$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.mft File: 432c4e45-9934-4a21-b56f-b27d7aa21e49.mft (raw, json) Hash identifier: IQaGvuuPKMve/zK3tLMiC6CV3zkP8mgQV2kwQnBbRt8= Subject key identifier: 76:F2:51:15:35:95:ED:5E:E3:FC:39:E3:A9:4B:C5:E5:CC:1B:B8:D4 Authority key identifier: E4:3D:44:53:78:9C:D7:F5:23:11:F2:15:43:36:81:A8:19:E5:63:F0 Certificate issuer: /CN=432c4e45-9934-4a21-b56f-b27d7aa21e49 Certificate serial: 010D0C9F4328584D8835E5012373756CA4004600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.mft Manifest number: 010D0C9F4328584528435719157927FE2C784C93 Signing time: Fri 17 Apr 2026 03:00:03 +0000 Manifest this update: Fri 17 Apr 2026 03:00:03 +0000 Manifest next update: Mon 20 Apr 2026 03:00:00 +0000 Files and hashes: 1: 432c4e45-9934-4a21-b56f-b27d7aa21e49.crl (hash: zA/vGKj1UzPmhtAaZGqqKflIGDdN7Ulcy93zJZUQ7QQ=) 2: a64bf38f-925a-34bb-b213-9abac238d2a5.roa (hash: qNMRNR1jH0i9xjYTy3jnziu6Ytt7RuqTuPk3HdU6IM0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:88:35:e5:01:23:73:75:6c:a4:00:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=432c4e45-9934-4a21-b56f-b27d7aa21e49 Validity Not Before: Apr 17 03:00:03 2026 GMT Not After : Apr 20 03:00:00 2026 GMT Subject: CN=345c2fb1-587e-470e-92c8-61dbef6d70f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:64:ab:06:e7:b3:e0:f4:86:9e:a3:bb:14:1a: 9c:e3:f0:80:fa:89:f9:27:c0:6b:ea:3b:94:c1:f3: ab:04:87:dd:71:7f:6e:6d:10:b6:8d:28:c1:b5:75: d8:94:52:37:59:12:a3:b9:57:0c:a0:53:4e:a2:03: 82:e0:c0:77:85:9c:4c:b0:2c:54:0b:b6:4e:bb:af: ac:75:a7:6d:52:b2:2c:dd:8c:c2:0a:29:e3:ed:2c: fa:f7:f1:cc:b4:40:03:60:5d:88:35:a6:20:e9:ef: a8:a1:e1:72:8c:e0:b0:f3:2b:01:a3:8a:b3:d1:42: 75:67:f8:71:6e:de:02:9f:f3:71:6c:48:30:2d:64: ab:21:0f:93:11:01:3b:e2:e6:f8:e8:48:44:70:14: 7c:ea:15:bc:d1:ed:c5:13:32:f6:b6:59:05:44:56: e0:3e:10:7a:5c:2c:b5:8a:9a:66:ae:5f:42:54:e5: a0:65:e3:96:0b:5f:65:bf:08:15:1f:23:1b:fe:42: 69:7d:9f:76:22:70:03:43:31:de:2a:ed:96:f6:10: a8:74:c0:da:17:7b:99:73:4c:65:4d:0e:f4:50:48: 0d:f0:bf:54:68:03:f6:05:60:49:f2:c0:54:7b:6c: c8:75:17:40:ed:9e:0f:29:74:4c:7e:65:6f:22:bf: 81:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:F2:51:15:35:95:ED:5E:E3:FC:39:E3:A9:4B:C5:E5:CC:1B:B8:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.crl X509v3 Authority Key Identifier: keyid:E4:3D:44:53:78:9C:D7:F5:23:11:F2:15:43:36:81:A8:19:E5:63:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:f4:a3:82:43:ac:5a:63:27:44:42:8c:39:55:ee:81:2c:64: 