$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft File: 70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft (raw, json) Hash identifier: OMqCsrKIEngA0yRt81snXkjKNSWtoC2h/Gi0M19D68g= Subject key identifier: EF:AC:83:7D:70:46:4A:DA:BD:71:40:87:97:ED:91:19:48:BB:32:D1 Authority key identifier: 9D:D6:62:60:62:28:6D:29:4F:A4:AD:16:E7:41:9F:43:57:AE:AE:AF Certificate issuer: /CN=70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a Certificate serial: 010D0C9F4328584A5853880FBACE96AFCFEB61C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft Manifest number: 010D0C9F432858417AB730F8E74F05DEEF880038 Signing time: Sat 28 Jun 2025 21:00:08 +0000 Manifest this update: Sat 28 Jun 2025 21:00:08 +0000 Manifest next update: Mon 30 Jun 2025 21:00:00 +0000 Files and hashes: 1: 2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer (hash: oKFRG507nPxoesYRah53femZUEV4xGD7EG9gbtaOMo8=) 2: 70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl (hash: x9XZhj4LHOWcXsc2bu5NI0bfm/KNGhv82DqZ9Tr6hcI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:53:88:0f:ba:ce:96:af:cf:eb:61:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a Validity Not Before: Jun 28 21:00:08 2025 GMT Not After : Jun 30 21:00:00 2025 GMT Subject: CN=8ec9a5b8-bb8a-4c9c-b4a0-d39797d162cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:4d:3b:44:52:de:20:dc:20:e5:f4:83:a6:84: ba:46:63:81:2b:70:5d:c7:8f:10:63:6b:64:50:99: 7b:c4:a6:20:2c:23:45:16:ee:3d:97:1b:68:47:44: 6a:33:87:d8:6f:a8:9a:e7:c2:c9:08:1f:51:8b:f8: 0c:78:4d:08:70:a1:cd:87:b8:c7:5b:99:97:16:e1: 85:36:f7:30:ce:57:9d:cf:a0:b5:f1:34:52:4d:2e: 24:84:ee:b6:b4:bc:5b:91:e8:6f:f3:e3:00:e0:29: 1c:06:82:53:50:50:1a:a7:75:ab:ac:d0:85:29:14: 1b:33:50:6c:31:e7:f9:8e:7b:5e:6a:39:05:ad:92: cf:45:f8:80:27:a2:44:ae:78:8c:fc:b1:cd:74:6e: 3b:bf:dc:09:4c:24:27:45:86:01:0f:89:bc:ce:97: 80:71:80:95:26:bc:06:44:a1:59:49:c7:95:c8:e5: fa:d3:e1:74:b7:7b:19:8e:10:bd:a2:dc:91:fc:20: 16:2d:5d:29:41:8e:b8:8e:12:bd:79:61:77:81:ac: fa:e5:ee:cd:98:c1:75:dc:d9:bc:17:23:2b:4c:4a: 05:d2:70:52:eb:9c:6c:6b:c3:04:15:c8:d1:3f:7a: 94:d1:cd:83:ac:88:94:eb:06:27:92:55:f7:3b:a5: 56:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:AC:83:7D:70:46:4A:DA:BD:71:40:87:97:ED:91:19:48:BB:32:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl X509v3 Authority Key Identifier: keyid:9D:D6:62:60:62:28:6D:29:4F:A4:AD:16:E7:41:9F:43:57:AE:AE:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:91:f1:d5:9c:5d:87:e7:2d:e1:6f:62:d2:d5:d2:15:5d:9d: 