$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.mft File: 7e70a287-ad97-4c1e-9564-9ca069f57b17.mft (raw, json) Hash identifier: oaz1OZ4UE8Wutv4WeNfroe7h769NC7Q4Fh4W05tRUz8= Subject key identifier: 2A:D7:4B:5C:73:F7:F2:C6:DE:7D:B4:D3:BA:CE:2E:30:4A:FD:15:68 Authority key identifier: 21:18:AB:BD:5B:F4:2E:18:F7:06:3D:1F:45:3F:35:13:54:9A:F9:60 Certificate issuer: /CN=7e70a287-ad97-4c1e-9564-9ca069f57b17 Certificate serial: 010D0C9F4328584DA208B8F6D9412EBCEAF9AF40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.mft Manifest number: 010D0C9F4328584073A84A2792840918C6A14ED5 Signing time: Sun 26 Apr 2026 09:00:03 +0000 Manifest this update: Sun 26 Apr 2026 09:00:03 +0000 Manifest next update: Wed 29 Apr 2026 09:00:00 +0000 Files and hashes: 1: 5e00859f-bf20-388d-a400-94e4c09e3154.roa (hash: DHj7n5Yuo+QDr9yD21w8TnJD0h1DiOacz0VDuKRCoeY=) 2: 7e70a287-ad97-4c1e-9564-9ca069f57b17.crl (hash: VZ6pHjzBrooB/4FPV1HvuslSjgGHXBPsg3HlqHnE4sw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a2:08:b8:f6:d9:41:2e:bc:ea:f9:af:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e70a287-ad97-4c1e-9564-9ca069f57b17 Validity Not Before: Apr 26 09:00:03 2026 GMT Not After : Apr 29 09:00:00 2026 GMT Subject: CN=f769825b-8207-4841-8bd9-80f54e406756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f9:fa:4c:bd:7b:b5:db:41:38:53:d4:5e:0b: 28:50:69:18:fb:bc:1d:5c:47:44:39:f5:d1:65:13: ac:ec:fd:c4:db:03:71:09:c4:5e:15:ef:aa:cf:28: fd:79:a8:e3:44:94:de:9b:54:bc:5c:c0:a5:99:a8: d9:0b:ae:b8:65:67:5d:9f:19:2d:b1:7e:89:38:3e: e5:31:8b:9f:bf:bd:15:4e:99:c4:b5:e7:07:12:74: e9:3d:da:94:b9:e2:65:04:43:31:67:06:5a:2f:95: 1f:12:0f:d1:bd:99:28:52:ae:83:86:4a:0b:a6:a2: 18:02:7b:37:9d:3c:c1:c3:5b:3e:bd:96:a2:c9:f8: c4:ac:17:b9:5c:c6:6a:79:8b:dd:a6:b6:a1:22:4f: f5:bc:d1:4f:90:ae:9b:7e:ea:57:7f:ee:96:37:80: 53:12:8e:26:45:28:23:e8:e9:bd:47:00:fa:bd:d4: 63:96:f6:45:8a:be:ae:6e:38:61:f3:88:fd:0b:32: c3:75:51:9e:b6:8f:c9:c5:87:e9:38:c2:45:96:17: db:77:0e:19:5f:f7:ce:60:5c:9e:74:bb:78:5e:47: d0:4f:67:f0:56:aa:5d:76:44:ee:d4:bb:4f:23:b1: db:39:82:1f:dd:02:ec:0a:21:51:08:0c:b0:12:a0: c3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D7:4B:5C:73:F7:F2:C6:DE:7D:B4:D3:BA:CE:2E:30:4A:FD:15:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.crl X509v3 Authority Key Identifier: keyid:21:18:AB:BD:5B:F4:2E:18:F7:06:3D:1F:45:3F:35:13:54:9A:F9:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:3a:94:0a:9c:1f:5d:a9:8e:67:09:7d:69:c9:bf:c7:00:84: 