$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft File: 8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft (raw, json) Hash identifier: 8S2xOT1PWezpDGbV2EvjIG9JMsDkpjLfRM5fw2aZEZ8= Subject key identifier: 45:40:2A:C4:FB:05:39:E2:1E:0F:AC:15:4A:E1:C8:C2:DE:AF:33:59 Authority key identifier: 66:54:89:B1:B8:B9:84:68:D9:D3:C5:23:0C:F0:94:90:41:A3:C8:30 Certificate issuer: /CN=8e8f2dbe-1f48-4507-8ef9-9732b4b82be3 Certificate serial: 010D0C9F4328584D88CAC7673A06E949ABC92380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft Manifest number: 010D0C9F4328584073A84707688B06971843D89B Signing time: Fri 17 Apr 2026 08:00:03 +0000 Manifest this update: Fri 17 Apr 2026 08:00:03 +0000 Manifest next update: Sun 19 Apr 2026 08:00:00 +0000 Files and hashes: 1: 210b4d8d-c2de-3228-bebf-b27d5eeb562c.roa (hash: jJzyIYgzkAauoM2IUG86Rczhfqoxhu/iMtcMSq7RtX4=) 2: 8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.crl (hash: 4wAw5m/FfOBwzNM1oT9Uoc1MpsM+F3HWi2qfzESLljk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:88:ca:c7:67:3a:06:e9:49:ab:c9:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e8f2dbe-1f48-4507-8ef9-9732b4b82be3 Validity Not Before: Apr 17 08:00:03 2026 GMT Not After : Apr 19 08:00:00 2026 GMT Subject: CN=f0a42b6f-a4dd-45c2-8f4e-de9756711e48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ca:8d:46:50:56:f6:23:2f:9f:2c:ba:a4:33: dd:ed:42:df:c6:01:57:16:3b:3e:a3:db:bc:8f:1b: 16:ad:2d:eb:a5:f3:07:b3:0d:3b:76:2b:8a:3e:34: 50:4c:be:f6:c0:f6:ee:24:04:f3:15:05:12:a9:7b: 4c:cc:da:e6:73:58:2a:94:46:fa:f7:be:05:2d:1e: 92:5c:f1:a0:aa:c6:53:f9:2d:ef:4c:6b:5b:30:75: 7a:5f:ea:1a:a6:5f:48:10:34:3e:ed:60:47:37:8c: e0:32:76:88:77:6c:e8:68:bb:bc:21:f8:cf:09:8f: c3:78:67:22:79:15:98:1f:23:cc:b6:d6:cb:c8:49: 45:a5:78:ad:20:60:25:43:89:63:56:1a:bf:1e:76: 80:a4:c6:31:f5:18:2f:f2:ae:f6:ce:11:8a:51:bf: f8:d2:ca:50:0f:3f:b8:72:b5:a3:b8:f7:e3:62:00: 27:0c:a8:d9:72:b3:d7:07:5a:aa:db:f8:d7:b1:a6: cf:e1:b1:77:40:0f:ad:35:4c:b3:30:b2:ba:4f:4c: e3:23:87:af:a7:48:2e:da:4c:d2:83:97:14:3f:59: 8e:0c:cf:a9:09:6d:6d:09:07:8c:f2:de:1d:fa:a5: ee:be:c6:8e:91:62:9c:d6:9c:b9:78:37:40:67:42: 2d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:40:2A:C4:FB:05:39:E2:1E:0F:AC:15:4A:E1:C8:C2:DE:AF:33:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.crl X509v3 Authority Key Identifier: keyid:66:54:89:B1:B8:B9:84:68:D9:D3:C5:23:0C:F0:94:90:41:A3:C8:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:e8:d3:17:69:8f:f4:7e:fc:ef:ba:c0:f8:00:3e:62:5d:9d: 