$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft File: 70ddad33-55eb-4125-9221-0129168a645b.mft (raw, json) Hash identifier: dF0M1vgTlnLkZvtCZuj2VyG+cVsuuFiIaSBeRiYHBXY= Subject key identifier: 95:23:95:FA:F9:63:0A:6A:F3:8F:F0:C2:32:4D:56:D3:57:40:0A:C5 Authority key identifier: 7F:4C:A4:22:A3:CB:BB:A5:D6:77:9C:25:01:F3:7F:E5:D9:0E:B4:BD Certificate issuer: /CN=70ddad33-55eb-4125-9221-0129168a645b Certificate serial: 010D0C9F4328584B9854239859B3281C5C92A8C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft Manifest number: 010D0C9F43285841E951957BE6B52702362300D7 Signing time: Tue 21 Oct 2025 12:00:03 +0000 Manifest this update: Tue 21 Oct 2025 12:00:03 +0000 Manifest next update: Fri 24 Oct 2025 12:00:00 +0000 Files and hashes: 1: 41138728-4b0a-33e7-a5bd-ea7cb42a601e.roa (hash: CYuF6kVAnzfl1Nd2lGeaT0RTIDI0OVk2yBtnlhJJpvk=) 2: 70ddad33-55eb-4125-9221-0129168a645b.crl (hash: SALZBtv4ehLTCZG3rAc8LVOy6Ze8e9zOR9+JAlSxgw0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:54:23:98:59:b3:28:1c:5c:92:a8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70ddad33-55eb-4125-9221-0129168a645b Validity Not Before: Oct 21 12:00:03 2025 GMT Not After : Oct 24 12:00:00 2025 GMT Subject: CN=7b1cac89-fe65-4942-add6-94016d6dc5bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:df:53:33:d3:19:73:58:68:b4:88:d8:72:ac: 3c:3b:9b:cb:37:b3:3e:23:b4:fd:52:24:27:49:34: ed:21:d0:ed:d0:e4:8c:d7:0f:61:20:f9:ea:62:f0: 51:f2:12:eb:78:d1:1e:92:50:38:ef:7c:20:3b:69: 7b:35:68:2b:ab:13:80:cd:55:65:96:b3:c2:fa:7c: a9:d4:c3:42:f1:97:80:d9:37:a8:b2:6f:02:a3:21: b7:cb:33:d0:26:8b:4a:04:64:a5:fa:96:fe:a8:be: 27:3b:d6:2b:7c:60:11:97:0f:a2:18:cb:83:06:37: a4:c1:f0:82:85:14:9e:cd:66:a2:4d:38:d0:78:d2: 61:76:24:3b:02:32:f4:9f:0b:68:44:e9:01:20:ef: 39:10:b9:7c:34:d3:8b:ca:06:e0:e7:ac:6d:08:48: 66:dc:ef:1b:85:30:13:96:71:d4:26:98:1d:27:47: 5c:55:dc:c8:d6:e5:e5:c0:b0:e1:0c:fd:1d:7d:d7: c7:f6:2d:b8:07:3c:c3:a1:6d:14:90:47:96:13:5c: d9:c7:81:40:fe:80:01:18:51:70:b8:1d:78:56:19: c3:4f:45:5d:84:af:cf:30:c7:9b:91:23:90:b3:11: 44:22:d7:98:6c:03:2d:2a:95:78:25:56:17:ca:b0: de:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:23:95:FA:F9:63:0A:6A:F3:8F:F0:C2:32:4D:56:D3:57:40:0A:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.crl X509v3 Authority Key Identifier: keyid:7F:4C:A4:22:A3:CB:BB:A5:D6:77:9C:25:01:F3:7F:E5:D9:0E:B4:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:0d:97:d3:b3:2f:72:ed:91:ea:ff:72:74:0f:92:b2:4f:a0: 