$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a70db1b2-c27e-469c-993f-3f704aba0e3b/a70db1b2-c27e-469c-993f-3f704aba0e3b.mft File: a70db1b2-c27e-469c-993f-3f704aba0e3b.mft (raw, json) Hash identifier: wP1wBD/bE93pM17w3gGO1OivpjoeV9MBIQMiI9PnvBg= Subject key identifier: 7C:0C:79:74:09:FD:40:09:A9:C3:DF:A0:3A:5C:BD:28:7A:05:01:CF Authority key identifier: D7:9D:64:66:6F:3D:88:AD:C6:36:DC:4D:5D:65:01:18:4B:0E:0B:15 Certificate issuer: /CN=a70db1b2-c27e-469c-993f-3f704aba0e3b Certificate serial: 010D0C9F4328584D8694FE83A1519A2CD44F5180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a70db1b2-c27e-469c-993f-3f704aba0e3b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a70db1b2-c27e-469c-993f-3f704aba0e3b/a70db1b2-c27e-469c-993f-3f704aba0e3b.mft Manifest number: 010D0C9F4328584D27C18EB06AA910EB63E31623 Signing time: Thu 16 Apr 2026 13:00:03 +0000 Manifest this update: Thu 16 Apr 2026 13:00:03 +0000 Manifest next update: Sun 19 Apr 2026 13:00:00 +0000 Files and hashes: 1: a70db1b2-c27e-469c-993f-3f704aba0e3b.crl (hash: YF/jeRAa5b4SZrYjCpIHrmfHIqIJHJH/QTC5etF/xTg=) 2: f0f5de0a-cde6-3bac-96cf-0a36cb981fe6.roa (hash: ykoETxlMPYtbuY+oTYSmdAgKqC9iucuF3rImOXHWXBE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a70db1b2-c27e-469c-993f-3f704aba0e3b/a70db1b2-c27e-469c-993f-3f704aba0e3b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a70db1b2-c27e-469c-993f-3f704aba0e3b/a70db1b2-c27e-469c-993f-3f704aba0e3b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a70db1b2-c27e-469c-993f-3f704aba0e3b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:94:fe:83:a1:51:9a:2c:d4:4f:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a70db1b2-c27e-469c-993f-3f704aba0e3b Validity Not Before: Apr 16 13:00:03 2026 GMT Not After : Apr 19 13:00:00 2026 GMT Subject: CN=46e98a22-44b1-4d81-a4fe-97fdad1a6416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bb:48:b5:bb:11:50:25:42:98:95:5c:8d:68: 67:2b:f4:24:1f:12:a7:b6:e3:a9:ef:5c:8f:38:71: 61:b6:b2:03:7c:55:87:71:5f:80:b6:b7:a1:6e:ef: b1:72:49:08:4b:23:da:5d:17:c6:d8:96:fe:57:b4: 63:6b:7f:3d:99:a4:de:26:b5:71:db:21:99:05:5e: 77:6c:76:60:a4:15:33:e9:8b:fb:89:43:ae:fb:84: 30:df:1e:d7:a6:ee:ce:66:e2:e4:71:37:40:d4:32: b7:be:1f:78:37:ef:9e:2e:94:92:50:db:ff:58:df: 62:6d:6d:69:14:4a:11:66:b9:6b:11:dc:3e:0a:32: ce:72:69:55:bb:2c:96:cf:d3:f8:06:c2:1f:a5:f0: 4e:3e:5b:55:33:4d:f8:9f:da:18:cc:28:03:f3:25: 04:ed:77:60:3c:99:67:95:4e:9a:ae:c3:b3:94:88: 12:0d:53:95:70:36:fd:c0:82:77:70:ca:9e:fa:e7: 48:34:92:57:d1:83:a4:80:f8:e7:de:aa:65:2f:a8: ac:aa:5c:3d:f4:9b:3c:fa:ef:6f:38:1c:ef:68:47: 50:0e:93:5b:13:a4:da:d7:98:24:5d:6f:87:4f:f9: 64:3a:8d:96:7f:4b:f4:2c:c1:06:c0:73:00:ce:76: c8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:0C:79:74:09:FD:40:09:A9:C3:DF:A0:3A:5C:BD:28:7A:05:01:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a70db1b2-c27e-469c-993f-3f704aba0e3b/a70db1b2-c27e-469c-993f-3f704aba0e3b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a70db1b2-c27e-469c-993f-3f704aba0e3b/a70db1b2-c27e-469c-993f-3f704aba0e3b.crl