$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc1f6b58-a62a-483c-91e9-4b599e71076e/bc1f6b58-a62a-483c-91e9-4b599e71076e.mft File: bc1f6b58-a62a-483c-91e9-4b599e71076e.mft (raw, json) Hash identifier: D1M99hZxXt50z2TyNDknGp34oHeT5keKmfE4ohsohXU= Subject key identifier: CA:CD:D7:8C:38:EB:7C:58:A9:F3:CA:B8:0C:34:78:99:35:12:A1:96 Authority key identifier: 58:D7:A1:17:68:DA:AD:B2:F3:57:C1:97:D6:81:E9:41:21:80:0E:5A Certificate issuer: /CN=bc1f6b58-a62a-483c-91e9-4b599e71076e Certificate serial: 010D0C9F4328584BC09381C4B812604AEDBB1680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc1f6b58-a62a-483c-91e9-4b599e71076e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc1f6b58-a62a-483c-91e9-4b599e71076e/bc1f6b58-a62a-483c-91e9-4b599e71076e.mft Manifest number: 010D0C9F4328584ADBAB6A5BC318AB379CC31954 Signing time: Tue 04 Nov 2025 22:00:03 +0000 Manifest this update: Tue 04 Nov 2025 22:00:03 +0000 Manifest next update: Fri 07 Nov 2025 22:00:00 +0000 Files and hashes: 1: bc1f6b58-a62a-483c-91e9-4b599e71076e.crl (hash: edgHVaVnhSfv/7ymZ8eGBK5Rd03gXrEjnEDnqhgYqMo=) 2: c7d57a92-628b-3b27-9585-738765f25852.roa (hash: PBjlRtle4NoVFURR2zRsFsczFWWVINjR0d78U7AkD1k=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc1f6b58-a62a-483c-91e9-4b599e71076e/bc1f6b58-a62a-483c-91e9-4b599e71076e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc1f6b58-a62a-483c-91e9-4b599e71076e/bc1f6b58-a62a-483c-91e9-4b599e71076e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc1f6b58-a62a-483c-91e9-4b599e71076e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:93:81:c4:b8:12:60:4a:ed:bb:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc1f6b58-a62a-483c-91e9-4b599e71076e Validity Not Before: Nov 4 22:00:03 2025 GMT Not After : Nov 7 22:00:00 2025 GMT Subject: CN=ef9c324d-68fe-4796-bdc6-2cfbc8ea64cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7e:5b:05:ca:a0:a1:e0:8f:10:bd:c9:27:07: 30:e8:cc:86:a6:47:7e:83:27:5e:1e:13:53:ca:f8: c5:32:17:26:28:7e:de:cb:34:f9:5d:39:0c:f4:c0: 65:95:bf:17:c2:5e:99:e7:1e:26:f3:c5:e3:33:64: 46:f1:aa:0b:31:c2:b9:99:f9:45:42:f3:18:42:68: c8:dd:76:cd:a4:ef:e2:f6:1d:0d:06:f5:9a:27:76: 66:1b:5b:34:69:41:cc:02:59:cf:02:d9:97:af:a2: 5a:4d:1b:67:2c:8c:a1:d7:f7:1a:64:a6:30:ec:20: 85:51:e4:76:2f:e6:46:bf:a3:b4:b0:25:60:3b:7c: 48:19:d1:a5:63:57:8f:7c:6a:38:29:f4:77:ec:0f: c7:28:4a:e0:12:14:88:f5:02:62:02:29:c7:c2:af: 33:a6:30:7b:17:b5:d6:41:25:b8:9d:49:ca:93:e1: 50:98:e0:2a:4f:a5:0a:e9:67:1f:7b:0b:34:5f:4d: 66:92:9c:96:66:0b:4e:37:f9:d9:40:ea:1c:53:45: 1e:d1:6e:0c:33:82:78:a4:18:db:09:d2:fb:2f:dd: 79:cd:1d:38:91:99:1a:50:45:16:a8:39:c7:e2:7a: 19:f3:3c:1e:db:af:ed:e5:82:5f:69:fe:0d:ae:fa: 16:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:CD:D7:8C:38:EB:7C:58:A9:F3:CA:B8:0C:34:78:99:35:12:A1:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc1f6b58-a62a-483c-91e9-4b599e71076e/bc1f6b58-a62a-483c-91e9-4b599e71076e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc1f6b58-a62a-483c-91e9-4b599e71076e/bc1f6b58-a62a-483c-91e9-4b599e71076e.crl