$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.mft File: 670b9f4e-c369-4f4c-aa24-27f3fc851bc5.mft (raw, json) Hash identifier: lCwUhLt8OcE+oR6ttUI7sQhkarpwEgON6+INnXvqAP8= Subject key identifier: B5:BC:8C:D7:F6:96:85:F3:3A:65:82:34:75:0A:D0:3C:24:B9:44:52 Authority key identifier: C2:9F:A9:B8:BA:42:7E:3C:F3:9D:6B:BB:28:14:8A:E9:03:51:9B:FA Certificate issuer: /CN=670b9f4e-c369-4f4c-aa24-27f3fc851bc5 Certificate serial: 010D0C9F4328584A97B8C334428B6524BEF1D020 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.mft Manifest number: 010D0C9F4328584A89CE42F3540E36279B3F5E55 Signing time: Mon 21 Jul 2025 14:00:03 +0000 Manifest this update: Mon 21 Jul 2025 14:00:03 +0000 Manifest next update: Wed 23 Jul 2025 14:00:00 +0000 Files and hashes: 1: 50295063-44b9-3f73-8e63-136553fdd8cc.roa (hash: vaK41lbTJyItMpVyFXCBzSMGhFamJm9GQYwyRi0z2+M=) 2: 670b9f4e-c369-4f4c-aa24-27f3fc851bc5.crl (hash: 721Mj2eg01Q4vrqETE71H0VeeGTP4kUVvUM6f8+YtME=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:97:b8:c3:34:42:8b:65:24:be:f1:d0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=670b9f4e-c369-4f4c-aa24-27f3fc851bc5 Validity Not Before: Jul 21 14:00:03 2025 GMT Not After : Jul 23 14:00:00 2025 GMT Subject: CN=62cf935d-719e-495c-8ad1-9b95dee7e527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:be:8e:94:91:7e:e0:12:fb:4d:09:13:bb:83: b4:ca:76:08:33:f7:d5:8c:ea:58:8f:80:f4:ae:f1: 33:b3:ae:54:c8:8f:31:f3:cc:8e:2b:1f:35:07:9d: ef:99:21:a6:09:e2:87:08:f2:44:e0:75:90:b1:e1: 5d:93:6d:7c:99:7f:6a:82:b8:fb:4c:b3:11:ac:40: a5:76:ea:69:1f:b6:98:11:d1:fb:67:48:9a:1f:4e: ce:2d:1d:a9:04:cc:e9:7d:2f:eb:2e:4e:57:fe:25: 77:e0:a1:57:69:9e:08:9c:84:00:29:84:0e:0b:1f: 92:f1:95:29:5c:f0:10:e5:91:82:a0:49:b7:a4:f2: ab:40:4a:2a:e2:ce:5d:36:22:b5:2a:86:0f:6f:b2: 78:1f:6d:00:be:00:d8:e8:fc:8b:ff:d4:98:c5:47: fd:ee:c8:1f:a2:a5:5f:1e:d3:33:86:d7:dd:66:0a: 01:31:2c:8f:5f:3f:6e:84:e2:3c:46:1d:51:f5:55: 35:f4:6a:60:e2:6a:cc:3a:8e:0e:7f:19:00:49:94: ce:29:21:b3:be:0e:a2:c7:03:fd:f0:12:59:bd:ef: 1e:a3:3c:b4:6b:21:f4:b7:12:f5:42:6c:ce:b9:43: 7c:e9:89:43:01:73:08:a5:7e:dd:ee:73:78:fa:0f: 7c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:BC:8C:D7:F6:96:85:F3:3A:65:82:34:75:0A:D0:3C:24:B9:44:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.crl X509v3 Authority Key Identifier: keyid:C2:9F:A9:B8:BA:42:7E:3C:F3:9D:6B:BB:28:14:8A:E9:03:51:9B:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:9e:75:24:a1:99:68:f2:f3:ce:97:36:af:61:d8:6f:17:da: ad:77:72:d1:b2:5d:9d:f7:0b:83:0b:91:50:e3:9e:b9:8c:9f: 30:ae:60:5f:f7:95:1f:6f:02:48:6c:c8:86:9c:fd:61:61:ec: 86:9e:bb:96:52:e8:32:1e:51:52:f4:34:8e:59:e1:df:b7:17: b9:02:89:bb:4d:ea:f9:4f:0a:a4:42:05:fc:54:c0:f9:9c:d2: 0a:39:61:6c:99:23:bc:c1:02:87:1f:58:5d:70:5c:7c:a8:71: 14:a1:82:4f:1d:dd:3a:8c:48:29:04:39:5a:10:a9:9f:f4:a2: 2b:86:11:89:5c:c3:c2:44:00:db:6e:e5:fd:70:50:e5:ad:59: 7f:06:29:7a:96:12:4e:27:5b:d3:22:02:77:0a:0a:c8:d3:d2: 06:0c:da:58:b7:9a:bc:f8:4a:f6:ad:35:94:06:e8:45:cf:0d: 26:6e:20:c7:4c:dd:56:0c:c9:f9:25:8a:17:7f:c6:27:04:c1: 55:30:76:4a:3d:58:08:6b:7f:e6:a0:48:78:12:52:95:6f:e0: 17:28:82:96:d2:50:08:ae:05:73:ea:d8:5b:4d:ae:ce:d8:92: 06:45:92:6d:41:57:d8:74:79:a0:2f:82:d5:eb:4a:74:bd:f5: 3b:e4:d2:c9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEqXuMM0QotlJL7x0CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjcwYjlmNGUtYzM2OS00ZjRjLWFhMjQtMjdmM2ZjODUx YmM1MB4XDTI1MDcyMTE0MDAwM1oXDTI1MDcyMzE0MDAwMFowLzEtMCsGA1UEAxMk NjJjZjkzNWQtNzE5ZS00OTVjLThhZDEtOWI5NWRlZTdlNTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx76OlJF+4BL7TQkTu4O0ynYIM/fVjOpYj4D0 rvEzs65UyI8x88yOKx81B53vmSGmCeKHCPJE4HWQseFdk218mX9qgrj7TLMRrECl duppH7aYEdH7Z0iaH07OLR2pBMzpfS/rLk5X/iV34KFXaZ4InIQAKYQOCx+S8ZUp XPAQ5ZGCoEm3pPKrQEoq4s5dNiK1KoYPb7J4H20AvgDY6PyL/9SYxUf97sgfoqVf HtMzhtfdZgoBMSyPXz9uhOI8Rh1R9VU19Gpg4mrMOo4OfxkASZTOKSGzvg6ixwP9 8BJZve8eozy0ayH0txL1QmzOuUN86YlDAXMIpX7d7nN4+g98YQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLW8jNf2loXzOmWCNHUK0DwkuURSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC82NzBi OWY0ZS1jMzY5LTRmNGMtYWEyNC0yN2YzZmM4NTFiYzUvNjcwYjlmNGUtYzM2OS00 ZjRjLWFhMjQtMjdmM2ZjODUxYmM1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNjcwYjlmNGUtYzM2OS00ZjRjLWFh MjQtMjdmM2ZjODUxYmM1LzY3MGI5ZjRlLWMzNjktNGY0Yy1hYTI0LTI3ZjNmYzg1 MWJjNS5jcmwwHwYDVR0jBBgwFoAUwp+puLpCfjzznWu7KBSK6QNRm/owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC82NzBiOWY0ZS1jMzY5LTRmNGMtYWEyNC0yN2Yz ZmM4NTFiYzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBznnUkoZlo8vPOlzavYdhv F9qtd3LRsl2d9wuDC5FQ4565jJ8wrmBf95UfbwJIbMiGnP1hYeyGnruWUugyHlFS 9DSOWeHftxe5Aom7Ter5TwqkQgX8VMD5nNIKOWFsmSO8wQKHH1hdcFx8qHEUoYJP Hd06jEgpBDlaEKmf9KIrhhGJXMPCRADbbuX9cFDlrVl/Bil6lhJOJ1vTIgJ3CgrI 09IGDNpYt5q8+Er2rTWUBuhFzw0mbiDHTN1WDMn5JYoXf8YnBMFVMHZKPVgIa3/m oEh4ElKVb+AXKIKW0lAIrgVz6thbTa7O2JIGRZJtQVfYdHmgL4LV60p0vfU75NLJ -----END CERTIFICATE-----Generated at Mon Jul 21 18:04:57 2025 by rpki-client