$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/0de37d17-2664-4c85-9be4-a35baf0fd2b3.mft File: 0de37d17-2664-4c85-9be4-a35baf0fd2b3.mft (raw, json) Hash identifier: vteD1SOpRVOhZrPD4/i+uu3efNCowOXZBDN+rF7bw1w= Subject key identifier: CB:64:0D:C6:30:4A:7E:E7:F6:D4:BD:64:6E:CD:15:95:D0:44:AB:7A Authority key identifier: 4D:73:9C:88:EF:4B:17:58:90:09:43:09:76:8C:0E:3B:F8:65:EB:4F Certificate issuer: /CN=0de37d17-2664-4c85-9be4-a35baf0fd2b3 Certificate serial: 010D0C9F4328584D888F3B1E4F475029CBADE940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/0de37d17-2664-4c85-9be4-a35baf0fd2b3.mft Manifest number: 010D0C9F4328584073A8419EE8E3E5AE11DFE5CB Signing time: Fri 17 Apr 2026 06:00:03 +0000 Manifest this update: Fri 17 Apr 2026 06:00:03 +0000 Manifest next update: Sun 19 Apr 2026 06:00:00 +0000 Files and hashes: 1: 0de37d17-2664-4c85-9be4-a35baf0fd2b3.crl (hash: hYi58tMqCQu8UcJM6Cl0KPDRycnBs2xyrdT7/Qc7d4k=) 2: 6cd0bba9-129b-39b1-b942-efb9d16b311f.roa (hash: AT3FDShuKixRJO2lfHcu9GXcLd4iqPPZWwQSnuoBxtM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/0de37d17-2664-4c85-9be4-a35baf0fd2b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/0de37d17-2664-4c85-9be4-a35baf0fd2b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:88:8f:3b:1e:4f:47:50:29:cb:ad:e9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0de37d17-2664-4c85-9be4-a35baf0fd2b3 Validity Not Before: Apr 17 06:00:03 2026 GMT Not After : Apr 19 06:00:00 2026 GMT Subject: CN=a42a08c6-9fd7-457e-94d1-25fce5ad88d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:97:37:b3:ea:a3:25:b1:85:d5:34:ca:bc:36: 1e:c7:b6:3a:db:c2:66:11:b2:d4:cd:66:1b:9a:1a: 79:94:02:87:02:a6:df:d1:6c:26:3f:4b:cf:9d:af: 1b:5b:d3:f9:3e:97:31:f5:6c:77:17:92:6c:c4:c5: da:91:74:b2:8c:cd:72:d2:0e:aa:f1:6b:68:08:8b: e8:56:0c:83:2f:70:2d:b4:52:cc:12:80:01:d9:6c: 59:de:6c:09:fb:27:eb:05:30:a4:25:fa:81:52:4e: 13:ea:74:a1:77:2d:24:8b:e8:1a:b9:e8:3b:51:f4: 82:02:8c:43:46:53:77:af:1b:5d:41:a6:44:fa:17: af:c7:7d:53:17:69:8c:31:54:6f:b0:91:1b:50:6a: cc:e5:24:24:33:3a:ae:70:01:ea:c7:78:a3:bf:47: db:16:4f:8e:5b:e1:ad:d9:cc:72:06:b7:9f:73:f0: ba:13:5e:b9:51:4d:d8:14:d2:59:49:31:27:39:03: c1:e9:6f:77:ee:b2:6a:c0:e3:82:8b:25:07:df:87: 95:95:73:77:c0:27:92:f0:22:61:00:bd:b9:64:3f: 18:ed:17:6f:e0:f3:38:65:e0:a1:e0:8a:1f:be:99: 82:60:db:44:3f:4a:dd:3e:85:27:f8:5f:37:3c:53: 91:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:64:0D:C6:30:4A:7E:E7:F6:D4:BD:64:6E:CD:15:95:D0:44:AB:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/0de37d17-2664-4c85-9be4-a35baf0fd2b3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/0de37d17-2664-4c85-9be4-a35baf0fd2b3.crl