$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.mft File: 70a424d3-35bd-43df-8245-3fb08ea7af5a.mft (raw, json) Hash identifier: 4ZgwqNCagFeCEuqQHmpt0DcZe8abBGuICjiEX9PjHyM= Subject key identifier: FA:EE:3F:2A:49:D1:55:F6:99:10:F7:27:57:01:1F:5F:B5:FD:52:C3 Authority key identifier: F2:5A:07:ED:D8:B7:BD:AD:2C:76:F0:5E:9C:50:2A:EA:83:E4:B1:96 Certificate issuer: /CN=70a424d3-35bd-43df-8245-3fb08ea7af5a Certificate serial: 010D0C9F4328584F4200D6672ADA0738FD99E0CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.mft Manifest number: 010D0C9F4328584073A849CF36D5F7E9DECAFFE4 Signing time: Tue 22 Sep 2026 09:00:23 +0000 Manifest this update: Tue 22 Sep 2026 09:00:23 +0000 Manifest next update: Thu 24 Sep 2026 09:00:00 +0000 Files and hashes: 1: 439ee44d-2f63-3c0e-80de-7ad7f7cb69f7.roa (hash: ViXDxwdQ/eMyhAAilMk4uaYdyw0mvSt9QpUSZRnbl9A=) 2: 70a424d3-35bd-43df-8245-3fb08ea7af5a.crl (hash: sd55GLoYYBM/PKZH9UeIuc//tJXVKyioPdkBQlZEAnM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:00:d6:67:2a:da:07:38:fd:99:e0:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70a424d3-35bd-43df-8245-3fb08ea7af5a Validity Not Before: Sep 22 09:00:23 2026 GMT Not After : Sep 24 09:00:00 2026 GMT Subject: CN=00b43060-64fe-406a-ba80-fb97374d2c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0f:2f:b2:ca:dd:d1:35:d2:ef:83:2b:7b:60: 08:20:9f:86:86:69:10:b7:14:03:b9:ed:52:e1:fb: 86:5d:a4:f7:99:b5:b0:b3:33:45:c7:c2:e5:ae:a5: da:89:cb:01:1e:e4:52:10:5f:65:bd:e7:1d:e4:21: 79:53:92:0e:10:25:02:0e:ba:18:e0:18:b3:34:76: e0:18:a3:aa:1e:c5:bb:6d:91:dd:0b:88:36:9a:24: 71:77:c9:a5:2f:d1:5a:96:f6:a8:e8:b4:be:a0:8f: f1:a5:da:9a:38:65:da:86:9d:fb:2d:81:1e:af:2a: e0:c0:dc:58:29:14:4d:aa:e3:81:af:26:ac:28:86: 18:d4:c5:16:38:bb:bd:52:73:a6:22:a6:9b:31:d8: a9:38:87:3c:77:a1:67:8d:6e:96:81:5c:33:ad:d9: 87:34:c7:15:7f:11:5a:01:73:01:93:9c:d7:95:48: 50:a6:a8:34:fb:f1:29:9b:c5:9a:0c:37:47:84:16: 0e:82:4d:7c:73:93:bd:d1:58:09:93:ad:1e:e0:30: 26:94:4c:56:c3:88:98:32:21:2d:7c:58:64:ec:8d: 97:69:00:35:fa:f2:4b:52:5e:a3:62:c6:89:d0:c7: 76:98:72:4a:7c:64:77:01:9d:0f:4b:50:62:01:95: fa:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:EE:3F:2A:49:D1:55:F6:99:10:F7:27:57:01:1F:5F:B5:FD:52:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.crl X509v3 Authority Key Identifier: keyid:F2:5A:07:ED:D8:B7:BD:AD:2C:76:F0:5E:9C:50:2A:EA:83:E4:B1:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:03:3e:29:9a:f3:24:d5:08:85:2c:81:12:4f:e6:fc:5b:d9: b5:98:bc:06:d2:8e:dc:3b:ad:78:27:c6:25:a2:88:99:0e:e9: 56:1d:6b:6b:52:8e:46:2c:4a:69:e4:b3:c8:85:a1:d1:64:6e: cb:de:c8:59:8f:67:ab:c9:f3:df:a5:e8:b1:71:b6:5a:f6:0c: e7:60:d3:18:1c:79:43:61:1f:b9:a6:6d:0b:1a:a5:28:62:2a: 25:9d:40:f6:5f:41:4f:26:8d:b9:e1:36:ab:fb:c5:be:c8:cd: 7f:6f:70:93:d4:c9:4e:cf:7d:f4:72:ca:5c:b4:84:db:70:20: 5e:89:c0:47:ce:fb:89:76:97:1c:fa:29:02:21:5a:3f:b9:ed: 12:54:b1:42:0b:c6:94:2d:e5:18:67:2a:e4:11:5f:b3:36:d1: a1:32:aa:fb:d4:3a:f8:ea:2b:e7:5d:47:4d:f1:bd:80:89:fa: 69:5c:81:e0:9f:ed:25:ce:c7:c6:6e:d5:29:30:3b:15:f4:c9: 09:26:2b:ea:83:27:7c:b8:35:78:56:a8:ca:8e:b4:cb:89:53: 22:16:47:b8:c3:f1:b2:7d:79:5a:bd:f5:9a:d4:7a:29:44:76: d9:f4:ba:f0:34:4e:bc:f7:48:2d:7c:29:dc:c0:4d:f5:e1:83: e3:ab:83:26 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9CANZnKtoHOP2Z4MwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBhNDI0ZDMtMzViZC00M2RmLTgyNDUtM2ZiMDhlYTdh ZjVhMB4XDTI2MDkyMjA5MDAyM1oXDTI2MDkyNDA5MDAwMFowLzEtMCsGA1UEAxMk MDBiNDMwNjAtNjRmZS00MDZhLWJhODAtZmI5NzM3NGQyYzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmA8vssrd0TXS74Mre2AIIJ+GhmkQtxQDue1S 4fuGXaT3mbWwszNFx8LlrqXaicsBHuRSEF9lvecd5CF5U5IOECUCDroY4BizNHbg GKOqHsW7bZHdC4g2miRxd8mlL9Falvao6LS+oI/xpdqaOGXahp37LYEeryrgwNxY KRRNquOBryasKIYY1MUWOLu9UnOmIqabMdipOIc8d6FnjW6WgVwzrdmHNMcVfxFa AXMBk5zXlUhQpqg0+/Epm8WaDDdHhBYOgk18c5O90VgJk60e4DAmlExWw4iYMiEt fFhk7I2XaQA1+vJLUl6jYsaJ0Md2mHJKfGR3AZ0PS1BiAZX6ywIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPruPypJ0VX2mRD3J1cBH1+1/VLDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MGE0 MjRkMy0zNWJkLTQzZGYtODI0NS0zZmIwOGVhN2FmNWEvNzBhNDI0ZDMtMzViZC00 M2RmLTgyNDUtM2ZiMDhlYTdhZjVhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzBhNDI0ZDMtMzViZC00M2RmLTgy NDUtM2ZiMDhlYTdhZjVhLzcwYTQyNGQzLTM1YmQtNDNkZi04MjQ1LTNmYjA4ZWE3 YWY1YS5jcmwwHwYDVR0jBBgwFoAU8loH7di3va0sdvBenFAq6oPksZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MGE0MjRkMy0zNWJkLTQzZGYtODI0NS0zZmIw OGVhN2FmNWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCOAz4pmvMk1QiFLIEST+b8 W9m1mLwG0o7cO614J8YlooiZDulWHWtrUo5GLEpp5LPIhaHRZG7L3shZj2eryfPf peixcbZa9gznYNMYHHlDYR+5pm0LGqUoYiolnUD2X0FPJo254Tar+8W+yM1/b3CT 1MlOz330cspctITbcCBeicBHzvuJdpcc+ikCIVo/ue0SVLFCC8aULeUYZyrkEV+z NtGhMqr71Dr46ivnXUdN8b2AifppXIHgn+0lzsfGbtUpMDsV9MkJJivqgyd8uDV4 VqjKjrTLiVMiFke4w/GyfXlavfWa1HopRHbZ9LrwNE6890gtfCncwE314YPjq4Mm -----END CERTIFICATE-----Generated at Tue Sep 22 13:01:12 2026 by rpki-client