$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft File: b520faac-792a-4f70-8f4c-be06a5992ae1.mft (raw, json) Hash identifier: PTKPDRZO7IEZ3rFypbiTkkPNVrKhfJ0wvZk82OlDAN8= Subject key identifier: EF:BE:7D:95:F0:CC:F2:70:2E:36:31:78:7E:50:7D:A8:B3:E3:09:FC Authority key identifier: 19:64:64:90:D5:34:4F:B1:82:2F:59:21:B8:D4:67:4D:10:F7:63:16 Certificate issuer: /CN=b520faac-792a-4f70-8f4c-be06a5992ae1 Certificate serial: 010D0C9F4328584D86D091B2327CF3117DDDCF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft Manifest number: 010D0C9F432858454B120EB453C95356C481C706 Signing time: Thu 16 Apr 2026 15:00:03 +0000 Manifest this update: Thu 16 Apr 2026 15:00:03 +0000 Manifest next update: Sat 18 Apr 2026 15:00:00 +0000 Files and hashes: 1: 26b53dee-927f-3932-9072-92163ff78f26.roa (hash: T5bE2jdoXq+Ag+DvvWh0qdrIgjObbWOU8T1nsQt7/hw=) 2: b520faac-792a-4f70-8f4c-be06a5992ae1.crl (hash: OSKPROmShjz5Ear6ke3hIiza2ydtAIXwPhfA52gHWks=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:d0:91:b2:32:7c:f3:11:7d:dd:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b520faac-792a-4f70-8f4c-be06a5992ae1 Validity Not Before: Apr 16 15:00:03 2026 GMT Not After : Apr 18 15:00:00 2026 GMT Subject: CN=aafe9e8a-38d5-4b59-a386-bc694ef58b45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5d:05:4f:11:13:8d:54:7c:52:88:8f:a6:36: 3a:f5:9f:7b:80:04:1f:f5:5e:95:3d:c9:80:36:84: 66:03:51:5f:83:86:9d:35:29:68:f0:f2:bb:a9:5f: 62:5f:0d:99:03:5c:17:24:48:62:82:8f:16:d2:0a: b1:c9:ab:2d:a9:48:cf:4e:b5:92:77:1d:07:57:2a: 29:f1:70:53:b4:83:d8:d3:fe:fa:a1:14:8a:64:30: 3f:f3:86:68:74:4b:13:8a:33:cb:21:54:85:9b:bf: 63:56:0c:b3:ff:d0:39:75:56:e0:13:95:d4:68:77: 1d:b5:96:23:58:f3:0b:da:82:54:00:49:df:a2:75: 69:c2:84:1d:e6:a2:cf:94:6b:f5:e5:cb:b6:e3:b1: 24:c6:72:c3:58:0a:d9:a0:1c:f9:4e:ac:52:c7:02: cd:22:e0:d2:1b:5b:27:a4:7d:ca:e2:13:39:0b:ab: 6f:cb:e6:d0:24:fb:cc:80:17:39:2e:4e:1a:15:82: 3d:e0:3b:46:90:00:4e:fe:18:3b:d1:54:e0:11:62: 2f:df:ac:a5:32:73:df:00:94:de:9d:29:54:36:42: cd:13:22:65:cb:67:44:ea:1c:5e:98:a9:5b:bd:9b: 65:4c:e7:e5:ef:ee:2a:60:b6:01:d6:69:db:63:be: 63:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:BE:7D:95:F0:CC:F2:70:2E:36:31:78:7E:50:7D:A8:B3:E3:09:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.crl X509v3 Authority Key Identifier: keyid:19:64:64:90:D5:34:4F:B1:82:2F:59:21:B8:D4:67:4D:10:F7:63:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:22:57:49:17:3d:91:89:e7:df:55:6e:ce:34:64:7d:f7:7b: 