$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77/bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77.mft File: bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77.mft (raw, json) Hash identifier: qgpKYqM3gd+NZSLSTo7220Fq37xowKyGPoCdkAxd3l0= Subject key identifier: CE:A0:AC:D6:3C:44:F3:05:0F:82:FD:C6:80:B3:85:D9:05:63:FC:C8 Authority key identifier: 23:9E:55:A1:BA:B3:DE:8D:4C:12:D6:86:B8:04:B5:B5:08:1B:49:62 Certificate issuer: /CN=bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77 Certificate serial: 010D0C9F4328584BC03A2BCAC6CD69A5F20A0300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77/bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77.mft Manifest number: 010D0C9F4328584073A825890467E9F544203E24 Signing time: Tue 04 Nov 2025 19:00:03 +0000 Manifest this update: Tue 04 Nov 2025 19:00:03 +0000 Manifest next update: Fri 07 Nov 2025 19:00:00 +0000 Files and hashes: 1: 644ecdd1-ea78-3ea3-a19c-f67c39830de3.roa (hash: g1v5lNTX52w3ryxJJNLG+Rd0woRh1a7tTI9mLy0Fasc=) 2: bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77.crl (hash: NSYViHME5nXxyM53i8PzvGTumK8ESICftS7n4MxdXn0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77/bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77/bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:3a:2b:ca:c6:cd:69:a5:f2:0a:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77 Validity Not Before: Nov 4 19:00:03 2025 GMT Not After : Nov 7 19:00:00 2025 GMT Subject: CN=4ef7a22b-d7c9-4df8-982d-c1b6c7591c0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d3:e8:20:1d:ee:86:f0:94:35:6f:1c:86:56: 94:e7:b6:a8:ae:57:4a:58:58:77:b1:eb:ae:34:d1: 38:ab:7c:b3:3f:12:ca:54:f6:78:65:11:f3:70:53: ab:d3:95:1a:ce:f4:d9:8a:6e:ed:7a:a9:94:12:51: 6e:f2:85:64:ed:b9:a8:73:53:4d:2d:b8:0c:e4:c5: 49:d6:23:c5:30:90:22:dc:ed:df:a0:05:3d:cb:08: c3:ba:a2:11:6e:37:b2:5b:80:a8:70:c9:e1:88:64: 0e:4b:fd:d1:db:33:3b:4b:f1:26:2b:2c:9d:6e:1d: b6:c2:1d:22:d4:58:37:2c:c1:ab:ba:97:7e:df:83: 8f:1e:6d:5b:a7:d5:16:d3:37:f4:03:00:ae:82:72: 2b:4b:82:ea:ca:d9:50:bf:e7:58:40:6c:60:15:f3: 7c:b1:59:78:c2:f0:4a:fb:56:17:fa:c6:23:0a:8e: 24:4e:e5:19:86:d1:be:38:6e:55:48:78:ff:84:f9: df:fe:bd:db:08:bb:d3:fc:97:7f:56:9c:44:c5:ec: 96:28:f5:27:f6:27:97:52:81:29:68:0c:c7:c1:b0: f9:81:77:b9:76:a8:34:ce:5a:22:1d:64:6a:74:c8: e6:a0:b4:a7:57:f5:00:59:77:0f:84:73:d0:47:28: c1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A0:AC:D6:3C:44:F3:05:0F:82:FD:C6:80:B3:85:D9:05:63:FC:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77/bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77/bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77.crl