$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc4b73f9-c69f-44fa-93bd-d153e29d02ea/bc4b73f9-c69f-44fa-93bd-d153e29d02ea.mft File: bc4b73f9-c69f-44fa-93bd-d153e29d02ea.mft (raw, json) Hash identifier: ZCnyBYaPZlJEO/b+vo4xl7myGalfoxcqpgY/CXZu8Oo= Subject key identifier: A2:C6:7F:D4:87:E8:91:40:B6:4B:B1:B9:F1:C0:DB:4B:F9:4B:C9:0D Authority key identifier: B4:7C:B3:9B:23:EC:37:AD:82:F4:DD:0A:41:31:9A:CA:F6:89:5B:F1 Certificate issuer: /CN=bc4b73f9-c69f-44fa-93bd-d153e29d02ea Certificate serial: 010D0C9F4328584BBE5DC35B6EFFDDB707C38400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc4b73f9-c69f-44fa-93bd-d153e29d02ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc4b73f9-c69f-44fa-93bd-d153e29d02ea/bc4b73f9-c69f-44fa-93bd-d153e29d02ea.mft Manifest number: 010D0C9F43285843B216D267554D9F725E033035 Signing time: Tue 04 Nov 2025 03:00:09 +0000 Manifest this update: Tue 04 Nov 2025 03:00:09 +0000 Manifest next update: Fri 07 Nov 2025 03:00:00 +0000 Files and hashes: 1: 26115400-1731-3ee0-91d7-565246ab2b6e.roa (hash: BgLfUQrLP6ksfmgTBuzo53h0FUPcwA9Nd3yStEsh7b4=) 2: bc4b73f9-c69f-44fa-93bd-d153e29d02ea.crl (hash: aNB2mzgPqRs9G1G4YbkQeNGiONQUcRwe5bCPuBNj4HY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc4b73f9-c69f-44fa-93bd-d153e29d02ea/bc4b73f9-c69f-44fa-93bd-d153e29d02ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc4b73f9-c69f-44fa-93bd-d153e29d02ea/bc4b73f9-c69f-44fa-93bd-d153e29d02ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc4b73f9-c69f-44fa-93bd-d153e29d02ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:5d:c3:5b:6e:ff:dd:b7:07:c3:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc4b73f9-c69f-44fa-93bd-d153e29d02ea Validity Not Before: Nov 4 03:00:09 2025 GMT Not After : Nov 7 03:00:00 2025 GMT Subject: CN=31701d9e-9888-41bb-b344-99d3a6a4c56b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:3b:02:56:0b:c5:ad:48:0f:44:ae:df:e6:de: 2e:9b:37:a0:96:52:08:d4:6d:21:ee:49:59:3b:fd: 56:d7:2e:9f:51:60:65:a7:a2:0e:47:cc:e3:38:bf: 2a:ab:42:06:82:e5:2e:94:11:bb:c7:be:89:01:25: 94:44:c4:8b:bc:c3:c8:ad:8c:80:b2:5c:29:8e:97: ed:31:da:bd:06:f2:92:37:94:1f:6f:84:7e:03:d2: c2:e6:2c:3b:4c:92:94:1a:9c:d8:63:3e:cc:f8:02: f6:20:17:07:16:72:63:7f:a1:60:d1:29:aa:81:ac: 5f:fb:89:f8:1d:5d:38:73:19:93:6f:17:6e:b8:97: 18:cf:9e:82:60:6a:98:f8:15:22:76:9a:2e:d4:05: c1:e6:cd:68:0b:94:6c:5c:3a:ad:7f:09:aa:a3:ca: 6a:42:b9:ab:bf:1a:e7:16:53:c2:6f:b9:f1:b4:02: 4c:87:8c:7f:4e:b7:dd:d4:b0:6b:e9:92:76:59:8b: db:74:37:aa:47:2d:91:0a:b8:61:d8:80:ae:51:03: c0:24:6d:aa:63:43:91:64:d5:2a:b8:60:94:eb:b3: 4f:08:c0:89:da:26:e9:6b:0f:a8:b7:02:a8:de:0e: dc:d2:e5:c8:8c:4c:11:7c:3f:d7:76:75:55:56:23: dc:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C6:7F:D4:87:E8:91:40:B6:4B:B1:B9:F1:C0:DB:4B:F9:4B:C9:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc4b73f9-c69f-44fa-93bd-d153e29d02ea/bc4b73f9-c69f-44fa-93bd-d153e29d02ea.