAwMFowLzEtMCsGA1UEAxMk ODZjNjY4OWYtYWMxNi00NmIxLTkxMGEtNGMxZTNjNzE2ODhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNHEndsMAVlYM9vWMFc3PsL/IQjd0Z748t6I kUv7RqUTGtT+zHgOvzXc5PPPA3bDmJP4XwUpMwF99gAXxc3jVoOjXlZn4YGPsfKA c4YdZAhpzJjsl671HeTeLGz9Je9bOVjvJJZ2AOGnItAHV6ffEdA2ic0eplTbWGna CwHVmMz3aeFO/2HEIyYrQBDBr88yiZJWNtavpJfv/XsD33V9VwjhvDB8ddlldQpt PMdKG3oJ6mlWMFuse3ipZixMEqmLsQfqzbxJPdb3ift0EgaXEDyVTcjAQqlCWVRH 0izFxw7YLZ9r7PysB6nUj8LKWm9852QV93Nrf7KnCMvZdUiSbQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJbn9UbcdpymNcs3lmj/XxadFi8RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iYzM5 NTFlYy0wZjhhLTQ5ZDItYmVjNy00MWE5NjU3ZTg3ZjUvYmMzOTUxZWMtMGY4YS00 OWQyLWJlYzctNDFhOTY1N2U4N2Y1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYmMzOTUxZWMtMGY4YS00OWQyLWJl YzctNDFhOTY1N2U4N2Y1L2JjMzk1MWVjLTBmOGEtNDlkMi1iZWM3LTQxYTk2NTdl ODdmNS5jcmwwHwYDVR0jBBgwFoAUAJbdmRPkwQDKZnxWpp8vQbnUXDEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iYzM5NTFlYy0wZjhhLTQ5ZDItYmVjNy00MWE5 NjU3ZTg3ZjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAhR83vxCTJY2kHDF9uVSYx fBVez8vi/uAkcRIdeXxWvWO/0QeTPhfNx6eT/DaXGJAQ12/WmDb5pKWikySiwlQF he1cb6t+jE09gyhRpw+c4ULBzAOUEswvjx2Rjfw8vNOBDGK/huOa1Sx92MHcZx9Y 8uMhwzNTZ3agbQjctt0mK90MBZXpGQPWZZf31pYgxaWftQcwxVfvBjaozrY8B3J+ MbzUAe9+TX506ulNXxEzJv0zSquqVAck8Yuvh8a5J6NBPfUIY55YaQ7FFTLSPGrX yE6/NHDPpdWeycwjHQOUsHNaw2bAiaGuZwRKum9RaB7dvi7awzfnM6u1CBMubCzF -----END CERTIFICATE-----Generated at Mon Aug 4 18:35:53 2025 by rpki-client