$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.mft File: 70a424d3-35bd-43df-8245-3fb08ea7af5a.mft (raw, json) Hash identifier: vBfv/AzOw6WqgCpx4+Q7Jg35vik1X22X8elKFKgThRE= Subject key identifier: 35:2B:76:1B:7E:F0:19:86:C6:B1:F7:66:43:36:85:F7:B8:BD:F8:B9 Authority key identifier: F2:5A:07:ED:D8:B7:BD:AD:2C:76:F0:5E:9C:50:2A:EA:83:E4:B1:96 Certificate issuer: /CN=70a424d3-35bd-43df-8245-3fb08ea7af5a Certificate serial: 010D0C9F4328584BBF1062F4B8972631B0098A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.mft Manifest number: 010D0C9F4328584073A849CF36D5F7E9DECAFE9A Signing time: Tue 04 Nov 2025 09:00:03 +0000 Manifest this update: Tue 04 Nov 2025 09:00:03 +0000 Manifest next update: Thu 06 Nov 2025 09:00:00 +0000 Files and hashes: 1: 439ee44d-2f63-3c0e-80de-7ad7f7cb69f7.roa (hash: 6INLO9dk2mspnYp0geea7e04RlwSxysn/4kfePXVV/4=) 2: 70a424d3-35bd-43df-8245-3fb08ea7af5a.crl (hash: Iab3K2bCX0FlVhrdDZ2B2sPn8+ozOAlq18blSzbj7wc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:10:62:f4:b8:97:26:31:b0:09:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70a424d3-35bd-43df-8245-3fb08ea7af5a Validity Not Before: Nov 4 09:00:03 2025 GMT Not After : Nov 6 09:00:00 2025 GMT Subject: CN=92861f07-1a46-4d1e-a99d-5f9c41521616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:fa:a4:b5:d6:c7:df:88:0a:55:6e:2b:2c:57: 52:dd:b7:85:1e:4d:d8:25:3b:39:35:1b:ea:d8:a0: 19:13:f5:7b:a9:99:9b:05:8f:d1:14:09:a3:7e:d2: f4:00:77:e3:6a:c7:de:af:28:f0:cf:54:a4:4e:97: 32:06:94:e9:5e:d9:8c:18:b7:59:eb:65:f1:ca:10: 05:fe:3e:9c:18:ec:37:08:06:57:03:0d:01:16:f4: 37:db:15:14:01:dc:85:b1:ac:28:ea:58:f5:fd:cf: 70:72:04:8c:85:e6:e4:32:24:f3:ed:fe:a1:48:c0: 7c:b2:5a:1c:f2:56:49:57:a2:d6:0a:ac:16:d2:56: e9:c8:e5:a7:b8:41:7d:1b:02:33:55:ba:6d:8c:45: 61:b7:02:8a:54:5a:8e:4b:74:b6:50:4f:e2:ae:d6: bc:39:da:b1:71:59:bd:bb:1f:8a:a8:b4:da:d9:5a: a4:8b:29:f6:1a:75:4e:10:97:7e:6f:94:f2:b2:9e: 7e:03:98:62:38:ce:8e:ec:61:ae:20:6f:5e:5b:51: 54:b1:53:2d:2d:ea:b0:45:28:a4:d6:f5:29:55:30: 75:80:67:60:12:39:a2:73:f5:a2:74:d2:02:db:2d: cc:58:5e:7f:b4:78:97:a2:ce:e7:5e:53:f3:b0:07: 2d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:2B:76:1B:7E:F0:19:86:C6:B1:F7:66:43:36:85:F7:B8:BD:F8:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.crl X509v3 Authority Key Identifier: keyid:F2:5A:07:ED:D8:B7:BD:AD:2C:76:F0:5E:9C:50:2A:EA:83:E4:B1:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:27:be:84:2a:68:65:75:d3:9f:12:14:97:1d:4f:f5:c1:f9: 