$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft File: 70ddad33-55eb-4125-9221-0129168a645b.mft (raw, json) Hash identifier: 9EbDcJF4JBlqLgr4zjp5EPMslKAqm7Vb79V1u8CHpDI= Subject key identifier: 15:1B:73:8D:B1:30:14:B1:E8:54:8E:50:AE:F5:92:63:04:4F:D9:FD Authority key identifier: 7F:4C:A4:22:A3:CB:BB:A5:D6:77:9C:25:01:F3:7F:E5:D9:0E:B4:BD Certificate issuer: /CN=70ddad33-55eb-4125-9221-0129168a645b Certificate serial: 010D0C9F4328584A653CE74E26B4F7727EBF7C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft Manifest number: 010D0C9F43285841E951957BE6B5270236230067 Signing time: Thu 03 Jul 2025 12:00:03 +0000 Manifest this update: Thu 03 Jul 2025 12:00:03 +0000 Manifest next update: Sun 06 Jul 2025 12:00:00 +0000 Files and hashes: 1: 41138728-4b0a-33e7-a5bd-ea7cb42a601e.roa (hash: k6VCt9U3Ia1tS+jpI9HztpcllCf7X+gYlS/eMcGWTLQ=) 2: 70ddad33-55eb-4125-9221-0129168a645b.crl (hash: R5CQTvPbPXJT/xf0IPEwv/fl69CfP+6NGkHSaFZh7/A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:65:3c:e7:4e:26:b4:f7:72:7e:bf:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70ddad33-55eb-4125-9221-0129168a645b Validity Not Before: Jul 3 12:00:03 2025 GMT Not After : Jul 6 12:00:00 2025 GMT Subject: CN=b37beb0c-0035-4b72-a663-2c0feed30017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:85:01:c2:73:6b:6f:51:90:bb:28:4a:e4:e5: 1f:35:b6:21:41:12:a1:26:67:21:fb:d4:31:f0:54: 65:b5:2a:24:ac:85:33:24:0f:7f:04:88:6c:13:82: a3:85:da:45:de:54:a4:6b:af:b7:9a:a5:8a:00:e1: 96:e6:15:13:e3:bd:c7:98:e7:b1:2f:b6:42:f8:d6: d0:5a:77:15:ac:0b:d1:22:f7:40:3b:ef:7d:3a:8e: 0d:03:44:3f:4b:6b:59:0c:c3:61:e4:b2:98:28:4e: b5:09:20:22:f4:28:4c:01:17:a0:60:6f:ed:ae:23: 26:4b:72:72:d5:78:d8:6e:09:25:9f:be:26:7d:a1: 70:42:ec:d0:a2:1f:30:93:80:94:cd:af:12:22:59: 37:b5:57:6b:31:db:bf:38:40:95:f5:18:cd:66:97: 46:a3:e2:8c:66:cb:65:dc:ab:1a:50:75:f4:1a:81: 47:af:1e:34:ac:69:7f:27:49:7f:75:7b:5a:11:e4: 46:97:5c:9c:5f:cb:53:bc:d4:76:85:40:58:68:7c: 53:30:79:d9:5f:db:ef:ab:26:18:6b:a9:27:41:da: 0e:79:ab:85:a8:e6:26:c4:66:aa:34:47:17:41:fe: 40:9b:3b:99:8a:86:12:cd:0a:51:5c:45:74:a5:d4: b8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:1B:73:8D:B1:30:14:B1:E8:54:8E:50:AE:F5:92:63:04:4F:D9:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.crl X509v3 Authority Key Identifier: keyid:7F:4C:A4:22:A3:CB:BB:A5:D6:77:9C:25:01:F3:7F:E5:D9:0E:B4:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:ab:fc:5d:f1:4b:a9:7e:4e:43:94:32:66:0e:cc:33:2d:9e: bf:85:81:a6:08:0d:0a:09:5b:e9:f7:c0:79:ca:35:df:c0:47: 6d:1e:91:b3:90:e9:c0:0d:e6:54:ca:39:8d:f8:46:29:c9:f6: 02:72:b0:7c:5e:a0:bc:13:f1:3b:e9:6b:3e:fd:e7:b7:f0:56: 1b:be:4c:88:1d:8a:88:57:39:c2:e7:e5:33:fd:b2:86:fd:ca: 69:d1:dd:72:cf:c4:bc:7b:7e:44:36:ef:2d:25:b8:db:78:4c: 7e:92:9d:99:92:e3:48:34:c4:7d:d4:9a:ba:56:f6:3a:1c:9f: 88:84:ab:a5:53:16:8f:16:91:9b:cb:5d:2b:45:f5:9d:e7:97: 56:10:fc:4a:70:1f:16:46:0a:84:30:db:72:66:82:61:8d:40: c8:08:d1:b0:ab:f2:99:c9:60:e1:98:be:4f:64:24:6a:69:83: 05:ac:ab:da:c6:b8:fa:8f:50:83:04:f8:05:77:de:f2:59:82: e7:e5:62:7b:d3:9b:4d:ce:55:1a:11:3c:49:0b:00:a1:93:33: 08:08:97:48:b7:b5:1d:70:82:b7:4a:c8:ef:bd:94:f8:d0:0e: b7:bc:c6:27:74:12:8f:05:cc:25:49:78:34:25:13:c0:93:1d: 4e:23:b5:8a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEplPOdOJrT3cn6/fAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBkZGFkMzMtNTVlYi00MTI1LTkyMjEtMDEyOTE2OGE2 NDViMB4XDTI1MDcwMzEyMDAwM1oXDTI1MDcwNjEyMDAwMFowLzEtMCsGA1UEAxMk YjM3YmViMGMtMDAzNS00YjcyLWE2NjMtMmMwZmVlZDMwMDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoUBwnNrb1GQuyhK5OUfNbYhQRKhJmch+9Qx 8FRltSokrIUzJA9/BIhsE4KjhdpF3lSka6+3mqWKAOGW5hUT473HmOexL7ZC+NbQ WncVrAvRIvdAO+99Oo4NA0Q/S2tZDMNh5LKYKE61CSAi9ChMARegYG/triMmS3Jy 1XjYbgkln74mfaFwQuzQoh8wk4CUza8SIlk3tVdrMdu/OECV9RjNZpdGo+KMZstl 3KsaUHX0GoFHrx40rGl/J0l/dXtaEeRGl1ycX8tTvNR2hUBYaHxTMHnZX9vvqyYY a6knQdoOeauFqOYmxGaqNEcXQf5AmzuZioYSzQpRXEV0pdS4UQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBUbc42xMBSx6FSOUK71kmMET9n9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MGRk YWQzMy01NWViLTQxMjUtOTIyMS0wMTI5MTY4YTY0NWIvNzBkZGFkMzMtNTVlYi00 MTI1LTkyMjEtMDEyOTE2OGE2NDViLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzBkZGFkMzMtNTVlYi00MTI1LTky MjEtMDEyOTE2OGE2NDViLzcwZGRhZDMzLTU1ZWItNDEyNS05MjIxLTAxMjkxNjhh NjQ1Yi5jcmwwHwYDVR0jBBgwFoAUf0ykIqPLu6XWd5wlAfN/5dkOtL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83MGRkYWQzMy01NWViLTQxMjUtOTIyMS0wMTI5 MTY4YTY0NWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBNq/xd8Uupfk5DlDJmDswz LZ6/hYGmCA0KCVvp98B5yjXfwEdtHpGzkOnADeZUyjmN+EYpyfYCcrB8XqC8E/E7 6Ws+/ee38FYbvkyIHYqIVznC5+Uz/bKG/cpp0d1yz8S8e35ENu8tJbjbeEx+kp2Z kuNINMR91Jq6VvY6HJ+IhKulUxaPFpGby10rRfWd55dWEPxKcB8WRgqEMNtyZoJh jUDICNGwq/KZyWDhmL5PZCRqaYMFrKvaxrj6j1CDBPgFd97yWYLn5WJ705tNzlUa ETxJCwChkzMICJdIt7UdcIK3SsjvvZT40A63vMYndBKPBcwlSXg0JRPAkx1OI7WK -----END CERTIFICATE-----Generated at Fri Jul 4 03:28:17 2025 by rpki-client