$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft File: 70ddad33-55eb-4125-9221-0129168a645b.mft (raw, json) Hash identifier: XEjy2HYD7XcbtO2q2Zmzh2hk1qtXCYIY73TZ+PPWY4o= Subject key identifier: 20:1C:1E:29:31:01:AF:6A:C5:09:37:D9:87:5D:E6:CF:35:63:B2:0D Authority key identifier: 7F:4C:A4:22:A3:CB:BB:A5:D6:77:9C:25:01:F3:7F:E5:D9:0E:B4:BD Certificate issuer: /CN=70ddad33-55eb-4125-9221-0129168a645b Certificate serial: 010D0C9F4328584AC9BD8D8BF044D668F752F930 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft Manifest number: 010D0C9F43285841E951957BE6B527023623008B Signing time: Fri 08 Aug 2025 12:00:08 +0000 Manifest this update: Fri 08 Aug 2025 12:00:08 +0000 Manifest next update: Mon 11 Aug 2025 12:00:00 +0000 Files and hashes: 1: 41138728-4b0a-33e7-a5bd-ea7cb42a601e.roa (hash: k6VCt9U3Ia1tS+jpI9HztpcllCf7X+gYlS/eMcGWTLQ=) 2: 70ddad33-55eb-4125-9221-0129168a645b.crl (hash: WHRI7HCb8tAk+RZpIEOERixdmhbuY1WeCDq6KN6xN8w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:bd:8d:8b:f0:44:d6:68:f7:52:f9:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70ddad33-55eb-4125-9221-0129168a645b Validity Not Before: Aug 8 12:00:08 2025 GMT Not After : Aug 11 12:00:00 2025 GMT Subject: CN=0171cd5f-9d3a-4287-88ec-868dd6b0273f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:66:cb:6d:ff:a4:d5:10:1e:51:50:af:e8:94: 9d:5a:74:47:cd:b3:ee:60:75:53:95:44:ba:b8:15: 20:bb:32:ee:58:5f:94:bd:4e:b8:12:af:50:90:0f: cd:73:0e:17:46:79:43:25:34:e0:3a:df:c3:d7:dc: 82:fa:81:79:42:c8:1b:72:9d:ce:93:54:25:4e:d8: b0:eb:e1:90:94:19:75:5c:1f:75:7e:20:7a:fc:f6: ad:e1:9f:f1:97:c2:73:3e:6d:16:cf:19:19:04:f8: f9:7d:b0:0b:a4:e2:38:85:dc:e9:60:1c:e6:a3:c0: d5:50:3b:fe:ae:2f:ca:0b:5a:92:30:8a:df:a2:ed: f4:da:e5:2e:ff:da:1f:75:dd:9e:67:25:3d:1b:8b: 98:97:5a:8f:80:9a:ca:0a:20:ae:5b:5b:f1:62:0a: d3:c6:23:1e:60:d8:8f:d1:41:61:7e:d6:26:b6:f6: c6:8f:cf:ba:3a:fe:9c:1d:83:66:63:23:c6:26:37: bb:ca:f6:87:95:e7:06:32:8a:6b:92:6f:46:46:4f: 98:5a:fc:c8:af:cb:24:de:f4:81:bf:e8:84:c7:ff: 7c:b3:d0:7e:e2:b6:04:6b:67:2b:ef:8e:44:64:9f: ab:f7:bb:77:51:88:67:fc:f9:da:02:88:d6:83:1d: 32:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:1C:1E:29:31:01:AF:6A:C5:09:37:D9:87:5D:E6:CF:35:63:B2:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.crl X509v3 Authority Key Identifier: keyid:7F:4C:A4:22:A3:CB:BB:A5:D6:77:9C:25:01:F3:7F:E5:D9:0E:B4:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:46:2c:01:c3:fb:ab:f2:f9:b5:69:ed:d5:fe:e0:c3:fe:40: