$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft File: 704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft (raw, json) Hash identifier: u/oEjmA4IzSwT3szRdMxW0QTnYoKlNnEy7pj9s9p/Rw= Subject key identifier: 3B:D0:23:8D:F6:C5:C6:D4:49:3C:71:C7:1D:D7:40:F1:F0:C6:3C:51 Authority key identifier: 52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97 Certificate issuer: /CN=704a761f-b71a-4fa2-b0e7-db5278e23dc3 Certificate serial: 010D0C9F4328584D48B2D37B4FEF9C0DBD1CE300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft Manifest number: 010D0C9F4328584073A84BBB6D274A47E14403F3 Signing time: Wed 25 Mar 2026 09:00:04 +0000 Manifest this update: Wed 25 Mar 2026 09:00:04 +0000 Manifest next update: Sat 28 Mar 2026 09:00:00 +0000 Files and hashes: 1: 704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl (hash: 6udyK8Q68VU1fMQbeS+hOA0frXZMypqO1Cuj9xQI9ls=) 2: e6965540-cbd0-3930-b638-a04886e69eac.roa (hash: fxcjnXBClhh3FFpBZAN4bQ7zbbyBWem6vOsg6KCdClo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:48:b2:d3:7b:4f:ef:9c:0d:bd:1c:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=704a761f-b71a-4fa2-b0e7-db5278e23dc3 Validity Not Before: Mar 25 09:00:04 2026 GMT Not After : Mar 28 09:00:00 2026 GMT Subject: CN=ad1cb007-d2fc-4620-8d3d-d3461b5fb8f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1f:a5:48:08:e5:d3:5e:7d:2f:f3:bd:11:63: 90:06:2f:5e:c8:6d:28:de:09:b6:8d:79:7b:31:cd: 22:85:69:36:95:29:bb:12:61:b7:31:eb:80:d5:3c: 5e:00:5d:32:c1:05:34:2a:33:97:c6:27:74:dc:20: 75:f2:83:29:92:85:39:7f:6c:4e:20:10:7a:28:90: 60:ab:a9:4b:5d:e3:a5:aa:3b:2c:51:c6:3c:d5:a3: 95:41:2e:bf:7d:16:4a:18:10:99:a3:da:4c:9a:fd: 02:43:32:3f:b1:01:ea:03:60:90:a6:f8:9a:27:c7: a2:85:e0:52:08:13:8f:66:a0:c0:58:88:55:a2:d0: 87:0a:8c:00:4f:fe:03:9c:50:84:7f:6e:bc:83:6a: b0:b0:a4:af:64:ec:34:2c:3b:0a:74:7f:b8:e7:4e: c6:d9:28:35:33:fc:6e:ec:ce:d6:54:40:3f:c6:e3: ba:6b:30:2d:5b:30:19:2a:51:f1:e2:4c:72:44:8d: b0:b1:e3:e3:ef:07:65:53:39:98:31:0f:a5:ce:a8: 6b:cc:09:bc:ac:00:f7:32:39:11:6f:fd:0d:c3:c8: 89:a3:1a:5c:05:8e:fe:52:83:b3:d4:fa:07:56:5c: bd:69:ff:27:7c:74:fd:9e:cc:1a:01:ab:f6:4a:4d: f0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D0:23:8D:F6:C5:C6:D4:49:3C:71:C7:1D:D7:40:F1:F0:C6:3C:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl X509v3 Authority Key Identifier: keyid:52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:e0:ef:77:90:60:e1:83:b4:20:5b:97:5a:49:d2:71:b3:37: 