$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft File: 70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft (raw, json) Hash identifier: oIsCzv7aVbD0mmB9z+54qfnVRmRcsZyn1RebII0vgCo= Subject key identifier: 75:EE:9D:C6:68:FB:AB:53:33:3F:7C:98:62:96:BE:43:0E:01:C5:07 Authority key identifier: 9D:D6:62:60:62:28:6D:29:4F:A4:AD:16:E7:41:9F:43:57:AE:AE:AF Certificate issuer: /CN=70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a Certificate serial: 010D0C9F4328584BA48AE113709988FD8D96B580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft Manifest number: 010D0C9F432858417AB730F8E74F05DEEF8800B4 Signing time: Sat 25 Oct 2025 21:00:03 +0000 Manifest this update: Sat 25 Oct 2025 21:00:03 +0000 Manifest next update: Tue 28 Oct 2025 21:00:00 +0000 Files and hashes: 1: 2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer (hash: oKFRG507nPxoesYRah53femZUEV4xGD7EG9gbtaOMo8=) 2: 70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl (hash: lK3uVLy4a79tvHUCxKh9PUGt3c7C199myvOj80TsNxE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a4:8a:e1:13:70:99:88:fd:8d:96:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a Validity Not Before: Oct 25 21:00:03 2025 GMT Not After : Oct 28 21:00:00 2025 GMT Subject: CN=b1794bd1-ff0e-470b-8f32-650cbef980f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:bf:8d:7e:43:73:df:aa:df:f0:38:6f:1d:6f: b4:f6:92:4d:c0:fe:2a:37:ec:0e:b4:2b:0e:fc:32: 06:27:1e:2b:f2:4d:49:d6:ed:ae:50:b4:9a:de:e8: 61:a1:9f:99:cd:be:40:3d:89:c5:19:38:d0:32:c2: 3f:4c:e2:c7:6d:6f:a4:58:01:a7:1e:ef:58:6b:81: cb:26:7d:5d:11:52:15:28:0b:f4:93:ba:db:ec:dc: 93:68:2a:24:0d:06:c0:87:8d:be:be:d5:fb:eb:9b: e4:d5:0d:c7:60:ee:c6:2e:a4:46:11:fa:a7:b8:64: 17:85:c9:cb:62:b5:80:40:d1:23:58:67:37:e8:a7: 30:3e:18:5d:b8:2f:f3:cc:7c:8c:45:47:59:dd:ab: 14:25:0b:17:16:15:9a:2c:63:0c:25:ef:80:d0:2e: dd:bc:8c:b8:3d:ae:7b:5e:e0:32:ae:18:7d:95:ef: f1:66:58:bf:1d:b9:f4:b1:2a:0e:7a:43:53:e6:ad: 1a:12:e3:0e:7c:68:20:75:60:44:b0:2c:df:b6:d6: c8:b3:c1:1b:9b:be:cd:f2:ce:d5:6f:5a:d2:5a:92: 6b:f3:9e:75:87:a0:d7:f7:32:bb:c3:6b:6e:76:45: c1:1f:9f:2e:1e:b5:9c:1d:ec:e6:3f:e1:f2:24:18: 19:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:EE:9D:C6:68:FB:AB:53:33:3F:7C:98:62:96:BE:43:0E:01:C5:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl X509v3 Authority Key Identifier: keyid:9D:D6:62:60:62:28:6D:29:4F:A4:AD:16:E7:41:9F:43:57:AE:AE:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:30:9e:f9:67:94:50:67:13:fd:fc:9e:1b:1d:b3:fb:b8:60: 