$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a70db1b2-c27e-469c-993f-3f704aba0e3b/a70db1b2-c27e-469c-993f-3f704aba0e3b.mft File: a70db1b2-c27e-469c-993f-3f704aba0e3b.mft (raw, json) Hash identifier: bw2TIIAGScFiTf3kMbWqu48uqwgsNkYrFI+mCuxya/c= Subject key identifier: 82:D7:78:78:5E:4B:01:6C:BA:30:89:63:56:88:4A:E5:05:25:F4:F8 Authority key identifier: D7:9D:64:66:6F:3D:88:AD:C6:36:DC:4D:5D:65:01:18:4B:0E:0B:15 Certificate issuer: /CN=a70db1b2-c27e-469c-993f-3f704aba0e3b Certificate serial: 010D0C9F4328584E0700A0D9A3FB8DCF364C2120 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a70db1b2-c27e-469c-993f-3f704aba0e3b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a70db1b2-c27e-469c-993f-3f704aba0e3b/a70db1b2-c27e-469c-993f-3f704aba0e3b.mft Manifest number: 010D0C9F4328584D27C18EB06AA910EB63E31651 Signing time: Mon 01 Jun 2026 13:00:22 +0000 Manifest this update: Mon 01 Jun 2026 13:00:22 +0000 Manifest next update: Thu 04 Jun 2026 13:00:00 +0000 Files and hashes: 1: a70db1b2-c27e-469c-993f-3f704aba0e3b.crl (hash: aUAk/UjJLLSimPSWd3U5upk8n+6j6rhpyQG9Ur4+oXs=) 2: f0f5de0a-cde6-3bac-96cf-0a36cb981fe6.roa (hash: ykoETxlMPYtbuY+oTYSmdAgKqC9iucuF3rImOXHWXBE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a70db1b2-c27e-469c-993f-3f704aba0e3b/a70db1b2-c27e-469c-993f-3f704aba0e3b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a70db1b2-c27e-469c-993f-3f704aba0e3b/a70db1b2-c27e-469c-993f-3f704aba0e3b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a70db1b2-c27e-469c-993f-3f704aba0e3b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:07:00:a0:d9:a3:fb:8d:cf:36:4c:21:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a70db1b2-c27e-469c-993f-3f704aba0e3b Validity Not Before: Jun 1 13:00:22 2026 GMT Not After : Jun 4 13:00:00 2026 GMT Subject: CN=2bc6e884-0507-4d74-afce-64da1f34472b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:25:2c:cf:98:c3:17:dc:5d:92:01:a1:ba:4b: 47:c8:50:f0:ff:5a:cf:03:f3:d9:40:09:5e:f2:5a: 07:01:cb:62:32:4a:e0:7c:bf:50:2b:66:d0:31:cf: 25:67:65:1d:ac:b0:3c:b7:85:47:3f:fe:81:0a:60: 28:9a:12:93:1a:27:5a:ca:d5:a3:98:55:2c:9f:0a: 46:43:39:3c:cc:59:ff:7a:d0:da:ad:79:7e:b0:68: a7:dc:be:5b:1c:b0:85:dc:dc:57:76:8e:32:11:b6: 6b:fb:f2:06:53:8e:3f:dc:60:0f:0f:8b:3a:ca:ff: 4c:ff:37:59:d8:03:44:2d:4a:7f:e0:e4:8d:29:e2: cc:32:5c:44:5a:f1:91:71:df:89:b5:99:f1:93:ab: 72:57:5b:da:19:ba:b8:4e:ec:33:dc:33:ee:97:1c: ec:34:b5:c1:47:f6:6a:fc:d3:e2:8b:a2:bf:7b:9b: 48:59:0a:19:28:54:4e:86:61:61:ba:42:5a:26:f1: 3e:94:b6:5b:67:d7:89:45:c2:30:66:6c:1c:49:06: 81:d9:c1:2c:4a:b0:4d:df:a8:36:87:b8:26:21:7e: 33:19:59:ec:f2:3c:82:29:be:3f:ff:d9:87:90:cf: eb:29:e4:2c:09:3c:13:8f:c7:9b:32:31:32:24:41: db:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:D7:78:78:5E:4B:01:6C:BA:30:89:63:56:88:4A:E5:05:25:F4:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a70db1b2-c27e-469c-993f-3f704aba0e3b/a70db1b2-c27e-469c-993f-3f704aba0e3b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a70db1b2-c27e-469c-993f-3f704aba0e3b/a70db1b2-c27e-469c-993f-3f704aba0e3b.crl