$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/896203b4-e5e8-4340-a765-a9457a0dfd1b/896203b4-e5e8-4340-a765-a9457a0dfd1b.mft File: 896203b4-e5e8-4340-a765-a9457a0dfd1b.mft (raw, json) Hash identifier: tdVHZ8oQsPpH1z1O9Wl2K279qHtQ3Zm3qBL936cvDtw= Subject key identifier: 5C:02:A9:78:D8:0E:23:16:00:D3:FB:AC:B0:3B:A9:D6:6F:D8:C0:29 Authority key identifier: BB:63:4C:A7:84:28:3F:91:B4:E9:38:4D:13:A9:9F:52:66:53:42:4E Certificate issuer: /CN=896203b4-e5e8-4340-a765-a9457a0dfd1b Certificate serial: 010D0C9F4328584D87A1041F2760977A39BFBD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/896203b4-e5e8-4340-a765-a9457a0dfd1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/896203b4-e5e8-4340-a765-a9457a0dfd1b/896203b4-e5e8-4340-a765-a9457a0dfd1b.mft Manifest number: 010D0C9F4328584073A82C55AF22E5CB7299FB6D Signing time: Thu 16 Apr 2026 22:00:03 +0000 Manifest this update: Thu 16 Apr 2026 22:00:03 +0000 Manifest next update: Sat 18 Apr 2026 22:00:00 +0000 Files and hashes: 1: 896203b4-e5e8-4340-a765-a9457a0dfd1b.crl (hash: ckQfZIQZUK9XqG22fUCCRj0PWDcCwxNgf0X9jo0AF5A=) 2: bf1b0011-9218-3bd2-9f8c-eae13a1fd138.roa (hash: oqdYajw6zhDkzvGrQh0rIz7Ek3GSYOtVrcgQYv1IOVw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/896203b4-e5e8-4340-a765-a9457a0dfd1b/896203b4-e5e8-4340-a765-a9457a0dfd1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/896203b4-e5e8-4340-a765-a9457a0dfd1b/896203b4-e5e8-4340-a765-a9457a0dfd1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/896203b4-e5e8-4340-a765-a9457a0dfd1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:a1:04:1f:27:60:97:7a:39:bf:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896203b4-e5e8-4340-a765-a9457a0dfd1b Validity Not Before: Apr 16 22:00:03 2026 GMT Not After : Apr 18 22:00:00 2026 GMT Subject: CN=ab273db1-35dd-4d22-813f-44a24d5e5ba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:14:b6:1b:96:71:43:10:4c:6e:13:a5:cf:06: 36:f0:37:cc:2e:74:32:0a:8d:96:df:11:7f:bd:f4: 85:b5:e5:c8:90:b9:78:56:7a:81:47:f9:44:04:8c: e4:35:d8:ea:9a:be:1b:29:2d:94:f4:9f:ab:e0:3e: 13:e4:93:ba:17:ea:8d:a8:42:36:8f:a2:0d:65:b3: f4:87:49:7e:19:32:07:e1:51:b9:d3:ec:5a:95:51: 64:34:83:67:b2:11:2a:67:b3:a9:49:2e:f7:22:f1: e9:32:5f:4a:f6:67:da:db:ff:f9:4e:57:be:ba:d7: bf:fb:16:a2:54:75:b4:9e:32:4a:e2:5d:1e:19:66: 71:63:bd:c7:2d:6a:8a:6d:a3:fa:40:9e:b8:bc:c3: 27:93:99:e0:43:6e:cb:fc:47:7f:2e:00:04:08:2d: 18:dd:31:b6:7b:20:86:e4:4d:ec:b9:48:14:1b:2a: f4:04:f2:14:02:d3:5a:aa:dd:fa:ce:1e:de:7d:e0: 54:9f:f5:c8:12:e9:75:a6:e2:81:e2:3b:33:d3:77: 63:45:05:10:c3:8f:d2:ef:f6:1d:53:e2:2b:9c:96: b4:37:54:a0:23:7e:95:b1:df:3c:a6:ca:9c:13:61: 58:68:86:9b:bd:4a:6f:79:a2:d3:76:28:9b:55:28: b9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:02:A9:78:D8:0E:23:16:00:D3:FB:AC:B0:3B:A9:D6:6F:D8:C0:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/896203b4-e5e8-4340-a765-a9457a0dfd1b/896203b4-e5e8-4340-a765-a9457a0dfd1b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/896203b4-e5e8-4340-a765-a9457a0dfd1b/896203b4-e5e8-4340-a765-a9457a0dfd1b.crl