$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft File: 704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft (raw, json) Hash identifier: h+xl/NM/xROAYLMFMEsCjc32mE/bQVyb1zM1EpiWa+8= Subject key identifier: 2C:54:A8:C1:72:F6:2C:84:D0:04:9E:D3:CA:C4:B4:0E:E5:1A:CE:93 Authority key identifier: 52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97 Certificate issuer: /CN=704a761f-b71a-4fa2-b0e7-db5278e23dc3 Certificate serial: 010D0C9F4328584D88E890F1CC1F36883141D880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft Manifest number: 010D0C9F4328584073A84BBB6D274A47E144040A Signing time: Fri 17 Apr 2026 09:00:04 +0000 Manifest this update: Fri 17 Apr 2026 09:00:04 +0000 Manifest next update: Sun 19 Apr 2026 09:00:00 +0000 Files and hashes: 1: 704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl (hash: 4g2NacNuTgqbZyPx7OZticlPeEtZZoJBYq6nMELztvQ=) 2: e6965540-cbd0-3930-b638-a04886e69eac.roa (hash: fxcjnXBClhh3FFpBZAN4bQ7zbbyBWem6vOsg6KCdClo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:88:e8:90:f1:cc:1f:36:88:31:41:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=704a761f-b71a-4fa2-b0e7-db5278e23dc3 Validity Not Before: Apr 17 09:00:04 2026 GMT Not After : Apr 19 09:00:00 2026 GMT Subject: CN=02b7b3b4-812f-4db3-8c10-50ed8a485de2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fa:a6:b0:b1:46:04:7b:46:ac:59:ef:a6:47: 44:6b:d0:09:c0:06:62:bf:df:fd:8f:06:02:74:a5: 08:b6:aa:53:4c:94:9e:6f:89:b3:2a:14:79:db:20: b6:a3:b9:0e:f1:ce:23:4c:97:bf:dd:42:d3:b0:53: 90:e0:12:dc:28:96:60:b8:cf:57:b6:e5:83:df:2b: b8:d9:37:c3:5c:26:58:86:11:d4:14:d0:2c:a6:41: 93:34:42:44:89:eb:3d:7b:26:e9:be:97:40:d1:89: 24:f5:d5:29:80:14:c3:f9:46:a5:da:30:2d:ae:2f: 9c:48:a9:97:12:9e:f6:ec:2a:cb:22:77:db:72:63: e4:3d:5a:b3:df:80:86:44:7e:95:ff:9e:a8:c2:58: 39:aa:77:b1:d2:a7:e9:f1:c5:72:a0:2e:9f:e3:30: 25:20:23:e2:d7:07:c2:ae:11:0e:0d:17:c3:26:08: 3f:1d:90:94:da:c8:38:34:b0:1c:e2:18:3a:8f:9c: 64:be:93:c2:ae:1a:ef:28:42:f2:c9:13:38:f6:fc: 22:1f:cf:ac:77:52:76:4e:ae:ee:a2:68:64:c9:92: bb:31:03:c9:b4:62:40:60:6b:d3:dc:31:ac:08:c8: a6:01:15:6d:c0:91:cc:90:93:60:04:03:f6:29:eb: 49:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:54:A8:C1:72:F6:2C:84:D0:04:9E:D3:CA:C4:B4:0E:E5:1A:CE:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl X509v3 Authority Key Identifier: keyid:52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:45:37:df:75:67:0b:0c:2d:d0:ff:de:3c:32:82:9a:a9:de: 