$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft File: 70ddad33-55eb-4125-9221-0129168a645b.mft (raw, json) Hash identifier: dNdquwnkg+oxuCirZ2U2Bs6DAWpmunAEXGWYVaV2RuY= Subject key identifier: D0:6E:33:A9:C1:BF:92:AE:81:96:6A:99:AA:04:00:4E:B9:E6:5F:96 Authority key identifier: 7F:4C:A4:22:A3:CB:BB:A5:D6:77:9C:25:01:F3:7F:E5:D9:0E:B4:BD Certificate issuer: /CN=70ddad33-55eb-4125-9221-0129168a645b Certificate serial: 010D0C9F4328584B95897634E541A7C67F8A3E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft Manifest number: 010D0C9F43285841E951957BE6B52702362300D6 Signing time: Mon 20 Oct 2025 12:00:03 +0000 Manifest this update: Mon 20 Oct 2025 12:00:03 +0000 Manifest next update: Wed 22 Oct 2025 12:00:00 +0000 Files and hashes: 1: 41138728-4b0a-33e7-a5bd-ea7cb42a601e.roa (hash: CYuF6kVAnzfl1Nd2lGeaT0RTIDI0OVk2yBtnlhJJpvk=) 2: 70ddad33-55eb-4125-9221-0129168a645b.crl (hash: X3ngVmSpk6ckSMB3Pa6jI1on2ySBkXYiJAMDZZKC5FM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:89:76:34:e5:41:a7:c6:7f:8a:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70ddad33-55eb-4125-9221-0129168a645b Validity Not Before: Oct 20 12:00:03 2025 GMT Not After : Oct 22 12:00:00 2025 GMT Subject: CN=e6ec9c6b-3581-49fc-9ae2-fd3cb40645e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d6:74:a0:d0:f8:6e:1e:e9:59:66:cf:e7:4d: dc:cb:4b:61:37:69:85:7b:e7:a0:a6:bd:4a:6a:88: b0:44:73:de:df:9d:8a:57:11:c8:4a:8c:80:84:0b: 03:69:e8:b9:ee:db:b0:c9:a7:2d:44:44:ee:fd:02: b3:e6:c8:b4:21:64:4a:f9:9c:30:fc:14:2f:ae:68: cb:d6:c3:f6:0a:48:81:44:74:75:83:e3:59:dc:f5: f1:11:6f:8c:93:d4:a3:3f:d3:d7:22:fd:6b:73:9c: 30:92:05:b0:fb:6a:5a:18:c2:6f:9b:48:9f:7d:50: 47:31:8f:44:fb:45:fe:8c:60:12:1e:93:5d:b9:27: d7:83:89:21:6d:27:77:f9:16:26:65:fd:b6:3a:38: d3:9f:fa:05:28:0c:34:b2:c3:b2:7e:f0:12:3e:67: 31:82:96:38:85:48:1c:6e:dc:75:69:8a:7f:2c:73: 34:00:b5:a3:32:11:ff:aa:31:15:3d:39:ff:d5:0e: 26:df:e8:78:29:76:b2:75:d0:eb:5e:f9:8b:c6:e6: f6:c4:e4:21:56:45:e2:53:f5:97:44:84:16:f8:9a: 98:03:d3:42:86:e3:68:52:90:98:e6:6b:71:e1:e9: e7:04:5c:87:bf:82:8d:60:2f:ea:8e:11:b4:59:40: 03:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:6E:33:A9:C1:BF:92:AE:81:96:6A:99:AA:04:00:4E:B9:E6:5F:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.crl X509v3 Authority Key Identifier: keyid:7F:4C:A4:22:A3:CB:BB:A5:D6:77:9C:25:01:F3:7F:E5:D9:0E:B4:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:48:ab:3b:5d:26:32:de:15:25:7d:6f:15:2f:e1:ca:d8:22: c0:1e:7d:ea:58:4a:bd:a7:8b:10:ab:ca:cb:17:da:a4:b4:00: a2:97:9f:28:9d:60:c1:de:bf:30:8d:64:1a:73:7e:fe:4d:66: f9:60:86:5d:64:a1:e9:c1:97:7f:44:40:c4:b8:ac:f4:09:00: 6b:96:63:9a:ee:e7:12:f2:26:35:f8:91:68:80:b7:15:10:14: 44:18:08:60:b9:af:31:ce:50:6a:55:6c:5a:fd:b0:b8:59:b4: 51:43:fc:94:40:fd:40:26:3b:ca:26:38:05:3d:6a:d1:5c:4d: ba:dc:cc:f1:38:0d:83:5d:bd:e3:4f:28:bb:a8:6e:c3:e9:33: 62:01:df:93:a9:4a:02:b2:51:1f:18:d4:1b:64:d8:2f:4a:c7: 1d:ba:15:52:10:56:97:3d:84:d1:96:de:9e:aa:17:43:3f:8d: 42:6e:09:8c:e1:b3:d9:bc:3c:ce:a9:ba:e3:49:fe:d1:7c:1d: f1:d2:a5:dd:4e:60:c5:da:a3:bb:7a:27:f8:05:50:9f:7b:ec: 6e:d3:39:bc:26:2a:14:21:54:c7:10:c1:d7:1a:2b:9d:6e:56: 78:4a:c4:1c:8e:e3:9a:dc:13:96:36:5b:0e:02:2d:5f:45:29: b8:48:f3:ce -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuViXY05UGnxn+KPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBkZGFkMzMtNTVlYi00MTI1LTkyMjEtMDEyOTE2OGE2 NDViMB4XDTI1MTAyMDEyMDAwM1oXDTI1MTAyMjEyMDAwMFowLzEtMCsGA1UEAxMk ZTZlYzljNmItMzU4MS00OWZjLTlhZTItZmQzY2I0MDY0NWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdZ0oND4bh7pWWbP503cy0thN2mFe+egpr1K aoiwRHPe352KVxHISoyAhAsDaei57tuwyactRETu/QKz5si0IWRK+Zww/BQvrmjL 1sP2CkiBRHR1g+NZ3PXxEW+Mk9SjP9PXIv1rc5wwkgWw+2paGMJvm0iffVBHMY9E +0X+jGASHpNduSfXg4khbSd3+RYmZf22OjjTn/oFKAw0ssOyfvASPmcxgpY4hUgc btx1aYp/LHM0ALWjMhH/qjEVPTn/1Q4m3+h4KXayddDrXvmLxub2xOQhVkXiU/WX RIQW+JqYA9NChuNoUpCY5mtx4ennBFyHv4KNYC/qjhG0WUADrQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNBuM6nBv5KugZZqmaoEAE655l+WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MGRk YWQzMy01NWViLTQxMjUtOTIyMS0wMTI5MTY4YTY0NWIvNzBkZGFkMzMtNTVlYi00 MTI1LTkyMjEtMDEyOTE2OGE2NDViLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzBkZGFkMzMtNTVlYi00MTI1LTky MjEtMDEyOTE2OGE2NDViLzcwZGRhZDMzLTU1ZWItNDEyNS05MjIxLTAxMjkxNjhh NjQ1Yi5jcmwwHwYDVR0jBBgwFoAUf0ykIqPLu6XWd5wlAfN/5dkOtL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83MGRkYWQzMy01NWViLTQxMjUtOTIyMS0wMTI5 MTY4YTY0NWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAfSKs7XSYy3hUlfW8VL+HK 2CLAHn3qWEq9p4sQq8rLF9qktACil58onWDB3r8wjWQac37+TWb5YIZdZKHpwZd/ REDEuKz0CQBrlmOa7ucS8iY1+JFogLcVEBREGAhgua8xzlBqVWxa/bC4WbRRQ/yU QP1AJjvKJjgFPWrRXE263MzxOA2DXb3jTyi7qG7D6TNiAd+TqUoCslEfGNQbZNgv SscduhVSEFaXPYTRlt6eqhdDP41CbgmM4bPZvDzOqbrjSf7RfB3x0qXdTmDF2qO7 eif4BVCfe+xu0zm8JioUIVTHEMHXGiudblZ4SsQcjuOa3BOWNlsOAi1fRSm4SPPO -----END CERTIFICATE-----Generated at Tue Oct 21 07:33:53 2025 by rpki-client