$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.mft File: 70a424d3-35bd-43df-8245-3fb08ea7af5a.mft (raw, json) Hash identifier: YFRtCB6j1/C3a6yvQqUgcvxeaDTE+wDDGLDsBXoAOOA= Subject key identifier: 93:53:61:4B:8E:77:12:98:0C:3F:CA:7E:A9:99:F8:18:1C:07:B1:4C Authority key identifier: F2:5A:07:ED:D8:B7:BD:AD:2C:76:F0:5E:9C:50:2A:EA:83:E4:B1:96 Certificate issuer: /CN=70a424d3-35bd-43df-8245-3fb08ea7af5a Certificate serial: 010D0C9F4328584D4E4831708139731CD5BAD550 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.mft Manifest number: 010D0C9F4328584073A849CF36D5F7E9DECAFF2C Signing time: Fri 27 Mar 2026 09:00:04 +0000 Manifest this update: Fri 27 Mar 2026 09:00:04 +0000 Manifest next update: Mon 30 Mar 2026 09:00:00 +0000 Files and hashes: 1: 439ee44d-2f63-3c0e-80de-7ad7f7cb69f7.roa (hash: 4qIq/l0qDs7057YIbkSbAYTHFanzco8Ii8ouWfojVRY=) 2: 70a424d3-35bd-43df-8245-3fb08ea7af5a.crl (hash: Wo92w/CGM3pxksfflIJitXCdiSn8oH043xP1ib+GUy0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4e:48:31:70:81:39:73:1c:d5:ba:d5:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70a424d3-35bd-43df-8245-3fb08ea7af5a Validity Not Before: Mar 27 09:00:04 2026 GMT Not After : Mar 30 09:00:00 2026 GMT Subject: CN=42b13ea8-351c-46ee-8077-0a894bb6c8da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:83:44:d3:68:c7:6e:f4:2a:4e:f9:57:d7:49: b9:68:84:6d:64:bb:a7:34:a1:9c:f8:3a:46:a8:e3: af:72:ec:82:d8:17:69:f7:31:1a:66:d1:04:9d:ef: 8b:2c:c6:c8:4e:1c:bf:62:50:21:a5:dd:00:ad:a3: a2:b5:f2:5a:3c:a6:eb:8b:c2:aa:7a:b6:e6:35:5c: ec:dd:b0:bf:45:78:1a:9d:41:7a:c8:9e:ee:7e:39: d1:c2:70:b4:18:b1:f4:30:c2:de:4a:ee:31:8f:3a: ce:32:b2:f7:90:56:b7:cb:5f:6c:4d:a4:8a:80:04: 46:14:98:b0:97:7c:81:f3:1d:d5:a8:e2:3c:bb:fd: 8b:76:b5:72:58:0b:f8:a1:09:d0:bf:cd:fa:c8:49: ab:00:73:80:9e:bd:82:f6:b0:2b:7a:a5:43:21:b5: 40:ca:23:5d:10:6d:2a:35:39:69:96:7e:26:1a:b9: 53:af:33:96:df:14:d7:39:61:66:82:bd:65:1b:1c: 8f:51:f4:f8:a6:62:c5:5e:1e:e7:81:31:e0:dc:26: 22:36:09:48:88:4b:ed:01:de:ca:ff:7b:a6:fc:0d: d6:92:9b:49:8a:a2:ef:73:62:bb:95:75:cd:55:d2: 9b:fb:bd:f6:c0:4b:70:aa:e3:c7:b0:19:1c:ea:7b: 2b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:53:61:4B:8E:77:12:98:0C:3F:CA:7E:A9:99:F8:18:1C:07:B1:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.crl X509v3 Authority Key Identifier: keyid:F2:5A:07:ED:D8:B7:BD:AD:2C:76:F0:5E:9C:50:2A:EA:83:E4:B1:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:e7:48:09:ac:d5:91:09:fb:fc:50:58:58:06:2d:4f:99:b7: f6:35:86:52:f4:c7:ab:87:8e:e8:da:86:f9:7f:19:5e:1f:1d: 9d:89:d1:6b:57:d7:77:06:64:92:66:45:4e:8b:f9:7b:64:38: cf:74:c8:1d:0d:af:bf:c6:27:b3:7f:18:23:87:9e:78:76:14: 2a:27:7e:70:8a:6b:07:66:6a:65:6c:08:7a:b5:65:48:17:29: e8:36:05:09:3d:20:75:8e:4b:2c:20:2d:e5:1b:53:a8:17:e8: d9:2e:59:e3:ae:53:7b:a4:46:fd:38:af:64:73:8f:d1:f8:46: 6a:c3:bb:91:cc:35:f9:97:fa:7a:08:ce:91:40:69:ea:5c:d0: 28:ee:85:5d:46:ae:7b:37:b3:5e:03:18:92:cb:da:4b:c7:b5: e2:f8:b2:21:b7:38:dd:5a:e9:11:74:95:d8:78:d8:f1:5d:23: e4:d4:8e:8e:46:02:43:5d:5f:e1:54:2e:10:68:5d:e5:38:c4: 71:52:c3:0f:a2:3f:43:35:d3:66:d4:46:00:72:86:61:ee:c8: dd:19:52:c7:a9:e9:6e:cf:58:f5:fd:81:c5:5e:18:68:33:d9: 04:0e:d6:e3:84:19:f3:81:eb:ea:1a:cb:d2:31:28:09:60:aa: c6:74:f9:59 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1OSDFwgTlzHNW61VAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBhNDI0ZDMtMzViZC00M2RmLTgyNDUtM2ZiMDhlYTdh ZjVhMB4XDTI2MDMyNzA5MDAwNFoXDTI2MDMzMDA5MDAwMFowLzEtMCsGA1UEAxMk NDJiMTNlYTgtMzUxYy00NmVlLTgwNzctMGE4OTRiYjZjOGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4NE02jHbvQqTvlX10m5aIRtZLunNKGc+DpG qOOvcuyC2Bdp9zEaZtEEne+LLMbIThy/YlAhpd0AraOitfJaPKbri8KqerbmNVzs 3bC/RXganUF6yJ7ufjnRwnC0GLH0MMLeSu4xjzrOMrL3kFa3y19sTaSKgARGFJiw l3yB8x3VqOI8u/2LdrVyWAv4oQnQv836yEmrAHOAnr2C9rAreqVDIbVAyiNdEG0q NTlpln4mGrlTrzOW3xTXOWFmgr1lGxyPUfT4pmLFXh7ngTHg3CYiNglIiEvtAd7K /3um/A3WkptJiqLvc2K7lXXNVdKb+732wEtwquPHsBkc6nsrnQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJNTYUuOdxKYDD/KfqmZ+BgcB7FMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MGE0 MjRkMy0zNWJkLTQzZGYtODI0NS0zZmIwOGVhN2FmNWEvNzBhNDI0ZDMtMzViZC00 M2RmLTgyNDUtM2ZiMDhlYTdhZjVhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzBhNDI0ZDMtMzViZC00M2RmLTgy NDUtM2ZiMDhlYTdhZjVhLzcwYTQyNGQzLTM1YmQtNDNkZi04MjQ1LTNmYjA4ZWE3 YWY1YS5jcmwwHwYDVR0jBBgwFoAU8loH7di3va0sdvBenFAq6oPksZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MGE0MjRkMy0zNWJkLTQzZGYtODI0NS0zZmIw OGVhN2FmNWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAa50gJrNWRCfv8UFhYBi1P mbf2NYZS9Merh47o2ob5fxleHx2didFrV9d3BmSSZkVOi/l7ZDjPdMgdDa+/xiez fxgjh554dhQqJ35wimsHZmplbAh6tWVIFynoNgUJPSB1jkssIC3lG1OoF+jZLlnj rlN7pEb9OK9kc4/R+EZqw7uRzDX5l/p6CM6RQGnqXNAo7oVdRq57N7NeAxiSy9pL x7Xi+LIhtzjdWukRdJXYeNjxXSPk1I6ORgJDXV/hVC4QaF3lOMRxUsMPoj9DNdNm 1EYAcoZh7sjdGVLHqeluz1j1/YHFXhhoM9kEDtbjhBnzgevqGsvSMSgJYKrGdPlZ -----END CERTIFICATE-----Generated at Sat Mar 28 10:48:15 2026 by rpki-client