$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/12a9b198-d23d-4f41-8397-cc467b398bc3.mft File: 12a9b198-d23d-4f41-8397-cc467b398bc3.mft (raw, json) Hash identifier: inDdRa4k8kCnI1LEtSL/fxeNpy5NPnWIGluXLvMOqfc= Subject key identifier: 76:84:79:05:FD:EC:B9:20:2D:8D:3A:96:94:B4:B5:01:67:E5:E0:13 Authority key identifier: 72:84:0D:43:69:6F:2A:43:67:22:ED:6B:46:20:A3:82:9C:45:47:32 Certificate issuer: /CN=12a9b198-d23d-4f41-8397-cc467b398bc3 Certificate serial: 010D0C9F4328584D88E891F7A19C720810401D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/12a9b198-d23d-4f41-8397-cc467b398bc3.mft Manifest number: 010D0C9F4328584073A8494E35EF9969DC5DD5CD Signing time: Fri 17 Apr 2026 09:00:04 +0000 Manifest this update: Fri 17 Apr 2026 09:00:04 +0000 Manifest next update: Sun 19 Apr 2026 09:00:00 +0000 Files and hashes: 1: 12a9b198-d23d-4f41-8397-cc467b398bc3.crl (hash: 80XT5ZXuvICDrbXtV0gBon2pZ1aupsVt0RwFtUnnTD0=) 2: 20b12159-fae1-324b-856e-4ffaaa0299f4.roa (hash: 5dXHdBsVriolY30OUCcQWaHUemIXgmPY6RflITnExrg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/12a9b198-d23d-4f41-8397-cc467b398bc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/12a9b198-d23d-4f41-8397-cc467b398bc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:88:e8:91:f7:a1:9c:72:08:10:40:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12a9b198-d23d-4f41-8397-cc467b398bc3 Validity Not Before: Apr 17 09:00:04 2026 GMT Not After : Apr 19 09:00:00 2026 GMT Subject: CN=d529fb3b-9dea-4b18-b181-1cb4668f9a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:65:82:ce:97:27:7d:cd:83:3d:7f:5d:4f:98: 07:94:28:58:77:45:ab:2f:6c:34:54:9d:39:2f:9b: 0e:8c:34:51:13:9a:45:ad:5a:87:58:0f:e2:4b:d9: e8:d1:fa:8a:36:4e:f8:3d:55:c4:32:10:23:97:3f: dc:f7:4e:38:4c:7c:84:72:cb:a4:9a:a3:2e:1b:18: 6c:c6:28:36:d8:d4:86:da:0d:aa:4a:97:56:ea:cd: d4:d4:b2:6b:6d:b9:a9:7a:2b:4c:e4:5b:87:69:e4: 17:eb:a8:f7:de:43:01:a8:80:95:f3:f1:c9:21:de: ba:7a:e6:c0:79:27:64:38:7c:09:91:3a:3e:5c:5e: d9:59:74:1b:3e:65:73:3a:f5:3c:0c:1f:9c:e8:dd: 08:48:34:9e:81:37:20:ae:45:5b:07:39:e0:cb:7a: d1:41:8e:2f:66:ee:cd:dd:f2:a1:f3:a5:71:1d:07: cb:f3:8c:5f:c8:eb:7b:4d:6b:e1:dc:b9:ab:dc:f3: bd:82:f5:b7:ad:6d:fe:7a:a7:79:a7:a4:43:e4:32: 8c:3b:ad:b6:52:ef:de:09:88:38:2e:d3:ce:37:20: b9:eb:93:dd:63:23:c0:76:4d:2c:c4:17:c9:ae:da: af:bf:11:46:5f:c7:b9:e3:ea:c8:82:20:7b:25:2b: b7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:84:79:05:FD:EC:B9:20:2D:8D:3A:96:94:B4:B5:01:67:E5:E0:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/12a9b198-d23d-4f41-8397-cc467b398bc3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/12a9b198-d23d-4f41-8397-cc467b398bc3.crl