25:9b:19:56:8d:00:ec:f6:d7:c5:38:50:14:12:0f:1e:c6:ff: 48:bb:4f:83:56:b2:db:c0:34:ed:b8:33:94:97:1b:1d:f2:04: ae:4a:fd:75:7f:d3:7b:97:c4:fe:8e:0d:0c:5f:11:f5:41:e0: f7:78:60:64:65:82:ba:74:1b:81:4b:4d:42:77:30:b3:52:00: 62:88:b7:6e:06:dd:3a:6c:f7:1d:2b:e3:2f:00:40:eb:34:f1: e3:18:2e:04:85:be:29:ad:61:39:67:20:c0:a7:c3:46:5c:69: ff:cb:4a:2b:58:7b:a6:0b:20:e7:48:49:71:a5:36:51:45:80: f6:8c:38:52:f9:b4:65:92:6a:5f:f6:5d:e0:85:7f:ae:95:e5: 77:d4:70:db:12:a9:73:7e:c2:fc:b4:26:b6:b3:58:84:db:c1: 5e:66:4c:ab:d2:04:54:9c:cb:f4:ad:1f:33:cc:f8:ef:7c:e3: c4:ce:93:8c:0e:31:57:67:38:a2:c4:8d:95:96:36:36:eb:bf: 42:41:13:a2:50:3c:14:69:89:7c:ee:3c:fc:da:9b:da:b2:0e: c7:72:30:8a:e4:b7:7c:5c:7a:71:03:8e:ae:84:58:52:35:2c: b1:8e:39:b4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2IysdnOgbpSavJI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU4ZjJkYmUtMWY0OC00NTA3LThlZjktOTczMmI0Yjgy YmUzMB4XDTI2MDQxNzA4MDAwM1oXDTI2MDQxOTA4MDAwMFowLzEtMCsGA1UEAxMk ZjBhNDJiNmYtYTRkZC00NWMyLThmNGUtZGU5NzU2NzExZTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncqNRlBW9iMvnyy6pDPd7ULfxgFXFjs+o9u8 jxsWrS3rpfMHsw07diuKPjRQTL72wPbuJATzFQUSqXtMzNrmc1gqlEb6974FLR6S XPGgqsZT+S3vTGtbMHV6X+oapl9IEDQ+7WBHN4zgMnaId2zoaLu8IfjPCY/DeGci eRWYHyPMttbLyElFpXitIGAlQ4ljVhq/HnaApMYx9Rgv8q72zhGKUb/40spQDz+4 crWjuPfjYgAnDKjZcrPXB1qq2/jXsabP4bF3QA+tNUyzMLK6T0zjI4evp0gu2kzS g5cUP1mODM+pCW1tCQeM8t4d+qXuvsaOkWKc1py5eDdAZ0It7wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEVAKsT7BTniHg+sFUrhyMLerzNZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ZThm MmRiZS0xZjQ4LTQ1MDctOGVmOS05NzMyYjRiODJiZTMvOGU4ZjJkYmUtMWY0OC00 NTA3LThlZjktOTczMmI0YjgyYmUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGU4ZjJkYmUtMWY0OC00NTA3LThl ZjktOTczMmI0YjgyYmUzLzhlOGYyZGJlLTFmNDgtNDUwNy04ZWY5LTk3MzJiNGI4 MmJlMy5jcmwwHwYDVR0jBBgwFoAUZlSJsbi5hGjZ08UjDPCUkEGjyDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ZThmMmRiZS0xZjQ4LTQ1MDctOGVmOS05NzMy YjRiODJiZTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBC6NMXaY/0fvzvusD4AD5i XZ0lmxlWjQDs9tfFOFAUEg8exv9Iu0+DVrLbwDTtuDOUlxsd8gSuSv11f9N7l8T+ jg0MXxH1QeD3eGBkZYK6dBuBS01CdzCzUgBiiLduBt06bPcdK+MvAEDrNPHjGC4E hb4prWE5ZyDAp8NGXGn/y0orWHumCyDnSElxpTZRRYD2jDhS+bRlkmpf9l3ghX+u leV31HDbEqlzfsL8tCa2s1iE28FeZkyr0gRUnMv0rR8zzPjvfOPEzpOMDjFXZzii xI2VljY2679CQROiUDwUaYl87jz82pvasg7HcjCK5Ld8XHpxA46uhFhSNSyxjjm0 -----END CERTIFICATE-----Generated at Fri Apr 17 12:20:37 2026 by rpki-client