$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft File: 70ddad33-55eb-4125-9221-0129168a645b.mft (raw, json) Hash identifier: 3JAQniUOnklglJ3XzpEE05By/eZIYEtyBr5vG2jAYYM= Subject key identifier: B5:24:DD:B7:D5:4C:76:C3:83:2C:8B:8E:FC:9B:0D:99:92:02:B7:FF Authority key identifier: 7F:4C:A4:22:A3:CB:BB:A5:D6:77:9C:25:01:F3:7F:E5:D9:0E:B4:BD Certificate issuer: /CN=70ddad33-55eb-4125-9221-0129168a645b Certificate serial: 010D0C9F4328584A3B5CACC4AA24DA2925032D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft Manifest number: 010D0C9F43285841E951957BE6B5270236230058 Signing time: Wed 18 Jun 2025 12:00:07 +0000 Manifest this update: Wed 18 Jun 2025 12:00:07 +0000 Manifest next update: Fri 20 Jun 2025 12:00:00 +0000 Files and hashes: 1: 41138728-4b0a-33e7-a5bd-ea7cb42a601e.roa (hash: k6VCt9U3Ia1tS+jpI9HztpcllCf7X+gYlS/eMcGWTLQ=) 2: 70ddad33-55eb-4125-9221-0129168a645b.crl (hash: OwLs6NR0tI9ivJ0GSo6eJNiw4+IoPZZbsd735YsxIl0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:5c:ac:c4:aa:24:da:29:25:03:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70ddad33-55eb-4125-9221-0129168a645b Validity Not Before: Jun 18 12:00:07 2025 GMT Not After : Jun 20 12:00:00 2025 GMT Subject: CN=e20c9850-9f7f-4454-931b-6508dfcb8f4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:a4:52:bb:5f:d2:68:4e:fb:6a:c0:13:f2:7f: 5f:c1:56:0c:ee:10:61:c5:5f:aa:2e:d5:bb:27:b0: a8:9f:9d:4b:b8:4f:dc:d9:29:10:a8:2c:f9:22:f0: f6:08:09:7a:10:05:b9:90:db:4a:c1:cb:4c:b9:b3: f0:e5:50:4f:a0:86:2d:0c:fe:fb:fd:ce:03:4d:fc: 66:4b:61:a9:8a:b8:34:a6:ea:cf:e9:58:26:04:30: d0:b7:74:49:79:08:54:17:bb:a7:bc:d8:41:c6:ca: 06:4f:78:b9:ac:bb:ca:ab:38:a4:58:2e:9c:0d:17: 5f:12:ef:7d:ed:9c:39:d5:38:3b:5f:71:15:45:c4: 2e:8f:57:56:97:9e:b5:2e:31:f0:ae:fe:4d:2d:d0: 35:f2:97:34:4e:6e:c6:af:cc:0b:c9:1e:71:42:7e: 96:c0:b8:bc:a4:3e:58:da:a5:7e:37:d3:26:53:d7: 8f:12:4f:78:f7:68:9b:a3:7c:37:67:a2:be:ec:5e: 84:8e:ee:dc:61:0a:1b:99:b1:d6:f8:32:ff:e3:35: 9e:f4:1c:7a:64:2d:c0:07:a6:59:f5:95:7e:56:3a: 5e:17:52:f4:06:38:e2:9a:f3:87:65:61:9c:6e:c4: a6:f0:5d:5d:3b:35:df:6c:7d:68:79:57:ea:d9:9f: 76:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:24:DD:B7:D5:4C:76:C3:83:2C:8B:8E:FC:9B:0D:99:92:02:B7:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.crl X509v3 Authority Key Identifier: keyid:7F:4C:A4:22:A3:CB:BB:A5:D6:77:9C:25:01:F3:7F:E5:D9:0E:B4:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:62:ff:bd:e5:c1:36:f7:3c:8b:96:3c:22:d5:ee:91:45:48: 