$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152/12797d33-d775-45fc-9d2a-a3e7bbe51152.mft File: 12797d33-d775-45fc-9d2a-a3e7bbe51152.mft (raw, json) Hash identifier: eCgRGCwHZDndwMt45xxJ/xt+Y1jkmdBT3ui9bPQnRNo= Subject key identifier: 40:28:65:CD:4F:C5:D6:89:E4:7E:9B:96:41:AB:16:8F:DB:B7:E5:E5 Authority key identifier: 9E:FA:EF:7E:45:43:9E:B6:9C:B0:84:8E:C2:07:C7:A4:26:5B:71:81 Certificate issuer: /CN=12797d33-d775-45fc-9d2a-a3e7bbe51152 Certificate serial: 010D0C9F4328584D8BEED0B9A6F4A07F57EAF080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152/12797d33-d775-45fc-9d2a-a3e7bbe51152.mft Manifest number: 010D0C9F4328584073A84F6DF615383F4872A8EF Signing time: Sat 18 Apr 2026 11:00:04 +0000 Manifest this update: Sat 18 Apr 2026 11:00:04 +0000 Manifest next update: Tue 21 Apr 2026 11:00:00 +0000 Files and hashes: 1: 12797d33-d775-45fc-9d2a-a3e7bbe51152.crl (hash: v83+5GOT8na+KM1TcSAjUR+e/+cSgpM8tg5MtLNLI84=) 2: 4ea5dc75-2190-35f3-bd26-725aff932395.roa (hash: UND1+mnzGhMNEoPe5vItXhZE8l5l81zYsAUevpHgWWk=) 3: 5d993454-0791-3f69-942d-d641d50ae8c7.roa (hash: zS2BQDsbHCYM8cXE9E3B5zmVy3UiiKvL5y/lUoB56+c=) 4: f09c3f26-10f7-3b2f-b86c-9b92161da077.roa (hash: 4owcg8+WTfW5fo2+kYSSe/M1qAh/Dw4dRDRy90FX9Rk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152/12797d33-d775-45fc-9d2a-a3e7bbe51152.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152/12797d33-d775-45fc-9d2a-a3e7bbe51152.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8b:ee:d0:b9:a6:f4:a0:7f:57:ea:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12797d33-d775-45fc-9d2a-a3e7bbe51152 Validity Not Before: Apr 18 11:00:04 2026 GMT Not After : Apr 21 11:00:00 2026 GMT Subject: CN=90a03f9e-4bd1-4203-86e4-b646ace0a251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c7:8b:12:92:26:59:27:7c:25:d9:6c:42:89: db:54:b0:84:28:cd:d4:df:a5:f0:71:49:d1:2d:6f: c2:40:ac:3f:82:a1:60:25:bb:86:84:54:ae:b8:5b: 20:0c:77:63:c6:30:30:c3:b9:43:27:e2:f7:87:1a: ee:d0:b5:0c:69:53:1d:15:1d:b3:f3:56:43:48:6f: a2:6b:f8:f2:3a:42:98:32:33:67:77:0c:a0:71:32: 86:fa:8f:05:75:a7:ba:ce:ea:d3:b6:1f:42:01:9c: 5f:ae:7a:ee:1e:ea:69:dd:7e:dc:29:b9:ad:3d:50: bc:4b:8d:f8:3d:d0:b7:df:95:a1:81:57:b1:59:a3: e9:87:45:5d:30:41:f2:aa:38:26:5d:ea:b8:7b:d5: 19:66:38:3b:83:fe:a1:bd:63:ce:4a:64:6e:f3:46: ed:6c:12:cc:da:a2:2f:b5:29:76:de:55:36:69:80: 42:7c:66:e3:6e:e9:2a:fd:78:f5:a2:7b:5a:42:69: b3:ca:7b:ea:a6:9b:4e:02:4f:49:81:44:fe:0f:d5: 6d:a4:67:57:ab:80:8e:dd:1e:4b:0f:63:3a:63:8c: 54:2b:3e:7f:93:9d:3e:b4:f7:4c:13:b9:e6:e9:44: e4:b5:24:18:ad:1d:7f:17:04:d1:0f:d4:41:f7:0b: 84:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:28:65:CD:4F:C5:D6:89:E4:7E:9B:96:41:AB:16:8F:DB:B7:E5:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152/12797d33-d775-45fc-9d2a-a3e7bbe51152.