$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.mft File: 670b9f4e-c369-4f4c-aa24-27f3fc851bc5.mft (raw, json) Hash identifier: OwCpOP9whiMh+uRzhHrCnxj3r7mY0RtKmzt0ODGysLU= Subject key identifier: A8:AB:D7:90:59:9B:7B:FD:8D:DB:59:EF:DC:8F:1C:BE:D2:D5:B5:12 Authority key identifier: C2:9F:A9:B8:BA:42:7E:3C:F3:9D:6B:BB:28:14:8A:E9:03:51:9B:FA Certificate issuer: /CN=670b9f4e-c369-4f4c-aa24-27f3fc851bc5 Certificate serial: 010D0C9F4328584D94A833F6592714EE3A350978 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.mft Manifest number: 010D0C9F4328584A89CE42F3540E36279B3F5F6D Signing time: Tue 21 Apr 2026 14:00:03 +0000 Manifest this update: Tue 21 Apr 2026 14:00:03 +0000 Manifest next update: Thu 23 Apr 2026 14:00:00 +0000 Files and hashes: 1: 50295063-44b9-3f73-8e63-136553fdd8cc.roa (hash: s2vnOyqNetJKiqHyocCBfis/zGO8Ej4cmYfpeH/3aVs=) 2: 670b9f4e-c369-4f4c-aa24-27f3fc851bc5.crl (hash: z34XwcL9IBo41I8w/G/emv0hDaYbB+d46NaxjT5OvV4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:94:a8:33:f6:59:27:14:ee:3a:35:09:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=670b9f4e-c369-4f4c-aa24-27f3fc851bc5 Validity Not Before: Apr 21 14:00:03 2026 GMT Not After : Apr 23 14:00:00 2026 GMT Subject: CN=fd21c7cd-c645-4850-bfa5-4d9f936af7aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ca:e9:72:5b:63:47:6c:5d:4d:43:d1:39:b9: a5:eb:28:93:9c:23:87:69:3a:3d:01:a6:e3:e3:e3: ee:39:77:a6:ae:f5:02:a5:d8:58:1a:a9:a9:c5:e3: a0:37:21:01:45:15:5c:8a:b9:44:52:97:ef:9b:4c: fc:da:f1:d8:60:42:e6:81:2f:e3:a9:b5:f9:17:10: 1a:bc:45:c2:b7:bd:31:92:d9:59:b8:1c:75:f7:3c: 22:29:89:3f:f6:42:64:f4:05:ad:07:3d:13:02:48: ba:60:a3:3b:58:55:27:51:63:01:1f:8f:c2:dc:40: d6:40:b2:22:b6:93:e0:b0:72:02:09:4f:f6:be:bd: 34:a1:7d:6f:35:b1:73:24:2b:37:5d:5e:2d:b7:1b: b3:8a:a9:eb:47:49:d4:fa:40:55:95:c4:3c:89:8d: 58:f6:7b:b6:3b:8a:5b:56:5d:9f:f0:5d:52:ac:3b: 33:c1:76:41:87:3c:4c:e7:8a:5e:09:69:2b:18:6a: 38:de:96:7a:64:64:0a:e6:c4:21:a7:4f:4c:39:2f: f8:56:9c:e4:6f:47:66:74:d1:2b:56:cb:b4:e5:99: 9a:07:b0:e1:69:1e:66:91:59:b2:ab:cb:9f:02:16: 39:9c:4f:c1:08:17:f7:b4:9e:83:18:b6:5e:bf:b3: 7a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:AB:D7:90:59:9B:7B:FD:8D:DB:59:EF:DC:8F:1C:BE:D2:D5:B5:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.crl X509v3 Authority Key Identifier: keyid:C2:9F:A9:B8:BA:42:7E:3C:F3:9D:6B:BB:28:14:8A:E9:03:51:9B:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:f3:bb:37:61:a1:14:40:b8:64:06:84:b6:18:32:90:7b:58: 