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc4b73f9-c69f-44fa-93bd-d153e29d02ea/bc4b73f9-c69f-44fa-93bd-d153e29d02ea.crl X509v3 Authority Key Identifier: keyid:B4:7C:B3:9B:23:EC:37:AD:82:F4:DD:0A:41:31:9A:CA:F6:89:5B:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc4b73f9-c69f-44fa-93bd-d153e29d02ea.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:88:70:a6:f0:6b:43:53:c5:b5:86:2c:71:47:78:93:dd:d9: a4:fb:1a:eb:5c:74:7a:0e:b9:a8:03:dc:c3:1f:aa:11:04:a4: ad:ff:75:ec:90:21:a9:fe:05:89:09:d6:d8:96:d8:6c:e9:d2: 5a:5a:e3:b9:18:a4:d6:de:01:85:ef:a5:cb:24:83:40:78:02: 8a:07:18:b1:c9:0d:3d:0d:da:ac:4f:e6:68:7d:45:38:8c:ce: 18:f5:ae:29:e7:a8:8b:98:d3:b0:ca:5b:85:69:2c:82:b8:c2: f1:94:95:7e:d0:e9:38:10:e1:b4:30:d4:0c:ac:3c:4f:67:10: cc:ef:a0:18:15:90:60:ac:f0:7b:bf:48:95:43:82:6d:44:93: 0c:90:6a:ca:01:c2:6d:09:f4:db:da:0c:0c:b5:95:0c:72:8d: fd:28:a2:c0:1e:b8:41:96:80:93:73:86:13:73:3e:e0:56:41: 94:aa:65:68:aa:60:0d:99:86:b2:6e:f6:d5:b2:19:93:91:3f: a5:12:25:1d:2f:97:d7:4d:54:08:f0:72:e2:28:68:a1:9d:49: 74:d3:eb:f4:20:3a:4c:8c:37:9f:33:d5:6e:a2:7a:47:fb:6e: af:a7:9c:f7:4b:fd:15:d0:f0:df:76:89:a2:86:d8:9b:99:05: 8b:8a:a5:71 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+XcNbbv/dtwfDhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmM0YjczZjktYzY5Zi00NGZhLTkzYmQtZDE1M2UyOWQw MmVhMB4XDTI1MTEwNDAzMDAwOVoXDTI1MTEwNzAzMDAwMFowLzEtMCsGA1UEAxMk MzE3MDFkOWUtOTg4OC00MWJiLWIzNDQtOTlkM2E2YTRjNTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTsCVgvFrUgPRK7f5t4umzegllII1G0h7klZ O/1W1y6fUWBlp6IOR8zjOL8qq0IGguUulBG7x76JASWURMSLvMPIrYyAslwpjpft Mdq9BvKSN5Qfb4R+A9LC5iw7TJKUGpzYYz7M+AL2IBcHFnJjf6Fg0Smqgaxf+4n4 HV04cxmTbxduuJcYz56CYGqY+BUidpou1AXB5s1oC5RsXDqtfwmqo8pqQrmrvxrn FlPCb7nxtAJMh4x/Trfd1LBr6ZJ2WYvbdDeqRy2RCrhh2ICuUQPAJG2qY0ORZNUq uGCU67NPCMCJ2ibpaw+otwKo3g7c0uXIjEwRfD/XdnVVViPcfwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKLGf9SH6JFAtkuxufHA20v5S8kNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iYzRi NzNmOS1jNjlmLTQ0ZmEtOTNiZC1kMTUzZTI5ZDAyZWEvYmM0YjczZjktYzY5Zi00 NGZhLTkzYmQtZDE1M2UyOWQwMmVhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmM0YjczZjktYzY5Zi00NGZhLTkz YmQtZDE1M2UyOWQwMmVhL2JjNGI3M2Y5LWM2OWYtNDRmYS05M2JkLWQxNTNlMjlk MDJlYS5jcmwwHwYDVR0jBBgwFoAUtHyzmyPsN62C9N0KQTGayvaJW/EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iYzRiNzNmOS1jNjlmLTQ0ZmEtOTNiZC1kMTUz ZTI5ZDAyZWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCJiHCm8GtDU8W1hixxR3iT 3dmk+xrrXHR6DrmoA9zDH6oRBKSt/3XskCGp/gWJCdbYlths6dJaWuO5GKTW3gGF 76XLJINAeAKKBxixyQ09DdqsT+ZofUU4jM4Y9a4p56iLmNOwyluFaSyCuMLxlJV+ 0Ok4EOG0MNQMrDxPZxDM76AYFZBgrPB7v0iVQ4JtRJMMkGrKAcJtCfTb2gwMtZUM co39KKLAHrhBloCTc4YTcz7gVkGUqmVoqmANmYaybvbVshmTkT+lEiUdL5fXTVQI 8HLiKGihnUl00+v0IDpMjDefM9VuonpH+26vp5z3S/0V0PDfdomihtibmQWLiqVx -----END CERTIFICATE-----Generated at Wed Nov 5 02:31:03 2025 by rpki-client