$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft File: 70ddad33-55eb-4125-9221-0129168a645b.mft (raw, json) Hash identifier: MM0grS0UHs3XJSCp/iPWtSJDPiEhg1Gk8Vou5mrcVbE= Subject key identifier: D1:FE:A3:EC:39:2C:F1:4B:4A:15:28:72:2E:2F:0F:17:AD:E1:3A:C0 Authority key identifier: 7F:4C:A4:22:A3:CB:BB:A5:D6:77:9C:25:01:F3:7F:E5:D9:0E:B4:BD Certificate issuer: /CN=70ddad33-55eb-4125-9221-0129168a645b Certificate serial: 010D0C9F4328584AEB3DC95984A2DC3E2D1E9080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft Manifest number: 010D0C9F43285841E951957BE6B5270236230098 Signing time: Wed 20 Aug 2025 12:00:08 +0000 Manifest this update: Wed 20 Aug 2025 12:00:08 +0000 Manifest next update: Sat 23 Aug 2025 12:00:00 +0000 Files and hashes: 1: 41138728-4b0a-33e7-a5bd-ea7cb42a601e.roa (hash: CYuF6kVAnzfl1Nd2lGeaT0RTIDI0OVk2yBtnlhJJpvk=) 2: 70ddad33-55eb-4125-9221-0129168a645b.crl (hash: szYimNTx8SvilJq4ibfoKAedHKfAYG0f8tA1IfStfVQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:3d:c9:59:84:a2:dc:3e:2d:1e:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70ddad33-55eb-4125-9221-0129168a645b Validity Not Before: Aug 20 12:00:08 2025 GMT Not After : Aug 23 12:00:00 2025 GMT Subject: CN=cba44723-3441-43a2-9889-98888254207a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:70:4d:e9:69:7f:24:c1:b9:63:62:60:ef:2f: be:81:3a:e3:ce:ca:fb:76:c1:b2:21:cf:eb:32:f6: f7:2a:e9:10:ae:40:2b:f0:d0:6a:7c:8f:8e:a6:e9: f6:66:07:77:6f:e4:15:eb:28:57:23:45:ce:61:80: 63:20:19:19:aa:a5:9e:79:d0:ec:65:68:ed:16:9b: 52:1d:ae:1f:a2:49:4a:d4:ee:f0:6a:0a:d9:9c:66: 34:5d:d6:47:b7:ea:eb:35:0b:7c:d2:81:af:95:8d: 00:95:03:f6:ce:44:1e:45:f9:66:e0:c7:5f:ea:b6: 6d:e5:f4:ba:83:cd:e0:74:b1:f2:54:b3:32:ee:e2: 90:69:7c:be:4b:99:79:ee:31:60:a4:e2:b9:aa:56: 8b:ac:72:e3:2a:60:55:35:74:fd:2a:bd:ef:00:75: 69:f5:3f:1a:b3:e4:6b:bc:cc:db:47:19:44:9b:1e: 5e:a1:ef:2f:03:a9:6d:dc:21:cb:67:a5:3c:9f:9e: 54:ae:8a:15:52:b4:1f:99:2c:99:42:e2:90:ec:80: 19:e6:2f:38:c4:a6:fc:10:ed:c3:68:69:9b:7c:04: 77:9b:b3:38:03:83:26:d4:eb:05:c5:7b:b3:cf:bd: de:01:a4:3e:ab:3d:20:93:b7:63:cd:8d:64:d9:f9: 1c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:FE:A3:EC:39:2C:F1:4B:4A:15:28:72:2E:2F:0F:17:AD:E1:3A:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.crl X509v3 Authority Key Identifier: keyid:7F:4C:A4:22:A3:CB:BB:A5:D6:77:9C:25:01:F3:7F:E5:D9:0E:B4:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:b1:71:1c:f1:d5:22:95:e2:f4:88:50:88:cb:57:5f:9a:3a: 