$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.mft File: 70a424d3-35bd-43df-8245-3fb08ea7af5a.mft (raw, json) Hash identifier: 3a0Z0MbHz8zBhZugRxGb338CPlZkIukQ6W5tmNTZ5rY= Subject key identifier: B2:CA:EC:FB:FF:5D:55:9B:E4:D7:51:41:6A:CC:7A:AB:BD:F8:84:08 Authority key identifier: F2:5A:07:ED:D8:B7:BD:AD:2C:76:F0:5E:9C:50:2A:EA:83:E4:B1:96 Certificate issuer: /CN=70a424d3-35bd-43df-8245-3fb08ea7af5a Certificate serial: 010D0C9F4328584BB6B05729121C312C2915AB40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.mft Manifest number: 010D0C9F4328584073A849CF36D5F7E9DECAFE97 Signing time: Sat 01 Nov 2025 09:00:03 +0000 Manifest this update: Sat 01 Nov 2025 09:00:03 +0000 Manifest next update: Tue 04 Nov 2025 09:00:00 +0000 Files and hashes: 1: 439ee44d-2f63-3c0e-80de-7ad7f7cb69f7.roa (hash: 6INLO9dk2mspnYp0geea7e04RlwSxysn/4kfePXVV/4=) 2: 70a424d3-35bd-43df-8245-3fb08ea7af5a.crl (hash: TatwRA46u250eg/riPXkOBMYLnhXncYtcloJTwCaIEw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b6:b0:57:29:12:1c:31:2c:29:15:ab:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70a424d3-35bd-43df-8245-3fb08ea7af5a Validity Not Before: Nov 1 09:00:03 2025 GMT Not After : Nov 4 09:00:00 2025 GMT Subject: CN=427d037a-cf9c-4242-b80c-e1f52ebddf9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d9:1c:d7:46:dc:1b:67:df:ad:b9:d2:01:cf: 01:f0:2f:82:41:c4:79:15:30:66:63:cf:54:cc:3b: 48:3a:43:a2:92:f7:04:76:fd:7d:1c:51:f8:34:a5: 44:b1:0f:9c:47:c3:1d:11:42:d1:26:5d:99:34:7f: cd:95:c8:d2:bb:a0:0a:42:77:c1:53:c7:ee:3c:22: 05:d4:50:d5:e9:70:bb:af:c8:9f:7a:e3:5b:7a:36: bd:89:f5:0d:bd:71:a6:b7:7a:ca:fa:0f:f4:e6:c3: 84:92:01:41:83:b4:3e:c3:36:29:00:f3:38:fc:17: 84:b0:75:ed:df:d9:b4:95:7b:3d:26:9e:7d:27:70: 20:10:37:fc:13:d5:20:9c:7f:ca:63:03:66:b8:22: 3d:3e:3e:3c:5a:1b:c4:a2:5f:d9:77:72:25:49:2f: ab:7f:23:0a:2f:b2:a5:06:a1:4c:66:e2:12:32:0f: 39:63:c3:01:75:58:90:00:ed:d4:33:b6:60:6d:99: c3:d8:13:dc:16:84:e3:04:0c:78:1b:0d:c6:9b:6b: e7:c9:5c:6b:13:0d:3c:f1:e8:d0:c3:6b:36:40:60: 33:44:5e:b2:52:94:68:c6:fd:fd:6e:25:72:22:ac: a1:b9:3a:38:4d:29:03:3a:3e:ae:ad:f6:4a:f3:dd: ff:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:CA:EC:FB:FF:5D:55:9B:E4:D7:51:41:6A:CC:7A:AB:BD:F8:84:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.crl X509v3 Authority Key Identifier: keyid:F2:5A:07:ED:D8:B7:BD:AD:2C:76:F0:5E:9C:50:2A:EA:83:E4:B1:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:21:c7:2d:b3:47:b1:c0:c7:e1:53:95:c0:ea:1d:80:87:d3: 