12:ce:e6:53:8d:04:b2:69:d3:ba:5a:da:88:26:fc:82:8b:46: c5:57:0f:a4:68:d3:bc:f9:52:78:f8:62:58:34:d8:26:50:0e: 79:8a:78:af:61:dc:ba:93:be:47:ba:2c:7e:0a:56:5c:0f:6a: df:87:7e:00:55:ae:1b:6b:b9:f0:c8:ba:9c:df:8c:8a:6c:bf: b7:d6:80:45:a1:c3:7b:a6:4f:83:3f:99:b2:5e:d7:dc:99:14: f5:2a:a1:2d:79:b8:37:aa:7b:77:02:95:5a:fc:e9:47:10:ec: 35:a7:b7:e7:c3:5b:7e:75:0f:7d:6d:c9:76:c4:0f:56:64:2d: 2e:89:d2:6b:0a:3e:73:70:2c:29:4c:3c:a6:04:8c:f7:a9:10: a8:c5:00:c0:84:9e:4a:1f:9e:2d:96:4a:b1:a0:6c:de:ed:eb: 38:64:b9:15:72:1d:6f:c9:6e:72:5c:d5:05:a8:06:cf:ca:0d: 0b:da:db:ff:cd:92:80:58:02:fd:03:8e:54:a0:8a:03:0a:b8: ba:c8:71:b7:38:09:9c:d2:20:a9:62:7f:df:83:73:b8:a1:9d: eb:eb:df:5a:c9:5e:6d:07:d9:f0:b3:f5:a8:eb:b8:96:ef:52: 64:5b:4e:18 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1IstN7T++cDb0c4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA0YTc2MWYtYjcxYS00ZmEyLWIwZTctZGI1Mjc4ZTIz ZGMzMB4XDTI2MDMyNTA5MDAwNFoXDTI2MDMyODA5MDAwMFowLzEtMCsGA1UEAxMk YWQxY2IwMDctZDJmYy00NjIwLThkM2QtZDM0NjFiNWZiOGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnh+lSAjl0159L/O9EWOQBi9eyG0o3gm2jXl7 Mc0ihWk2lSm7EmG3MeuA1TxeAF0ywQU0KjOXxid03CB18oMpkoU5f2xOIBB6KJBg q6lLXeOlqjssUcY81aOVQS6/fRZKGBCZo9pMmv0CQzI/sQHqA2CQpviaJ8eiheBS CBOPZqDAWIhVotCHCowAT/4DnFCEf268g2qwsKSvZOw0LDsKdH+4507G2Sg1M/xu 7M7WVEA/xuO6azAtWzAZKlHx4kxyRI2wsePj7wdlUzmYMQ+lzqhrzAm8rAD3MjkR b/0Nw8iJoxpcBY7+UoOz1PoHVly9af8nfHT9nswaAav2Sk3wAQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDvQI432xcbUSTxxxx3XQPHwxjxRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDRh NzYxZi1iNzFhLTRmYTItYjBlNy1kYjUyNzhlMjNkYzMvNzA0YTc2MWYtYjcxYS00 ZmEyLWIwZTctZGI1Mjc4ZTIzZGMzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzA0YTc2MWYtYjcxYS00ZmEyLWIw ZTctZGI1Mjc4ZTIzZGMzLzcwNGE3NjFmLWI3MWEtNGZhMi1iMGU3LWRiNTI3OGUy M2RjMy5jcmwwHwYDVR0jBBgwFoAUUi3Wa4cFBpviRD6NQcu1N8w4MZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MDRhNzYxZi1iNzFhLTRmYTItYjBlNy1kYjUy NzhlMjNkYzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAv4O93kGDhg7QgW5daSdJx szcSzuZTjQSyadO6WtqIJvyCi0bFVw+kaNO8+VJ4+GJYNNgmUA55inivYdy6k75H uix+ClZcD2rfh34AVa4ba7nwyLqc34yKbL+31oBFocN7pk+DP5myXtfcmRT1KqEt ebg3qnt3ApVa/OlHEOw1p7fnw1t+dQ99bcl2xA9WZC0uidJrCj5zcCwpTDymBIz3 qRCoxQDAhJ5KH54tlkqxoGze7es4ZLkVch1vyW5yXNUFqAbPyg0L2tv/zZKAWAL9 A45UoIoDCri6yHG3OAmc0iCpYn/fg3O4oZ3r699ayV5tB9nws/Wo67iW71JkW04Y -----END CERTIFICATE-----Generated at Thu Mar 26 07:16:04 2026 by rpki-client