$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft File: bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft (raw, json) Hash identifier: AKBPovr3aCTNmxpDVnspCi7G9iW3fxNdxFMeHfQpDPs= Subject key identifier: 36:48:C5:F6:9E:95:5F:B1:12:72:D7:EF:6F:41:02:C7:54:DD:A9:7C Authority key identifier: 00:96:DD:99:13:E4:C1:00:CA:66:7C:56:A6:9F:2F:41:B9:D4:5C:31 Certificate issuer: /CN=bc3951ec-0f8a-49d2-bec7-41a9657e87f5 Certificate serial: 010D0C9F4328584D4C1266C0AB5E0C0E23A99D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft Manifest number: 010D0C9F432858427253B358C10542724BFE7400 Signing time: Thu 26 Mar 2026 14:00:03 +0000 Manifest this update: Thu 26 Mar 2026 14:00:03 +0000 Manifest next update: Sat 28 Mar 2026 14:00:00 +0000 Files and hashes: 1: 30556b03-38d3-3916-aa52-b8ba0322c064.roa (hash: oM2CLshR2KuaPnNaWtcQTjED2DCTcn41x2hkaOyK08Y=) 2: 9ff30824-1084-32e9-aa19-53c49b5db5a4.roa (hash: Zayigo/KjL2j//+fDm94SKdmntTAZ1S9z708D/oxIPs=) 3: bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl (hash: 2UMmmyVRja0brarrdqjav5WkmvlNx7qXCDFO+omU/gU=) 4: be400544-19f0-3ed1-bf3c-e5f9ab3730af.roa (hash: 8UagXMmo4Rqkttzi4j3ENEN8YToyQL2UIYiNmkXWXu4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4c:12:66:c0:ab:5e:0c:0e:23:a9:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc3951ec-0f8a-49d2-bec7-41a9657e87f5 Validity Not Before: Mar 26 14:00:03 2026 GMT Not After : Mar 28 14:00:00 2026 GMT Subject: CN=a2f6362b-c653-43a2-af37-69e24be8598c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e3:15:70:20:d2:72:79:3d:a1:73:c5:d0:9a: 81:60:25:d1:57:25:c9:e9:2a:b4:19:d9:ef:cd:57: f1:0a:88:fa:ac:fd:65:ca:ff:1d:0b:e9:a3:a8:5d: 98:5d:09:47:ef:c9:5b:be:01:7e:7c:51:83:e3:96: a1:d4:e3:ad:53:4b:9d:4d:af:ee:53:99:68:ef:dd: 8b:ed:bb:96:24:19:0f:95:3d:0b:d5:bf:d8:58:e1: da:56:f1:c3:13:c0:7d:03:ee:c6:02:c0:06:86:45: ee:32:4c:d1:45:df:d6:6f:39:95:55:0e:25:77:ca: 54:85:e8:b4:88:bd:4a:0e:35:84:dc:58:4a:41:20: e0:24:01:b7:b6:2f:e0:ed:ef:2f:fc:98:cd:a8:82: 3e:7a:93:49:f3:aa:99:4c:3c:e9:dd:ea:d7:15:87: a0:9f:c8:60:98:0a:0e:77:21:93:51:cb:04:36:1c: 98:60:89:83:66:70:82:0f:da:9e:03:61:bf:5e:17: e3:0e:cd:a5:7e:05:31:57:09:f4:1c:38:52:48:e5: c0:0c:c6:da:9f:27:cb:2b:70:63:01:3a:e2:94:7a: 41:2b:68:d5:58:a6:34:8d:1a:e4:2e:c7:8c:f9:f4: 99:ff:ef:ef:41:18:f7:62:9e:a0:1c:7c:c5:aa:28: b4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:48:C5:F6:9E:95:5F:B1:12:72:D7:EF:6F:41:02:C7:54:DD:A9:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl X509v3 Authority Key Identifier: keyid:00:96:DD:99:13:E4:C1:00:CA:66:7C:56:A6:9F:2F:41:B9:D4:5C:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:99:aa:51:b6:1c:f5:79:80:4e:96:8b:8b:ad:0d:51:f6:0b: 56:e7:0f:b3:33:6e:fb:6c:4a:e3:a6:6c:70:7a:8c:aa:4a:9c: 8a:05:98:ec:29:0d:a1:e9:8d:1b:2e:74:cd:61:bf:47:a2:5e: df:e5:da:e2:a7:1b:29:72:c8:3f:4e:7a:f4:6c:ac:86:8a:71: 2d:fe:5b:33:a4:a6:3b:ea:02:ac:b1:c1:3e:43:fb:02:00:c1: 08:51:6e:e5:15:b2:f1:7a:63:bf:38:dd:44:8d:34:1c:2b:30: 58:87:4d:cf:95:5f:d1:ba:3a:07:1d:44:7a:2b:7d:83:1b:c3: 84:2b:13:ac:8f:4b:3e:27:dc:b9:b1:19:04:a0:5f:cb:f3:8f: 1d:af:ac:45:3f:30:45:94:ca:40:30:86:09:35:6c:60:ee:71: 8e:10:94:6b:27:61:1e:c3:73:c2:9c:de:50:79:dd:12:0b:d2: e5:8f:3f:5c:6f:77:59:97:08:ee:9a:57:60:55:7c:78:7c:3b: 3a:a5:19:21:6f:af:ea:0f:df:56:33:a5:9f:13:9e:b5:a3:93: f3:a7:ca:43:23:a2:7d:ee:57:95:f2:fe:98:fe:68:2a:02:ee: e1:5c:b6:0b:1c:6e:96:6b:85:eb:b9:0f:70:f8:0d:17:20:16: 40:6c:92:34 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1MEmbAq14MDiOpnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzOTUxZWMtMGY4YS00OWQyLWJlYzctNDFhOTY1N2U4 N2Y1MB4XDTI2MDMyNjE0MDAwM1oXDTI2MDMyODE0MDAwMFowLzEtMCsGA1UEAxMk YTJmNjM2MmItYzY1My00M2EyLWFmMzctNjllMjRiZTg1OThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeMVcCDScnk9oXPF0JqBYCXRVyXJ6Sq0Gdnv zVfxCoj6rP1lyv8dC+mjqF2YXQlH78lbvgF+fFGD45ah1OOtU0udTa/uU5lo792L 7buWJBkPlT0L1b/YWOHaVvHDE8B9A+7GAsAGhkXuMkzRRd/WbzmVVQ4ld8pUhei0 iL1KDjWE3FhKQSDgJAG3ti/g7e8v/JjNqII+epNJ86qZTDzp3erXFYegn8hgmAoO dyGTUcsENhyYYImDZnCCD9qeA2G/XhfjDs2lfgUxVwn0HDhSSOXADMbanyfLK3Bj ATrilHpBK2jVWKY0jRrkLseM+fSZ/+/vQRj3Yp6gHHzFqii0xwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDZIxfaelV+xEnLX729BAsdU3al8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iYzM5 NTFlYy0wZjhhLTQ5ZDItYmVjNy00MWE5NjU3ZTg3ZjUvYmMzOTUxZWMtMGY4YS00 OWQyLWJlYzctNDFhOTY1N2U4N2Y1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYmMzOTUxZWMtMGY4YS00OWQyLWJl YzctNDFhOTY1N2U4N2Y1L2JjMzk1MWVjLTBmOGEtNDlkMi1iZWM3LTQxYTk2NTdl ODdmNS5jcmwwHwYDVR0jBBgwFoAUAJbdmRPkwQDKZnxWpp8vQbnUXDEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iYzM5NTFlYy0wZjhhLTQ5ZDItYmVjNy00MWE5 NjU3ZTg3ZjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBAmapRthz1eYBOlouLrQ1R 9gtW5w+zM277bErjpmxweoyqSpyKBZjsKQ2h6Y0bLnTNYb9Hol7f5dripxspcsg/ Tnr0bKyGinEt/lszpKY76gKsscE+Q/sCAMEIUW7lFbLxemO/ON1EjTQcKzBYh03P lV/RujoHHUR6K32DG8OEKxOsj0s+J9y5sRkEoF/L848dr6xFPzBFlMpAMIYJNWxg 7nGOEJRrJ2Eew3PCnN5Qed0SC9Lljz9cb3dZlwjumldgVXx4fDs6pRkhb6/qD99W M6WfE561o5Pzp8pDI6J97leV8v6Y/mgqAu7hXLYLHG6Wa4XruQ9w+A0XIBZAbJI0 -----END CERTIFICATE-----Generated at Thu Mar 26 18:53:22 2026 by rpki-client