13:e5:38:01:15:f5:40:bb:21:a7:e7:e8:d2:e7:77:ca:44:f9: 4a:fc:1d:8d:74:87:e6:0e:c2:f9:09:01:12:8d:f4:f4:a8:c0: b4:0b:8b:59:c8:bb:94:85:a1:98:b2:13:a0:90:60:77:58:0e: 9f:0c:f0:a7:a5:e3:a4:0c:7a:e9:a7:c6:49:d4:67:4b:c3:10: 0a:f9:2b:4a:ab:84:25:36:00:0a:e5:d3:bb:c2:a7:70:45:6a: 9e:00:c6:4f:61:e7:04:5e:ab:6f:f0:f0:13:01:72:ea:f1:a6: f6:43:c4:7f:fd:97:bb:6e:83:70:2b:f5:5b:b3:3b:18:69:7a: 3a:24:91:fd:63:47:b3:2c:dd:ff:bb:f7:84:58:10:34:ae:46: f2:10:8f:80:b4:8f:2d:4b:a3:46:94:06:99:07:26:e1:92:8c: 04:8d:33:38:7b:57:1d:d0:64:35:ce:46:f8:ac:4f:75:0e:1b: 70:e1:85:4e:59:9c:fb:61:3c:bf:b5:98:a1:cc:92:e2:52:b6: d2:4d:e5:38:22:72:82:b1:a9:56:fa:5b:d4:1b:63:43:b5:0a: c3:db:61:a3:3d:cf:0f:0e:15:fd:17:4d:c1:4e:77:8d:f6:ab: c5:3d:f4:8b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/EGL0uJcmMbAJioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBhNDI0ZDMtMzViZC00M2RmLTgyNDUtM2ZiMDhlYTdh ZjVhMB4XDTI1MTEwNDA5MDAwM1oXDTI1MTEwNjA5MDAwMFowLzEtMCsGA1UEAxMk OTI4NjFmMDctMWE0Ni00ZDFlLWE5OWQtNWY5YzQxNTIxNjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfqktdbH34gKVW4rLFdS3beFHk3YJTs5NRvq 2KAZE/V7qZmbBY/RFAmjftL0AHfjasferyjwz1SkTpcyBpTpXtmMGLdZ62XxyhAF /j6cGOw3CAZXAw0BFvQ32xUUAdyFsawo6lj1/c9wcgSMhebkMiTz7f6hSMB8sloc 8lZJV6LWCqwW0lbpyOWnuEF9GwIzVbptjEVhtwKKVFqOS3S2UE/irta8OdqxcVm9 ux+KqLTa2Vqkiyn2GnVOEJd+b5Tysp5+A5hiOM6O7GGuIG9eW1FUsVMtLeqwRSik 1vUpVTB1gGdgEjmic/WidNIC2y3MWF5/tHiXos7nXlPzsActOwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDUrdht+8BmGxrH3ZkM2hfe4vfi5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MGE0 MjRkMy0zNWJkLTQzZGYtODI0NS0zZmIwOGVhN2FmNWEvNzBhNDI0ZDMtMzViZC00 M2RmLTgyNDUtM2ZiMDhlYTdhZjVhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzBhNDI0ZDMtMzViZC00M2RmLTgy NDUtM2ZiMDhlYTdhZjVhLzcwYTQyNGQzLTM1YmQtNDNkZi04MjQ1LTNmYjA4ZWE3 YWY1YS5jcmwwHwYDVR0jBBgwFoAU8loH7di3va0sdvBenFAq6oPksZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MGE0MjRkMy0zNWJkLTQzZGYtODI0NS0zZmIw OGVhN2FmNWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBlJ76EKmhlddOfEhSXHU/1 wfkT5TgBFfVAuyGn5+jS53fKRPlK/B2NdIfmDsL5CQESjfT0qMC0C4tZyLuUhaGY shOgkGB3WA6fDPCnpeOkDHrpp8ZJ1GdLwxAK+StKq4QlNgAK5dO7wqdwRWqeAMZP YecEXqtv8PATAXLq8ab2Q8R//Ze7boNwK/VbszsYaXo6JJH9Y0ezLN3/u/eEWBA0 rkbyEI+AtI8tS6NGlAaZBybhkowEjTM4e1cd0GQ1zkb4rE91Dhtw4YVOWZz7YTy/ tZihzJLiUrbSTeU4InKCsalW+lvUG2NDtQrD22GjPc8PDhX9F03BTneN9qvFPfSL -----END CERTIFICATE-----Generated at Tue Nov 4 21:33:55 2025 by rpki-client