$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft File: 704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft (raw, json) Hash identifier: igzCwBH7UgFhbfchVOaXR3tLGm626Wg9S9UL5OUOpmQ= Subject key identifier: DC:F5:D7:16:96:C5:2D:FF:5D:5F:42:62:DF:5A:28:EF:9C:48:FE:40 Authority key identifier: 52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97 Certificate issuer: /CN=704a761f-b71a-4fa2-b0e7-db5278e23dc3 Certificate serial: 010D0C9F4328584ABE3974029363F62F0CD7B100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft Manifest number: 010D0C9F4328584073A84BBB6D274A47E1440304 Signing time: Mon 04 Aug 2025 09:00:03 +0000 Manifest this update: Mon 04 Aug 2025 09:00:03 +0000 Manifest next update: Wed 06 Aug 2025 09:00:00 +0000 Files and hashes: 1: 704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl (hash: ZnFVtXg4N8q8AvGs8Fil0zcVCpLDj2zxZz56JjXqtJo=) 2: e6965540-cbd0-3930-b638-a04886e69eac.roa (hash: TNGjT3/jKfnn6pAZhuO3QYrXE/bJCaCZ3fc3IiXmyXg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:be:39:74:02:93:63:f6:2f:0c:d7:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=704a761f-b71a-4fa2-b0e7-db5278e23dc3 Validity Not Before: Aug 4 09:00:03 2025 GMT Not After : Aug 6 09:00:00 2025 GMT Subject: CN=cd96a115-7124-49e7-8dbb-44b8d7ddb195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:26:85:c5:22:e5:44:f7:20:7c:8e:59:31:81: 15:6e:d8:b5:99:d3:6b:8b:cf:fe:cf:03:1c:c5:6d: 57:f0:e9:9e:cd:81:97:d7:b3:41:75:c3:bb:a3:7d: 34:03:d8:d5:9f:dc:45:fd:ac:d8:95:3e:7b:c3:35: 23:92:71:b6:0c:f1:46:ae:6f:30:24:22:c9:87:17: b3:cd:d2:81:bb:c8:a6:64:f2:9f:36:e7:19:61:03: 67:40:e2:c3:f5:7c:13:78:53:3d:a1:11:d9:c8:8c: d1:42:35:13:73:0f:bc:7a:9c:80:37:f8:78:ee:cb: b1:34:02:a1:a6:90:4f:8a:b2:a4:47:8c:61:7c:5e: 54:8f:9c:eb:25:59:b2:ee:1e:b8:57:b8:ec:fa:e7: 94:06:8b:99:bb:1d:cb:3d:b1:b2:e3:71:5a:fe:ec: 9c:a2:c7:ae:74:09:ba:4e:e9:82:fe:ad:90:4e:b1: bd:8c:2c:3b:03:39:08:9b:d0:e3:f4:00:a2:37:21: 46:02:59:9c:59:44:a0:b5:57:b3:57:d9:5a:8c:0a: fe:b1:16:7e:cf:f9:b6:78:78:8a:a4:85:c2:8f:e6: 91:04:01:ae:26:e0:ef:73:7d:f7:21:bd:b2:3b:f2: a3:79:d5:03:b3:6b:d0:da:7e:8b:fe:1a:eb:88:ff: 3e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F5:D7:16:96:C5:2D:FF:5D:5F:42:62:DF:5A:28:EF:9C:48:FE:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl X509v3 Authority Key Identifier: keyid:52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:e6:6d:d7:a5:f4:db:84:18:07:67:31:e2:42:d3:89:20:a7: 