X509v3 Authority Key Identifier: keyid:72:84:0D:43:69:6F:2A:43:67:22:ED:6B:46:20:A3:82:9C:45:47:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:a3:74:94:36:fe:1b:1b:34:a6:78:1e:39:e8:1f:93:4b:c6: 03:3e:2b:89:60:5d:a2:fa:aa:25:1c:db:c1:8f:87:61:b1:77: d7:92:d4:2d:4c:ee:61:21:9f:f5:a2:f0:fe:18:0a:d4:33:48: 50:19:01:73:78:2a:4a:cf:89:5e:fb:a6:9e:fd:2f:19:77:c6: 21:a1:6d:e7:0e:3b:2c:7b:38:02:15:08:1d:a1:26:21:3d:2a: 55:78:3f:a5:22:e2:bf:90:d4:97:f7:ff:4a:97:2c:86:83:7b: b7:79:30:69:a8:5a:13:e6:79:4c:27:a7:f7:15:ad:8c:ad:76: c2:ae:85:e7:2b:66:82:0b:be:1a:34:19:58:db:8a:53:1c:6b: 68:e0:35:5b:06:43:c4:15:4e:c7:e4:ab:12:f5:6d:22:dc:65: 88:a7:a3:d8:4f:db:86:c1:dc:d3:e9:1d:62:bb:52:eb:a3:4f: f5:28:45:c1:99:49:c1:b6:ea:b1:ec:ca:03:68:b2:05:f5:fb: 5e:1f:ca:d0:48:cc:e1:2c:bd:fc:b0:de:67:5f:a8:6c:9b:f5: 60:ac:25:36:51:12:e1:37:76:b8:4a:9b:49:c6:32:a8:d1:25: dd:13:d2:e1:f1:4d:c0:fd:c9:98:12:63:09:b3:4c:d5:06:28: 25:16:dc:58 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2I6JH3oZxyCBBAHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTJhOWIxOTgtZDIzZC00ZjQxLTgzOTctY2M0NjdiMzk4 YmMzMB4XDTI2MDQxNzA5MDAwNFoXDTI2MDQxOTA5MDAwMFowLzEtMCsGA1UEAxMk ZDUyOWZiM2ItOWRlYS00YjE4LWIxODEtMWNiNDY2OGY5YTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2WCzpcnfc2DPX9dT5gHlChYd0WrL2w0VJ05 L5sOjDRRE5pFrVqHWA/iS9no0fqKNk74PVXEMhAjlz/c9044THyEcsukmqMuGxhs xig22NSG2g2qSpdW6s3U1LJrbbmpeitM5FuHaeQX66j33kMBqICV8/HJId66eubA eSdkOHwJkTo+XF7ZWXQbPmVzOvU8DB+c6N0ISDSegTcgrkVbBzngy3rRQY4vZu7N 3fKh86VxHQfL84xfyOt7TWvh3Lmr3PO9gvW3rW3+eqd5p6RD5DKMO622Uu/eCYg4 LtPONyC565PdYyPAdk0sxBfJrtqvvxFGX8e54+rIgiB7JSu3rwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHaEeQX97LkgLY06lpS0tQFn5eATMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xMmE5 YjE5OC1kMjNkLTRmNDEtODM5Ny1jYzQ2N2IzOThiYzMvMTJhOWIxOTgtZDIzZC00 ZjQxLTgzOTctY2M0NjdiMzk4YmMzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTJhOWIxOTgtZDIzZC00ZjQxLTgz OTctY2M0NjdiMzk4YmMzLzEyYTliMTk4LWQyM2QtNGY0MS04Mzk3LWNjNDY3YjM5 OGJjMy5jcmwwHwYDVR0jBBgwFoAUcoQNQ2lvKkNnIu1rRiCjgpxFRzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xMmE5YjE5OC1kMjNkLTRmNDEtODM5Ny1jYzQ2 N2IzOThiYzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBRo3SUNv4bGzSmeB456B+T S8YDPiuJYF2i+qolHNvBj4dhsXfXktQtTO5hIZ/1ovD+GArUM0hQGQFzeCpKz4le +6ae/S8Zd8YhoW3nDjssezgCFQgdoSYhPSpVeD+lIuK/kNSX9/9KlyyGg3u3eTBp qFoT5nlMJ6f3Fa2MrXbCroXnK2aCC74aNBlY24pTHGto4DVbBkPEFU7H5KsS9W0i 3GWIp6PYT9uGwdzT6R1iu1Lro0/1KEXBmUnBtuqx7MoDaLIF9fteH8rQSMzhLL38 sN5nX6hsm/VgrCU2URLhN3a4SptJxjKo0SXdE9Lh8U3A/cmYEmMJs0zVBiglFtxY -----END CERTIFICATE-----Generated at Fri Apr 17 20:22:32 2026 by rpki-client