X509v3 Authority Key Identifier: keyid:D7:9D:64:66:6F:3D:88:AD:C6:36:DC:4D:5D:65:01:18:4B:0E:0B:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a70db1b2-c27e-469c-993f-3f704aba0e3b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:28:35:c9:fa:82:26:e0:e5:3e:28:bf:f8:7f:9e:f5:c3:29: b5:01:23:6f:d9:ff:01:33:a8:f3:da:6f:e0:89:eb:53:f2:bc: eb:68:43:7a:03:18:cf:33:eb:a2:76:6a:4b:2a:53:02:d5:85: b9:0d:14:d1:7d:7b:3e:03:5f:05:89:72:e2:51:71:21:29:9f: be:7e:c4:8f:b3:cf:b4:04:13:7f:67:80:ce:8a:17:41:a2:c6: df:0b:58:9c:19:c9:22:d2:82:a4:4b:b6:ea:73:cf:b9:8b:9a: 54:fc:3c:df:f0:76:94:d3:2e:f1:21:76:e0:68:1f:91:8e:00: 11:b8:c4:22:a5:41:3c:05:f5:cb:0f:c4:e3:22:0b:1d:63:62: 25:cf:ad:bf:5c:da:a5:1f:e1:97:0c:d0:08:45:a4:a2:8c:a2: ba:4b:b1:db:67:e7:a9:e7:c8:69:16:9d:93:80:4f:6c:8b:f9: c2:5c:13:71:42:cc:e8:97:1f:19:4e:d3:d0:10:35:da:b1:79: 76:ba:1d:58:eb:82:bd:bf:fc:64:85:5b:75:02:a6:dd:7f:c2: 72:cb:e6:86:6f:fe:2f:65:df:18:93:33:91:b0:75:2c:c3:73: 42:0f:3f:03:3e:1f:ec:e9:e7:04:24:5c:ec:1d:18:4a:41:91: 50:54:62:c3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2GlP6DoVGaLNRPUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcwZGIxYjItYzI3ZS00NjljLTk5M2YtM2Y3MDRhYmEw ZTNiMB4XDTI2MDQxNjEzMDAwM1oXDTI2MDQxOTEzMDAwMFowLzEtMCsGA1UEAxMk NDZlOThhMjItNDRiMS00ZDgxLWE0ZmUtOTdmZGFkMWE2NDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7tItbsRUCVCmJVcjWhnK/QkHxKntuOp71yP OHFhtrIDfFWHcV+Atrehbu+xckkISyPaXRfG2Jb+V7Rja389maTeJrVx2yGZBV53 bHZgpBUz6Yv7iUOu+4Qw3x7Xpu7OZuLkcTdA1DK3vh94N++eLpSSUNv/WN9ibW1p FEoRZrlrEdw+CjLOcmlVuyyWz9P4BsIfpfBOPltVM034n9oYzCgD8yUE7XdgPJln lU6arsOzlIgSDVOVcDb9wIJ3cMqe+udINJJX0YOkgPjn3qplL6isqlw99Js8+u9v OBzvaEdQDpNbE6Ta15gkXW+HT/lkOo2Wf0v0LMEGwHMAznbIGwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHwMeXQJ/UAJqcPfoDpcvSh6BQHPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9hNzBk YjFiMi1jMjdlLTQ2OWMtOTkzZi0zZjcwNGFiYTBlM2IvYTcwZGIxYjItYzI3ZS00 NjljLTk5M2YtM2Y3MDRhYmEwZTNiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYTcwZGIxYjItYzI3ZS00NjljLTk5 M2YtM2Y3MDRhYmEwZTNiL2E3MGRiMWIyLWMyN2UtNDY5Yy05OTNmLTNmNzA0YWJh MGUzYi5jcmwwHwYDVR0jBBgwFoAU151kZm89iK3GNtxNXWUBGEsOCxUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9hNzBkYjFiMi1jMjdlLTQ2OWMtOTkzZi0zZjcw NGFiYTBlM2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAWKDXJ+oIm4OU+KL/4f571 wym1ASNv2f8BM6jz2m/gietT8rzraEN6AxjPM+uidmpLKlMC1YW5DRTRfXs+A18F iXLiUXEhKZ++fsSPs8+0BBN/Z4DOihdBosbfC1icGcki0oKkS7bqc8+5i5pU/Dzf 8HaU0y7xIXbgaB+RjgARuMQipUE8BfXLD8TjIgsdY2Ilz62/XNqlH+GXDNAIRaSi jKK6S7HbZ+ep58hpFp2TgE9si/nCXBNxQszolx8ZTtPQEDXasXl2uh1Y64K9v/xk hVt1Aqbdf8Jyy+aGb/4vZd8YkzORsHUsw3NCDz8DPh/s6ecEJFzsHRhKQZFQVGLD -----END CERTIFICATE-----Generated at Fri Apr 17 07:36:19 2026 by rpki-client