$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.mft File: 70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.mft (raw, json) Hash identifier: 9lUTAPL9wL7CPVSO27pWWo6VJOzKlCaPoflQS+bMnbM= Subject key identifier: 39:3F:80:64:2D:7B:12:FE:83:C1:63:7A:3D:44:85:EE:3A:6F:9F:FB Authority key identifier: 33:BC:06:60:55:7E:F9:2B:1A:FE:9F:02:E2:E6:F6:E8:AD:26:31:E0 Certificate issuer: /CN=70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f Certificate serial: 010D0C9F4328584B9677B17EDD2E05B057377C18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.mft Manifest number: 010D0C9F432858454085274C375F806199848E13 Signing time: Mon 20 Oct 2025 20:00:03 +0000 Manifest this update: Mon 20 Oct 2025 20:00:03 +0000 Manifest next update: Wed 22 Oct 2025 20:00:00 +0000 Files and hashes: 1: 51ba34f2-0f80-3a8b-802e-03a2afc487f5.roa (hash: Ds4KBeEt+TQQ3x0TITIwWNBsiCgcZHuYf9vVe0jvWZQ=) 2: 70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.crl (hash: dXQFBUpR4Iw8cMy6d63d5pb6xbTTA/1xUFiI7MDsqRo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:77:b1:7e:dd:2e:05:b0:57:37:7c:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f Validity Not Before: Oct 20 20:00:03 2025 GMT Not After : Oct 22 20:00:00 2025 GMT Subject: CN=f2aacbc8-e4d9-4ca7-8fcd-7055fded069c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1d:73:70:49:a3:fb:45:8a:22:8a:81:6d:7d: 62:be:47:0e:4c:2c:e2:97:90:37:59:0c:7b:42:a7: f1:42:1b:29:e4:57:74:7b:ed:98:f5:4f:56:4b:dc: 53:4b:23:76:ca:aa:3b:e8:0d:2b:41:7e:7e:19:f7: 06:66:94:3f:42:cb:08:0a:3b:41:5a:30:34:c6:29: 8a:d5:72:f3:5a:d5:63:b7:d7:12:06:52:ad:78:2b: 07:5c:0c:c6:17:70:58:7f:d7:89:71:2e:08:95:a7: 41:4d:fd:5f:d9:70:bd:ca:51:f6:48:a9:27:a4:1f: 83:ad:6f:1f:ea:3e:63:61:d1:15:e7:44:70:4d:17: a5:9f:66:9a:00:ab:27:6d:d9:32:97:ca:c5:8f:6a: 89:87:07:43:3f:f4:9e:19:a1:83:b4:bc:b1:70:82: 3d:eb:98:54:14:20:43:03:93:f6:4a:06:2b:c4:ff: dc:98:9a:48:2d:31:b2:65:ae:ec:e6:07:5a:17:26: ad:65:d7:e6:76:d0:a6:0d:68:bd:b4:34:ae:51:71: 4a:62:20:4b:25:cd:fb:d9:59:ba:3f:52:66:5e:56: 3a:cc:92:e8:70:bb:4e:da:08:40:d6:f8:98:4e:00: f8:da:20:b9:d9:d0:ca:38:52:06:2c:0c:bd:c8:58: 36:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:3F:80:64:2D:7B:12:FE:83:C1:63:7A:3D:44:85:EE:3A:6F:9F:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.crl X509v3 Authority Key Identifier: keyid:33:BC:06:60:55:7E:F9:2B:1A:FE:9F:02:E2:E6:F6:E8:AD:26:31:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:e7:45:bf:23:3d:ef:2b:d6:76:83:c0:b3:ef:ca:d2:5e:c8: 