$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369/bc3aa731-9547-4b21-8f65-60f3717ca369.mft File: bc3aa731-9547-4b21-8f65-60f3717ca369.mft (raw, json) Hash identifier: YDN/WF3IfA7/hYtx08fbXM3KLOkFdw1nsU3vl3vvD4I= Subject key identifier: A1:29:CA:CF:8C:F7:CE:E1:B7:C4:FC:AC:D5:50:EC:04:24:14:4F:A4 Authority key identifier: 51:41:76:B5:8C:94:B6:76:8B:D8:5A:30:55:62:46:17:E5:FF:27:F9 Certificate issuer: /CN=bc3aa731-9547-4b21-8f65-60f3717ca369 Certificate serial: 010D0C9F4328584BC1462BF7C35B9A86C10AB500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369/bc3aa731-9547-4b21-8f65-60f3717ca369.mft Manifest number: 010D0C9F432858496EAE60AF4A8023AB4277569A Signing time: Wed 05 Nov 2025 04:00:03 +0000 Manifest this update: Wed 05 Nov 2025 04:00:03 +0000 Manifest next update: Fri 07 Nov 2025 04:00:00 +0000 Files and hashes: 1: a2fefabd-2f02-3245-a2c8-36de47abeaf7.roa (hash: hRLaHpd1CxNBx5syD2JgEuIWswtb81vMorVMtH4TBDo=) 2: bc3aa731-9547-4b21-8f65-60f3717ca369.crl (hash: TmV2NjKJMdTEH+9Mvg1b65a+bnSrwM2Wfd6gquwRalQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369/bc3aa731-9547-4b21-8f65-60f3717ca369.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369/bc3aa731-9547-4b21-8f65-60f3717ca369.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:46:2b:f7:c3:5b:9a:86:c1:0a:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc3aa731-9547-4b21-8f65-60f3717ca369 Validity Not Before: Nov 5 04:00:03 2025 GMT Not After : Nov 7 04:00:00 2025 GMT Subject: CN=81ff6931-eadb-4025-9dfe-5df8aa4f4758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c4:b0:62:b8:c4:65:97:d3:6d:5a:7d:79:ec: 5d:e9:e0:26:a2:e3:bf:d6:db:91:f8:d5:cc:00:cf: e2:a6:26:8e:f5:b5:17:f4:ba:d4:9c:59:2c:35:e2: eb:34:91:59:5e:72:6a:2d:21:a6:bc:42:c1:c8:01: a0:cd:5a:af:4f:6b:2b:73:da:69:31:48:09:bf:b1: 73:bc:7d:87:e7:2d:a2:80:08:c1:3a:21:1e:97:84: f1:6f:0e:2f:b2:63:9c:dd:e0:c3:26:46:37:b8:67: ed:5d:38:43:fb:bd:57:fd:d6:4d:0b:67:28:d6:b8: 91:4d:94:8c:9f:3f:8b:c1:1a:d8:48:38:1a:df:67: 15:a6:bc:59:6a:fa:0c:12:3a:0a:82:42:fa:5a:08: 9b:9e:be:9b:54:45:a5:ad:30:6c:37:fd:ec:7a:c3: 3e:81:a9:a3:b6:c9:cd:a9:c5:e4:bd:e1:80:91:f3: ea:59:05:ea:9d:e5:56:0a:25:3e:7e:24:ba:da:f7: 9f:f4:8c:85:a4:24:12:f0:72:5b:bb:08:38:00:fa: 1d:1f:a2:c6:a8:e5:89:03:c7:ed:59:d5:49:47:c3: 86:71:40:88:d0:0f:17:cc:53:58:b4:f1:7d:c7:82: 9b:7d:13:26:e8:c0:17:ed:d6:44:e1:a2:70:d2:3c: 4b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:29:CA:CF:8C:F7:CE:E1:B7:C4:FC:AC:D5:50:EC:04:24:14:4F:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369/bc3aa731-9547-4b21-8f65-60f3717ca369.