$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft File: bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft (raw, json) Hash identifier: fOKaiOg6Xn1FCjh4nlpmKCh1FapbbR7G8HFgNJA36XI= Subject key identifier: BB:FE:E6:A9:CB:EE:1F:36:65:FC:70:29:85:42:E9:1D:30:CB:5A:62 Authority key identifier: 00:96:DD:99:13:E4:C1:00:CA:66:7C:56:A6:9F:2F:41:B9:D4:5C:31 Certificate issuer: /CN=bc3951ec-0f8a-49d2-bec7-41a9657e87f5 Certificate serial: 010D0C9F4328584B92FA5784DD000955D3220600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft Manifest number: 010D0C9F432858427253B358C10542724BFE735E Signing time: Sun 19 Oct 2025 14:00:03 +0000 Manifest this update: Sun 19 Oct 2025 14:00:03 +0000 Manifest next update: Tue 21 Oct 2025 14:00:00 +0000 Files and hashes: 1: 30556b03-38d3-3916-aa52-b8ba0322c064.roa (hash: Ob/n8LcukeZenibjevTGwSexbF8jv5FlDF0VRk6/UuY=) 2: 9ff30824-1084-32e9-aa19-53c49b5db5a4.roa (hash: BAc2QcgyHx2PycSwauTEkv20bMsGzHRXfL5DAtOnnuc=) 3: bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl (hash: csNGEPI6ecKWa86AGRmldeyGZ0aJASr2OV8URlg+990=) 4: be400544-19f0-3ed1-bf3c-e5f9ab3730af.roa (hash: re6y9Uy6BCDQ8ERYjcfbeAOBmklGfLFtZlkGXhH0wRE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:fa:57:84:dd:00:09:55:d3:22:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc3951ec-0f8a-49d2-bec7-41a9657e87f5 Validity Not Before: Oct 19 14:00:03 2025 GMT Not After : Oct 21 14:00:00 2025 GMT Subject: CN=3e535f20-630c-4b81-ac10-79b2bef8936e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:46:66:92:4d:47:b6:79:e2:29:85:76:a2:d5: 5d:b5:6d:cb:04:f0:22:5e:1c:6a:64:16:89:2f:04: d6:e0:f3:04:71:2d:ff:5d:82:e3:a6:16:e7:b4:ff: de:64:4b:a3:fd:5d:98:04:90:79:aa:50:f2:80:e1: 35:77:33:ec:57:ff:5a:e3:4c:8b:19:e0:fb:b1:3e: d5:a8:64:ad:aa:df:6c:46:e4:30:fb:8d:b1:c1:c6: 19:ae:8e:c2:c1:22:03:a9:5f:30:1e:19:69:a1:db: 7f:03:67:15:32:db:1b:c1:cb:5f:04:bb:e4:31:4d: 38:8b:26:6c:95:d1:df:f8:94:2f:03:4b:86:20:6c: 5b:32:05:a1:bc:8d:c3:00:18:60:a8:75:86:99:5e: 21:c0:c3:98:87:df:b2:56:d1:68:f3:ba:94:d5:57: f5:dd:2f:ce:df:2f:0f:eb:77:2b:5c:f7:a2:9c:8d: 05:d8:49:28:f6:d9:ce:1b:e2:ca:e4:4d:ab:de:ed: b2:0d:7d:5a:e7:13:51:55:e7:4e:06:e0:1f:35:52: 45:e6:ae:64:14:04:ce:80:44:80:f5:c2:aa:79:0d: ec:b8:ec:f7:c2:2b:31:76:26:c3:f2:2b:f3:d1:da: 5c:27:87:46:b7:00:1f:b9:7a:26:d1:82:e7:c0:f3: 1e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:FE:E6:A9:CB:EE:1F:36:65:FC:70:29:85:42:E9:1D:30:CB:5A:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl X509v3 Authority Key Identifier: keyid:00:96:DD:99:13:E4:C1:00:CA:66:7C:56:A6:9F:2F:41:B9:D4:5C:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:f3:f8:8d:77:f0:05:28:82:38:f2:e0:ba:16:ae:01:b7:82: 4c:a0:1d:2b:11:d6:33:5d:12:47:76:58:57:b8:7e:d3:4b:22: 5c:3a:12:27:4b:32:37:4b:c2:f6:27:75:24:ad:bf:7f:8f:4f: 08:ec:ea:ea:6e:9d:72:4e:2b:2b:9a:cf:82:cd:5b:7a:d3:8c: 85:a7:6d:67:24:40:dd:5a:94:0b:35:8b:8e:e5:e3:5a:25:d3: 91:ab:bd:e8:b8:3b:9e:3c:f6:56:97:36:e0:4f:41:73:1e:20: 3a:f5:92:e6:74:ad:96:46:e1:87:e1:fb:b8:c5:4a:21:39:8d: fa:55:4a:c7:c2:26:52:68:66:76:3b:cc:c1:54:90:dc:db:a1: d9:c9:a3:fb:55:fe:ac:f8:9b:70:a8:c6:b1:50:62:e8:21:51: a7:52:c6:77:b2:83:d2:63:d2:2a:46:c7:c5:4f:d7:e0:fb:8e: 28:6c:bf:5e:fd:c3:dd:df:63:d1:bf:59:2c:50:42:45:2d:6b: fd:0d:78:1c:f1:98:d0:af:a5:93:ea:ee:f2:ac:1e:2b:d5:9d: 0c:9d:ae:ff:3a:af:be:0e:d7:f6:59:f1:2d:cb:81:c7:04:d5: 23:48:fc:5f:34:93:8a:4f:29:45:d9:ca:b5:be:c3:33:d5:fd: d0:0c:06:a8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuS+leE3QAJVdMiBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzOTUxZWMtMGY4YS00OWQyLWJlYzctNDFhOTY1N2U4 N2Y1MB4XDTI1MTAxOTE0MDAwM1oXDTI1MTAyMTE0MDAwMFowLzEtMCsGA1UEAxMk M2U1MzVmMjAtNjMwYy00YjgxLWFjMTAtNzliMmJlZjg5MzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0Zmkk1HtnniKYV2otVdtW3LBPAiXhxqZBaJ LwTW4PMEcS3/XYLjphbntP/eZEuj/V2YBJB5qlDygOE1dzPsV/9a40yLGeD7sT7V qGStqt9sRuQw+42xwcYZro7CwSIDqV8wHhlpodt/A2cVMtsbwctfBLvkMU04iyZs ldHf+JQvA0uGIGxbMgWhvI3DABhgqHWGmV4hwMOYh9+yVtFo87qU1Vf13S/O3y8P 63crXPeinI0F2Eko9tnOG+LK5E2r3u2yDX1a5xNRVedOBuAfNVJF5q5kFATOgESA 9cKqeQ3suOz3wisxdibD8ivz0dpcJ4dGtwAfuXom0YLnwPMe5wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLv+5qnL7h82ZfxwKYVC6R0wy1piMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iYzM5 NTFlYy0wZjhhLTQ5ZDItYmVjNy00MWE5NjU3ZTg3ZjUvYmMzOTUxZWMtMGY4YS00 OWQyLWJlYzctNDFhOTY1N2U4N2Y1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYmMzOTUxZWMtMGY4YS00OWQyLWJl YzctNDFhOTY1N2U4N2Y1L2JjMzk1MWVjLTBmOGEtNDlkMi1iZWM3LTQxYTk2NTdl ODdmNS5jcmwwHwYDVR0jBBgwFoAUAJbdmRPkwQDKZnxWpp8vQbnUXDEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iYzM5NTFlYy0wZjhhLTQ5ZDItYmVjNy00MWE5 NjU3ZTg3ZjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB98/iNd/AFKII48uC6Fq4B t4JMoB0rEdYzXRJHdlhXuH7TSyJcOhInSzI3S8L2J3Ukrb9/j08I7Orqbp1yTisr ms+CzVt604yFp21nJEDdWpQLNYuO5eNaJdORq73ouDuePPZWlzbgT0FzHiA69ZLm dK2WRuGH4fu4xUohOY36VUrHwiZSaGZ2O8zBVJDc26HZyaP7Vf6s+JtwqMaxUGLo IVGnUsZ3soPSY9IqRsfFT9fg+44obL9e/cPd32PRv1ksUEJFLWv9DXgc8ZjQr6WT 6u7yrB4r1Z0Mna7/Oq++Dtf2WfEty4HHBNUjSPxfNJOKTylF2cq1vsMz1f3QDAao -----END CERTIFICATE-----Generated at Mon Oct 20 13:28:01 2025 by rpki-client