89:45:c5:bb:d3:a1:64:9a:0a:6b:b8:a0:94:3a:b6:df:62:16: 45:4e:c8:63:4f:74:a3:cc:71:69:f2:69:f4:4f:d8:5e:5e:0b: 81:c8:96:eb:4f:f4:2a:99:87:cb:76:85:4a:a8:61:7e:a9:d7: d5:b4:ff:57:11:ef:61:1d:a1:dc:4d:fe:66:98:95:9f:f2:d4: 8b:2e:ae:09:b9:e1:83:8d:5d:18:4e:11:98:64:02:ca:07:1e: 46:d4:06:7c:15:6f:d8:07:48:d8:9f:3c:6e:02:d6:13:99:13: 74:2e:ec:f7:d6:53:6d:60:fb:83:d5:95:93:62:a2:b2:74:a8: 17:50:f1:36:18:9b:9d:55:c6:b3:c6:3d:f9:fa:1f:92:30:97: ce:39:0a:16:93:6d:80:34:dc:9b:d1:fe:4b:a5:74:04:92:e0: d7:94:da:d5:4b:74:38:ae:80:9f:a9:57:30:16:b7:24:cc:4d: 77:f4:70:da:4d:32:29:4f:95:8a:4e:32:9f:3c:cc:51:a5:cb: 66:0b:64:cf:e3:a2:91:ff:a1:0d:46:07:05:db:9c:29:a6:92: b0:7d:b5:b0:7b:07:6e:f1:2a:2d:2b:b1:e2:4f:eb:0e:47:65: 6b:58:f2:fd -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEq+OXQCk2P2LwzXsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA0YTc2MWYtYjcxYS00ZmEyLWIwZTctZGI1Mjc4ZTIz ZGMzMB4XDTI1MDgwNDA5MDAwM1oXDTI1MDgwNjA5MDAwMFowLzEtMCsGA1UEAxMk Y2Q5NmExMTUtNzEyNC00OWU3LThkYmItNDRiOGQ3ZGRiMTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiaFxSLlRPcgfI5ZMYEVbti1mdNri8/+zwMc xW1X8OmezYGX17NBdcO7o300A9jVn9xF/azYlT57wzUjknG2DPFGrm8wJCLJhxez zdKBu8imZPKfNucZYQNnQOLD9XwTeFM9oRHZyIzRQjUTcw+8epyAN/h47suxNAKh ppBPirKkR4xhfF5Uj5zrJVmy7h64V7js+ueUBouZux3LPbGy43Fa/uycoseudAm6 TumC/q2QTrG9jCw7AzkIm9Dj9ACiNyFGAlmcWUSgtVezV9lajAr+sRZ+z/m2eHiK pIXCj+aRBAGuJuDvc333Ib2yO/KjedUDs2vQ2n6L/hrriP8+OwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNz11xaWxS3/XV9CYt9aKO+cSP5AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDRh NzYxZi1iNzFhLTRmYTItYjBlNy1kYjUyNzhlMjNkYzMvNzA0YTc2MWYtYjcxYS00 ZmEyLWIwZTctZGI1Mjc4ZTIzZGMzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzA0YTc2MWYtYjcxYS00ZmEyLWIw ZTctZGI1Mjc4ZTIzZGMzLzcwNGE3NjFmLWI3MWEtNGZhMi1iMGU3LWRiNTI3OGUy M2RjMy5jcmwwHwYDVR0jBBgwFoAUUi3Wa4cFBpviRD6NQcu1N8w4MZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MDRhNzYxZi1iNzFhLTRmYTItYjBlNy1kYjUy NzhlMjNkYzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBJ5m3XpfTbhBgHZzHiQtOJ IKeJRcW706FkmgpruKCUOrbfYhZFTshjT3SjzHFp8mn0T9heXguByJbrT/QqmYfL doVKqGF+qdfVtP9XEe9hHaHcTf5mmJWf8tSLLq4JueGDjV0YThGYZALKBx5G1AZ8 FW/YB0jYnzxuAtYTmRN0Luz31lNtYPuD1ZWTYqKydKgXUPE2GJudVcazxj35+h+S MJfOOQoWk22ANNyb0f5LpXQEkuDXlNrVS3Q4roCfqVcwFrckzE139HDaTTIpT5WK TjKfPMxRpctmC2TP46KR/6ENRgcF25wpppKwfbWwewdu8SotK7HiT+sOR2VrWPL9 -----END CERTIFICATE-----Generated at Mon Aug 4 11:03:14 2025 by rpki-client