8a:0a:d8:3c:b6:86:f8:dd:cc:c5:3e:eb:67:ff:12:cd:dd:b5: 7e:f5:50:8c:40:4d:a8:83:52:15:cf:78:91:27:37:eb:74:b0: 94:12:a5:0c:02:de:63:25:18:bb:63:9a:6b:01:bf:87:88:de: 51:1f:9a:16:00:8d:72:04:f8:18:a8:53:a5:03:88:1d:5c:65: d0:66:df:ac:a3:26:60:03:bf:53:9c:fb:b5:88:2f:72:89:71: dd:e2:b5:8a:e6:86:d7:03:10:7f:e8:11:72:21:25:95:57:d5: 3d:65:11:64:64:4c:38:99:5b:9f:a1:36:47:52:32:57:73:80: 2f:b0:44:54:f3:7b:26:69:5c:b7:68:7c:46:69:de:1d:77:03: 09:8f:0a:12:a5:c7:ca:f8:d2:08:03:2d:3f:f7:6c:38:ed:71: fc:0d:8a:3a:bf:15:63:2d:41:bf:18:0d:dd:cb:fc:e7:43:c5: b8:fb:c0:a2:bf:f5:7b:97:bc:ab:f7:1b:1a:f8:ab:0d:76:6f: 53:38:73:82:97:e9:cf:60:7d:36:23:25:01:42:69:75:be:de: ce:d1:23:92:82:c1:5c:9a:19:c6:33:b4:e9:bc:47:33:d6:8d: e4:3f:11:23 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2iCLj22UEuvOr5r0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U3MGEyODctYWQ5Ny00YzFlLTk1NjQtOWNhMDY5ZjU3 YjE3MB4XDTI2MDQyNjA5MDAwM1oXDTI2MDQyOTA5MDAwMFowLzEtMCsGA1UEAxMk Zjc2OTgyNWItODIwNy00ODQxLThiZDktODBmNTRlNDA2NzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfn6TL17tdtBOFPUXgsoUGkY+7wdXEdEOfXR ZROs7P3E2wNxCcReFe+qzyj9eajjRJTem1S8XMClmajZC664ZWddnxktsX6JOD7l MYufv70VTpnEtecHEnTpPdqUueJlBEMxZwZaL5UfEg/RvZkoUq6DhkoLpqIYAns3 nTzBw1s+vZaiyfjErBe5XMZqeYvdprahIk/1vNFPkK6bfupXf+6WN4BTEo4mRSgj 6Om9RwD6vdRjlvZFir6ubjhh84j9CzLDdVGeto/JxYfpOMJFlhfbdw4ZX/fOYFye dLt4XkfQT2fwVqpddkTu1LtPI7HbOYIf3QLsCiFRCAywEqDDnwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCrXS1xz9/LG3n2007rOLjBK/RVoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTcw YTI4Ny1hZDk3LTRjMWUtOTU2NC05Y2EwNjlmNTdiMTcvN2U3MGEyODctYWQ5Ny00 YzFlLTk1NjQtOWNhMDY5ZjU3YjE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U3MGEyODctYWQ5Ny00YzFlLTk1 NjQtOWNhMDY5ZjU3YjE3LzdlNzBhMjg3LWFkOTctNGMxZS05NTY0LTljYTA2OWY1 N2IxNy5jcmwwHwYDVR0jBBgwFoAUIRirvVv0Lhj3Bj0fRT81E1Sa+WAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTcwYTI4Ny1hZDk3LTRjMWUtOTU2NC05Y2Ew NjlmNTdiMTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAXOpQKnB9dqY5nCX1pyb/H AISKCtg8tob43czFPutn/xLN3bV+9VCMQE2og1IVz3iRJzfrdLCUEqUMAt5jJRi7 Y5prAb+HiN5RH5oWAI1yBPgYqFOlA4gdXGXQZt+soyZgA79TnPu1iC9yiXHd4rWK 5obXAxB/6BFyISWVV9U9ZRFkZEw4mVufoTZHUjJXc4AvsERU83smaVy3aHxGad4d dwMJjwoSpcfK+NIIAy0/92w47XH8DYo6vxVjLUG/GA3dy/znQ8W4+8Civ/V7l7yr 9xsa+KsNdm9TOHOCl+nPYH02IyUBQml1vt7O0SOSgsFcmhnGM7TpvEcz1o3kPxEj -----END CERTIFICATE-----Generated at Mon Apr 27 09:57:13 2026 by rpki-client