$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.mft File: dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.mft (raw, json) Hash identifier: aZdxrtj3UTWkcoFKpQs1OlBAKsa6YqSK1mH12o3UsqU= Subject key identifier: 9B:6A:CB:7A:84:40:57:09:A6:E5:6F:EA:9F:E8:FE:55:29:87:49:3D Authority key identifier: 33:1B:5C:1A:CE:D6:7A:D6:BF:82:2F:90:2E:FA:46:1C:C1:51:5B:6A Certificate issuer: /CN=dd70c3a1-6ad0-4cdd-aad7-613381f0e60d Certificate serial: 010D0C9F4328584D87BEC8A7A1F52AE54D3D5280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.mft Manifest number: 010D0C9F4328584073A8302DA37A113187F55960 Signing time: Thu 16 Apr 2026 23:00:03 +0000 Manifest this update: Thu 16 Apr 2026 23:00:03 +0000 Manifest next update: Sat 18 Apr 2026 23:00:00 +0000 Files and hashes: 1: 11a0507a-dc37-368a-b737-7ae864768f61.roa (hash: vdWIf/b5uc+9K7QxqHLpH4YQXjwyjjyqkQ2tOZNbbz0=) 2: 3ddab41c-bfeb-30e6-b0d8-efee9690e39d.roa (hash: V18cZ+jH5CPwV79h1nX/RToL3LBKDSC1lQa3uaJC8jA=) 3: 6f20c9d8-107e-3161-8366-714092e5749f.roa (hash: v5LVwmaIEj53x5aGXSdkKzHPSKodCfOGRWL095QEMY0=) 4: 97bd35f0-5fa4-33c5-9b80-c056b4d88f91.roa (hash: 6Af7jtMiDfOciAgYHNyMmdJ9d/E5624O10OiDoLcYQI=) 5: 9c7dbc93-7a06-3089-8f84-f5e072ffaaef.roa (hash: 0J0GfsJcKnTfL/i9sXqNph2fKZmgvD6Y8JkqlS2T5AA=) 6: a63530f0-6154-3c2a-80c7-10e826431502.roa (hash: +qqvLSjoOQmf3qlhT49Tor0zimsjHDzp35M3UXfyn3M=) 7: dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.crl (hash: 1L+JQbf5w8szlEPeIEUaYKOjo07/sBN0dD9wl08AC7c=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:be:c8:a7:a1:f5:2a:e5:4d:3d:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd70c3a1-6ad0-4cdd-aad7-613381f0e60d Validity Not Before: Apr 16 23:00:03 2026 GMT Not After : Apr 18 23:00:00 2026 GMT Subject: CN=085a4071-74e1-4b93-aed1-6d8f2de8789e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8f:c4:d3:a0:b9:34:95:cf:cf:00:3e:a3:e7: 4e:26:6c:3f:dc:69:d4:b0:83:7d:4b:77:ef:39:e2: 59:38:96:0e:32:05:67:54:fb:74:31:f4:5a:9d:c1: 2a:a3:10:b2:d6:9a:85:19:55:5a:b3:5c:aa:ff:c2: 46:b7:15:1a:84:36:a4:e8:9f:bb:d4:1a:b8:40:0b: 2c:17:ca:32:b0:9b:b3:11:4e:a9:f3:e7:e7:76:0c: 1e:eb:e3:ab:ac:66:a9:d8:f4:b8:83:ac:4f:7c:22: 06:d5:ce:e2:02:79:aa:d4:ac:2a:ef:de:5d:f6:25: b7:ee:84:e3:ee:4b:93:13:2b:5b:62:59:c6:47:8a: 61:8a:53:17:a9:bc:44:99:e8:a7:0b:32:94:fe:ed: fb:be:d4:cb:ee:1e:3c:ed:fc:cf:c5:b4:67:ce:12: 05:54:92:c9:43:bf:09:6d:c9:fe:e3:1f:49:e4:53: 59:ce:9f:06:c0:3e:c5:c2:c1:4e:22:ec:85:31:ea: ab:2b:35:4a:94:be:3a:bc:5a:c5:0a:f0:14:72:93: 57:73:5d:d3:65:5a:93:35:e4:c8:6b:da:e6:29:c8: 1c:5c:65:d0:e6:33:b8:54:c0:ed:12:24:13:2a:62: 71:bf:2d:9f:29:60:45:0c:e1:f5:7f:6e:85:53:10: 74:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:6A:CB:7A:84:40:57:09:A6:E5:6F:EA:9F:E8:FE:55:29:87:49:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.crl