9b:e3:0f:dc:00:5d:61:ed:23:c3:e9:cd:a9:02:a4:14:23:18: 85:70:25:73:1f:4b:41:ab:98:45:51:7b:08:50:fa:bb:69:4b: 48:06:25:47:b3:ed:06:a6:82:88:0c:58:dd:c4:86:d1:11:52: cb:6f:6f:6b:fe:0e:10:cf:17:73:ba:f9:70:de:65:61:4a:e9: f6:d4:c2:f7:ff:b5:21:e9:78:87:ff:5b:92:67:63:f0:31:62: 97:1e:f9:24:bf:cf:15:39:7d:8e:f6:77:c9:45:19:8a:47:8b: 83:f7:ab:41:20:23:e2:7d:83:fa:11:a4:b2:81:7f:2c:d9:45: 44:f2:ea:13:ae:6f:03:12:c4:7b:8c:76:a2:02:24:1d:90:45: 87:49:12:53:78:c1:3e:7a:1e:a6:ec:fe:8e:45:f2:02:74:b9: 87:4c:cc:e8:8b:ac:41:40:5b:8d:56:a8:b4:e9:aa:49:7d:bb: 65:e1:d5:37:b9:1e:1d:2f:93:d5:a6:c4:fc:20:3e:11:52:6a: 62:86:15:49:f8:4e:b2:3e:74:43:d6:0c:ad:75:54:21:db:ad: c2:fc:5b:4e:c4:22:b2:93:fb:6b:16:07:aa:c8:d3:07:d4:7a: d1:86:5a:03 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuYVCOYWbMoHFySqMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBkZGFkMzMtNTVlYi00MTI1LTkyMjEtMDEyOTE2OGE2 NDViMB4XDTI1MTAyMTEyMDAwM1oXDTI1MTAyNDEyMDAwMFowLzEtMCsGA1UEAxMk N2IxY2FjODktZmU2NS00OTQyLWFkZDYtOTQwMTZkNmRjNWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn99TM9MZc1hotIjYcqw8O5vLN7M+I7T9UiQn STTtIdDt0OSM1w9hIPnqYvBR8hLreNEeklA473wgO2l7NWgrqxOAzVVllrPC+nyp 1MNC8ZeA2Teosm8CoyG3yzPQJotKBGSl+pb+qL4nO9YrfGARlw+iGMuDBjekwfCC hRSezWaiTTjQeNJhdiQ7AjL0nwtoROkBIO85ELl8NNOLygbg56xtCEhm3O8bhTAT lnHUJpgdJ0dcVdzI1uXlwLDhDP0dfdfH9i24BzzDoW0UkEeWE1zZx4FA/oABGFFw uB14VhnDT0VdhK/PMMebkSOQsxFEIteYbAMtKpV4JVYXyrDeWwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJUjlfr5Ywpq84/wwjJNVtNXQArFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MGRk YWQzMy01NWViLTQxMjUtOTIyMS0wMTI5MTY4YTY0NWIvNzBkZGFkMzMtNTVlYi00 MTI1LTkyMjEtMDEyOTE2OGE2NDViLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzBkZGFkMzMtNTVlYi00MTI1LTky MjEtMDEyOTE2OGE2NDViLzcwZGRhZDMzLTU1ZWItNDEyNS05MjIxLTAxMjkxNjhh NjQ1Yi5jcmwwHwYDVR0jBBgwFoAUf0ykIqPLu6XWd5wlAfN/5dkOtL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83MGRkYWQzMy01NWViLTQxMjUtOTIyMS0wMTI5 MTY4YTY0NWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBZDZfTsy9y7ZHq/3J0D5Ky T6Cb4w/cAF1h7SPD6c2pAqQUIxiFcCVzH0tBq5hFUXsIUPq7aUtIBiVHs+0GpoKI DFjdxIbREVLLb29r/g4Qzxdzuvlw3mVhSun21ML3/7Uh6XiH/1uSZ2PwMWKXHvkk v88VOX2O9nfJRRmKR4uD96tBICPifYP6EaSygX8s2UVE8uoTrm8DEsR7jHaiAiQd kEWHSRJTeME+eh6m7P6ORfICdLmHTMzoi6xBQFuNVqi06apJfbtl4dU3uR4dL5PV psT8ID4RUmpihhVJ+E6yPnRD1gytdVQh263C/FtOxCKyk/trFgeqyNMH1HrRhloD -----END CERTIFICATE-----Generated at Wed Oct 22 08:28:31 2025 by rpki-client