10:1d:be:51:6e:51:a7:99:01:2e:d1:c7:9e:af:89:aa:40:ee: ab:76:4a:c7:6a:0d:74:84:d8:a3:c8:20:d2:5e:2e:e1:90:1f: 65:04:9a:39:d4:11:e8:77:b3:71:9e:98:42:35:82:ac:5f:8e: fd:72:00:aa:b4:fa:0b:8f:b7:15:70:b6:5a:72:8f:86:01:47: 8e:9f:7c:ef:5a:ba:d4:cc:66:b7:f8:55:ef:b9:43:32:c6:51: b2:fc:08:75:83:4d:60:ff:67:73:b7:df:a7:f7:2e:e4:ff:24: af:25:12:d1:03:72:a8:91:3c:f1:ee:16:0c:80:ca:af:22:4f: 41:15:b8:85:3d:ab:a8:99:50:a5:3a:bd:de:87:c4:43:68:54: be:e8:ce:21:fd:7c:da:74:59:39:2d:f9:67:3a:3b:86:2a:fa: cb:19:ba:a1:d3:53:17:15:be:8f:dd:63:c6:18:e4:70:bf:bb: 2a:5f:5b:ea:a9:f2:6c:03:c3:5e:32:5c:f9:7d:13:4d:70:fb: 13:fe:06:13:24:c6:5a:a8:82:ac:93:b4:ce:97:a1:7f:b4:e8: 64:28:09:16:0b:7b:29:ce:b6:ac:24:d0:b6:f9:f3:d1:a5:dc: 26:b7:76:7d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEo7XKzEqiTaKSUDLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBkZGFkMzMtNTVlYi00MTI1LTkyMjEtMDEyOTE2OGE2 NDViMB4XDTI1MDYxODEyMDAwN1oXDTI1MDYyMDEyMDAwMFowLzEtMCsGA1UEAxMk ZTIwYzk4NTAtOWY3Zi00NDU0LTkzMWItNjUwOGRmY2I4ZjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7qRSu1/SaE77asAT8n9fwVYM7hBhxV+qLtW7 J7Con51LuE/c2SkQqCz5IvD2CAl6EAW5kNtKwctMubPw5VBPoIYtDP77/c4DTfxm S2Gpirg0purP6VgmBDDQt3RJeQhUF7unvNhBxsoGT3i5rLvKqzikWC6cDRdfEu99 7Zw51Tg7X3EVRcQuj1dWl561LjHwrv5NLdA18pc0Tm7Gr8wLyR5xQn6WwLi8pD5Y 2qV+N9MmU9ePEk9492ibo3w3Z6K+7F6Eju7cYQobmbHW+DL/4zWe9Bx6ZC3AB6ZZ 9ZV+VjpeF1L0BjjimvOHZWGcbsSm8F1dOzXfbH1oeVfq2Z92NQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLUk3bfVTHbDgyyLjvybDZmSArf/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MGRk YWQzMy01NWViLTQxMjUtOTIyMS0wMTI5MTY4YTY0NWIvNzBkZGFkMzMtNTVlYi00 MTI1LTkyMjEtMDEyOTE2OGE2NDViLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzBkZGFkMzMtNTVlYi00MTI1LTky MjEtMDEyOTE2OGE2NDViLzcwZGRhZDMzLTU1ZWItNDEyNS05MjIxLTAxMjkxNjhh NjQ1Yi5jcmwwHwYDVR0jBBgwFoAUf0ykIqPLu6XWd5wlAfN/5dkOtL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83MGRkYWQzMy01NWViLTQxMjUtOTIyMS0wMTI5 MTY4YTY0NWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQARYv+95cE29zyLljwi1e6R RUgQHb5RblGnmQEu0ceer4mqQO6rdkrHag10hNijyCDSXi7hkB9lBJo51BHod7Nx nphCNYKsX479cgCqtPoLj7cVcLZaco+GAUeOn3zvWrrUzGa3+FXvuUMyxlGy/Ah1 g01g/2dzt9+n9y7k/ySvJRLRA3KokTzx7hYMgMqvIk9BFbiFPauomVClOr3eh8RD aFS+6M4h/XzadFk5LflnOjuGKvrLGbqh01MXFb6P3WPGGORwv7sqX1vqqfJsA8Ne Mlz5fRNNcPsT/gYTJMZaqIKsk7TOl6F/tOhkKAkWC3spzrasJNC2+fPRpdwmt3Z9 -----END CERTIFICATE-----Generated at Thu Jun 19 11:07:34 2025 by rpki-client