X509v3 Authority Key Identifier: keyid:4D:73:9C:88:EF:4B:17:58:90:09:43:09:76:8C:0E:3B:F8:65:EB:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:30:d7:40:48:d0:2d:82:db:8d:22:d9:d0:70:48:03:03:ff: 89:e4:08:e8:f8:08:e0:43:f5:0f:46:b2:d3:95:80:5a:81:f6: 25:e9:a1:b7:b5:0a:cc:f1:4e:b1:93:d5:50:1a:c3:3b:6b:6b: 84:7f:2a:77:21:dc:3a:f5:6d:4e:ce:c7:a5:cb:21:ab:24:62: c7:ab:ba:df:8d:0f:95:fc:b7:2d:1c:17:02:7c:ef:d2:1e:ff: f3:2a:01:e9:60:02:d9:33:03:fa:8e:83:51:9e:0a:dd:bb:c5: 00:43:d1:2e:6e:d2:48:fd:c1:b5:b3:98:00:60:b5:23:d3:8e: 6f:bf:64:1d:18:ef:1b:cd:03:df:0c:d6:e2:0d:5d:d8:ab:17: 75:ab:ee:fd:2f:1f:35:c1:e5:5d:e0:e9:f9:e1:ed:fe:81:74: 99:54:25:d9:7f:8c:7f:76:91:56:02:e1:3e:71:a7:c2:4a:f9: 79:55:18:ad:ba:05:65:85:51:46:e3:3a:6d:ea:50:cb:f5:e5: 51:4e:b7:38:74:be:5e:32:21:0f:b1:7b:c9:03:37:24:7d:d9: 0c:3c:5d:71:c4:c7:00:4a:53:55:26:f2:0a:8b:33:d4:d2:b3: ff:0c:2b:d7:8d:61:49:f6:92:bc:49:52:0f:8e:7d:ea:e8:36: ed:0b:b6:35 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2IjzseT0dQKcut6UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRlMzdkMTctMjY2NC00Yzg1LTliZTQtYTM1YmFmMGZk MmIzMB4XDTI2MDQxNzA2MDAwM1oXDTI2MDQxOTA2MDAwMFowLzEtMCsGA1UEAxMk YTQyYTA4YzYtOWZkNy00NTdlLTk0ZDEtMjVmY2U1YWQ4OGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpc3s+qjJbGF1TTKvDYex7Y628JmEbLUzWYb mhp5lAKHAqbf0WwmP0vPna8bW9P5Ppcx9Wx3F5JsxMXakXSyjM1y0g6q8WtoCIvo VgyDL3AttFLMEoAB2WxZ3mwJ+yfrBTCkJfqBUk4T6nShdy0ki+gaueg7UfSCAoxD RlN3rxtdQaZE+hevx31TF2mMMVRvsJEbUGrM5SQkMzqucAHqx3ijv0fbFk+OW+Gt 2cxyBrefc/C6E165UU3YFNJZSTEnOQPB6W937rJqwOOCiyUH34eVlXN3wCeS8CJh AL25ZD8Y7Rdv4PM4ZeCh4IofvpmCYNtEP0rdPoUn+F83PFOR/wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMtkDcYwSn7n9tS9ZG7NFZXQRKt6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wZGUz N2QxNy0yNjY0LTRjODUtOWJlNC1hMzViYWYwZmQyYjMvMGRlMzdkMTctMjY2NC00 Yzg1LTliZTQtYTM1YmFmMGZkMmIzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGRlMzdkMTctMjY2NC00Yzg1LTli ZTQtYTM1YmFmMGZkMmIzLzBkZTM3ZDE3LTI2NjQtNGM4NS05YmU0LWEzNWJhZjBm ZDJiMy5jcmwwHwYDVR0jBBgwFoAUTXOciO9LF1iQCUMJdowOO/hl608wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wZGUzN2QxNy0yNjY0LTRjODUtOWJlNC1hMzVi YWYwZmQyYjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBCMNdASNAtgtuNItnQcEgD A/+J5Ajo+AjgQ/UPRrLTlYBagfYl6aG3tQrM8U6xk9VQGsM7a2uEfyp3Idw69W1O zselyyGrJGLHq7rfjQ+V/LctHBcCfO/SHv/zKgHpYALZMwP6joNRngrdu8UAQ9Eu btJI/cG1s5gAYLUj045vv2QdGO8bzQPfDNbiDV3Yqxd1q+79Lx81weVd4On54e3+ gXSZVCXZf4x/dpFWAuE+cafCSvl5VRitugVlhVFG4zpt6lDL9eVRTrc4dL5eMiEP sXvJAzckfdkMPF1xxMcASlNVJvIKizPU0rP/DCvXjWFJ9pK8SVIPjn3q6DbtC7Y1 -----END CERTIFICATE-----Generated at Fri Apr 17 15:04:57 2026 by rpki-client