X509v3 Authority Key Identifier: keyid:33:1B:5C:1A:CE:D6:7A:D6:BF:82:2F:90:2E:FA:46:1C:C1:51:5B:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:1d:d9:d8:e3:7a:da:9e:35:e4:48:99:7b:5f:a2:97:d5:85: c4:3b:ab:60:87:62:38:94:18:b7:49:e6:e3:bc:d4:b2:4b:5c: a7:01:d3:a7:88:10:2a:cf:8a:85:77:81:5b:9e:30:a0:4a:ba: 92:bb:08:b2:f2:cd:84:d5:f5:3e:76:79:1b:fa:d1:bb:3b:b2: 3e:b3:0d:79:84:51:70:3f:a1:c7:79:1f:87:f6:0e:c0:b4:1c: 76:80:5e:42:10:b6:ff:13:3f:b3:21:c8:91:16:db:e5:c1:e1: 7d:fd:e1:6c:81:81:d8:e5:4c:42:ff:eb:6b:f6:e5:c0:bf:7a: 32:98:5a:e7:10:7e:f4:5c:97:c3:f5:4a:8f:68:6f:c9:c8:00: 79:5c:93:8c:16:05:62:db:66:7b:9e:54:00:08:4b:14:98:8f: 87:ec:f6:b1:76:af:e5:d2:a8:dd:d6:7a:e8:cd:b5:fd:f8:bf: 0e:0c:75:84:65:c2:36:90:38:85:62:30:3f:7c:37:86:eb:a4: 21:f3:f1:e4:59:4c:9d:cf:0f:60:6c:e9:ce:d0:aa:bb:03:b7: a9:ec:ae:58:82:3b:8b:ab:ef:7e:b7:76:ac:7f:2c:47:8e:c3: 9d:1c:c0:93:e2:ac:ba:0f:5b:4e:7c:7d:47:74:3f:97:80:76: 79:22:b5:14 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2HvsinofUq5U09UoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ3MGMzYTEtNmFkMC00Y2RkLWFhZDctNjEzMzgxZjBl NjBkMB4XDTI2MDQxNjIzMDAwM1oXDTI2MDQxODIzMDAwMFowLzEtMCsGA1UEAxMk MDg1YTQwNzEtNzRlMS00YjkzLWFlZDEtNmQ4ZjJkZTg3ODllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAto/E06C5NJXPzwA+o+dOJmw/3GnUsIN9S3fv OeJZOJYOMgVnVPt0MfRancEqoxCy1pqFGVVas1yq/8JGtxUahDak6J+71Bq4QAss F8oysJuzEU6p8+fndgwe6+OrrGap2PS4g6xPfCIG1c7iAnmq1Kwq795d9iW37oTj 7kuTEytbYlnGR4philMXqbxEmeinCzKU/u37vtTL7h487fzPxbRnzhIFVJLJQ78J bcn+4x9J5FNZzp8GwD7FwsFOIuyFMeqrKzVKlL46vFrFCvAUcpNXc13TZVqTNeTI a9rmKcgcXGXQ5jO4VMDtEiQTKmJxvy2fKWBFDOH1f26FUxB0/QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJtqy3qEQFcJpuVv6p/o/lUph0k9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kZDcw YzNhMS02YWQwLTRjZGQtYWFkNy02MTMzODFmMGU2MGQvZGQ3MGMzYTEtNmFkMC00 Y2RkLWFhZDctNjEzMzgxZjBlNjBkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZGQ3MGMzYTEtNmFkMC00Y2RkLWFh ZDctNjEzMzgxZjBlNjBkL2RkNzBjM2ExLTZhZDAtNGNkZC1hYWQ3LTYxMzM4MWYw ZTYwZC5jcmwwHwYDVR0jBBgwFoAUMxtcGs7Weta/gi+QLvpGHMFRW2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kZDcwYzNhMS02YWQwLTRjZGQtYWFkNy02MTMz ODFmMGU2MGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBFHdnY43ranjXkSJl7X6KX 1YXEO6tgh2I4lBi3SebjvNSyS1ynAdOniBAqz4qFd4FbnjCgSrqSuwiy8s2E1fU+ dnkb+tG7O7I+sw15hFFwP6HHeR+H9g7AtBx2gF5CELb/Ez+zIciRFtvlweF9/eFs gYHY5UxC/+tr9uXAv3oymFrnEH70XJfD9UqPaG/JyAB5XJOMFgVi22Z7nlQACEsU mI+H7Paxdq/l0qjd1nrozbX9+L8ODHWEZcI2kDiFYjA/fDeG66Qh8/HkWUydzw9g bOnO0Kq7A7ep7K5YgjuLq+9+t3asfyxHjsOdHMCT4qy6D1tOfH1HdD+XgHZ5IrUU -----END CERTIFICATE-----Generated at Fri Apr 17 16:50:30 2026 by rpki-client