$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft File: 70ddad33-55eb-4125-9221-0129168a645b.mft (raw, json) Hash identifier: M8car6PRjEpW6lzK8kvlih4cK4LyBCa0LeYtdk5hIgs= Subject key identifier: 19:3D:97:C6:2A:73:71:F6:CB:5A:E3:3D:06:A9:48:E1:79:5A:DF:B4 Authority key identifier: 7F:4C:A4:22:A3:CB:BB:A5:D6:77:9C:25:01:F3:7F:E5:D9:0E:B4:BD Certificate issuer: /CN=70ddad33-55eb-4125-9221-0129168a645b Certificate serial: 010D0C9F4328584DE61528A0889E8477D696CA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft Manifest number: 010D0C9F43285841E951957BE6B52702362301B0 Signing time: Wed 20 May 2026 18:00:03 +0000 Manifest this update: Wed 20 May 2026 18:00:03 +0000 Manifest next update: Fri 22 May 2026 18:00:00 +0000 Files and hashes: 1: 41138728-4b0a-33e7-a5bd-ea7cb42a601e.roa (hash: RuguUjCDT7W+kWM4fR0hS2MLBzKyN9ncFYHxNYsT9aY=) 2: 70ddad33-55eb-4125-9221-0129168a645b.crl (hash: LevbR/PkJtMAO4TA8WVeGXFmEN94JJWBetSZ6dY2dQ0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e6:15:28:a0:88:9e:84:77:d6:96:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70ddad33-55eb-4125-9221-0129168a645b Validity Not Before: May 20 18:00:03 2026 GMT Not After : May 22 18:00:00 2026 GMT Subject: CN=c6fd8312-e05f-41e9-bfa3-efb21abb10a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:21:96:67:2e:7a:dc:ac:a6:f3:8e:3b:13:0c: 85:0a:d6:e1:de:6a:36:17:55:a5:16:43:62:97:68: 22:81:30:f0:ba:02:d3:a9:86:b6:e2:1c:52:47:f0: ca:5a:db:4c:45:94:87:c0:62:0e:b0:c1:0c:f6:6e: a1:72:0b:66:c8:8b:aa:15:af:ed:27:63:37:47:b4: 70:4c:2f:79:ba:bf:34:71:87:41:94:7e:10:b3:ef: ff:c8:ff:45:c7:d5:b5:5f:26:4c:24:7b:fa:0c:db: 85:86:2d:1a:69:7b:76:f0:b9:47:50:08:73:35:50: c6:da:94:80:6b:2c:33:78:dc:4a:b1:9b:63:9a:8b: 19:df:09:8e:21:ee:d2:05:ab:23:bc:1d:d9:c8:e8: fd:0a:66:18:e1:ed:8c:2b:93:1e:84:9a:a2:ee:66: ca:70:2b:45:88:9b:5b:74:a4:98:18:fd:fc:83:11: b7:e5:63:ac:ff:86:49:16:e8:67:87:74:8e:cc:54: 87:90:cc:d5:9c:a1:ae:20:f9:34:23:6b:45:11:89: 52:2b:20:76:42:c2:47:19:13:1b:7d:34:6b:26:90: 4e:11:94:7b:1b:ca:25:7b:f7:af:30:bd:f4:94:f4: 05:2f:07:90:15:0d:c7:d8:17:8f:09:79:66:bc:44: 64:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:3D:97:C6:2A:73:71:F6:CB:5A:E3:3D:06:A9:48:E1:79:5A:DF:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.crl X509v3 Authority Key Identifier: keyid:7F:4C:A4:22:A3:CB:BB:A5:D6:77:9C:25:01:F3:7F:E5:D9:0E:B4:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:8c:a3:26:64:ae:e7:f9:07:c5:f1:03:aa:e5:5a:a7:ac:e9: b2:66:53:7c:0e:f2:e6:bd:96:58:ce:de:b2:88:6b:c4:d4:3b: 7d:f1:2c:77:66:53:fb:94:ce:b9:9e:d9:46:d5:e7:40:4c:d1: 43:30:f7:5c:64:81:53:28:69:df:c5:74:fe:1f:ed:c5:9f:32: 88:7e:76:63:98:6d:4b:ab:af:f2:7c:4f:33:ca:cb:59:1b:eb: dc:c3:d0:6f:16:6f:b0:81:d7:d1:f8:c8:47:25:fb:f5:06:10: c3:5f:1e:32:52:de:65:e1:50:a7:58:8b:60:31:14:9d:47:99: 50:a9:8c:9f:77:ab:8c:fa:7b:8b:5c:dd:14:e0:fe:09:c9:35: c6:4f:a3:62:d8:01:40:35:f2:6e:e2:10:af:c5:51:0b:02:d5: 0e:29:18:c4:7f:08:30:fb:a8:f0:b2:bf:7d:6c:7d:a7:a8:90: bb:5f:72:8f:95:df:c2:08:19:a2:e2:e2:57:05:75:8c:3a:7e: 37:b7:83:4c:2b:f2:5f:ec:86:19:d5:77:a2:04:a2:13:d1:30: 0d:6f:bc:e2:06:8a:97:af:2c:ad:f0:93:c5:6c:92:a9:d8:b2: 92:e1:67:48:82:1f:64:08:d4:ef:e3:ea:db:24:45:0a:91:9d: 8f:c3:9e:85 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3mFSigiJ6Ed9aWygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBkZGFkMzMtNTVlYi00MTI1LTkyMjEtMDEyOTE2OGE2 NDViMB4XDTI2MDUyMDE4MDAwM1oXDTI2MDUyMjE4MDAwMFowLzEtMCsGA1UEAxMk YzZmZDgzMTItZTA1Zi00MWU5LWJmYTMtZWZiMjFhYmIxMGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyGWZy563Kym8447EwyFCtbh3mo2F1WlFkNi l2gigTDwugLTqYa24hxSR/DKWttMRZSHwGIOsMEM9m6hcgtmyIuqFa/tJ2M3R7Rw TC95ur80cYdBlH4Qs+//yP9Fx9W1XyZMJHv6DNuFhi0aaXt28LlHUAhzNVDG2pSA aywzeNxKsZtjmosZ3wmOIe7SBasjvB3ZyOj9CmYY4e2MK5MehJqi7mbKcCtFiJtb dKSYGP38gxG35WOs/4ZJFuhnh3SOzFSHkMzVnKGuIPk0I2tFEYlSKyB2QsJHGRMb fTRrJpBOEZR7G8ole/evML30lPQFLweQFQ3H2BePCXlmvERkYQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBk9l8Yqc3H2y1rjPQapSOF5Wt+0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MGRk YWQzMy01NWViLTQxMjUtOTIyMS0wMTI5MTY4YTY0NWIvNzBkZGFkMzMtNTVlYi00 MTI1LTkyMjEtMDEyOTE2OGE2NDViLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzBkZGFkMzMtNTVlYi00MTI1LTky MjEtMDEyOTE2OGE2NDViLzcwZGRhZDMzLTU1ZWItNDEyNS05MjIxLTAxMjkxNjhh NjQ1Yi5jcmwwHwYDVR0jBBgwFoAUf0ykIqPLu6XWd5wlAfN/5dkOtL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83MGRkYWQzMy01NWViLTQxMjUtOTIyMS0wMTI5 MTY4YTY0NWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDCjKMmZK7n+QfF8QOq5Vqn rOmyZlN8DvLmvZZYzt6yiGvE1Dt98Sx3ZlP7lM65ntlG1edATNFDMPdcZIFTKGnf xXT+H+3FnzKIfnZjmG1Lq6/yfE8zystZG+vcw9BvFm+wgdfR+MhHJfv1BhDDXx4y Ut5l4VCnWItgMRSdR5lQqYyfd6uM+nuLXN0U4P4JyTXGT6Ni2AFANfJu4hCvxVEL AtUOKRjEfwgw+6jwsr99bH2nqJC7X3KPld/CCBmi4uJXBXWMOn43t4NMK/Jf7IYZ 1XeiBKIT0TANb7ziBoqXryyt8JPFbJKp2LKS4WdIgh9kCNTv4+rbJEUKkZ2Pw56F -----END CERTIFICATE-----Generated at Thu May 21 18:55:58 2026 by rpki-client