$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/70379220-49c0-45f2-94d3-098a72b1db54.mft File: 70379220-49c0-45f2-94d3-098a72b1db54.mft (raw, json) Hash identifier: A/UpWkdVLMxyOUv2GiT9YAoKQGPjhsW+1efAO6O8XU0= Subject key identifier: 45:D6:F1:91:1B:4E:3E:2A:14:6F:0E:A0:12:3C:8D:C3:E9:CB:B0:9F Authority key identifier: DE:AE:5B:59:16:A5:88:64:34:27:20:3B:E1:A0:9C:5E:69:FB:57:BD Certificate issuer: /CN=70379220-49c0-45f2-94d3-098a72b1db54 Certificate serial: 010D0C9F4328584DA4B59FC7D51EBDAEE54FD840 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/70379220-49c0-45f2-94d3-098a72b1db54.mft Manifest number: 010D0C9F4328584073A8486C280EC1A7EB0C053E Signing time: Mon 27 Apr 2026 08:00:03 +0000 Manifest this update: Mon 27 Apr 2026 08:00:03 +0000 Manifest next update: Wed 29 Apr 2026 08:00:00 +0000 Files and hashes: 1: 2dfe31c7-54ee-3017-8637-ce67fd53b424.roa (hash: b1t4fDOpkBr3rLvEqWNvxEwtSV7JaRMBLJT5kk2Ydng=) 2: 70379220-49c0-45f2-94d3-098a72b1db54.crl (hash: r7FFvVxFYyLKNAT/jpp5ZgPqsDOLmivYID13Fh3XM7g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/70379220-49c0-45f2-94d3-098a72b1db54.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/70379220-49c0-45f2-94d3-098a72b1db54.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a4:b5:9f:c7:d5:1e:bd:ae:e5:4f:d8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70379220-49c0-45f2-94d3-098a72b1db54 Validity Not Before: Apr 27 08:00:03 2026 GMT Not After : Apr 29 08:00:00 2026 GMT Subject: CN=273cb14d-fd92-466d-ab58-d66a22e3e928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4a:79:60:1e:73:8b:d1:74:ea:74:55:4d:18: fb:a2:90:cf:0d:16:ba:00:e1:9c:3d:1d:c8:eb:de: 7e:28:e3:e7:d1:c5:e5:f7:22:72:19:50:7d:5b:39: f9:b6:f8:1c:b9:4e:8a:39:9b:98:8b:03:e7:7d:b2: 90:02:a9:5f:80:fb:ec:8f:f8:3b:e6:69:ee:38:4e: 93:36:3f:1c:aa:be:1e:0c:8a:f7:b3:38:fa:21:1a: 03:96:97:25:98:f3:6d:4b:86:7f:11:6b:09:af:97: c4:15:54:56:a9:9f:1f:2a:26:af:24:c9:eb:fa:bd: 8e:ed:f3:b4:71:26:3c:f5:fc:e4:8d:67:0d:92:1e: be:8b:e9:d3:69:ce:1f:c6:a5:61:3a:89:e2:10:a0: 39:59:3f:28:b4:e9:77:8c:79:0c:a4:61:15:4f:27: 79:5c:52:0e:3f:be:70:31:04:98:65:0c:d9:aa:81: 6d:4f:b5:e8:69:e8:60:8b:2f:06:86:e6:3a:18:14: 49:fa:0c:81:78:13:c3:85:9d:1e:80:c2:6a:bc:11: 2f:fc:84:60:c2:63:ec:0d:f3:9b:64:fe:e0:51:e5: c9:a2:15:6a:c8:93:41:14:3f:93:3b:d1:62:15:c1: 46:6b:dd:22:8f:aa:cd:72:a1:46:d3:34:ee:3f:d3: 48:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D6:F1:91:1B:4E:3E:2A:14:6F:0E:A0:12:3C:8D:C3:E9:CB:B0:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/70379220-49c0-45f2-94d3-098a72b1db54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/70379220-49c0-45f2-94d3-098a72b1db54.crl