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152/12797d33-d775-45fc-9d2a-a3e7bbe51152.crl X509v3 Authority Key Identifier: keyid:9E:FA:EF:7E:45:43:9E:B6:9C:B0:84:8E:C2:07:C7:A4:26:5B:71:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:33:f7:74:3a:05:21:01:94:6e:cf:88:71:2b:41:11:86:af: 59:ee:53:ff:aa:68:65:5a:1e:8a:12:70:63:06:bf:c1:f4:93: da:c8:06:a3:81:d4:23:14:0b:9b:65:76:aa:24:f4:4a:f5:45: ee:b3:7a:9f:34:55:dc:08:9a:8a:07:d6:f6:65:19:92:49:7e: 9d:78:dd:a3:6f:45:0c:59:3e:3b:f0:9b:05:e9:48:e3:d9:f7: d1:8f:55:f5:85:3e:c4:ac:6f:c5:b0:4f:22:4b:ae:ba:5b:ad: aa:1b:38:74:2c:67:77:3c:7e:1f:2d:20:4a:f7:9d:f7:57:43: ba:b1:60:e7:83:41:b2:b2:2a:ba:7c:b6:80:f0:44:5a:b1:6c: f9:fd:71:33:33:0d:91:2f:4f:6d:bb:34:92:67:f7:d6:6a:b2: 61:4a:cd:79:25:ba:ff:0b:e5:df:16:db:b3:8d:bd:4d:ae:f5: 61:60:b8:df:d9:34:84:1a:e3:cd:91:e1:cc:e7:8c:59:bd:76: d7:62:8a:69:d0:3d:2b:59:8f:51:aa:d9:a3:86:81:26:da:66: 3a:23:fb:70:b1:66:c5:e3:f7:d3:64:7a:c9:b0:20:f5:3c:a2: 0b:44:dc:94:cf:65:7f:db:16:ef:a8:fc:be:33:46:97:0c:d7: 68:09:c6:5f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2L7tC5pvSgf1fq8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI3OTdkMzMtZDc3NS00NWZjLTlkMmEtYTNlN2JiZTUx MTUyMB4XDTI2MDQxODExMDAwNFoXDTI2MDQyMTExMDAwMFowLzEtMCsGA1UEAxMk OTBhMDNmOWUtNGJkMS00MjAzLTg2ZTQtYjY0NmFjZTBhMjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8eLEpImWSd8JdlsQonbVLCEKM3U36XwcUnR LW/CQKw/gqFgJbuGhFSuuFsgDHdjxjAww7lDJ+L3hxru0LUMaVMdFR2z81ZDSG+i a/jyOkKYMjNndwygcTKG+o8Fdae6zurTth9CAZxfrnruHupp3X7cKbmtPVC8S434 PdC335WhgVexWaPph0VdMEHyqjgmXeq4e9UZZjg7g/6hvWPOSmRu80btbBLM2qIv tSl23lU2aYBCfGbjbukq/Xj1ontaQmmzynvqpptOAk9JgUT+D9VtpGdXq4CO3R5L D2M6Y4xUKz5/k50+tPdME7nm6UTktSQYrR1/FwTRD9RB9wuE1QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEAoZc1PxdaJ5H6blkGrFo/bt+XlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMjc5 N2QzMy1kNzc1LTQ1ZmMtOWQyYS1hM2U3YmJlNTExNTIvMTI3OTdkMzMtZDc3NS00 NWZjLTlkMmEtYTNlN2JiZTUxMTUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTI3OTdkMzMtZDc3NS00NWZjLTlk MmEtYTNlN2JiZTUxMTUyLzEyNzk3ZDMzLWQ3NzUtNDVmYy05ZDJhLWEzZTdiYmU1 MTE1Mi5jcmwwHwYDVR0jBBgwFoAUnvrvfkVDnracsISOwgfHpCZbcYEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMjc5N2QzMy1kNzc1LTQ1ZmMtOWQyYS1hM2U3 YmJlNTExNTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB6M/d0OgUhAZRuz4hxK0ER hq9Z7lP/qmhlWh6KEnBjBr/B9JPayAajgdQjFAubZXaqJPRK9UXus3qfNFXcCJqK B9b2ZRmSSX6deN2jb0UMWT478JsF6Ujj2ffRj1X1hT7ErG/FsE8iS666W62qGzh0 LGd3PH4fLSBK9533V0O6sWDng0Gysiq6fLaA8ERasWz5/XEzMw2RL09tuzSSZ/fW arJhSs15Jbr/C+XfFtuzjb1NrvVhYLjf2TSEGuPNkeHM54xZvXbXYopp0D0rWY9R qtmjhoEm2mY6I/twsWbF4/fTZHrJsCD1PKILRNyUz2V/2xbvqPy+M0aXDNdoCcZf -----END CERTIFICATE-----Generated at Sun Apr 19 09:45:45 2026 by rpki-client