$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft File: 704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft (raw, json) Hash identifier: nLrebiEEsfMotcIp7ysuPG6m/iBhu0mVUxx6ssl2Y6o= Subject key identifier: F0:DA:8A:FD:01:B2:54:55:08:32:99:B8:8A:CA:1C:46:54:7A:3C:19 Authority key identifier: 52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97 Certificate issuer: /CN=704a761f-b71a-4fa2-b0e7-db5278e23dc3 Certificate serial: 010D0C9F4328584AEAE4675977D0249905376B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft Manifest number: 010D0C9F4328584073A84BBB6D274A47E1440314 Signing time: Wed 20 Aug 2025 09:00:03 +0000 Manifest this update: Wed 20 Aug 2025 09:00:03 +0000 Manifest next update: Fri 22 Aug 2025 09:00:00 +0000 Files and hashes: 1: 704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl (hash: yErgx/VIJT3nej66ktUmIxm9w/mjPtNkrPDFzH2oAqY=) 2: e6965540-cbd0-3930-b638-a04886e69eac.roa (hash: TNGjT3/jKfnn6pAZhuO3QYrXE/bJCaCZ3fc3IiXmyXg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ea:e4:67:59:77:d0:24:99:05:37:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=704a761f-b71a-4fa2-b0e7-db5278e23dc3 Validity Not Before: Aug 20 09:00:03 2025 GMT Not After : Aug 22 09:00:00 2025 GMT Subject: CN=0967f683-e06a-41eb-8dd6-bceb971f1638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:18:bb:f9:a6:e8:de:69:9c:29:75:83:01:6d: a7:99:25:de:26:6b:4b:5d:6b:50:03:d3:9d:1b:7f: 1d:37:78:7e:5d:1d:5f:08:5f:2e:31:22:61:be:6c: 16:aa:8c:e0:54:4c:69:0e:5b:f0:b9:35:87:7c:d9: a7:ef:9e:b2:64:43:7e:7d:b7:bc:e8:1b:65:f2:41: 5a:a5:2c:c1:8b:48:c8:65:c9:7b:ad:9b:d0:cd:06: d0:e0:da:23:1a:28:24:6e:5d:e2:21:61:e0:c1:1b: c7:5e:eb:60:eb:10:f9:49:33:a7:7b:1d:50:f0:87: aa:09:65:21:39:15:d3:79:15:9f:5c:38:39:3e:90: 97:a0:64:8b:83:f6:e9:1b:55:12:47:a9:21:06:a2: f5:af:97:c2:31:af:c0:ba:96:c8:b0:a9:e2:64:c8: e5:41:d4:0d:9c:3f:39:7b:3e:99:a4:4a:6b:ea:26: d2:82:72:b9:5c:8b:0f:08:e9:f9:15:c1:66:83:dc: 39:08:45:06:6d:11:82:a4:10:e8:65:37:b1:f6:d7: 1d:88:bd:02:c3:59:05:92:04:e7:4f:15:a6:39:56: 54:73:c5:80:80:6e:23:1d:0a:b8:7b:b2:1c:78:08: cd:84:6b:70:23:ad:66:dd:37:db:19:de:af:8e:ca: 6d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:DA:8A:FD:01:B2:54:55:08:32:99:B8:8A:CA:1C:46:54:7A:3C:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl X509v3 Authority Key Identifier: keyid:52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:4c:57:62:b3:03:d2:48:f7:44:0d:77:11:e1:42:6a:f9:d8: 