$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft File: 70ddad33-55eb-4125-9221-0129168a645b.mft (raw, json) Hash identifier: q+d82zFRy5gchY058axVfEZI8oNJhCbOxp8fGQ43Lhw= Subject key identifier: E3:6B:82:25:52:F5:9F:62:4D:E9:2E:8F:35:81:8D:1A:CA:22:12:E8 Authority key identifier: 7F:4C:A4:22:A3:CB:BB:A5:D6:77:9C:25:01:F3:7F:E5:D9:0E:B4:BD Certificate issuer: /CN=70ddad33-55eb-4125-9221-0129168a645b Certificate serial: 010D0C9F4328584D08D66E22D2C48E2C4B6C1080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft Manifest number: 010D0C9F43285841E951957BE6B527023623015F Signing time: Mon 02 Mar 2026 12:00:03 +0000 Manifest this update: Mon 02 Mar 2026 12:00:03 +0000 Manifest next update: Thu 05 Mar 2026 12:00:00 +0000 Files and hashes: 1: 41138728-4b0a-33e7-a5bd-ea7cb42a601e.roa (hash: j24nXA9lW/xTZ+GFWtxY4TAi/lwxaV++e+lfdgVa0aU=) 2: 70ddad33-55eb-4125-9221-0129168a645b.crl (hash: cbRgy4abef3RcfbCOxy1WrgyMDPQ2brnSa1AR1SKtok=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:08:d6:6e:22:d2:c4:8e:2c:4b:6c:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70ddad33-55eb-4125-9221-0129168a645b Validity Not Before: Mar 2 12:00:03 2026 GMT Not After : Mar 5 12:00:00 2026 GMT Subject: CN=0bc20a93-aaae-4721-885b-f32d230c5535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:dc:4a:1a:f9:12:87:5c:81:9c:49:5e:c8:cf: 64:d0:1e:f6:d5:eb:6a:a3:cc:f9:54:1f:c0:81:93: a6:99:e7:69:c1:bc:77:98:ac:4b:b7:c6:62:04:8f: 79:c1:91:30:df:53:6a:8d:42:a3:6b:69:30:d7:48: 65:3c:22:a5:5e:42:e8:5e:e3:05:d0:cc:fd:b5:e2: 87:4c:dd:99:13:b5:95:b7:a0:99:98:1e:f2:8e:58: c1:d8:a6:2f:96:8b:aa:56:d6:90:af:b0:cf:c4:83: f6:2c:50:c1:d0:c2:53:f2:3a:aa:52:3e:78:9f:50: 79:2e:64:21:0d:3a:fc:4a:a3:8d:b3:79:24:0f:23: 23:c6:a3:a6:5a:a3:ee:48:e7:30:94:7d:ce:6b:1e: a8:25:46:08:aa:a3:95:53:d1:86:9c:8e:05:7b:08: 9c:e0:8f:66:80:34:81:96:99:d5:b7:b9:45:be:09: 4b:a7:97:a9:6a:ff:cb:a2:1c:8d:6d:ba:4a:88:af: 6e:91:6c:73:89:6a:d5:bd:f9:b0:56:37:e8:98:2e: a1:70:c7:fa:0b:0e:cf:c8:e9:cb:64:6f:73:5f:13: 8c:1c:64:db:64:93:d0:bf:8b:f7:1c:f1:d5:c1:0a: 90:cb:1e:f6:66:05:f8:a5:82:65:cd:a6:8c:cc:e4: b6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:6B:82:25:52:F5:9F:62:4D:E9:2E:8F:35:81:8D:1A:CA:22:12:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.crl X509v3 Authority Key Identifier: keyid:7F:4C:A4:22:A3:CB:BB:A5:D6:77:9C:25:01:F3:7F:E5:D9:0E:B4:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:30:cc:cc:67:8a:41:81:c8:44:53:1f:52:e6:fc:0d:19:d1: 