3d:40:1d:95:c8:51:4e:a7:89:23:95:8d:8f:f9:f4:7d:58:0f: 3e:b8:05:65:06:dd:6a:91:38:20:42:83:c0:fa:a6:90:8b:c5: 32:0c:3f:49:f1:46:ed:a3:c2:63:00:25:d0:2f:44:20:50:d1: ee:eb:2d:a4:c6:81:2d:5f:18:58:5b:db:8c:6c:ec:d8:99:65: 89:b3:54:f3:24:8f:84:e4:4c:ea:fa:c6:57:16:b9:a5:2c:a0: 00:6a:68:8b:6f:7e:3c:80:4b:aa:0e:8c:7f:fb:a9:45:6b:6f: f5:a8:b5:69:ef:ed:f3:fe:c2:25:b7:22:61:d6:65:a2:00:fa: 3f:d5:ad:b9:d5:32:0b:fa:44:af:50:e1:a6:d1:dd:64:b1:63: 95:c3:ea:d5:62:0a:b9:2c:f3:a0:69:d8:b3:39:41:76:07:62: ae:bd:17:a9:fd:80:93:d1:a6:dc:f6:4a:47:3b:80:4f:78:39: 69:26:3b:33:c3:da:b8:81:b9:88:57:97:99:55:e2:75:02:2e: cd:3d:2e:b3:2d:44:fc:79:22:4b:b7:0e:7c:9a:b5:03:83:93: 8c:28:c4:cb:62:66:4a:3d:9e:05:30:53:1a:2b:d1:62:2c:cc: 33:5f:5f:84 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErrPclZhKLcPi0ekIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBkZGFkMzMtNTVlYi00MTI1LTkyMjEtMDEyOTE2OGE2 NDViMB4XDTI1MDgyMDEyMDAwOFoXDTI1MDgyMzEyMDAwMFowLzEtMCsGA1UEAxMk Y2JhNDQ3MjMtMzQ0MS00M2EyLTk4ODktOTg4ODgyNTQyMDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3BN6Wl/JMG5Y2Jg7y++gTrjzsr7dsGyIc/r Mvb3KukQrkAr8NBqfI+Opun2Zgd3b+QV6yhXI0XOYYBjIBkZqqWeedDsZWjtFptS Ha4foklK1O7wagrZnGY0XdZHt+rrNQt80oGvlY0AlQP2zkQeRflm4Mdf6rZt5fS6 g83gdLHyVLMy7uKQaXy+S5l57jFgpOK5qlaLrHLjKmBVNXT9Kr3vAHVp9T8as+Rr vMzbRxlEmx5eoe8vA6lt3CHLZ6U8n55UrooVUrQfmSyZQuKQ7IAZ5i84xKb8EO3D aGmbfAR3m7M4A4Mm1OsFxXuzz73eAaQ+qz0gk7djzY1k2fkcVQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNH+o+w5LPFLShUoci4vDxet4TrAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MGRk YWQzMy01NWViLTQxMjUtOTIyMS0wMTI5MTY4YTY0NWIvNzBkZGFkMzMtNTVlYi00 MTI1LTkyMjEtMDEyOTE2OGE2NDViLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzBkZGFkMzMtNTVlYi00MTI1LTky MjEtMDEyOTE2OGE2NDViLzcwZGRhZDMzLTU1ZWItNDEyNS05MjIxLTAxMjkxNjhh NjQ1Yi5jcmwwHwYDVR0jBBgwFoAUf0ykIqPLu6XWd5wlAfN/5dkOtL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83MGRkYWQzMy01NWViLTQxMjUtOTIyMS0wMTI5 MTY4YTY0NWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB8sXEc8dUileL0iFCIy1df mjo9QB2VyFFOp4kjlY2P+fR9WA8+uAVlBt1qkTggQoPA+qaQi8UyDD9J8Ubto8Jj ACXQL0QgUNHu6y2kxoEtXxhYW9uMbOzYmWWJs1TzJI+E5Ezq+sZXFrmlLKAAamiL b348gEuqDox/+6lFa2/1qLVp7+3z/sIltyJh1mWiAPo/1a251TIL+kSvUOGm0d1k sWOVw+rVYgq5LPOgadizOUF2B2KuvRep/YCT0abc9kpHO4BPeDlpJjszw9q4gbmI V5eZVeJ1Ai7NPS6zLUT8eSJLtw58mrUDg5OMKMTLYmZKPZ4FMFMaK9FiLMwzX1+E -----END CERTIFICATE-----Generated at Thu Aug 21 06:11:36 2025 by rpki-client