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369/bc3aa731-9547-4b21-8f65-60f3717ca369.crl X509v3 Authority Key Identifier: keyid:51:41:76:B5:8C:94:B6:76:8B:D8:5A:30:55:62:46:17:E5:FF:27:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:19:00:c0:a2:b1:2c:d3:1e:e5:e5:be:6f:12:3a:ec:4c:37: 03:17:7d:80:70:da:9b:df:e7:52:9d:e8:19:e3:67:ce:bc:b8: da:91:ea:19:21:47:f3:90:e8:b7:c0:fa:43:11:27:71:52:77: 91:e3:86:3d:a7:38:86:b2:7e:5e:1e:2a:2c:6d:73:93:f8:e4: 97:35:c4:eb:42:2a:62:fd:b2:09:6a:07:9a:9e:0a:54:84:1d: f0:9d:3f:5f:e6:4b:55:e8:08:e2:4b:0e:37:74:79:c3:91:9c: d0:59:0a:26:dd:3a:35:f5:dc:47:6a:9d:94:b7:8f:92:72:2f: 43:4b:68:22:00:c7:01:34:45:e2:66:28:39:07:23:92:20:42: f3:b7:7e:33:f6:30:19:5a:74:95:a0:28:3c:50:48:53:40:21: 42:21:bd:b5:96:4b:f3:bc:d8:d1:cf:8e:7d:45:c8:0a:90:b8: eb:e0:90:fa:8f:f9:2d:bb:93:c1:7a:b1:6b:1c:8d:87:f1:67: dc:68:ff:d9:a2:3b:83:f2:b3:42:13:3a:42:3c:ce:ba:2e:9e: dd:87:f5:7c:39:57:45:69:00:36:25:9d:6e:39:fd:a1:67:f0: eb:0c:04:56:e9:18:79:03:b8:37:af:6b:34:c4:d8:20:24:0a: 2e:70:0d:88 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvBRiv3w1uahsEKtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzYWE3MzEtOTU0Ny00YjIxLThmNjUtNjBmMzcxN2Nh MzY5MB4XDTI1MTEwNTA0MDAwM1oXDTI1MTEwNzA0MDAwMFowLzEtMCsGA1UEAxMk ODFmZjY5MzEtZWFkYi00MDI1LTlkZmUtNWRmOGFhNGY0NzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMSwYrjEZZfTbVp9eexd6eAmouO/1tuR+NXM AM/ipiaO9bUX9LrUnFksNeLrNJFZXnJqLSGmvELByAGgzVqvT2src9ppMUgJv7Fz vH2H5y2igAjBOiEel4Txbw4vsmOc3eDDJkY3uGftXThD+71X/dZNC2co1riRTZSM nz+LwRrYSDga32cVprxZavoMEjoKgkL6Wgibnr6bVEWlrTBsN/3sesM+gamjtsnN qcXkveGAkfPqWQXqneVWCiU+fiS62vef9IyFpCQS8HJbuwg4APodH6LGqOWJA8ft WdVJR8OGcUCI0A8XzFNYtPF9x4KbfRMm6MAX7dZE4aJw0jxLGQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKEpys+M987ht8T8rNVQ7AQkFE+kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iYzNh YTczMS05NTQ3LTRiMjEtOGY2NS02MGYzNzE3Y2EzNjkvYmMzYWE3MzEtOTU0Ny00 YjIxLThmNjUtNjBmMzcxN2NhMzY5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYmMzYWE3MzEtOTU0Ny00YjIxLThm NjUtNjBmMzcxN2NhMzY5L2JjM2FhNzMxLTk1NDctNGIyMS04ZjY1LTYwZjM3MTdj YTM2OS5jcmwwHwYDVR0jBBgwFoAUUUF2tYyUtnaL2FowVWJGF+X/J/kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iYzNhYTczMS05NTQ3LTRiMjEtOGY2NS02MGYz NzE3Y2EzNjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAHGQDAorEs0x7l5b5vEjrs TDcDF32AcNqb3+dSnegZ42fOvLjakeoZIUfzkOi3wPpDESdxUneR44Y9pziGsn5e HiosbXOT+OSXNcTrQipi/bIJageangpUhB3wnT9f5ktV6AjiSw43dHnDkZzQWQom 3To19dxHap2Ut4+Sci9DS2giAMcBNEXiZig5ByOSIELzt34z9jAZWnSVoCg8UEhT QCFCIb21lkvzvNjRz459RcgKkLjr4JD6j/ktu5PBerFrHI2H8WfcaP/ZojuD8rNC EzpCPM66Lp7dh/V8OVdFaQA2JZ1uOf2hZ/DrDARW6Rh5A7g3r2s0xNggJAoucA2I -----END CERTIFICATE-----Generated at Wed Nov 5 17:18:52 2025 by rpki-client