5d:0e:c9:63:91:45:8d:f5:3e:35:4f:0c:ca:48:69:84:5f:42: 73:83:ae:72:1c:06:25:e0:b6:e0:df:ea:4e:e3:d3:8c:de:e9: d4:0a:13:db:03:74:0c:e2:b4:60:b2:07:1f:02:4b:59:7d:88: 2f:55:15:db:90:c9:fd:06:05:47:aa:c5:2d:f9:2b:a5:63:e9: 1c:0b:92:cd:3d:ff:9c:b8:8f:33:a7:47:2f:21:26:2c:6e:e5: b3:f2:e6:36:6d:24:36:54:6f:1f:3e:f5:ee:fc:20:bd:71:39: 44:5a:6f:e8:e4:e1:4b:73:00:d9:f2:e8:12:9b:1c:9a:ab:0e: 20:71:9b:6d:15:8d:4a:23:2f:e6:1c:7d:a7:0b:60:0c:43:e7: ab:b8:c0:04:b6:7f:c8:5c:02:0a:55:bb:b0:34:49:61:26:ea: 19:36:21:8a:3c:a5:80:90:1d:8c:f3:2c:ce:f3:fc:5a:cf:7c: 7b:52:98:f1:28:52:47:5a:4d:48:45:a6:db:d5:f4:bc:b4:9b: 93:07:bf:9d:0b:4b:0f:97:bf:46:e6:d3:d6:82:fd:33:3b:7f: bb:ee:d7:e4:06:32:6a:f8:fe:54:cf:18:b6:dd:25:ec:b9:6d: f3:27:e5:e4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu2sFcpEhwxLCkVq0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBhNDI0ZDMtMzViZC00M2RmLTgyNDUtM2ZiMDhlYTdh ZjVhMB4XDTI1MTEwMTA5MDAwM1oXDTI1MTEwNDA5MDAwMFowLzEtMCsGA1UEAxMk NDI3ZDAzN2EtY2Y5Yy00MjQyLWI4MGMtZTFmNTJlYmRkZjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNkc10bcG2ffrbnSAc8B8C+CQcR5FTBmY89U zDtIOkOikvcEdv19HFH4NKVEsQ+cR8MdEULRJl2ZNH/NlcjSu6AKQnfBU8fuPCIF 1FDV6XC7r8ifeuNbeja9ifUNvXGmt3rK+g/05sOEkgFBg7Q+wzYpAPM4/BeEsHXt 39m0lXs9Jp59J3AgEDf8E9UgnH/KYwNmuCI9Pj48WhvEol/Zd3IlSS+rfyMKL7Kl BqFMZuISMg85Y8MBdViQAO3UM7ZgbZnD2BPcFoTjBAx4Gw3Gm2vnyVxrEw088ejQ w2s2QGAzRF6yUpRoxv39biVyIqyhuTo4TSkDOj6urfZK893//wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLLK7Pv/XVWb5NdRQWrMequ9+IQIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MGE0 MjRkMy0zNWJkLTQzZGYtODI0NS0zZmIwOGVhN2FmNWEvNzBhNDI0ZDMtMzViZC00 M2RmLTgyNDUtM2ZiMDhlYTdhZjVhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzBhNDI0ZDMtMzViZC00M2RmLTgy NDUtM2ZiMDhlYTdhZjVhLzcwYTQyNGQzLTM1YmQtNDNkZi04MjQ1LTNmYjA4ZWE3 YWY1YS5jcmwwHwYDVR0jBBgwFoAU8loH7di3va0sdvBenFAq6oPksZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MGE0MjRkMy0zNWJkLTQzZGYtODI0NS0zZmIw OGVhN2FmNWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB+Iccts0exwMfhU5XA6h2A h9NdDsljkUWN9T41TwzKSGmEX0Jzg65yHAYl4Lbg3+pO49OM3unUChPbA3QM4rRg sgcfAktZfYgvVRXbkMn9BgVHqsUt+SulY+kcC5LNPf+cuI8zp0cvISYsbuWz8uY2 bSQ2VG8fPvXu/CC9cTlEWm/o5OFLcwDZ8ugSmxyaqw4gcZttFY1KIy/mHH2nC2AM Q+eruMAEtn/IXAIKVbuwNElhJuoZNiGKPKWAkB2M8yzO8/xaz3x7UpjxKFJHWk1I Rabb1fS8tJuTB7+dC0sPl79G5tPWgv0zO3+77tfkBjJq+P5Uzxi23SXsuW3zJ+Xk -----END CERTIFICATE-----Generated at Sun Nov 2 08:01:21 2025 by rpki-client