$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft File: 70ddad33-55eb-4125-9221-0129168a645b.mft (raw, json) Hash identifier: TZjdyMoK2ydQXnUaFcl178ngWL3EV+ar9Ba1vt9ycRY= Subject key identifier: 40:47:2F:EB:AA:68:2F:EE:64:39:30:96:F1:18:5E:52:1A:D9:03:83 Authority key identifier: 7F:4C:A4:22:A3:CB:BB:A5:D6:77:9C:25:01:F3:7F:E5:D9:0E:B4:BD Certificate issuer: /CN=70ddad33-55eb-4125-9221-0129168a645b Certificate serial: 010D0C9F4328584E906114DCF4A7438030A35670 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft Manifest number: 010D0C9F43285841E951957BE6B52702362301EF Signing time: Mon 20 Jul 2026 18:00:23 +0000 Manifest this update: Mon 20 Jul 2026 18:00:23 +0000 Manifest next update: Thu 23 Jul 2026 18:00:00 +0000 Files and hashes: 1: 41138728-4b0a-33e7-a5bd-ea7cb42a601e.roa (hash: yecOUQ9CbdSrmKc0cLWD+/xbikozYKaqklBGzswvd0w=) 2: 70ddad33-55eb-4125-9221-0129168a645b.crl (hash: C/f3U/4K/qRYQw0NTHBJW7R2XP9RyrpPe8/MKmtHrOw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:90:61:14:dc:f4:a7:43:80:30:a3:56:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70ddad33-55eb-4125-9221-0129168a645b Validity Not Before: Jul 20 18:00:23 2026 GMT Not After : Jul 23 18:00:00 2026 GMT Subject: CN=1f298ee1-8ee9-4eef-a896-5e0ca2d2578c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8e:5e:49:4a:19:f3:f8:a2:24:4f:d5:49:f9: ab:7d:b5:1b:96:c4:96:8c:c8:0d:ff:d6:6d:49:8b: 81:d8:34:e7:9c:1d:19:ad:c2:a9:17:40:d4:14:08: 33:61:85:2a:43:7b:bc:d5:55:91:a0:48:83:46:09: d2:e2:cb:d0:27:46:79:cf:ef:e1:b5:e7:65:78:27: f5:df:26:2e:4f:ae:e8:3d:61:87:8a:c2:d3:db:22: ee:4e:0e:5d:31:ae:e1:8c:eb:57:af:3f:5f:0c:07: c6:3a:1c:d1:54:dd:09:9b:62:45:2e:28:43:d6:f0: 76:5e:0b:2f:a4:a5:3f:ac:1c:6b:59:d0:f7:9e:da: 62:2b:67:ea:04:86:a1:f6:1e:bb:85:9c:d1:34:8b: 85:4b:ad:49:43:7a:aa:97:b4:68:74:5f:a2:14:6f: ab:45:ee:87:8b:54:ee:2e:9a:e1:71:31:9d:72:c6: c1:d6:65:fa:62:46:27:68:ac:b4:f4:18:5c:28:d3: 3b:40:46:72:23:6b:89:b4:b6:b5:4b:92:ac:f9:02: 76:32:9e:85:6c:13:61:dd:f4:2a:f7:74:76:5b:20: b2:10:56:2c:c0:d2:98:e7:f7:08:af:0a:19:95:0d: b0:48:96:a5:ea:ee:68:d9:3d:e9:30:ca:44:14:70: b8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:47:2F:EB:AA:68:2F:EE:64:39:30:96:F1:18:5E:52:1A:D9:03:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.crl X509v3 Authority Key Identifier: keyid:7F:4C:A4:22:A3:CB:BB:A5:D6:77:9C:25:01:F3:7F:E5:D9:0E:B4:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:65:db:fe:f9:a9:11:8d:45:97:73:1f:e5:24:eb:07:fc:b0: 