X509v3 Authority Key Identifier: keyid:23:9E:55:A1:BA:B3:DE:8D:4C:12:D6:86:B8:04:B5:B5:08:1B:49:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:1f:0b:05:86:25:d7:50:48:97:fb:d4:cb:60:fc:b4:e8:cd: a5:aa:8d:93:cd:60:d5:86:f1:a6:a5:df:10:68:c9:20:c1:f6: 66:83:f3:a0:aa:b1:b8:e6:0c:a5:c4:79:dc:17:26:ae:e3:1f: 0d:23:85:f3:7c:8b:20:82:a3:2f:e6:c9:db:ab:78:06:8e:ef: e8:ee:43:f4:57:77:0b:04:36:8f:7d:73:6e:e1:08:65:40:a9: 47:e1:f3:28:b2:eb:41:2d:2f:ea:2e:1c:57:a2:73:c5:5b:ce: c3:cf:04:6f:bb:a7:99:4a:c0:0c:f9:4d:bb:25:a8:0b:b4:8b: aa:f4:5c:59:a1:08:d2:45:aa:27:68:91:92:8e:1b:c0:36:22: a6:8e:55:0d:dc:2e:ba:2a:ba:c7:7e:68:54:80:b4:6a:10:71: eb:bf:5c:f3:c4:8a:6d:9f:f5:65:33:8a:7c:a9:9c:57:32:f9: 3a:50:94:d1:a2:04:90:c7:65:1c:a0:ed:24:04:e0:6b:ba:30: fd:fd:fe:78:72:1a:24:60:fa:9d:85:36:ba:e3:08:18:92:5e: c1:e6:2e:10:fb:0a:9d:bf:b2:f0:1f:e0:ba:67:95:8c:f8:42: 48:f0:1a:bb:df:9e:b8:a5:8a:c1:27:44:57:10:7b:28:26:da: 7c:bc:4d:42 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAOivKxs1ppfIKAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMxZDYxZjEtNzM1Yi00ZjRkLWExZWYtYzcwYjc0YmQz Zjc3MB4XDTI1MTEwNDE5MDAwM1oXDTI1MTEwNzE5MDAwMFowLzEtMCsGA1UEAxMk NGVmN2EyMmItZDdjOS00ZGY4LTk4MmQtYzFiNmM3NTkxYzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9PoIB3uhvCUNW8chlaU57aorldKWFh3seuu NNE4q3yzPxLKVPZ4ZRHzcFOr05UazvTZim7teqmUElFu8oVk7bmoc1NNLbgM5MVJ 1iPFMJAi3O3foAU9ywjDuqIRbjeyW4CocMnhiGQOS/3R2zM7S/EmKyydbh22wh0i 1Fg3LMGrupd+34OPHm1bp9UW0zf0AwCugnIrS4LqytlQv+dYQGxgFfN8sVl4wvBK +1YX+sYjCo4kTuUZhtG+OG5VSHj/hPnf/r3bCLvT/Jd/VpxExeyWKPUn9ieXUoEp aAzHwbD5gXe5dqg0zloiHWRqdMjmoLSnV/UAWXcPhHPQRyjBbQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFM6grNY8RPMFD4L9xoCzhdkFY/zIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iYzFk NjFmMS03MzViLTRmNGQtYTFlZi1jNzBiNzRiZDNmNzcvYmMxZDYxZjEtNzM1Yi00 ZjRkLWExZWYtYzcwYjc0YmQzZjc3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmMxZDYxZjEtNzM1Yi00ZjRkLWEx ZWYtYzcwYjc0YmQzZjc3L2JjMWQ2MWYxLTczNWItNGY0ZC1hMWVmLWM3MGI3NGJk M2Y3Ny5jcmwwHwYDVR0jBBgwFoAUI55Vobqz3o1MEtaGuAS1tQgbSWIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iYzFkNjFmMS03MzViLTRmNGQtYTFlZi1jNzBi NzRiZDNmNzcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAzHwsFhiXXUEiX+9TLYPy0 6M2lqo2TzWDVhvGmpd8QaMkgwfZmg/OgqrG45gylxHncFyau4x8NI4XzfIsggqMv 5snbq3gGju/o7kP0V3cLBDaPfXNu4QhlQKlH4fMosutBLS/qLhxXonPFW87DzwRv u6eZSsAM+U27JagLtIuq9FxZoQjSRaonaJGSjhvANiKmjlUN3C66KrrHfmhUgLRq EHHrv1zzxIptn/VlM4p8qZxXMvk6UJTRogSQx2UcoO0kBOBrujD9/f54chokYPqd hTa64wgYkl7B5i4Q+wqdv7LwH+C6Z5WM+EJI8Bq73564pYrBJ0RXEHsoJtp8vE1C -----END CERTIFICATE-----Generated at Wed Nov 5 02:30:43 2025 by rpki-client