32:29:a3:3f:b9:e8:26:de:55:82:99:82:6c:7d:7a:0e:74:51: d3:3b:f1:3c:42:90:60:3b:f8:57:48:e2:fe:b7:01:19:5a:29: d9:a1:ed:45:03:b8:27:20:e4:32:71:5e:04:e2:c6:34:d2:54: 1c:d3:a2:85:70:f6:c8:e7:43:db:0f:5e:0d:ed:ea:e3:bf:d3: 77:3f:99:5f:3f:df:28:25:b2:d4:32:a3:ee:61:58:df:50:9a: 1e:b1:dd:86:d3:43:90:be:e3:cf:42:41:3a:86:d3:aa:94:56: f7:d7:c6:3c:e4:46:11:0a:e8:61:ab:c8:b9:aa:31:2c:b5:ab: c7:0d:f0:e0:b1:f9:09:01:c6:8b:55:6a:dd:d6:39:77:5e:5b: c9:44:4a:d4:2e:b1:bf:a5:ae:72:61:45:83:07:3e:94:4b:10: 32:88:e4:3a:15:0f:e8:da:ed:8b:ed:6c:7f:e7:cf:bc:70:ae: a9:ee:17:c8:8b:3a:34:f7:a0:42:54:df:3c:83:6f:52:c4:02: 23:2b:d9:76:c5:07:63:4b:8b:4b:c7:d7:5d:ad:c3:a2:83:56: 7a:2a:18:b4:d4:94:8d:39:a0:4b:96:45:58:d0:ff:34:b4:01: 99:3c:80:17 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2G0JGyMnzzEX3dzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjUyMGZhYWMtNzkyYS00ZjcwLThmNGMtYmUwNmE1OTky YWUxMB4XDTI2MDQxNjE1MDAwM1oXDTI2MDQxODE1MDAwMFowLzEtMCsGA1UEAxMk YWFmZTllOGEtMzhkNS00YjU5LWEzODYtYmM2OTRlZjU4YjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo10FTxETjVR8UoiPpjY69Z97gAQf9V6VPcmA NoRmA1Ffg4adNSlo8PK7qV9iXw2ZA1wXJEhigo8W0gqxyastqUjPTrWSdx0HVyop 8XBTtIPY0/76oRSKZDA/84ZodEsTijPLIVSFm79jVgyz/9A5dVbgE5XUaHcdtZYj WPML2oJUAEnfonVpwoQd5qLPlGv15cu247EkxnLDWArZoBz5TqxSxwLNIuDSG1sn pH3K4hM5C6tvy+bQJPvMgBc5Lk4aFYI94DtGkABO/hg70VTgEWIv36ylMnPfAJTe nSlUNkLNEyJly2dE6hxemKlbvZtlTOfl7+4qYLYB1mnbY75j1wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFO++fZXwzPJwLjYxeH5Qfaiz4wn8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNTIw ZmFhYy03OTJhLTRmNzAtOGY0Yy1iZTA2YTU5OTJhZTEvYjUyMGZhYWMtNzkyYS00 ZjcwLThmNGMtYmUwNmE1OTkyYWUxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjUyMGZhYWMtNzkyYS00ZjcwLThm NGMtYmUwNmE1OTkyYWUxL2I1MjBmYWFjLTc5MmEtNGY3MC04ZjRjLWJlMDZhNTk5 MmFlMS5jcmwwHwYDVR0jBBgwFoAUGWRkkNU0T7GCL1khuNRnTRD3YxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iNTIwZmFhYy03OTJhLTRmNzAtOGY0Yy1iZTA2 YTU5OTJhZTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCYIldJFz2RieffVW7ONGR9 93syKaM/uegm3lWCmYJsfXoOdFHTO/E8QpBgO/hXSOL+twEZWinZoe1FA7gnIOQy cV4E4sY00lQc06KFcPbI50PbD14N7erjv9N3P5lfP98oJbLUMqPuYVjfUJoesd2G 00OQvuPPQkE6htOqlFb318Y85EYRCuhhq8i5qjEstavHDfDgsfkJAcaLVWrd1jl3 XlvJRErULrG/pa5yYUWDBz6USxAyiOQ6FQ/o2u2L7Wx/58+8cK6p7hfIizo096BC VN88g29SxAIjK9l2xQdjS4tLx9ddrcOig1Z6Khi01JSNOaBLlkVY0P80tAGZPIAX -----END CERTIFICATE-----Generated at Fri Apr 17 11:32:45 2026 by rpki-client