X509v3 Authority Key Identifier: keyid:BB:63:4C:A7:84:28:3F:91:B4:E9:38:4D:13:A9:9F:52:66:53:42:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/896203b4-e5e8-4340-a765-a9457a0dfd1b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:32:cc:1a:91:52:5b:74:e6:84:6a:53:1d:35:46:66:83:98: 00:2a:df:58:01:de:d3:e2:f7:25:85:97:41:fd:95:0c:a1:e6: 12:6a:b6:f8:d0:38:1e:1e:7c:03:08:03:22:f3:ec:37:b1:b5: 36:22:0a:bd:68:9e:0e:b4:06:91:3c:1c:9f:bb:fb:79:c3:27: 5f:0d:4b:e9:3f:bf:6c:29:f4:4a:3e:b5:68:e7:3d:00:37:0d: 19:c9:0e:85:9a:08:0e:50:8e:b9:c9:4a:b0:6b:09:47:74:71: 3f:02:75:7c:0a:e3:53:98:01:3d:27:a9:9d:e3:ba:5e:45:45: e3:7f:f1:5c:2a:e7:94:04:60:46:e4:fe:5b:4c:76:21:7c:23: b9:03:7d:92:78:ae:1f:ad:67:fb:73:e8:ec:45:75:06:ac:73: 34:b7:68:b0:6d:ff:b9:ba:77:bc:ed:bb:e1:4f:19:71:34:40: 31:f9:90:6f:d7:ad:b6:a4:6a:ec:ec:32:3c:6c:35:39:fd:8f: 37:08:d0:cf:46:94:77:9e:cc:77:5b:8b:56:14:4e:ae:0d:44: 10:f6:35:d7:cd:ea:8e:d1:73:95:80:18:2b:5d:f1:cf:60:3e: 3d:0f:2d:d7:89:28:7a:92:a2:0a:c4:3e:93:0c:8c:f8:00:33: bb:ff:cd:bd -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2HoQQfJ2CXejm/vYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODk2MjAzYjQtZTVlOC00MzQwLWE3NjUtYTk0NTdhMGRm ZDFiMB4XDTI2MDQxNjIyMDAwM1oXDTI2MDQxODIyMDAwMFowLzEtMCsGA1UEAxMk YWIyNzNkYjEtMzVkZC00ZDIyLTgxM2YtNDRhMjRkNWU1YmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxS2G5ZxQxBMbhOlzwY28DfMLnQyCo2W3xF/ vfSFteXIkLl4VnqBR/lEBIzkNdjqmr4bKS2U9J+r4D4T5JO6F+qNqEI2j6INZbP0 h0l+GTIH4VG50+xalVFkNINnshEqZ7OpSS73IvHpMl9K9mfa2//5Tle+ute/+xai VHW0njJK4l0eGWZxY73HLWqKbaP6QJ64vMMnk5ngQ27L/Ed/LgAECC0Y3TG2eyCG 5E3suUgUGyr0BPIUAtNaqt36zh7efeBUn/XIEul1puKB4jsz03djRQUQw4/S7/Yd U+IrnJa0N1SgI36Vsd88psqcE2FYaIabvUpveaLTdiibVSi5yQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFwCqXjYDiMWANP7rLA7qdZv2MApMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OTYy MDNiNC1lNWU4LTQzNDAtYTc2NS1hOTQ1N2EwZGZkMWIvODk2MjAzYjQtZTVlOC00 MzQwLWE3NjUtYTk0NTdhMGRmZDFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODk2MjAzYjQtZTVlOC00MzQwLWE3 NjUtYTk0NTdhMGRmZDFiLzg5NjIwM2I0LWU1ZTgtNDM0MC1hNzY1LWE5NDU3YTBk ZmQxYi5jcmwwHwYDVR0jBBgwFoAUu2NMp4QoP5G06ThNE6mfUmZTQk4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OTYyMDNiNC1lNWU4LTQzNDAtYTc2NS1hOTQ1 N2EwZGZkMWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCvMswakVJbdOaEalMdNUZm g5gAKt9YAd7T4vclhZdB/ZUMoeYSarb40DgeHnwDCAMi8+w3sbU2Igq9aJ4OtAaR PByfu/t5wydfDUvpP79sKfRKPrVo5z0ANw0ZyQ6FmggOUI65yUqwawlHdHE/AnV8 CuNTmAE9J6md47peRUXjf/FcKueUBGBG5P5bTHYhfCO5A32SeK4frWf7c+jsRXUG rHM0t2iwbf+5une87bvhTxlxNEAx+ZBv1622pGrs7DI8bDU5/Y83CNDPRpR3nsx3 W4tWFE6uDUQQ9jXXzeqO0XOVgBgrXfHPYD49Dy3XiSh6kqIKxD6TDIz4ADO7/829 -----END CERTIFICATE-----Generated at Fri Apr 17 08:01:56 2026 by rpki-client