25:65:7f:85:12:68:03:06:fe:2b:78:12:65:2a:4f:05:44:36: ec:7c:47:aa:29:64:d6:41:20:6d:ba:cf:f5:4c:12:c2:bc:23: d2:da:70:a5:a6:9c:17:d5:f1:0c:d2:bc:03:73:31:85:22:d8: 22:d5:a0:83:93:75:2e:b4:97:42:50:12:9f:65:d9:00:0d:56: 62:c9:57:13:ac:58:28:80:07:c9:be:cf:57:63:7c:0d:0f:2d: 3b:7a:09:e3:03:d0:29:6c:6f:8a:fd:78:c7:2a:e2:4a:76:a7: 49:7d:94:42:af:7c:ae:68:4f:2a:6e:5a:3c:5b:24:dc:00:92: 6e:7f:61:97:7f:6b:c8:9a:d0:35:2e:73:c2:7c:1d:39:e5:93: e1:80:60:4f:e0:54:3f:12:44:c3:ca:76:6e:1d:fd:68:cb:bb: a0:28:51:b7:c9:af:97:8a:7a:5b:f3:73:62:79:b2:65:9c:67: df:7b:6d:01:06:10:95:49:f0:0a:52:73:43:5a:45:5c:37:f0: 20:fb:8f:d1:6b:84:de:49:45:d9:85:93:12:a6:48:de:63:56: 07:9f:c1:0e:01:eb:86:b2:d4:1f:93:98:41:d8:7b:e9:bc:4f: fb:66:03:60 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6QYRTc9KdDgDCjVnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBkZGFkMzMtNTVlYi00MTI1LTkyMjEtMDEyOTE2OGE2 NDViMB4XDTI2MDcyMDE4MDAyM1oXDTI2MDcyMzE4MDAwMFowLzEtMCsGA1UEAxMk MWYyOThlZTEtOGVlOS00ZWVmLWE4OTYtNWUwY2EyZDI1NzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmo5eSUoZ8/iiJE/VSfmrfbUblsSWjMgN/9Zt SYuB2DTnnB0ZrcKpF0DUFAgzYYUqQ3u81VWRoEiDRgnS4svQJ0Z5z+/htedleCf1 3yYuT67oPWGHisLT2yLuTg5dMa7hjOtXrz9fDAfGOhzRVN0Jm2JFLihD1vB2Xgsv pKU/rBxrWdD3ntpiK2fqBIah9h67hZzRNIuFS61JQ3qql7RodF+iFG+rRe6Hi1Tu LprhcTGdcsbB1mX6YkYnaKy09BhcKNM7QEZyI2uJtLa1S5Ks+QJ2Mp6FbBNh3fQq 93R2WyCyEFYswNKY5/cIrwoZlQ2wSJal6u5o2T3pMMpEFHC4FQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEBHL+uqaC/uZDkwlvEYXlIa2QODMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MGRk YWQzMy01NWViLTQxMjUtOTIyMS0wMTI5MTY4YTY0NWIvNzBkZGFkMzMtNTVlYi00 MTI1LTkyMjEtMDEyOTE2OGE2NDViLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzBkZGFkMzMtNTVlYi00MTI1LTky MjEtMDEyOTE2OGE2NDViLzcwZGRhZDMzLTU1ZWItNDEyNS05MjIxLTAxMjkxNjhh NjQ1Yi5jcmwwHwYDVR0jBBgwFoAUf0ykIqPLu6XWd5wlAfN/5dkOtL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83MGRkYWQzMy01NWViLTQxMjUtOTIyMS0wMTI5 MTY4YTY0NWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAnZdv++akRjUWXcx/lJOsH /LAlZX+FEmgDBv4reBJlKk8FRDbsfEeqKWTWQSBtus/1TBLCvCPS2nClppwX1fEM 0rwDczGFItgi1aCDk3UutJdCUBKfZdkADVZiyVcTrFgogAfJvs9XY3wNDy07egnj A9ApbG+K/XjHKuJKdqdJfZRCr3yuaE8qblo8WyTcAJJuf2GXf2vImtA1LnPCfB05 5ZPhgGBP4FQ/EkTDynZuHf1oy7ugKFG3ya+Xinpb83NiebJlnGffe20BBhCVSfAK UnNDWkVcN/Ag+4/Ra4TeSUXZhZMSpkjeY1YHn8EOAeuGstQfk5hB2HvpvE/7ZgNg -----END CERTIFICATE-----Generated at Tue Jul 21 13:25:56 2026 by rpki-client