X509v3 Authority Key Identifier: keyid:DE:AE:5B:59:16:A5:88:64:34:27:20:3B:E1:A0:9C:5E:69:FB:57:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:9d:ad:02:52:73:c7:29:8f:72:a2:60:6b:c4:a7:0a:76:93: 89:d0:13:b5:20:b4:d0:2f:e6:74:78:a9:ab:71:6f:67:b3:f3: eb:d1:25:8e:58:66:07:0e:89:67:e1:45:61:e0:54:7c:51:6e: 38:12:a6:eb:0f:18:83:6e:5a:47:4d:b1:1b:d1:84:0f:5f:2d: 20:f7:24:ef:d6:5d:3d:47:77:61:ec:e8:82:b4:60:89:d8:ce: 87:dd:b7:bf:a5:98:a5:37:fe:4d:91:b2:3d:66:8c:31:78:47: 63:ec:d1:df:03:a1:59:40:c1:83:5c:86:01:83:42:7a:97:07: 9c:08:d0:26:90:38:02:17:a4:04:41:68:15:e3:e0:e5:e0:0d: c3:7f:a1:38:e0:87:dc:c9:cb:7f:ab:4e:2b:6e:4a:e5:f3:73: 0d:55:0c:7c:fb:9c:fd:ed:2a:a4:e5:53:b5:83:8b:81:ce:d6: 02:bf:b4:81:c2:1a:c4:0a:98:43:7d:64:c9:c6:b5:47:fe:d2: 11:6d:c6:d1:99:c5:55:dd:b8:85:52:78:aa:69:dd:61:94:8a: d1:cf:a3:cd:eb:65:08:cb:aa:bc:45:b6:c6:1d:93:65:71:21: cb:af:85:11:95:91:d7:03:63:13:f8:e0:97:0c:91:47:8f:83: e3:fe:14:5a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2ktZ/H1R69ruVP2EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzAzNzkyMjAtNDljMC00NWYyLTk0ZDMtMDk4YTcyYjFk YjU0MB4XDTI2MDQyNzA4MDAwM1oXDTI2MDQyOTA4MDAwMFowLzEtMCsGA1UEAxMk MjczY2IxNGQtZmQ5Mi00NjZkLWFiNTgtZDY2YTIyZTNlOTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUp5YB5zi9F06nRVTRj7opDPDRa6AOGcPR3I 695+KOPn0cXl9yJyGVB9Wzn5tvgcuU6KOZuYiwPnfbKQAqlfgPvsj/g75mnuOE6T Nj8cqr4eDIr3szj6IRoDlpclmPNtS4Z/EWsJr5fEFVRWqZ8fKiavJMnr+r2O7fO0 cSY89fzkjWcNkh6+i+nTac4fxqVhOoniEKA5WT8otOl3jHkMpGEVTyd5XFIOP75w MQSYZQzZqoFtT7Xoaehgiy8GhuY6GBRJ+gyBeBPDhZ0egMJqvBEv/IRgwmPsDfOb ZP7gUeXJohVqyJNBFD+TO9FiFcFGa90ij6rNcqFG0zTuP9NIpwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEXW8ZEbTj4qFG8OoBI8jcPpy7CfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDM3 OTIyMC00OWMwLTQ1ZjItOTRkMy0wOThhNzJiMWRiNTQvNzAzNzkyMjAtNDljMC00 NWYyLTk0ZDMtMDk4YTcyYjFkYjU0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzAzNzkyMjAtNDljMC00NWYyLTk0 ZDMtMDk4YTcyYjFkYjU0LzcwMzc5MjIwLTQ5YzAtNDVmMi05NGQzLTA5OGE3MmIx ZGI1NC5jcmwwHwYDVR0jBBgwFoAU3q5bWRaliGQ0JyA74aCcXmn7V70wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MDM3OTIyMC00OWMwLTQ1ZjItOTRkMy0wOThh NzJiMWRiNTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC1na0CUnPHKY9yomBrxKcK dpOJ0BO1ILTQL+Z0eKmrcW9ns/Pr0SWOWGYHDoln4UVh4FR8UW44EqbrDxiDblpH TbEb0YQPXy0g9yTv1l09R3dh7OiCtGCJ2M6H3be/pZilN/5NkbI9ZowxeEdj7NHf A6FZQMGDXIYBg0J6lwecCNAmkDgCF6QEQWgV4+Dl4A3Df6E44Ifcyct/q04rbkrl 83MNVQx8+5z97Sqk5VO1g4uBztYCv7SBwhrECphDfWTJxrVH/tIRbcbRmcVV3biF Uniqad1hlIrRz6PN62UIy6q8RbbGHZNlcSHLr4URlZHXA2MT+OCXDJFHj4Pj/hRa -----END CERTIFICATE-----Generated at Mon Apr 27 09:57:20 2026 by rpki-client