43:d2:77:a1:a5:f0:17:cb:0f:89:79:dc:84:ab:37:12:42:25: e0:57:64:b8:3b:c2:94:66:3a:c7:20:1c:90:37:b5:49:c7:aa: 09:ec:6f:61:f8:d9:9c:33:57:c6:7b:04:41:9d:5e:58:06:1c: c2:6d:ef:7a:ef:d6:ce:cd:06:8d:f2:89:c3:78:86:07:41:8e: 2a:9a:b3:8c:d0:e8:08:94:4e:56:6b:6b:0d:59:6e:7d:d3:ef: 5e:bb:3e:d6:71:1b:eb:1d:e5:8f:f7:c7:d7:7c:fe:84:34:c7: c1:9f:f9:8f:46:35:4e:97:8c:15:7a:f8:ef:9f:aa:e8:5e:e9: 8f:4b:25:d4:9e:4e:da:a5:48:a7:7e:c4:1e:86:ac:35:c9:8e: 0f:01:4a:51:dc:13:94:77:6d:35:92:f9:2f:a4:ca:1c:15:d0: 08:ed:c7:53:10:fa:fd:fa:12:d8:e0:ac:23:ab:bd:16:ce:21: 10:df:48:79:4f:f4:c0:f6:37:cf:02:35:61:a2:d0:2f:e4:00: 78:d2:5c:e6:c6:88:d7:38:1d:09:b6:72:2b:c8:b0:ed:09:51: fd:d7:b9:97:95:de:51:9c:33:64:94:78:96:cc:c4:95:a7:f9: 20:8b:42:a6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEukiuETcJmI/Y2WtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBmNWQ4MGMtOWRhYS00ZjZmLThmNTgtMTgxYzVmMGM0 YjBhMB4XDTI1MTAyNTIxMDAwM1oXDTI1MTAyODIxMDAwMFowLzEtMCsGA1UEAxMk YjE3OTRiZDEtZmYwZS00NzBiLThmMzItNjUwY2JlZjk4MGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjL+NfkNz36rf8DhvHW+09pJNwP4qN+wOtCsO /DIGJx4r8k1J1u2uULSa3uhhoZ+Zzb5APYnFGTjQMsI/TOLHbW+kWAGnHu9Ya4HL Jn1dEVIVKAv0k7rb7NyTaCokDQbAh42+vtX765vk1Q3HYO7GLqRGEfqnuGQXhcnL YrWAQNEjWGc36KcwPhhduC/zzHyMRUdZ3asUJQsXFhWaLGMMJe+A0C7dvIy4Pa57 XuAyrhh9le/xZli/Hbn0sSoOekNT5q0aEuMOfGggdWBEsCzfttbIs8Ebm77N8s7V b1rSWpJr8551h6DX9zK7w2tudkXBH58uHrWcHezmP+HyJBgZMwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHXuncZo+6tTMz98mGKWvkMOAcUHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MGY1 ZDgwYy05ZGFhLTRmNmYtOGY1OC0xODFjNWYwYzRiMGEvNzBmNWQ4MGMtOWRhYS00 ZjZmLThmNTgtMTgxYzVmMGM0YjBhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzBmNWQ4MGMtOWRhYS00ZjZmLThm NTgtMTgxYzVmMGM0YjBhLzcwZjVkODBjLTlkYWEtNGY2Zi04ZjU4LTE4MWM1ZjBj NGIwYS5jcmwwHwYDVR0jBBgwFoAUndZiYGIobSlPpK0W50GfQ1eurq8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83MGY1ZDgwYy05ZGFhLTRmNmYtOGY1OC0xODFj NWYwYzRiMGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCRMJ75Z5RQZxP9/J4bHbP7 uGBD0nehpfAXyw+JedyEqzcSQiXgV2S4O8KUZjrHIByQN7VJx6oJ7G9h+NmcM1fG ewRBnV5YBhzCbe9679bOzQaN8onDeIYHQY4qmrOM0OgIlE5Wa2sNWW590+9euz7W cRvrHeWP98fXfP6ENMfBn/mPRjVOl4wVevjvn6roXumPSyXUnk7apUinfsQehqw1 yY4PAUpR3BOUd201kvkvpMocFdAI7cdTEPr9+hLY4Kwjq70WziEQ30h5T/TA9jfP AjVhotAv5AB40lzmxojXOB0JtnIryLDtCVH917mXld5RnDNklHiWzMSVp/kgi0Km -----END CERTIFICATE-----Generated at Sat Oct 25 23:14:01 2025 by rpki-client