3e:b1:28:64:53:e2:9d:1a:51:5c:d5:a7:55:d2:20:28:5f:d1: 47:5f:06:af:56:73:60:31:e0:6c:c4:fc:79:8c:df:3b:03:94: 51:68:04:83:2d:f5:2c:3d:94:24:4a:44:e9:2e:61:ef:0a:84: ce:af:17:f5:17:3e:2a:76:48:90:d9:e2:7d:2f:a5:24:ea:51: bc:c5:eb:35:0d:a4:56:c2:2c:7c:e8:55:7b:10:c1:62:ee:4d: 40:93:9f:89:61:21:2e:82:d9:0c:26:55:bd:d7:02:06:c5:a1: 55:f9:bd:67:54:bb:fb:73:1c:03:f7:eb:14:e9:9f:73:f3:0f: fb:ea:3e:da:44:d9:d6:be:05:60:57:1b:a2:a1:19:4d:3e:cd: 46:72:9b:38:ce:b4:56:b5:24:6a:8f:6d:4b:39:c6:86:ef:74: 28:35:72:a6:93:d4:64:bf:2c:d8:19:29:73:e3:e3:79:a3:7f: f2:8e:2f:d2:c1:02:14:6f:a0:e6:c0:a1:dd:be:ab:84:52:db: 29:64:73:33:53:90:fc:08:21:80:17:b0:28:f1:4b:94:22:03: 54:08:8c:95:e0:ec:ac:00:79:50:33:3b:88:a3:d6:13:96:70: 58:a2:24:20 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpYU4gPus6Wr8/rYcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBmNWQ4MGMtOWRhYS00ZjZmLThmNTgtMTgxYzVmMGM0 YjBhMB4XDTI1MDYyODIxMDAwOFoXDTI1MDYzMDIxMDAwMFowLzEtMCsGA1UEAxMk OGVjOWE1YjgtYmI4YS00YzljLWI0YTAtZDM5Nzk3ZDE2MmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjk07RFLeINwg5fSDpoS6RmOBK3Bdx48QY2tk UJl7xKYgLCNFFu49lxtoR0RqM4fYb6ia58LJCB9Ri/gMeE0IcKHNh7jHW5mXFuGF Nvcwzledz6C18TRSTS4khO62tLxbkehv8+MA4CkcBoJTUFAap3WrrNCFKRQbM1Bs Mef5jnteajkFrZLPRfiAJ6JErniM/LHNdG47v9wJTCQnRYYBD4m8zpeAcYCVJrwG RKFZSceVyOX60+F0t3sZjhC9otyR/CAWLV0pQY64jhK9eWF3gaz65e7NmMF13Nm8 FyMrTEoF0nBS65xsa8MEFcjRP3qU0c2DrIiU6wYnklX3O6VWrwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFO+sg31wRkravXFAh5ftkRlIuzLRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MGY1 ZDgwYy05ZGFhLTRmNmYtOGY1OC0xODFjNWYwYzRiMGEvNzBmNWQ4MGMtOWRhYS00 ZjZmLThmNTgtMTgxYzVmMGM0YjBhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzBmNWQ4MGMtOWRhYS00ZjZmLThm NTgtMTgxYzVmMGM0YjBhLzcwZjVkODBjLTlkYWEtNGY2Zi04ZjU4LTE4MWM1ZjBj NGIwYS5jcmwwHwYDVR0jBBgwFoAUndZiYGIobSlPpK0W50GfQ1eurq8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83MGY1ZDgwYy05ZGFhLTRmNmYtOGY1OC0xODFj NWYwYzRiMGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAmkfHVnF2H5y3hb2LS1dIV XZ0+sShkU+KdGlFc1adV0iAoX9FHXwavVnNgMeBsxPx5jN87A5RRaASDLfUsPZQk SkTpLmHvCoTOrxf1Fz4qdkiQ2eJ9L6Uk6lG8xes1DaRWwix86FV7EMFi7k1Ak5+J YSEugtkMJlW91wIGxaFV+b1nVLv7cxwD9+sU6Z9z8w/76j7aRNnWvgVgVxuioRlN Ps1Gcps4zrRWtSRqj21LOcaG73QoNXKmk9RkvyzYGSlz4+N5o3/yji/SwQIUb6Dm wKHdvquEUtspZHMzU5D8CCGAF7Ao8UuUIgNUCIyV4OysAHlQMzuIo9YTlnBYoiQg -----END CERTIFICATE-----Generated at Sun Jun 29 18:20:51 2025 by rpki-client