05:ec:09:25:db:7e:a0:79:87:12:93:b8:33:2e:c8:3b:ae:41: 5e:a1:ca:d5:04:e3:6e:a0:19:a6:06:f3:b1:2d:74:b8:fd:e0: 69:a3:92:61:2d:9f:bd:6b:bf:a2:37:2d:f3:ad:a5:15:57:ae: a0:43:11:ed:89:ff:54:44:6a:8d:c4:ac:aa:ec:83:52:78:bb: 73:a1:90:4d:78:9f:7c:b4:b2:b8:07:e5:52:73:ba:a5:ad:be: 89:70:92:60:c1:a7:f7:d3:47:7e:b0:75:83:a9:ae:ac:6c:52: e7:b1:02:b0:f5:db:40:99:15:85:32:99:30:cf:ba:fe:30:62: 0c:e0:e8:63:a0:3f:e3:55:bf:d1:ee:2c:bf:1e:21:7c:6e:b8: f4:35:f8:9a:7c:28:28:0a:ce:d2:e4:92:89:5a:5b:d7:fd:0c: de:91:d9:b6:df:25:7c:24:b3:95:e8:4b:c1:7b:a8:13:f5:77: de:d5:52:09:dc:af:70:6b:92:c2:2d:ef:d8:62:bb:5a:4a:e8: 35:f7:b8:de:3a:65:cc:05:70:35:b6:37:26:20:e6:24:9e:6e: 90:62:82:fd:e4:15:a4:7d:b8:67:ee:91:44:fa:aa:87:29:23: 39:5c:6e:62 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2UqDP2WScU7jo1CXgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjcwYjlmNGUtYzM2OS00ZjRjLWFhMjQtMjdmM2ZjODUx YmM1MB4XDTI2MDQyMTE0MDAwM1oXDTI2MDQyMzE0MDAwMFowLzEtMCsGA1UEAxMk ZmQyMWM3Y2QtYzY0NS00ODUwLWJmYTUtNGQ5ZjkzNmFmN2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocrpcltjR2xdTUPRObml6yiTnCOHaTo9Aabj 4+PuOXemrvUCpdhYGqmpxeOgNyEBRRVcirlEUpfvm0z82vHYYELmgS/jqbX5FxAa vEXCt70xktlZuBx19zwiKYk/9kJk9AWtBz0TAki6YKM7WFUnUWMBH4/C3EDWQLIi tpPgsHICCU/2vr00oX1vNbFzJCs3XV4ttxuziqnrR0nU+kBVlcQ8iY1Y9nu2O4pb Vl2f8F1SrDszwXZBhzxM54peCWkrGGo43pZ6ZGQK5sQhp09MOS/4Vpzkb0dmdNEr Vsu05ZmaB7DhaR5mkVmyq8ufAhY5nE/BCBf3tJ6DGLZev7N6YwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKir15BZm3v9jdtZ79yPHL7S1bUSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC82NzBi OWY0ZS1jMzY5LTRmNGMtYWEyNC0yN2YzZmM4NTFiYzUvNjcwYjlmNGUtYzM2OS00 ZjRjLWFhMjQtMjdmM2ZjODUxYmM1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNjcwYjlmNGUtYzM2OS00ZjRjLWFh MjQtMjdmM2ZjODUxYmM1LzY3MGI5ZjRlLWMzNjktNGY0Yy1hYTI0LTI3ZjNmYzg1 MWJjNS5jcmwwHwYDVR0jBBgwFoAUwp+puLpCfjzznWu7KBSK6QNRm/owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC82NzBiOWY0ZS1jMzY5LTRmNGMtYWEyNC0yN2Yz ZmM4NTFiYzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAn87s3YaEUQLhkBoS2GDKQ e1gF7Akl236geYcSk7gzLsg7rkFeocrVBONuoBmmBvOxLXS4/eBpo5JhLZ+9a7+i Ny3zraUVV66gQxHtif9URGqNxKyq7INSeLtzoZBNeJ98tLK4B+VSc7qlrb6JcJJg waf300d+sHWDqa6sbFLnsQKw9dtAmRWFMpkwz7r+MGIM4OhjoD/jVb/R7iy/HiF8 brj0NfiafCgoCs7S5JKJWlvX/Qzekdm23yV8JLOV6EvBe6gT9Xfe1VIJ3K9wa5LC Le/YYrtaSug197jeOmXMBXA1tjcmIOYknm6QYoL95BWkfbhn7pFE+qqHKSM5XG5i -----END CERTIFICATE-----Generated at Wed Apr 22 09:59:16 2026 by rpki-client