46:ed:9c:c6:0b:e3:20:31:b4:2e:bd:53:b7:e9:9c:a8:eb:ff: 89:70:f2:d1:a0:d4:30:fe:36:24:e7:fd:8d:ea:54:7f:c7:a1: 74:4e:15:9e:9a:b8:40:76:50:55:c6:88:90:c6:0e:ad:89:b5: 74:30:ae:de:b0:2e:bc:3c:c2:82:8d:5f:a0:98:d9:d0:2a:a9: 1b:a0:68:15:20:2c:32:c8:2b:c2:67:80:04:37:b4:93:d0:f1: 54:cd:b8:05:7e:a1:83:b5:cb:22:fd:83:58:3f:66:98:aa:67: 03:1f:45:98:1a:a1:1a:5c:3a:28:45:f4:da:ea:e0:61:82:87: aa:d5:1d:14:f4:fc:4c:db:b2:1c:79:22:b0:b2:93:19:28:f2: a3:19:ca:e7:9c:0c:39:c4:e0:e3:df:27:77:a3:64:2f:96:85: 73:ea:7e:cb:c8:17:89:a3:e7:2d:08:c5:2e:83:76:7d:82:8c: b3:0b:96:d1:98:64:78:0c:99:9c:6e:70:a6:7e:0b:c2:5b:85: 06:15:26:09:c7:e2:ff:60:5d:b7:d4:d2:f2:ca:e0:bd:b8:1a: ce:5e:7e:1d:56:fd:c0:da:ad:50:d6:b1:20:19:73:64:56:9f: fb:6f:cd:15 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2I6JDxzB82iDFB2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA0YTc2MWYtYjcxYS00ZmEyLWIwZTctZGI1Mjc4ZTIz ZGMzMB4XDTI2MDQxNzA5MDAwNFoXDTI2MDQxOTA5MDAwMFowLzEtMCsGA1UEAxMk MDJiN2IzYjQtODEyZi00ZGIzLThjMTAtNTBlZDhhNDg1ZGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPqmsLFGBHtGrFnvpkdEa9AJwAZiv9/9jwYC dKUItqpTTJSeb4mzKhR52yC2o7kO8c4jTJe/3ULTsFOQ4BLcKJZguM9XtuWD3yu4 2TfDXCZYhhHUFNAspkGTNEJEies9eybpvpdA0Ykk9dUpgBTD+Ual2jAtri+cSKmX Ep727CrLInfbcmPkPVqz34CGRH6V/56owlg5qnex0qfp8cVyoC6f4zAlICPi1wfC rhEODRfDJgg/HZCU2sg4NLAc4hg6j5xkvpPCrhrvKELyyRM49vwiH8+sd1J2Tq7u omhkyZK7MQPJtGJAYGvT3DGsCMimARVtwJHMkJNgBAP2KetJxQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCxUqMFy9iyE0ASe08rEtA7lGs6TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDRh NzYxZi1iNzFhLTRmYTItYjBlNy1kYjUyNzhlMjNkYzMvNzA0YTc2MWYtYjcxYS00 ZmEyLWIwZTctZGI1Mjc4ZTIzZGMzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzA0YTc2MWYtYjcxYS00ZmEyLWIw ZTctZGI1Mjc4ZTIzZGMzLzcwNGE3NjFmLWI3MWEtNGZhMi1iMGU3LWRiNTI3OGUy M2RjMy5jcmwwHwYDVR0jBBgwFoAUUi3Wa4cFBpviRD6NQcu1N8w4MZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MDRhNzYxZi1iNzFhLTRmYTItYjBlNy1kYjUy NzhlMjNkYzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBFRTffdWcLDC3Q/948MoKa qd5G7ZzGC+MgMbQuvVO36Zyo6/+JcPLRoNQw/jYk5/2N6lR/x6F0ThWemrhAdlBV xoiQxg6tibV0MK7esC68PMKCjV+gmNnQKqkboGgVICwyyCvCZ4AEN7ST0PFUzbgF fqGDtcsi/YNYP2aYqmcDH0WYGqEaXDooRfTa6uBhgoeq1R0U9PxM27IceSKwspMZ KPKjGcrnnAw5xODj3yd3o2QvloVz6n7LyBeJo+ctCMUug3Z9goyzC5bRmGR4DJmc bnCmfgvCW4UGFSYJx+L/YF231NLyyuC9uBrOXn4dVv3A2q1Q1rEgGXNkVp/7b80V -----END CERTIFICATE-----Generated at Fri Apr 17 13:50:07 2026 by rpki-client