$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft File: 70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft (raw, json) Hash identifier: GeLv7N83ioeUr34tNHzTArn9BLs6YFyoBpyAH/LW4L4= Subject key identifier: 44:04:C3:41:2A:11:3F:42:8B:A4:2B:71:DB:22:17:32:12:B5:2E:80 Authority key identifier: 9D:D6:62:60:62:28:6D:29:4F:A4:AD:16:E7:41:9F:43:57:AE:AE:AF Certificate issuer: /CN=70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a Certificate serial: 010D0C9F4328584B2154BA424212395D42BFC600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft Manifest number: 010D0C9F432858417AB730F8E74F05DEEF880085 Signing time: Mon 08 Sep 2025 21:00:03 +0000 Manifest this update: Mon 08 Sep 2025 21:00:03 +0000 Manifest next update: Wed 10 Sep 2025 21:00:00 +0000 Files and hashes: 1: 2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer (hash: oKFRG507nPxoesYRah53femZUEV4xGD7EG9gbtaOMo8=) 2: 70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl (hash: PZL4/IF5uq9qCr66skDnfEKyVHk8C+Sd5wBkf+52ayE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:54:ba:42:42:12:39:5d:42:bf:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a Validity Not Before: Sep 8 21:00:03 2025 GMT Not After : Sep 10 21:00:00 2025 GMT Subject: CN=9c0cf68c-dfde-43f9-aa96-b40aa4231578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a3:6b:d5:bf:15:d0:9a:d3:ba:70:c8:4e:40: 17:b8:6b:63:31:0c:a8:45:03:b9:e1:47:64:ce:ad: 07:20:ab:0f:d6:c6:fd:88:25:02:a6:99:9d:6f:55: 94:06:c4:31:16:8b:16:b3:f2:68:26:6d:31:b4:9d: e8:8a:e2:db:8d:20:08:de:a7:41:81:96:5e:f7:c7: ee:71:89:aa:2b:fa:85:16:aa:95:db:fd:48:82:a5: 90:43:dd:f9:72:de:0b:36:b5:27:90:72:9c:15:5b: d2:bb:46:d2:41:f5:67:9d:0d:bd:e4:fa:86:84:0e: 68:79:2a:a0:5c:51:39:aa:6c:97:42:7b:03:36:ed: f6:6e:59:39:07:92:d1:c0:37:48:07:51:82:c7:5a: 23:46:4d:d7:ef:6a:aa:c2:11:d5:34:05:e6:46:90: fd:14:f1:f0:86:32:da:a1:a6:31:a1:ad:a9:3f:34: 58:20:9f:02:21:d5:af:3d:7e:49:7c:d2:d3:df:2c: 15:6b:25:d8:dc:ca:3c:06:e5:53:85:eb:22:7d:ba: a4:e6:96:25:fa:6b:8c:29:5a:20:42:45:59:da:78: 45:f5:90:b0:f6:ad:8d:83:74:d4:01:04:6a:3e:02: 70:51:bc:a2:cf:e8:65:6b:bf:4c:aa:9d:7f:a4:00: 16:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:04:C3:41:2A:11:3F:42:8B:A4:2B:71:DB:22:17:32:12:B5:2E:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl X509v3 Authority Key Identifier: keyid:9D:D6:62:60:62:28:6D:29:4F:A4:AD:16:E7:41:9F:43:57:AE:AE:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:f7:06:d0:0e:2b:36:b1:28:01:1c:fd:6c:ea:e1:13:ac:6d: 