9b:b8:ea:99:e5:a4:7a:6f:7d:85:bd:e7:01:2a:6e:30:62:fc: 32:da:99:2e:e1:5d:33:8a:a2:dc:f7:14:ea:b6:b7:84:a9:24: 54:54:cc:3e:24:a3:3e:40:19:e9:ac:e1:ce:e8:c6:d1:c6:29: b6:8e:94:ca:6e:01:e4:18:0e:7d:a0:b1:1a:2f:d6:f8:68:29: db:7e:eb:3c:af:12:46:ec:d6:f5:af:23:9e:52:cd:22:f9:5a: fb:e0:07:d4:0b:e5:52:6e:e9:66:26:6c:4b:7f:9f:a3:34:52: 67:5a:39:50:79:b0:53:23:a1:84:6b:90:2d:cc:db:24:72:67: a8:8c:7e:a0:0f:a2:9a:bc:2f:25:da:1f:82:a7:90:5a:1e:f0: c6:33:f4:82:e5:b9:1c:10:18:96:9f:c0:80:8d:79:92:b2:2c: 98:3f:20:fa:f7:6c:91:b5:c8:fc:76:61:8c:50:f4:70:b9:04: e1:a4:67:8e:c5:29:c4:b5:16:02:02:d9:34:f9:27:52:68:f2: 81:2b:0f:a0:b8:c2:45:0b:b2:87:e1:fe:ca:b2:7c:f2:e5:f6: 2a:d2:8c:77:7e:ab:8b:b9:74:87:2c:f5:43:75:3a:a7:fe:da: e3:3b:e5:70 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErq5GdZd9AkmQU3awAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA0YTc2MWYtYjcxYS00ZmEyLWIwZTctZGI1Mjc4ZTIz ZGMzMB4XDTI1MDgyMDA5MDAwM1oXDTI1MDgyMjA5MDAwMFowLzEtMCsGA1UEAxMk MDk2N2Y2ODMtZTA2YS00MWViLThkZDYtYmNlYjk3MWYxNjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRi7+abo3mmcKXWDAW2nmSXeJmtLXWtQA9Od G38dN3h+XR1fCF8uMSJhvmwWqozgVExpDlvwuTWHfNmn756yZEN+fbe86Btl8kFa pSzBi0jIZcl7rZvQzQbQ4NojGigkbl3iIWHgwRvHXutg6xD5STOnex1Q8IeqCWUh ORXTeRWfXDg5PpCXoGSLg/bpG1USR6khBqL1r5fCMa/AupbIsKniZMjlQdQNnD85 ez6ZpEpr6ibSgnK5XIsPCOn5FcFmg9w5CEUGbRGCpBDoZTex9tcdiL0Cw1kFkgTn TxWmOVZUc8WAgG4jHQq4e7IceAjNhGtwI61m3TfbGd6vjsptlwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPDaiv0BslRVCDKZuIrKHEZUejwZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDRh NzYxZi1iNzFhLTRmYTItYjBlNy1kYjUyNzhlMjNkYzMvNzA0YTc2MWYtYjcxYS00 ZmEyLWIwZTctZGI1Mjc4ZTIzZGMzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzA0YTc2MWYtYjcxYS00ZmEyLWIw ZTctZGI1Mjc4ZTIzZGMzLzcwNGE3NjFmLWI3MWEtNGZhMi1iMGU3LWRiNTI3OGUy M2RjMy5jcmwwHwYDVR0jBBgwFoAUUi3Wa4cFBpviRD6NQcu1N8w4MZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MDRhNzYxZi1iNzFhLTRmYTItYjBlNy1kYjUy NzhlMjNkYzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBPTFdiswPSSPdEDXcR4UJq +dibuOqZ5aR6b32FvecBKm4wYvwy2pku4V0ziqLc9xTqtreEqSRUVMw+JKM+QBnp rOHO6MbRxim2jpTKbgHkGA59oLEaL9b4aCnbfus8rxJG7Nb1ryOeUs0i+Vr74AfU C+VSbulmJmxLf5+jNFJnWjlQebBTI6GEa5AtzNskcmeojH6gD6KavC8l2h+Cp5Ba HvDGM/SC5bkcEBiWn8CAjXmSsiyYPyD692yRtcj8dmGMUPRwuQThpGeOxSnEtRYC Atk0+SdSaPKBKw+guMJFC7KH4f7Ksnzy5fYq0ox3fquLuXSHLPVDdTqn/trjO+Vw -----END CERTIFICATE-----Generated at Wed Aug 20 19:30:46 2025 by rpki-client