X509v3 Authority Key Identifier: keyid:58:D7:A1:17:68:DA:AD:B2:F3:57:C1:97:D6:81:E9:41:21:80:0E:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc1f6b58-a62a-483c-91e9-4b599e71076e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:3d:d6:7b:52:1d:64:c4:61:3e:18:42:8f:3f:67:b6:89:13: d6:51:b0:2c:62:e3:e3:df:a3:16:d9:df:ac:44:8c:6f:2f:98: d0:82:36:68:de:87:96:3d:01:6e:3e:e3:cb:2c:56:0f:a7:be: 0c:aa:14:3a:aa:73:e8:60:c7:5c:d8:07:8f:c2:a5:e4:53:09: 93:c1:aa:50:f2:03:dd:99:05:e9:ed:1a:4e:8e:b6:4d:d7:96: 9a:f0:1d:cd:d2:2d:ad:9e:b3:9f:1f:90:68:13:2f:d6:0a:e2: 2a:f9:91:0e:27:e1:54:56:04:ac:4a:5a:16:c9:27:08:cd:89: 8c:b8:c8:b3:ac:0a:7f:40:28:a4:55:1f:2c:fd:97:82:47:a1: 1c:93:60:9c:62:ca:db:0b:e3:d4:4b:3f:34:fc:22:e6:0b:ef: 55:8f:7d:c1:13:49:fd:35:aa:f7:60:7f:17:f5:de:e5:98:a9: cf:42:ed:e9:5c:c9:e2:51:1a:78:dd:4d:2e:0f:99:21:ab:2a: b5:44:71:e6:eb:7d:3e:0c:26:68:53:91:cf:f4:00:b8:65:ab: a8:ff:f0:e0:cb:b5:ba:fc:cd:91:45:1b:4b:34:5d:79:9d:90: 4d:79:4b:22:de:09:48:81:db:2f:3a:ac:66:dd:ba:31:1e:77: 46:2d:4e:66 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAk4HEuBJgSu27FoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMxZjZiNTgtYTYyYS00ODNjLTkxZTktNGI1OTllNzEw NzZlMB4XDTI1MTEwNDIyMDAwM1oXDTI1MTEwNzIyMDAwMFowLzEtMCsGA1UEAxMk ZWY5YzMyNGQtNjhmZS00Nzk2LWJkYzYtMmNmYmM4ZWE2NGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0H5bBcqgoeCPEL3JJwcw6MyGpkd+gydeHhNT yvjFMhcmKH7eyzT5XTkM9MBllb8Xwl6Z5x4m88XjM2RG8aoLMcK5mflFQvMYQmjI 3XbNpO/i9h0NBvWaJ3ZmG1s0aUHMAlnPAtmXr6JaTRtnLIyh1/caZKYw7CCFUeR2 L+ZGv6O0sCVgO3xIGdGlY1ePfGo4KfR37A/HKErgEhSI9QJiAinHwq8zpjB7F7XW QSW4nUnKk+FQmOAqT6UK6Wcfews0X01mkpyWZgtON/nZQOocU0Ue0W4MM4J4pBjb CdL7L915zR04kZkaUEUWqDnH4noZ8zwe26/t5YJfaf4NrvoWvwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMrN14w463xYqfPKuAw0eJk1EqGWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iYzFm NmI1OC1hNjJhLTQ4M2MtOTFlOS00YjU5OWU3MTA3NmUvYmMxZjZiNTgtYTYyYS00 ODNjLTkxZTktNGI1OTllNzEwNzZlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYmMxZjZiNTgtYTYyYS00ODNjLTkx ZTktNGI1OTllNzEwNzZlL2JjMWY2YjU4LWE2MmEtNDgzYy05MWU5LTRiNTk5ZTcx MDc2ZS5jcmwwHwYDVR0jBBgwFoAUWNehF2jarbLzV8GX1oHpQSGADlowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iYzFmNmI1OC1hNjJhLTQ4M2MtOTFlOS00YjU5 OWU3MTA3NmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCGPdZ7Uh1kxGE+GEKPP2e2 iRPWUbAsYuPj36MW2d+sRIxvL5jQgjZo3oeWPQFuPuPLLFYPp74MqhQ6qnPoYMdc 2AePwqXkUwmTwapQ8gPdmQXp7RpOjrZN15aa8B3N0i2tnrOfH5BoEy/WCuIq+ZEO J+FUVgSsSloWyScIzYmMuMizrAp/QCikVR8s/ZeCR6Eck2CcYsrbC+PUSz80/CLm C+9Vj33BE0n9Nar3YH8X9d7lmKnPQu3pXMniURp43U0uD5khqyq1RHHm630+DCZo U5HP9AC4Zauo//Dgy7W6/M2RRRtLNF15nZBNeUsi3glIgdsvOqxm3boxHndGLU5m -----END CERTIFICATE-----Generated at Wed Nov 5 08:51:51 2025 by rpki-client