$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft File: 704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft (raw, json) Hash identifier: c8q2CAaEhXtHzvXETEW/zrNZh/aFkw0DQ+350AncOgA= Subject key identifier: 9F:5C:E3:90:B8:1A:DC:55:14:0B:85:E0:20:D0:71:AD:69:D8:E3:5A Authority key identifier: 52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97 Certificate issuer: /CN=704a761f-b71a-4fa2-b0e7-db5278e23dc3 Certificate serial: 010D0C9F4328584D05B27682C1AB86180DAD5370 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft Manifest number: 010D0C9F4328584073A84BBB6D274A47E14403DB Signing time: Sun 01 Mar 2026 09:00:08 +0000 Manifest this update: Sun 01 Mar 2026 09:00:08 +0000 Manifest next update: Wed 04 Mar 2026 09:00:00 +0000 Files and hashes: 1: 704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl (hash: zSfG64IAJ7gYNTdeVC/0kaZrrkYgiSf6NWKztXCfwjE=) 2: e6965540-cbd0-3930-b638-a04886e69eac.roa (hash: fxcjnXBClhh3FFpBZAN4bQ7zbbyBWem6vOsg6KCdClo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:05:b2:76:82:c1:ab:86:18:0d:ad:53:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=704a761f-b71a-4fa2-b0e7-db5278e23dc3 Validity Not Before: Mar 1 09:00:08 2026 GMT Not After : Mar 4 09:00:00 2026 GMT Subject: CN=ce570fed-4309-49f2-aca5-424ecaab8558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a0:58:dd:a6:b8:0f:26:75:1b:67:08:a8:ea: dc:14:f9:1f:ea:69:d0:16:e5:07:c0:c3:bb:cf:cc: 95:56:81:6a:78:37:17:a6:19:a9:1b:51:6c:e2:15: 45:58:aa:e6:fc:cd:55:4e:e9:ba:c3:47:93:68:cc: 86:70:c2:ec:5e:82:9c:87:5a:68:41:75:4e:c5:e0: f5:15:50:1f:ed:f6:68:a6:55:9d:19:b7:87:a9:59: 9f:04:59:6f:46:87:24:cd:5f:be:c2:78:4f:1f:ee: 8d:53:52:72:37:8d:15:61:15:4a:5c:97:a3:c4:e0: ed:6b:8a:2c:85:92:7d:4c:23:ba:10:7a:41:26:9f: 21:75:aa:41:bc:43:b0:af:69:f6:ef:97:e3:e8:a5: c3:8e:a0:b5:ce:8d:80:2c:6a:34:6c:08:30:6f:a0: 70:28:69:3e:1c:20:48:69:84:ef:60:fa:6c:78:ce: c2:5e:b2:7d:97:2b:56:a8:f4:db:55:1e:42:1e:e2: a2:26:46:f6:13:ac:5a:09:f6:46:93:88:62:ac:54: ea:06:21:44:f2:ef:54:4e:fa:21:16:55:31:68:88: de:2b:de:36:19:ee:ed:7e:e2:3b:f0:3a:5c:3e:dd: 62:77:88:ae:20:87:de:2e:e3:65:23:9a:e7:de:66: 06:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:5C:E3:90:B8:1A:DC:55:14:0B:85:E0:20:D0:71:AD:69:D8:E3:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl X509v3 Authority Key Identifier: keyid:52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:36:2a:42:96:97:17:03:25:53:29:e2:f6:52:57:b8:e7:fb: b3:20:18:50:8e:ba:58:3c:c2:bd:0f:ea:ae:5a:b5:e7:e6:68: 7b:df:cf:d2:c3:eb:66:aa:3e:22:58:87:cb:11:c3:71:91:43: 90:e0:07:d1:6f:cb:b7:d1:1b:ca:47:32:e7:0e:f8:ed:a7:f4: 77:23:63:74:ed:ef:f7:93:4c:c8:1e:01:b3:24:90:64:cb:c5: 0c:a2:9e:17:d8:1e:34:da:ab:38:82:b3:0c:a1:4f:72:0c:b4: f7:2f:b2:54:5f:94:cf:2a:1c:d8:15:3f:88:a2:60:73:07:57: 05:05:16:f0:70:46:12:09:e5:ef:a2:58:2d:1d:19:fc:7f:55: 05:ca:dc:55:2f:15:dc:4f:cf:4d:51:e4:ec:08:83:cd:f5:82: 61:f5:5b:35:46:ce:87:4a:03:7f:59:da:86:fa:97:bb:ac:bf: 3e:87:8b:4d:f6:bc:43:db:d8:b4:69:61:ef:5c:81:af:b8:fb: 6a:77:b3:ae:11:4f:fc:ea:f7:36:df:00:e0:ec:12:c3:1a:1f: 89:1f:79:4f:f1:5e:e6:b2:31:0f:43:6b:90:ee:66:23:0a:85: f2:0e:d0:41:f8:c5:bd:a7:17:a6:ec:79:a1:17:af:b2:1e:5c: c0:ef:b1:e0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0FsnaCwauGGA2tU3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA0YTc2MWYtYjcxYS00ZmEyLWIwZTctZGI1Mjc4ZTIz ZGMzMB4XDTI2MDMwMTA5MDAwOFoXDTI2MDMwNDA5MDAwMFowLzEtMCsGA1UEAxMk Y2U1NzBmZWQtNDMwOS00OWYyLWFjYTUtNDI0ZWNhYWI4NTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqBY3aa4DyZ1G2cIqOrcFPkf6mnQFuUHwMO7 z8yVVoFqeDcXphmpG1Fs4hVFWKrm/M1VTum6w0eTaMyGcMLsXoKch1poQXVOxeD1 FVAf7fZoplWdGbeHqVmfBFlvRockzV++wnhPH+6NU1JyN40VYRVKXJejxODta4os hZJ9TCO6EHpBJp8hdapBvEOwr2n275fj6KXDjqC1zo2ALGo0bAgwb6BwKGk+HCBI aYTvYPpseM7CXrJ9lytWqPTbVR5CHuKiJkb2E6xaCfZGk4hirFTqBiFE8u9UTvoh FlUxaIjeK942Ge7tfuI78DpcPt1id4iuIIfeLuNlI5rn3mYGPQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJ9c45C4GtxVFAuF4CDQca1p2ONaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDRh NzYxZi1iNzFhLTRmYTItYjBlNy1kYjUyNzhlMjNkYzMvNzA0YTc2MWYtYjcxYS00 ZmEyLWIwZTctZGI1Mjc4ZTIzZGMzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzA0YTc2MWYtYjcxYS00ZmEyLWIw ZTctZGI1Mjc4ZTIzZGMzLzcwNGE3NjFmLWI3MWEtNGZhMi1iMGU3LWRiNTI3OGUy M2RjMy5jcmwwHwYDVR0jBBgwFoAUUi3Wa4cFBpviRD6NQcu1N8w4MZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MDRhNzYxZi1iNzFhLTRmYTItYjBlNy1kYjUy NzhlMjNkYzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAoNipClpcXAyVTKeL2Ule4 5/uzIBhQjrpYPMK9D+quWrXn5mh738/Sw+tmqj4iWIfLEcNxkUOQ4AfRb8u30RvK RzLnDvjtp/R3I2N07e/3k0zIHgGzJJBky8UMop4X2B402qs4grMMoU9yDLT3L7JU X5TPKhzYFT+IomBzB1cFBRbwcEYSCeXvolgtHRn8f1UFytxVLxXcT89NUeTsCIPN 9YJh9Vs1Rs6HSgN/WdqG+pe7rL8+h4tN9rxD29i0aWHvXIGvuPtqd7OuEU/86vc2 3wDg7BLDGh+JH3lP8V7msjEPQ2uQ7mYjCoXyDtBB+MW9pxem7HmhF6+yHlzA77Hg -----END CERTIFICATE-----Generated at Mon Mar 2 03:59:06 2026 by rpki-client