$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.mft File: d709b40c-fe09-46e6-a38c-9cfe44ccdea2.mft (raw, json) Hash identifier: rPLoYhrTnoLheC/KTaZZUsP62ngowFkajEnUdY5yuT0= Subject key identifier: B1:01:05:B0:E6:A9:F8:87:3B:E2:FF:B8:AD:60:A0:2D:4F:29:9C:FD Authority key identifier: 47:40:53:7B:7D:1B:E6:72:85:34:F3:D2:AA:65:E9:5F:67:8E:0F:8E Certificate issuer: /CN=d709b40c-fe09-46e6-a38c-9cfe44ccdea2 Certificate serial: 010D0C9F4328584D8835E2F9C58A364C370BDCA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.mft Manifest number: 010D0C9F4328584073A8387DE519A5D299924BCB Signing time: Fri 17 Apr 2026 03:00:03 +0000 Manifest this update: Fri 17 Apr 2026 03:00:03 +0000 Manifest next update: Sun 19 Apr 2026 03:00:00 +0000 Files and hashes: 1: ab75e324-5884-3478-bcb0-f1254ed9f0bf.roa (hash: sm68x6XzeHUfW8wa3JUFGH2TDYxrHvLMMrK3SrXwzB0=) 2: d709b40c-fe09-46e6-a38c-9cfe44ccdea2.crl (hash: 0tjJWCXNj4FDupuu51UxtN6FhgyJflv2P/4BWARqt0I=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:88:35:e2:f9:c5:8a:36:4c:37:0b:dc:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d709b40c-fe09-46e6-a38c-9cfe44ccdea2 Validity Not Before: Apr 17 03:00:03 2026 GMT Not After : Apr 19 03:00:00 2026 GMT Subject: CN=0613fccf-bdff-4cd9-803b-dda28c1b5fb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:da:1b:b0:2f:cf:f7:c2:14:7b:7a:b4:42:f6: fa:ce:61:94:56:8a:da:5a:8f:35:87:ca:be:1a:4e: db:aa:16:8d:13:35:b7:2a:e0:af:c2:f1:fa:87:12: 9f:ae:dd:28:2e:f3:d4:14:56:24:04:0c:e2:48:29: 54:96:52:19:75:e1:9f:78:6b:a6:20:de:07:01:ea: 34:5b:4c:f5:c9:e2:50:dc:0c:0a:9f:2d:c2:fe:b8: 17:f6:e7:5a:c0:ae:4e:a9:5c:23:0d:78:2b:70:b4: e7:b3:8c:db:60:a0:0d:ea:ab:84:66:71:da:9f:2f: 42:bd:d3:5b:bb:86:03:a7:36:f1:53:42:68:11:5e: 65:8b:fd:d9:b2:3c:32:85:36:b0:95:7f:0d:33:18: 91:ba:d3:95:83:04:a1:08:1c:52:c3:33:d0:72:78: bd:c4:f7:a4:d5:42:18:5d:1b:14:fc:de:bc:30:ca: c4:c9:09:c7:98:fe:83:70:f5:5a:3e:67:3a:2b:d0: 4c:85:f7:fc:39:d3:0b:7f:3c:c5:24:ae:a4:98:c1: 61:eb:d2:e7:2e:02:7b:13:aa:dc:bd:3a:52:58:6a: d5:64:65:ab:58:80:d8:e7:66:7e:d8:69:43:2a:9a: 33:72:19:35:3d:52:69:78:04:83:56:48:45:0f:6e: 81:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:01:05:B0:E6:A9:F8:87:3B:E2:FF:B8:AD:60:A0:2D:4F:29:9C:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.crl X509v3 Authority Key Identifier: keyid:47:40:53:7B:7D:1B:E6:72:85:34:F3:D2:AA:65:E9:5F:67:8E:0F:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:e1:35:55:d6:17:9a:e3:e0:05:60:3d:6c:f4:40:77:76:c2: fa:1b:cd:26:d6:bf:dc:2e:d6:f9:21:fd:e3:07:be:97:01:d4: 28:fb:63:7b:31:1e:71:06:c1:cc:23:ff:3d:94:06:ef:88:02: b1:59:69:da:1c:39:63:f0:89:07:e9:5b:18:11:11:43:bb:af: 44:25:64:b7:00:64:e6:a4:ab:2b:a9:c8:1b:7f:a5:78:07:5a: 7d:92:e9:7c:3a:f4:74:90:b7:53:68:1b:cc:24:80:98:35:5e: fc:d3:db:2d:35:b1:ef:88:51:b5:83:8f:75:99:9c:dc:de:ec: bc:15:39:b4:71:33:b7:1c:d9:9b:82:57:fd:95:05:46:59:31: 00:38:98:1e:fd:61:b7:40:a4:f7:d3:01:7f:58:84:8f:93:aa: 99:f9:ec:f2:de:d5:9f:11:66:2e:a0:a8:79:31:4e:8e:74:f5: 51:04:1b:9b:d1:a4:17:b9:18:ae:91:5a:76:2e:71:72:d3:08: a6:f9:34:d3:89:df:47:54:02:a9:c8:a5:89:33:20:7c:37:8b: 24:3e:e3:69:bc:26:f3:3e:47:4f:dd:1c:bd:34:66:e1:80:76: 48:82:93:35:f9:3b:cb:f3:d0:00:9e:5a:5a:93:0d:c1:59:4d: 3d:bc:0c:df -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2INeL5xYo2TDcL3KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwOWI0MGMtZmUwOS00NmU2LWEzOGMtOWNmZTQ0Y2Nk ZWEyMB4XDTI2MDQxNzAzMDAwM1oXDTI2MDQxOTAzMDAwMFowLzEtMCsGA1UEAxMk MDYxM2ZjY2YtYmRmZi00Y2Q5LTgwM2ItZGRhMjhjMWI1ZmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktobsC/P98IUe3q0Qvb6zmGUVoraWo81h8q+ Gk7bqhaNEzW3KuCvwvH6hxKfrt0oLvPUFFYkBAziSClUllIZdeGfeGumIN4HAeo0 W0z1yeJQ3AwKny3C/rgX9udawK5OqVwjDXgrcLTns4zbYKAN6quEZnHany9CvdNb u4YDpzbxU0JoEV5li/3ZsjwyhTawlX8NMxiRutOVgwShCBxSwzPQcni9xPek1UIY XRsU/N68MMrEyQnHmP6DcPVaPmc6K9BMhff8OdMLfzzFJK6kmMFh69LnLgJ7E6rc vTpSWGrVZGWrWIDY52Z+2GlDKpozchk1PVJpeASDVkhFD26BZQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLEBBbDmqfiHO+L/uK1goC1PKZz9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNzA5 YjQwYy1mZTA5LTQ2ZTYtYTM4Yy05Y2ZlNDRjY2RlYTIvZDcwOWI0MGMtZmUwOS00 NmU2LWEzOGMtOWNmZTQ0Y2NkZWEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDcwOWI0MGMtZmUwOS00NmU2LWEz OGMtOWNmZTQ0Y2NkZWEyL2Q3MDliNDBjLWZlMDktNDZlNi1hMzhjLTljZmU0NGNj ZGVhMi5jcmwwHwYDVR0jBBgwFoAUR0BTe30b5nKFNPPSqmXpX2eOD44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNzA5YjQwYy1mZTA5LTQ2ZTYtYTM4Yy05Y2Zl NDRjY2RlYTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAI4TVV1hea4+AFYD1s9EB3 dsL6G80m1r/cLtb5If3jB76XAdQo+2N7MR5xBsHMI/89lAbviAKxWWnaHDlj8IkH 6VsYERFDu69EJWS3AGTmpKsrqcgbf6V4B1p9kul8OvR0kLdTaBvMJICYNV7809st NbHviFG1g491mZzc3uy8FTm0cTO3HNmbglf9lQVGWTEAOJge/WG3QKT30wF/WISP k6qZ+ezy3tWfEWYuoKh5MU6OdPVRBBub0aQXuRiukVp2LnFy0wim+TTTid9HVAKp yKWJMyB8N4skPuNpvCbzPkdP3Ry9NGbhgHZIgpM1+TvL89AAnlpakw3BWU09vAzf -----END CERTIFICATE-----Generated at Fri Apr 17 14:10:54 2026 by rpki-client