$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.mft File: 70a424d3-35bd-43df-8245-3fb08ea7af5a.mft (raw, json) Hash identifier: wX/4bcn6e/J05Q45gl+JCqZ77meXIJQr+0O92JfZiTU= Subject key identifier: 8B:B5:ED:C7:D0:2E:7F:4D:5C:35:B5:F0:DB:C1:D6:F2:14:CA:2C:4E Authority key identifier: F2:5A:07:ED:D8:B7:BD:AD:2C:76:F0:5E:9C:50:2A:EA:83:E4:B1:96 Certificate issuer: /CN=70a424d3-35bd-43df-8245-3fb08ea7af5a Certificate serial: 010D0C9F4328584F5B210B27ECDA54BE5F8C6100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.mft Manifest number: 010D0C9F4328584073A849CF36D5F7E9DECAFFEE Signing time: Thu 01 Oct 2026 09:00:24 +0000 Manifest this update: Thu 01 Oct 2026 09:00:24 +0000 Manifest next update: Sun 04 Oct 2026 09:00:00 +0000 Files and hashes: 1: 439ee44d-2f63-3c0e-80de-7ad7f7cb69f7.roa (hash: ViXDxwdQ/eMyhAAilMk4uaYdyw0mvSt9QpUSZRnbl9A=) 2: 70a424d3-35bd-43df-8245-3fb08ea7af5a.crl (hash: yVguK+/UooEkap+XMXyQQ+SCzd61hc1G6RfIGXu3UCI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:21:0b:27:ec:da:54:be:5f:8c:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70a424d3-35bd-43df-8245-3fb08ea7af5a Validity Not Before: Oct 1 09:00:24 2026 GMT Not After : Oct 4 09:00:00 2026 GMT Subject: CN=072cef70-e03c-436c-ad45-7e920435943d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:60:43:ba:0f:45:87:e3:18:4f:31:1f:6e:8b: 23:65:9f:34:ae:dc:48:15:62:90:8f:5d:36:bb:82: df:0d:f6:93:0a:07:fe:b1:b5:e1:8e:5f:55:c3:a3: d1:88:a3:94:09:ff:8f:81:b9:b5:00:ec:57:ee:62: ae:23:47:c8:49:2e:1d:a0:d0:68:1a:f4:71:69:2f: 84:02:ba:28:e0:99:50:5b:59:d5:9d:c9:69:cd:a4: 1b:3a:d5:09:cf:80:ea:48:8d:f4:12:da:58:0e:68: 78:db:dc:e8:6e:d2:8e:6c:88:6f:ee:4c:7a:f4:83: 60:77:a6:06:30:45:67:1c:81:a9:f9:83:05:26:be: c0:1f:58:0b:e7:bf:2e:0a:1a:97:9d:d7:10:c1:36: cc:cd:23:cb:e3:50:07:b6:d8:49:1f:28:a0:71:f1: 31:25:83:ac:95:84:f6:7b:09:af:d1:2a:89:6b:e6: 5c:8b:37:c5:31:1a:2a:1f:3b:ec:0d:04:8d:b1:cc: c0:60:ee:68:6b:2b:82:9a:d7:c0:06:19:e3:a1:bd: 47:39:6f:c6:5b:e6:05:0c:bd:dd:e7:48:02:cc:f1: 1c:d5:41:3e:ef:81:77:cc:b4:b7:e4:65:81:8b:ef: 46:1c:c8:1b:94:4e:5f:75:af:c2:68:ef:e4:42:20: e9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B5:ED:C7:D0:2E:7F:4D:5C:35:B5:F0:DB:C1:D6:F2:14:CA:2C:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.crl X509v3 Authority Key Identifier: keyid:F2:5A:07:ED:D8:B7:BD:AD:2C:76:F0:5E:9C:50:2A:EA:83:E4:B1:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:02:6a:06:c0:2b:89:99:19:e8:71:64:02:54:e2:fd:b8:76: db:b1:3d:5b:d7:84:39:c6:c7:10:fa:fa:13:84:a4:60:c9:6b: c8:e1:fb:d7:7e:d2:43:22:da:9b:41:1f:0c:9f:93:77:ef:a9: b3:7b:63:59:b8:ec:9e:59:49:52:7c:1f:d6:44:3c:30:93:78: a9:bd:3f:46:06:0e:2f:9e:e7:08:e2:49:29:66:78:0c:1e:82: 9c:21:0d:3d:93:9c:6d:85:0b:1e:e3:64:7f:26:fa:70:3a:a9: 23:eb:1c:88:8b:ab:10:2c:dc:e1:90:14:36:4e:3c:07:ea:a3: 26:b6:d9:b9:49:a1:ad:26:3d:4c:cd:61:f0:14:93:2f:fc:e7: 0e:f5:a6:d7:41:cf:8c:bc:17:a2:90:0c:74:54:06:6f:c6:b8: 5f:3e:77:59:fd:30:a9:7b:c7:1b:ef:3e:7c:09:31:27:25:5f: 79:89:fd:47:37:50:4e:f4:4a:a1:4a:fb:e0:48:7f:fc:e6:8f: c0:d8:2e:17:07:28:70:d5:01:ee:34:bc:4d:c1:52:72:07:8d: e7:da:50:f3:e5:c6:88:e3:52:45:e5:ae:a4:a6:48:b4:f8:7a: 1b:db:01:c6:9c:dd:70:7f:ad:c3:ff:5b:3f:e1:72:94:32:16: e5:1e:3f:93 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9bIQsn7NpUvl+MYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBhNDI0ZDMtMzViZC00M2RmLTgyNDUtM2ZiMDhlYTdh ZjVhMB4XDTI2MTAwMTA5MDAyNFoXDTI2MTAwNDA5MDAwMFowLzEtMCsGA1UEAxMk MDcyY2VmNzAtZTAzYy00MzZjLWFkNDUtN2U5MjA0MzU5NDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmBDug9Fh+MYTzEfbosjZZ80rtxIFWKQj102 u4LfDfaTCgf+sbXhjl9Vw6PRiKOUCf+Pgbm1AOxX7mKuI0fISS4doNBoGvRxaS+E Aroo4JlQW1nVnclpzaQbOtUJz4DqSI30EtpYDmh429zobtKObIhv7kx69INgd6YG MEVnHIGp+YMFJr7AH1gL578uChqXndcQwTbMzSPL41AHtthJHyigcfExJYOslYT2 ewmv0SqJa+ZcizfFMRoqHzvsDQSNsczAYO5oayuCmtfABhnjob1HOW/GW+YFDL3d 50gCzPEc1UE+74F3zLS35GWBi+9GHMgblE5fda/CaO/kQiDpCQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIu17cfQLn9NXDW18NvB1vIUyixOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MGE0 MjRkMy0zNWJkLTQzZGYtODI0NS0zZmIwOGVhN2FmNWEvNzBhNDI0ZDMtMzViZC00 M2RmLTgyNDUtM2ZiMDhlYTdhZjVhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzBhNDI0ZDMtMzViZC00M2RmLTgy NDUtM2ZiMDhlYTdhZjVhLzcwYTQyNGQzLTM1YmQtNDNkZi04MjQ1LTNmYjA4ZWE3 YWY1YS5jcmwwHwYDVR0jBBgwFoAU8loH7di3va0sdvBenFAq6oPksZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MGE0MjRkMy0zNWJkLTQzZGYtODI0NS0zZmIw OGVhN2FmNWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBiAmoGwCuJmRnocWQCVOL9 uHbbsT1b14Q5xscQ+voThKRgyWvI4fvXftJDItqbQR8Mn5N376mze2NZuOyeWUlS fB/WRDwwk3ipvT9GBg4vnucI4kkpZngMHoKcIQ09k5xthQse42R/JvpwOqkj6xyI i6sQLNzhkBQ2TjwH6qMmttm5SaGtJj1MzWHwFJMv/OcO9abXQc+MvBeikAx0VAZv xrhfPndZ/TCpe8cb7z58CTEnJV95if1HN1BO9EqhSvvgSH/85o/A2C4XByhw1QHu NLxNwVJyB43n2lDz5caI41JF5a6kpki0+Hob2wHGnN1wf63D/1s/4XKUMhblHj+T -----END CERTIFICATE-----Generated at Thu Oct 1 15:21:53 2026 by rpki-client