8d:42:99:a4:16:ec:06:9d:b9:cc:00:75:c0:a4:0a:e8:06:ad: c4:61:66:9d:21:2f:9c:2b:a1:61:7a:bc:cc:fe:d2:b0:21:f0: 11:11:98:f4:f8:20:5f:cd:39:7d:1e:af:46:c3:86:52:3b:4a: ed:bb:c4:2a:e4:e8:fd:cb:4e:c1:92:07:cb:20:72:5d:4a:f8: 62:03:70:63:cc:75:77:b9:14:67:1a:76:03:13:70:07:79:c8: 6d:12:3b:af:44:65:32:38:61:6d:59:87:de:f4:0b:86:42:c8: 4e:ab:10:86:3e:00:a3:78:69:1f:fd:9b:d4:f4:ef:8c:cb:49: a4:83:0a:5d:e9:e9:f8:28:ac:ae:8f:c6:3b:83:53:c4:6a:16: 21:e7:dd:33:f0:43:f0:1c:1b:08:12:6e:fb:22:33:98:f1:17: 71:fd:21:2d:9f:43:70:33:2f:80:42:0e:fa:32:ff:70:8a:ab: 59:19:7d:18:39:d6:18:9f:d8:8b:fc:ba:da:54:31:18:8c:f5: 83:9a:91:f0:29:d5:33:6f:1b:a5:9c:65:9a:41:69:1d:57:59: a9:79:1c:80:94:23:e3:04:84:b0:c8:71:33:f1:99:82:1c:3d: c0:1d:28:d4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEshVLpCQhI5XUK/xgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBmNWQ4MGMtOWRhYS00ZjZmLThmNTgtMTgxYzVmMGM0 YjBhMB4XDTI1MDkwODIxMDAwM1oXDTI1MDkxMDIxMDAwMFowLzEtMCsGA1UEAxMk OWMwY2Y2OGMtZGZkZS00M2Y5LWFhOTYtYjQwYWE0MjMxNTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6Nr1b8V0JrTunDITkAXuGtjMQyoRQO54Udk zq0HIKsP1sb9iCUCppmdb1WUBsQxFosWs/JoJm0xtJ3oiuLbjSAI3qdBgZZe98fu cYmqK/qFFqqV2/1IgqWQQ935ct4LNrUnkHKcFVvSu0bSQfVnnQ295PqGhA5oeSqg XFE5qmyXQnsDNu32blk5B5LRwDdIB1GCx1ojRk3X72qqwhHVNAXmRpD9FPHwhjLa oaYxoa2pPzRYIJ8CIdWvPX5JfNLT3ywVayXY3Mo8BuVThesifbqk5pYl+muMKVog QkVZ2nhF9ZCw9q2Ng3TUAQRqPgJwUbyiz+hla79Mqp1/pAAW8QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEQEw0EqET9Ci6QrcdsiFzIStS6AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MGY1 ZDgwYy05ZGFhLTRmNmYtOGY1OC0xODFjNWYwYzRiMGEvNzBmNWQ4MGMtOWRhYS00 ZjZmLThmNTgtMTgxYzVmMGM0YjBhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzBmNWQ4MGMtOWRhYS00ZjZmLThm NTgtMTgxYzVmMGM0YjBhLzcwZjVkODBjLTlkYWEtNGY2Zi04ZjU4LTE4MWM1ZjBj NGIwYS5jcmwwHwYDVR0jBBgwFoAUndZiYGIobSlPpK0W50GfQ1eurq8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83MGY1ZDgwYy05ZGFhLTRmNmYtOGY1OC0xODFj NWYwYzRiMGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBP9wbQDis2sSgBHP1s6uET rG2NQpmkFuwGnbnMAHXApAroBq3EYWadIS+cK6FherzM/tKwIfAREZj0+CBfzTl9 Hq9Gw4ZSO0rtu8Qq5Oj9y07BkgfLIHJdSvhiA3BjzHV3uRRnGnYDE3AHechtEjuv RGUyOGFtWYfe9AuGQshOqxCGPgCjeGkf/ZvU9O+My0mkgwpd6en4KKyuj8Y7g1PE ahYh590z8EPwHBsIEm77IjOY8Rdx/SEtn0NwMy+AQg76Mv9wiqtZGX0YOdYYn9iL /LraVDEYjPWDmpHwKdUzbxulnGWaQWkdV1mpeRyAlCPjBISwyHEz8ZmCHD3AHSjU -----END CERTIFICATE-----Generated at Tue Sep 9 12:04:16 2025 by rpki-client