X509v3 Authority Key Identifier: keyid:D7:9D:64:66:6F:3D:88:AD:C6:36:DC:4D:5D:65:01:18:4B:0E:0B:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a70db1b2-c27e-469c-993f-3f704aba0e3b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:57:c1:4c:38:8b:0e:d1:d3:af:11:2b:26:d9:69:92:5f:10: 48:76:6e:28:93:0b:b4:b8:cf:f6:c4:cc:21:83:c0:93:22:79: 8f:e5:2d:fe:7d:89:e4:55:ae:70:75:68:9c:49:b0:f1:d8:b6: a2:ac:74:eb:ce:d7:51:45:b8:07:e7:6f:99:66:41:be:22:4d: 74:58:f2:ce:ae:90:12:51:6e:f0:97:d9:e1:50:9f:2f:5b:00: e5:df:67:a5:52:24:21:d3:41:91:b5:b9:bb:6d:dd:c8:d0:06: 56:e3:2b:4c:9f:c8:e7:e8:a6:d5:c0:69:e9:bb:2a:9a:eb:7b: 8d:f7:6f:2c:c1:eb:f3:ea:15:42:5e:af:43:c0:9a:9a:39:21: 78:f6:3b:53:61:0a:64:a8:bf:b1:cd:8d:ca:41:49:d3:a0:3b: e4:e6:e0:c7:e9:3f:d4:e6:1e:84:b0:25:ff:f2:2b:37:5e:87: 56:9a:52:36:48:a7:56:01:eb:10:d2:3f:11:3c:62:fe:76:74: 9b:41:01:65:cd:fe:10:24:ba:a1:00:9c:d2:28:3f:d1:22:09: 7b:14:91:63:a7:49:f9:49:44:aa:a7:da:ec:4a:09:08:a6:bb: f6:e1:5e:ae:e5:b1:91:93:86:ef:5e:5a:8b:4e:a5:6f:5d:a8: ec:06:ac:10 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE4HAKDZo/uNzzZMISAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcwZGIxYjItYzI3ZS00NjljLTk5M2YtM2Y3MDRhYmEw ZTNiMB4XDTI2MDYwMTEzMDAyMloXDTI2MDYwNDEzMDAwMFowLzEtMCsGA1UEAxMk MmJjNmU4ODQtMDUwNy00ZDc0LWFmY2UtNjRkYTFmMzQ0NzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyUsz5jDF9xdkgGhuktHyFDw/1rPA/PZQAle 8loHActiMkrgfL9QK2bQMc8lZ2UdrLA8t4VHP/6BCmAomhKTGidaytWjmFUsnwpG Qzk8zFn/etDarXl+sGin3L5bHLCF3NxXdo4yEbZr+/IGU44/3GAPD4s6yv9M/zdZ 2ANELUp/4OSNKeLMMlxEWvGRcd+JtZnxk6tyV1vaGbq4Tuwz3DPulxzsNLXBR/Zq /NPii6K/e5tIWQoZKFROhmFhukJaJvE+lLZbZ9eJRcIwZmwcSQaB2cEsSrBN36g2 h7gmIX4zGVns8jyCKb4//9mHkM/rKeQsCTwTj8ebMjEyJEHbdwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFILXeHheSwFsujCJY1aISuUFJfT4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9hNzBk YjFiMi1jMjdlLTQ2OWMtOTkzZi0zZjcwNGFiYTBlM2IvYTcwZGIxYjItYzI3ZS00 NjljLTk5M2YtM2Y3MDRhYmEwZTNiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYTcwZGIxYjItYzI3ZS00NjljLTk5 M2YtM2Y3MDRhYmEwZTNiL2E3MGRiMWIyLWMyN2UtNDY5Yy05OTNmLTNmNzA0YWJh MGUzYi5jcmwwHwYDVR0jBBgwFoAU151kZm89iK3GNtxNXWUBGEsOCxUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9hNzBkYjFiMi1jMjdlLTQ2OWMtOTkzZi0zZjcw NGFiYTBlM2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAaV8FMOIsO0dOvESsm2WmS XxBIdm4okwu0uM/2xMwhg8CTInmP5S3+fYnkVa5wdWicSbDx2LairHTrztdRRbgH 52+ZZkG+Ik10WPLOrpASUW7wl9nhUJ8vWwDl32elUiQh00GRtbm7bd3I0AZW4ytM n8jn6KbVwGnpuyqa63uN928swevz6hVCXq9DwJqaOSF49jtTYQpkqL+xzY3KQUnT oDvk5uDH6T/U5h6EsCX/8is3XodWmlI2SKdWAesQ0j8RPGL+dnSbQQFlzf4QJLqh AJzSKD/RIgl7FJFjp0n5SUSqp9rsSgkIprv24V6u5bGRk4bvXlqLTqVvXajsBqwQ -----END CERTIFICATE-----Generated at Mon Jun 1 21:53:59 2026 by rpki-client