6e:9b:c7:2b:5b:18:d2:b5:92:6a:3f:59:48:17:1f:24:f6:f7: dd:d7:59:3c:75:32:a8:d9:7c:eb:49:71:1a:76:da:3e:3f:48: 27:e5:f2:c5:b9:31:f9:bd:af:f7:bb:5e:e8:8a:68:2a:37:89: 68:62:11:60:34:f3:68:5a:33:0f:64:ee:11:d5:33:dd:79:9a: c2:3c:9e:f7:89:a9:3a:2d:5b:2a:a4:68:b1:19:1e:cb:8f:a4: ab:ee:b9:88:0f:28:b3:59:37:57:73:7f:29:8d:a5:02:27:ed: 26:ff:f2:7a:91:c1:c6:1b:18:74:cb:b9:74:47:39:30:46:5d: 00:dd:9f:10:fe:35:24:4f:06:a2:e1:89:76:d8:5d:20:b3:a4: dc:a2:58:7d:ba:75:f2:f3:61:9b:ed:dc:ac:6f:6b:3f:a6:51: 54:cc:91:3e:ca:f3:5e:09:9c:88:8c:71:30:b3:c6:aa:b3:79: b6:d2:ab:06:63:18:22:81:67:d7:5f:e7:69:8d:34:22:d2:3b: 5f:42:2c:e5:cc:b0:d4:5a:0c:83:48:f6:e9:2a:75:f6:34:d6: 46:43:13:73:8c:66:b8:9c:1c:48:84:ba:c8:b3:e2:a2:16:ce: c0:6f:bd:0f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2INeUBI3N1bKQARgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDMyYzRlNDUtOTkzNC00YTIxLWI1NmYtYjI3ZDdhYTIx ZTQ5MB4XDTI2MDQxNzAzMDAwM1oXDTI2MDQyMDAzMDAwMFowLzEtMCsGA1UEAxMk MzQ1YzJmYjEtNTg3ZS00NzBlLTkyYzgtNjFkYmVmNmQ3MGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGSrBuez4PSGnqO7FBqc4/CA+on5J8Br6juU wfOrBIfdcX9ubRC2jSjBtXXYlFI3WRKjuVcMoFNOogOC4MB3hZxMsCxUC7ZOu6+s dadtUrIs3YzCCinj7Sz69/HMtEADYF2INaYg6e+ooeFyjOCw8ysBo4qz0UJ1Z/hx bt4Cn/NxbEgwLWSrIQ+TEQE74ub46EhEcBR86hW80e3FEzL2tlkFRFbgPhB6XCy1 ippmrl9CVOWgZeOWC19lvwgVHyMb/kJpfZ92InADQzHeKu2W9hCodMDaF3uZc0xl TQ70UEgN8L9UaAP2BWBJ8sBUe2zIdRdA7Z4PKXRMfmVvIr+B2wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHbyURU1le1e4/w546lLxeXMG7jUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80MzJj NGU0NS05OTM0LTRhMjEtYjU2Zi1iMjdkN2FhMjFlNDkvNDMyYzRlNDUtOTkzNC00 YTIxLWI1NmYtYjI3ZDdhYTIxZTQ5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDMyYzRlNDUtOTkzNC00YTIxLWI1 NmYtYjI3ZDdhYTIxZTQ5LzQzMmM0ZTQ1LTk5MzQtNGEyMS1iNTZmLWIyN2Q3YWEy MWU0OS5jcmwwHwYDVR0jBBgwFoAU5D1EU3ic1/UjEfIVQzaBqBnlY/AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80MzJjNGU0NS05OTM0LTRhMjEtYjU2Zi1iMjdk N2FhMjFlNDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBv9KOCQ6xaYydEQow5Ve6B LGRum8crWxjStZJqP1lIFx8k9vfd11k8dTKo2XzrSXEadto+P0gn5fLFuTH5va/3 u17oimgqN4loYhFgNPNoWjMPZO4R1TPdeZrCPJ73iak6LVsqpGixGR7Lj6Sr7rmI DyizWTdXc38pjaUCJ+0m//J6kcHGGxh0y7l0RzkwRl0A3Z8Q/jUkTwai4Yl22F0g s6Tcolh9unXy82Gb7dysb2s/plFUzJE+yvNeCZyIjHEws8aqs3m20qsGYxgigWfX X+dpjTQi0jtfQizlzLDUWgyDSPbpKnX2NNZGQxNzjGa4nBxIhLrIs+KiFs7Ab70P -----END CERTIFICATE-----Generated at Fri Apr 17 08:03:04 2026 by rpki-client