$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft File: 70ddad33-55eb-4125-9221-0129168a645b.mft (raw, json) Hash identifier: pV684PtL1q1+LHZDYV0PaWXH2ogh229ww6ylmkP5mq0= Subject key identifier: 41:0D:0D:13:88:45:32:4C:BD:6E:FC:0C:D1:A3:F5:84:16:9B:A9:23 Authority key identifier: 7F:4C:A4:22:A3:CB:BB:A5:D6:77:9C:25:01:F3:7F:E5:D9:0E:B4:BD Certificate issuer: /CN=70ddad33-55eb-4125-9221-0129168a645b Certificate serial: 010D0C9F4328584A627241185F2311B30BAFB8E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft Manifest number: 010D0C9F43285841E951957BE6B5270236230066 Signing time: Wed 02 Jul 2025 12:00:08 +0000 Manifest this update: Wed 02 Jul 2025 12:00:08 +0000 Manifest next update: Fri 04 Jul 2025 12:00:00 +0000 Files and hashes: 1: 41138728-4b0a-33e7-a5bd-ea7cb42a601e.roa (hash: k6VCt9U3Ia1tS+jpI9HztpcllCf7X+gYlS/eMcGWTLQ=) 2: 70ddad33-55eb-4125-9221-0129168a645b.crl (hash: dsOzQTSLqX4LzpECk8mws5z1rrihxCUr3dtSaGo+KAo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:72:41:18:5f:23:11:b3:0b:af:b8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70ddad33-55eb-4125-9221-0129168a645b Validity Not Before: Jul 2 12:00:08 2025 GMT Not After : Jul 4 12:00:00 2025 GMT Subject: CN=50e5fa2b-9264-4acf-87b7-b3f6067999c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:57:29:a5:49:e6:04:bc:ca:c6:c2:f4:02:79: 81:4d:dd:5d:79:a3:a8:73:58:f6:12:d5:4d:e1:cf: 79:05:44:b4:42:bf:a6:7d:0b:fa:b7:80:90:c1:09: ac:a3:53:c8:36:b2:09:21:49:0b:3a:0d:87:d4:02: 70:89:dc:6b:d9:55:cb:eb:87:d2:9b:08:43:7c:a6: c0:a6:34:c9:a6:f7:cf:5e:bc:65:48:78:d4:80:92: d5:34:17:2c:99:dd:35:b1:b0:a9:65:4e:21:1c:34: cd:a2:35:ab:92:45:52:f0:fd:7f:e8:d1:26:07:59: 08:b4:88:3f:0e:be:95:1a:2a:03:1e:f8:b9:50:27: 3f:85:4a:d4:03:6b:e1:f3:77:14:29:45:cd:f1:9f: b0:38:5f:34:8d:a8:0e:23:58:0c:50:1a:af:9e:8d: a5:ba:93:83:24:5c:02:6b:16:28:f2:6e:41:13:1e: 0f:d2:77:33:0e:ec:e4:a5:26:b8:cb:d5:c2:a9:6e: ff:52:7d:1d:68:d9:d3:ce:de:a7:ab:e8:3b:a2:49: 19:d1:6d:7b:03:d2:67:b3:5b:d7:d8:b7:94:d8:df: fb:81:4e:4c:59:23:db:5e:cc:d9:54:03:db:bd:a8: 0b:2f:3b:c7:59:7b:74:2f:5c:a7:13:b3:a7:12:76: 0a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:0D:0D:13:88:45:32:4C:BD:6E:FC:0C:D1:A3:F5:84:16:9B:A9:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.crl X509v3 Authority Key Identifier: keyid:7F:4C:A4:22:A3:CB:BB:A5:D6:77:9C:25:01:F3:7F:E5:D9:0E:B4:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:71:d2:f5:6c:7f:1d:3b:0f:e9:1b:0e:c4:4c:a8:5e:73:d9: a3:75:84:46:d9:d3:c9:e4:ff:48:c2:4f:5c:62:c1:9b:21:f1: 11:fb:c8:0e:dd:76:3b:c2:af:5c:00:21:9b:9c:69:e0:42:3a: 72:31:dc:ea:8a:31:a5:ff:23:6a:c0:f8:07:43:1a:e4:38:86: 1a:c1:02:fe:ff:f0:dc:5b:5c:41:1a:03:f3:65:b4:7e:97:aa: 67:23:6a:cf:2a:9a:d6:ce:4c:eb:94:ea:13:da:d8:cf:5f:36: f8:79:5b:f3:34:5a:97:f5:30:50:39:97:07:e3:bf:30:95:1d: ce:ee:2b:2e:98:3b:b4:0e:2b:1b:9d:01:d7:d3:56:cf:a4:07: 3d:7f:22:6e:65:7e:46:1c:90:5d:9d:e4:48:4a:b2:3c:ce:aa: 17:6d:0d:dd:b1:08:47:81:8b:9a:0a:36:ad:b2:69:b1:8b:4e: 1e:34:47:7b:92:91:65:a8:0b:fd:56:4c:fc:9f:99:76:cf:b9: 11:3a:cb:1c:bc:90:22:01:cd:6b:9e:c7:2a:c0:d0:88:9a:82: d9:a3:1e:81:a9:fd:0e:61:b2:12:d0:3a:d4:dd:e9:0e:29:7e: e2:9b:e9:16:2b:7b:cd:4e:62:3d:ee:de:92:83:3a:cb:ce:dc: d2:3a:b5:88 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpickEYXyMRswuvuOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBkZGFkMzMtNTVlYi00MTI1LTkyMjEtMDEyOTE2OGE2 NDViMB4XDTI1MDcwMjEyMDAwOFoXDTI1MDcwNDEyMDAwMFowLzEtMCsGA1UEAxMk NTBlNWZhMmItOTI2NC00YWNmLTg3YjctYjNmNjA2Nzk5OWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlcppUnmBLzKxsL0AnmBTd1deaOoc1j2EtVN 4c95BUS0Qr+mfQv6t4CQwQmso1PINrIJIUkLOg2H1AJwidxr2VXL64fSmwhDfKbA pjTJpvfPXrxlSHjUgJLVNBcsmd01sbCpZU4hHDTNojWrkkVS8P1/6NEmB1kItIg/ Dr6VGioDHvi5UCc/hUrUA2vh83cUKUXN8Z+wOF80jagOI1gMUBqvno2lupODJFwC axYo8m5BEx4P0nczDuzkpSa4y9XCqW7/Un0daNnTzt6nq+g7okkZ0W17A9Jns1vX 2LeU2N/7gU5MWSPbXszZVAPbvagLLzvHWXt0L1ynE7OnEnYKhQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEENDROIRTJMvW78DNGj9YQWm6kjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MGRk YWQzMy01NWViLTQxMjUtOTIyMS0wMTI5MTY4YTY0NWIvNzBkZGFkMzMtNTVlYi00 MTI1LTkyMjEtMDEyOTE2OGE2NDViLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzBkZGFkMzMtNTVlYi00MTI1LTky MjEtMDEyOTE2OGE2NDViLzcwZGRhZDMzLTU1ZWItNDEyNS05MjIxLTAxMjkxNjhh NjQ1Yi5jcmwwHwYDVR0jBBgwFoAUf0ykIqPLu6XWd5wlAfN/5dkOtL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83MGRkYWQzMy01NWViLTQxMjUtOTIyMS0wMTI5 MTY4YTY0NWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA0cdL1bH8dOw/pGw7ETKhe c9mjdYRG2dPJ5P9Iwk9cYsGbIfER+8gO3XY7wq9cACGbnGngQjpyMdzqijGl/yNq wPgHQxrkOIYawQL+//DcW1xBGgPzZbR+l6pnI2rPKprWzkzrlOoT2tjPXzb4eVvz NFqX9TBQOZcH478wlR3O7isumDu0DisbnQHX01bPpAc9fyJuZX5GHJBdneRISrI8 zqoXbQ3dsQhHgYuaCjatsmmxi04eNEd7kpFlqAv9Vkz8n5l2z7kROsscvJAiAc1r nscqwNCImoLZox6Bqf0OYbIS0DrU3ekOKX7im+kWK3vNTmI97t6SgzrLztzSOrWI -----END CERTIFICATE-----Generated at Wed Jul 2 13:05:47 2025 by rpki-client