$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft File: 704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft (raw, json) Hash identifier: NGDxIdaSONSHIpkSeQwLZ06RYO1n4LziH3y/QUzM5dw= Subject key identifier: 6C:02:87:ED:7D:26:19:C4:3A:00:40:E6:B0:1A:56:29:6B:12:3C:A8 Authority key identifier: 52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97 Certificate issuer: /CN=704a761f-b71a-4fa2-b0e7-db5278e23dc3 Certificate serial: 010D0C9F4328584AF34471C0762228ED1B1D0700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft Manifest number: 010D0C9F4328584073A84BBB6D274A47E1440318 Signing time: Sat 23 Aug 2025 09:00:03 +0000 Manifest this update: Sat 23 Aug 2025 09:00:03 +0000 Manifest next update: Tue 26 Aug 2025 09:00:00 +0000 Files and hashes: 1: 704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl (hash: fPjMwDXwSv0CRByoQGxbL9glLcQlgVQT27iOeHsZdvA=) 2: e6965540-cbd0-3930-b638-a04886e69eac.roa (hash: ffGr4uxp8vkCiGpi9+hqxsLsQDU63DeqGcWpnRiMg1g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f3:44:71:c0:76:22:28:ed:1b:1d:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=704a761f-b71a-4fa2-b0e7-db5278e23dc3 Validity Not Before: Aug 23 09:00:03 2025 GMT Not After : Aug 26 09:00:00 2025 GMT Subject: CN=14d68794-e787-4283-9d7e-112ea8e032ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5c:b0:2e:bb:d1:fc:cc:d9:94:ba:65:96:92: 4a:50:3b:bf:dc:ac:83:fb:ed:88:1c:38:ea:f6:a0: 94:3e:46:73:00:94:39:4d:dc:05:0d:1f:a3:27:42: 85:96:de:75:a2:b4:b0:bf:16:91:fc:ec:0a:26:53: 89:da:4d:9b:3f:32:5c:8e:46:49:6a:b7:5c:c8:56: 7f:23:fd:85:a4:c3:13:00:43:b0:3b:b2:7f:3c:7e: b5:c1:54:d0:c3:cf:12:19:ee:0b:8d:ae:51:bd:bd: 2b:bb:67:0b:e3:af:51:75:50:c3:15:ae:04:9e:29: f8:f9:b5:ee:e2:97:4b:31:5a:c3:60:22:41:13:4a: a8:0b:14:43:88:ee:f6:c2:24:0c:32:60:ed:cd:45: 18:fc:a5:ef:3a:a1:86:ca:a3:67:44:8b:c2:9f:f8: cd:78:7f:58:41:8f:c1:e1:6c:99:3b:3c:56:bb:06: e6:7e:e3:f8:8c:67:94:c4:3a:97:90:d1:29:e1:f6: 24:41:45:65:ac:4d:2d:7f:5c:19:e0:a7:e4:a9:60: ee:03:4a:63:0b:a0:33:1f:c2:48:3f:24:b0:2a:fe: b8:2e:5f:c5:99:7b:25:33:14:ae:d3:d4:c6:a0:29: 08:4c:f4:88:5f:06:bb:42:8b:8f:10:a5:b9:2d:e9: df:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:02:87:ED:7D:26:19:C4:3A:00:40:E6:B0:1A:56:29:6B:12:3C:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl X509v3 Authority Key Identifier: keyid:52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:e1:97:a8:97:a0:7b:d9:b7:e9:c0:ab:7c:03:39:8d:aa:84: a7:07:6c:bf:9d:ff:87:66:f3:c1:be:58:56:3e:1a:90:5d:65: d8:8c:0a:95:2a:0a:37:ee:47:85:19:1e:9e:22:9c:7f:90:0e: 24:8d:96:c8:3a:7c:4c:84:68:b5:b3:7a:a8:14:0b:22:5a:90: e4:56:bf:e3:6e:6f:e7:4f:ae:84:1c:f4:d2:fe:c0:d3:5c:b2: e4:64:40:2f:c6:f3:1d:dd:7e:73:a0:92:35:98:ee:ee:ef:02: f8:0b:bc:c4:6b:ab:51:4c:24:18:6c:66:b7:3d:24:4a:4a:e2: 3f:5e:c9:8f:c9:b7:da:7b:ec:82:61:2a:af:2d:e6:15:39:7e: 03:1e:13:64:a7:8e:5b:9d:41:0f:2b:62:61:33:c6:9f:68:f7: 5b:64:c6:50:88:a5:f1:a0:fe:93:0f:39:53:3b:d5:97:94:65: 4d:55:13:6a:f4:b9:b8:da:be:35:a7:12:f7:2f:21:ff:17:97: 3e:d1:7c:25:59:13:14:bf:73:f8:15:b5:a3:d9:6e:ac:89:95: f2:c4:51:5c:89:8c:d8:3f:31:d4:47:cb:31:8f:c9:f3:86:70: e0:57:20:0f:fd:b4:ca:26:55:c5:9a:9f:67:c1:f9:30:08:cb: 4e:49:dc:24 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErzRHHAdiIo7RsdBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA0YTc2MWYtYjcxYS00ZmEyLWIwZTctZGI1Mjc4ZTIz ZGMzMB4XDTI1MDgyMzA5MDAwM1oXDTI1MDgyNjA5MDAwMFowLzEtMCsGA1UEAxMk MTRkNjg3OTQtZTc4Ny00MjgzLTlkN2UtMTEyZWE4ZTAzMmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVywLrvR/MzZlLpllpJKUDu/3KyD++2IHDjq 9qCUPkZzAJQ5TdwFDR+jJ0KFlt51orSwvxaR/OwKJlOJ2k2bPzJcjkZJardcyFZ/ I/2FpMMTAEOwO7J/PH61wVTQw88SGe4Lja5Rvb0ru2cL469RdVDDFa4Enin4+bXu 4pdLMVrDYCJBE0qoCxRDiO72wiQMMmDtzUUY/KXvOqGGyqNnRIvCn/jNeH9YQY/B 4WyZOzxWuwbmfuP4jGeUxDqXkNEp4fYkQUVlrE0tf1wZ4KfkqWDuA0pjC6AzH8JI PySwKv64Ll/FmXslMxSu09TGoCkITPSIXwa7QouPEKW5LenfgwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGwCh+19JhnEOgBA5rAaVilrEjyoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDRh NzYxZi1iNzFhLTRmYTItYjBlNy1kYjUyNzhlMjNkYzMvNzA0YTc2MWYtYjcxYS00 ZmEyLWIwZTctZGI1Mjc4ZTIzZGMzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzA0YTc2MWYtYjcxYS00ZmEyLWIw ZTctZGI1Mjc4ZTIzZGMzLzcwNGE3NjFmLWI3MWEtNGZhMi1iMGU3LWRiNTI3OGUy M2RjMy5jcmwwHwYDVR0jBBgwFoAUUi3Wa4cFBpviRD6NQcu1N8w4MZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MDRhNzYxZi1iNzFhLTRmYTItYjBlNy1kYjUy NzhlMjNkYzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAQ4Zeol6B72bfpwKt8AzmN qoSnB2y/nf+HZvPBvlhWPhqQXWXYjAqVKgo37keFGR6eIpx/kA4kjZbIOnxMhGi1 s3qoFAsiWpDkVr/jbm/nT66EHPTS/sDTXLLkZEAvxvMd3X5zoJI1mO7u7wL4C7zE a6tRTCQYbGa3PSRKSuI/XsmPybfae+yCYSqvLeYVOX4DHhNkp45bnUEPK2JhM8af aPdbZMZQiKXxoP6TDzlTO9WXlGVNVRNq9Lm42r41pxL3LyH/F5c+0XwlWRMUv3P4 FbWj2W6siZXyxFFciYzYPzHUR8sxj8nzhnDgVyAP/bTKJlXFmp9nwfkwCMtOSdwk -----END CERTIFICATE-----Generated at Sat Aug 23 20:00:11 2025 by rpki-client