7b:d2:27:67:83:3e:f8:e4:3c:2d:cd:c3:56:1e:66:85:ed:47: 86:da:ff:ff:2f:08:c2:7e:4c:47:c0:d2:17:c4:51:54:f1:3e: aa:a7:d2:7f:2b:b9:a2:60:83:35:8b:ba:0d:6b:c7:86:9e:3a: e0:04:cd:39:6f:15:c4:30:5c:63:e4:89:9b:f5:f6:2e:53:06: 2f:52:15:92:15:39:41:c9:bb:fc:c2:71:58:83:2e:0f:21:31: 52:c6:1e:a1:c3:e8:0b:ef:a9:f3:62:4d:9e:9f:83:bc:f3:5e: f8:7e:34:a5:cb:4c:d2:8a:31:5d:5f:14:7c:0b:8f:34:43:70: 77:d1:95:c6:c9:bd:72:64:fa:4a:a1:e6:10:d2:b6:e7:1e:34: a6:a5:8a:01:51:71:c8:3c:70:dd:27:6b:0f:cf:57:6c:aa:74: 53:90:9a:88:9a:c3:23:37:ba:dc:7c:06:1a:cb:7f:9a:a3:3e: c7:f7:06:e9:74:07:c3:c6:49:e5:2f:8b:15:2c:5f:6d:6c:13: ff:ac:3b:13:c3:6e:dc:f4:a5:b7:53:99:c7:95:dc:3a:7b:6c: 05:cf:f3:9f:f1:c1:35:05:c9:c0:7a:54:ac:a3:a2:71:4e:d1: 86:d6:77:41 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0I1m4i0sSOLEtsEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBkZGFkMzMtNTVlYi00MTI1LTkyMjEtMDEyOTE2OGE2 NDViMB4XDTI2MDMwMjEyMDAwM1oXDTI2MDMwNTEyMDAwMFowLzEtMCsGA1UEAxMk MGJjMjBhOTMtYWFhZS00NzIxLTg4NWItZjMyZDIzMGM1NTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdxKGvkSh1yBnEleyM9k0B721etqo8z5VB/A gZOmmedpwbx3mKxLt8ZiBI95wZEw31NqjUKja2kw10hlPCKlXkLoXuMF0Mz9teKH TN2ZE7WVt6CZmB7yjljB2KYvlouqVtaQr7DPxIP2LFDB0MJT8jqqUj54n1B5LmQh DTr8SqONs3kkDyMjxqOmWqPuSOcwlH3Oax6oJUYIqqOVU9GGnI4Fewic4I9mgDSB lpnVt7lFvglLp5epav/LohyNbbpKiK9ukWxziWrVvfmwVjfomC6hcMf6Cw7PyOnL ZG9zXxOMHGTbZJPQv4v3HPHVwQqQyx72ZgX4pYJlzaaMzOS2iwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFONrgiVS9Z9iTekujzWBjRrKIhLoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MGRk YWQzMy01NWViLTQxMjUtOTIyMS0wMTI5MTY4YTY0NWIvNzBkZGFkMzMtNTVlYi00 MTI1LTkyMjEtMDEyOTE2OGE2NDViLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzBkZGFkMzMtNTVlYi00MTI1LTky MjEtMDEyOTE2OGE2NDViLzcwZGRhZDMzLTU1ZWItNDEyNS05MjIxLTAxMjkxNjhh NjQ1Yi5jcmwwHwYDVR0jBBgwFoAUf0ykIqPLu6XWd5wlAfN/5dkOtL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83MGRkYWQzMy01NWViLTQxMjUtOTIyMS0wMTI5 MTY4YTY0NWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCcMMzMZ4pBgchEUx9S5vwN GdF70idngz745DwtzcNWHmaF7UeG2v//LwjCfkxHwNIXxFFU8T6qp9J/K7miYIM1 i7oNa8eGnjrgBM05bxXEMFxj5Imb9fYuUwYvUhWSFTlBybv8wnFYgy4PITFSxh6h w+gL76nzYk2en4O88174fjSly0zSijFdXxR8C480Q3B30ZXGyb1yZPpKoeYQ0rbn HjSmpYoBUXHIPHDdJ2sPz1dsqnRTkJqImsMjN7rcfAYay3+aoz7H9wbpdAfDxknl L4sVLF9tbBP/rDsTw27c9KW3U5nHldw6e2wFz/Of8cE1BcnAelSso6JxTtGG1ndB -----END CERTIFICATE-----Generated at Mon Mar 2 14:47:46 2026 by rpki-client