74:a5:ff:db:6e:eb:14:45:82:73:6d:e2:f8:50:b7:17:a8:3f: 9b:28:6d:06:f8:88:dc:a3:75:e5:0e:45:88:aa:d1:f0:18:2b: 76:f7:fd:61:fd:72:66:b8:29:7d:3f:cc:dd:73:cb:20:f9:f9: f8:26:14:8c:ff:ed:28:3e:7f:97:07:a3:6f:48:e7:17:3b:e0: 5a:54:ea:f3:72:69:c4:d1:6a:d0:47:07:84:51:1f:82:93:c7: 87:fc:4a:56:52:e6:dd:41:f2:bf:72:e0:9b:61:9c:7d:93:85: 3f:ac:d7:78:23:d9:47:d3:d2:24:62:41:ea:95:c7:9b:63:2c: 7e:bd:bb:82:98:20:71:7b:b2:5c:ac:2a:3a:d2:1d:37:4c:07: 99:79:bc:07:87:59:1e:91:70:7f:0b:40:0a:47:fe:9e:14:63: 55:6a:9d:21:c5:80:f4:5d:c9:ba:49:8f:15:22:48:b9:34:9b: c7:b0:4a:e1:9b:db:4a:32:82:77:24:6b:a5:d4:9d:87:ba:f2: aa:0f:a4:cb:83:60:2e:8a:35:cf:39:66:4c:36:32:94:81:a0: b9:1d:71:2d:97:d0:ae:99:f1:48:3c:0a:26:f6:cb:9f:c8:7a: 47:13:4f:f8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWd7F+3S4FsFc3fBgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBjMWJmNjgtOWRjOS00ZDBmLWExN2ItM2QwZjg0NWJi ZDBmMB4XDTI1MTAyMDIwMDAwM1oXDTI1MTAyMjIwMDAwMFowLzEtMCsGA1UEAxMk ZjJhYWNiYzgtZTRkOS00Y2E3LThmY2QtNzA1NWZkZWQwNjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApx1zcEmj+0WKIoqBbX1ivkcOTCzil5A3WQx7 QqfxQhsp5Fd0e+2Y9U9WS9xTSyN2yqo76A0rQX5+GfcGZpQ/QssICjtBWjA0ximK 1XLzWtVjt9cSBlKteCsHXAzGF3BYf9eJcS4IladBTf1f2XC9ylH2SKknpB+DrW8f 6j5jYdEV50RwTReln2aaAKsnbdkyl8rFj2qJhwdDP/SeGaGDtLyxcII965hUFCBD A5P2SgYrxP/cmJpILTGyZa7s5gdaFyatZdfmdtCmDWi9tDSuUXFKYiBLJc372Vm6 P1JmXlY6zJLocLtO2ghA1viYTgD42iC52dDKOFIGLAy9yFg2VwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDk/gGQtexL+g8Fjej1Ehe46b5/7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83MGMx YmY2OC05ZGM5LTRkMGYtYTE3Yi0zZDBmODQ1YmJkMGYvNzBjMWJmNjgtOWRjOS00 ZDBmLWExN2ItM2QwZjg0NWJiZDBmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzBjMWJmNjgtOWRjOS00ZDBmLWEx N2ItM2QwZjg0NWJiZDBmLzcwYzFiZjY4LTlkYzktNGQwZi1hMTdiLTNkMGY4NDVi YmQwZi5jcmwwHwYDVR0jBBgwFoAUM7wGYFV++Ssa/p8C4ub26K0mMeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83MGMxYmY2OC05ZGM5LTRkMGYtYTE3Yi0zZDBm ODQ1YmJkMGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAn50W/Iz3vK9Z2g8Cz78rS Xsh0pf/bbusURYJzbeL4ULcXqD+bKG0G+Ijco3XlDkWIqtHwGCt29/1h/XJmuCl9 P8zdc8sg+fn4JhSM/+0oPn+XB6NvSOcXO+BaVOrzcmnE0WrQRweEUR+Ck8eH/EpW UubdQfK/cuCbYZx9k4U/rNd4I9lH09IkYkHqlcebYyx+vbuCmCBxe7JcrCo60h03 TAeZebwHh1kekXB/C0AKR/6eFGNVap0hxYD0Xcm6SY8VIki5NJvHsErhm9tKMoJ3 JGul1J2HuvKqD6TLg2AuijXPOWZMNjKUgaC5HXEtl9CumfFIPAom9sufyHpHE0/4 -----END CERTIFICATE-----Generated at Tue Oct 21 15:49:50 2025 by rpki-client