aa:8d:ab:f1:ae:e9:bd:73:fa:70:95:17:08:93:2d:ce:40:51: 5c:e8:45:2a:74:a1:5e:9b:81:84:65:c0:5c:07:66:b1:37:6a: 0f:0f:9d:db:85:df:7b:d9:48:8f:5e:50:49:3f:d5:62:58:e5: 7d:48:66:ce:c4:75:d7:95:dd:66:85:fa:00:0a:d2:55:fe:73: 6c:6d:ec:c8:a3:6c:ac:ea:7e:9c:42:f0:fd:00:55:93:f1:71: fe:fd:ec:f4:a6:6e:f6:5e:c5:7e:87:e9:4d:12:60:f0:8f:a9: f4:f3:d3:73:41:bf:4f:fe:d1:bc:0c:b9:4c:b3:98:98:94:fc: 77:5e:03:32:6b:fd:a0:a7:78:ae:d3:00:79:72:f7:55:5a:33: 2c:4b:fc:4e:1b:60:24:76:2b:a1:88:96:e6:4f:ad:ad:78:3b: 26:37:43:56:52:1f:1f:1e:e8:50:b9:da:0a:98:e0:34:26:0f: 1d:f5:a6:7c:de:de:4d:e0:47:42:e6:21:57:51:9a:5e:64:da: 35:6d:7c:21:d5:3c:aa:d2:aa:bc:0b:da:3d:d1:07:49:7a:3d: da:06:de:e2:99:6c:da:1a:13:ed:f4:21:3e:0b:39:1b:0f:0e: 0a:17:25:5b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErJvY2L8ETWaPdS+TAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBkZGFkMzMtNTVlYi00MTI1LTkyMjEtMDEyOTE2OGE2 NDViMB4XDTI1MDgwODEyMDAwOFoXDTI1MDgxMTEyMDAwMFowLzEtMCsGA1UEAxMk MDE3MWNkNWYtOWQzYS00Mjg3LTg4ZWMtODY4ZGQ2YjAyNzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2bLbf+k1RAeUVCv6JSdWnRHzbPuYHVTlUS6 uBUguzLuWF+UvU64Eq9QkA/Ncw4XRnlDJTTgOt/D19yC+oF5Qsgbcp3Ok1QlTtiw 6+GQlBl1XB91fiB6/Pat4Z/xl8JzPm0WzxkZBPj5fbALpOI4hdzpYBzmo8DVUDv+ ri/KC1qSMIrfou302uUu/9ofdd2eZyU9G4uYl1qPgJrKCiCuW1vxYgrTxiMeYNiP 0UFhftYmtvbGj8+6Ov6cHYNmYyPGJje7yvaHlecGMoprkm9GRk+YWvzIr8sk3vSB v+iEx/98s9B+4rYEa2cr745EZJ+r97t3UYhn/PnaAojWgx0ySQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCAcHikxAa9qxQk32Ydd5s81Y7INMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MGRk YWQzMy01NWViLTQxMjUtOTIyMS0wMTI5MTY4YTY0NWIvNzBkZGFkMzMtNTVlYi00 MTI1LTkyMjEtMDEyOTE2OGE2NDViLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzBkZGFkMzMtNTVlYi00MTI1LTky MjEtMDEyOTE2OGE2NDViLzcwZGRhZDMzLTU1ZWItNDEyNS05MjIxLTAxMjkxNjhh NjQ1Yi5jcmwwHwYDVR0jBBgwFoAUf0ykIqPLu6XWd5wlAfN/5dkOtL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83MGRkYWQzMy01NWViLTQxMjUtOTIyMS0wMTI5 MTY4YTY0NWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBSRiwBw/ur8vm1ae3V/uDD /kCqjavxrum9c/pwlRcIky3OQFFc6EUqdKFem4GEZcBcB2axN2oPD53bhd972UiP XlBJP9ViWOV9SGbOxHXXld1mhfoACtJV/nNsbezIo2ys6n6cQvD9AFWT8XH+/ez0 pm72XsV+h+lNEmDwj6n089NzQb9P/tG8DLlMs5iYlPx3XgMya/2gp3iu0wB5cvdV WjMsS/xOG2AkdiuhiJbmT62teDsmN0NWUh8fHuhQudoKmOA0Jg8d9aZ83t5N4EdC 5iFXUZpeZNo1bXwh1Tyq0qq8C9o90QdJej3aBt7imWzaGhPt9CE+CzkbDw4KFyVb -----END CERTIFICATE-----Generated at Fri Aug 8 20:47:32 2025 by rpki-client