$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.mft File: 70a424d3-35bd-43df-8245-3fb08ea7af5a.mft (raw, json) Hash identifier: cuqOT3JDgrv70JJIMhUmtCgS53T4LlyPJftKTB+wlIc= Subject key identifier: C8:01:1F:B5:30:AC:E4:48:59:8C:D2:38:40:87:8E:9D:D6:F3:92:7E Authority key identifier: F2:5A:07:ED:D8:B7:BD:AD:2C:76:F0:5E:9C:50:2A:EA:83:E4:B1:96 Certificate issuer: /CN=70a424d3-35bd-43df-8245-3fb08ea7af5a Certificate serial: 010D0C9F4328584AC10423E41FBE55ADBBFA4980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.mft Manifest number: 010D0C9F4328584073A849CF36D5F7E9DECAFE3C Signing time: Tue 05 Aug 2025 09:00:03 +0000 Manifest this update: Tue 05 Aug 2025 09:00:03 +0000 Manifest next update: Fri 08 Aug 2025 09:00:00 +0000 Files and hashes: 1: 439ee44d-2f63-3c0e-80de-7ad7f7cb69f7.roa (hash: GUulx6kG3DqjLsDKo4G2+5VC+t5TPQt+zqMFMAAyon0=) 2: 70a424d3-35bd-43df-8245-3fb08ea7af5a.crl (hash: ezVLsRasqb/Pwdr0FuuJTj8a+kJnDL8FF0rdyk855Rs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c1:04:23:e4:1f:be:55:ad:bb:fa:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70a424d3-35bd-43df-8245-3fb08ea7af5a Validity Not Before: Aug 5 09:00:03 2025 GMT Not After : Aug 8 09:00:00 2025 GMT Subject: CN=3a55bd53-7657-48f4-a785-25cc9a060793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:dc:44:8d:c8:f3:b1:d7:3a:60:1a:c1:5f:8c: 62:00:fb:d1:9f:61:03:bd:fd:1e:34:4c:22:b2:cd: 4a:43:de:0e:11:3c:0a:1a:3e:ea:43:b3:62:7a:e1: d5:b3:e8:47:15:0b:89:22:04:6d:7f:de:7c:62:c8: fe:42:a3:7e:6e:04:d5:eb:07:ca:0a:76:b8:be:37: 71:2f:7e:6d:b9:6a:90:d4:e5:f8:b3:1a:57:0a:8c: d9:6f:ff:5a:d3:df:39:38:bb:19:25:3d:a5:78:3c: a6:6a:ff:75:16:76:59:b5:20:25:9d:2a:ac:13:a0: 7a:c2:cb:e3:7e:37:75:12:01:03:cd:25:a8:f5:dc: af:43:6d:d9:85:49:75:67:ec:e7:5d:1c:7e:b5:6b: 89:19:90:a1:7b:11:ac:ec:58:60:9b:bc:31:97:28: c6:60:21:ce:03:16:d3:3e:e9:9c:d7:23:7d:28:72: 03:a0:4f:68:f7:b3:d4:f0:b6:6a:78:81:a0:61:24: 24:5f:1d:77:e2:cc:65:2a:e4:08:70:5d:3d:e2:b2: 27:73:1b:7c:e4:6f:60:e1:a9:76:2c:1f:e9:00:59: a3:63:69:bd:6a:06:c4:84:6b:2f:2d:76:eb:29:97: db:50:09:23:88:c1:c1:a4:b0:b5:4b:c5:bd:67:22: 35:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:01:1F:B5:30:AC:E4:48:59:8C:D2:38:40:87:8E:9D:D6:F3:92:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.crl X509v3 Authority Key Identifier: keyid:F2:5A:07:ED:D8:B7:BD:AD:2C:76:F0:5E:9C:50:2A:EA:83:E4:B1:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:05:02:92:92:dc:3d:35:9f:e3:25:86:62:50:e1:b3:ab:bf: ab:47:01:25:df:1f:6c:1f:d7:a6:04:93:7b:eb:5e:7e:4e:2f: 9d:a8:82:a1:d7:f3:51:b0:8e:60:31:f5:68:fe:ff:88:93:e7: 28:b9:97:b8:33:4d:e8:59:7a:00:b9:22:a3:02:16:e4:75:73: c9:bb:8e:f8:b5:82:ae:82:e5:5a:fe:d7:04:24:de:50:61:ba: 4e:da:4f:b9:10:ca:e9:dc:7d:09:ad:d4:bb:ca:86:d5:c6:0f: 5e:07:05:39:70:5e:02:12:26:fb:c4:9a:b3:e9:60:74:a9:b8: 86:3e:57:a3:9b:db:9e:4f:f1:d4:1a:e1:62:4b:d2:73:de:32: ea:e4:1b:72:f3:d9:ce:29:06:87:d3:be:f3:a6:2f:11:b4:4c: 6a:01:1e:23:12:f2:a4:6a:e6:84:48:7e:cb:0f:e1:c0:4e:8c: 6a:51:bc:0b:71:99:18:6a:59:d6:8d:bb:e5:4e:cf:9f:b7:45: 12:bf:7c:c0:cb:ca:29:75:42:3e:d2:89:35:96:1f:5b:2f:d4: e9:96:ff:33:d6:10:cd:64:99:43:6b:62:38:3c:29:af:52:68: 93:bf:94:01:f7:38:67:4f:68:b6:bc:d6:7f:71:70:86:cf:ca: 34:17:e3:04 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErBBCPkH75Vrbv6SYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBhNDI0ZDMtMzViZC00M2RmLTgyNDUtM2ZiMDhlYTdh ZjVhMB4XDTI1MDgwNTA5MDAwM1oXDTI1MDgwODA5MDAwMFowLzEtMCsGA1UEAxMk M2E1NWJkNTMtNzY1Ny00OGY0LWE3ODUtMjVjYzlhMDYwNzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9xEjcjzsdc6YBrBX4xiAPvRn2EDvf0eNEwi ss1KQ94OETwKGj7qQ7NieuHVs+hHFQuJIgRtf958Ysj+QqN+bgTV6wfKCna4vjdx L35tuWqQ1OX4sxpXCozZb/9a0985OLsZJT2leDymav91FnZZtSAlnSqsE6B6wsvj fjd1EgEDzSWo9dyvQ23ZhUl1Z+znXRx+tWuJGZChexGs7Fhgm7wxlyjGYCHOAxbT Pumc1yN9KHIDoE9o97PU8LZqeIGgYSQkXx134sxlKuQIcF094rIncxt85G9g4al2 LB/pAFmjY2m9agbEhGsvLXbrKZfbUAkjiMHBpLC1S8W9ZyI1QQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMgBH7UwrORIWYzSOECHjp3W85J+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MGE0 MjRkMy0zNWJkLTQzZGYtODI0NS0zZmIwOGVhN2FmNWEvNzBhNDI0ZDMtMzViZC00 M2RmLTgyNDUtM2ZiMDhlYTdhZjVhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzBhNDI0ZDMtMzViZC00M2RmLTgy NDUtM2ZiMDhlYTdhZjVhLzcwYTQyNGQzLTM1YmQtNDNkZi04MjQ1LTNmYjA4ZWE3 YWY1YS5jcmwwHwYDVR0jBBgwFoAU8loH7di3va0sdvBenFAq6oPksZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MGE0MjRkMy0zNWJkLTQzZGYtODI0NS0zZmIw OGVhN2FmNWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBMBQKSktw9NZ/jJYZiUOGz q7+rRwEl3x9sH9emBJN7615+Ti+dqIKh1/NRsI5gMfVo/v+Ik+couZe4M03oWXoA uSKjAhbkdXPJu474tYKuguVa/tcEJN5QYbpO2k+5EMrp3H0JrdS7yobVxg9eBwU5 cF4CEib7xJqz6WB0qbiGPlejm9ueT/HUGuFiS9Jz3jLq5Bty89nOKQaH077zpi8R tExqAR4jEvKkauaESH7LD+HAToxqUbwLcZkYalnWjbvlTs+ft0USv3zAy8opdUI+ 0ok1lh9bL9Tplv8z1hDNZJlDa2I4PCmvUmiTv5QB9zhnT2i2vNZ/cXCGz8o0F+ME -----END CERTIFICATE-----Generated at Wed Aug 6 11:09:37 2025 by rpki-client