$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft File: 2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft (raw, json) Hash identifier: JgzUxBF2CQLRLPNaTnVzp5IMxKFFL8QyBq/U0ASry6o= Subject key identifier: C4:57:CA:F5:C4:0A:4D:F2:39:0A:ED:E4:02:83:8E:D9:8C:6F:72:E4 Authority key identifier: D9:97:C6:DD:81:55:F9:15:F5:04:63:45:39:D3:6A:51:2C:17:74:C7 Certificate issuer: /CN=2a1e9734-0a7f-48e6-87d3-ca7d837f4e50 Certificate serial: 010D0C9F4328584D8694FE9EB8BAB9E3D966B270 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft Manifest number: 010D0C9F4328584073A85689C6C67E2F0E4CA813 Signing time: Thu 16 Apr 2026 13:00:03 +0000 Manifest this update: Thu 16 Apr 2026 13:00:03 +0000 Manifest next update: Sun 19 Apr 2026 13:00:00 +0000 Files and hashes: 1: 0335608f-a9cd-3396-90f3-61164a83f73d.roa (hash: t+YZ0L8003+XIT+l2LdclhKvjDExo2bfUahSIk7Zgsc=) 2: 2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.crl (hash: PlTgQvuJTY7yxRgl3xmVHPRbboS4yp9qYtQrJ7xkqi0=) 3: cd3cb7de-2625-3893-a323-d1bec7d259a0.roa (hash: Un/wsca/kduwZfT/iTJDSNv7G3Ne4B87o4ZocVmFH24=) 4: e4eb8e84-793c-33ec-9088-110eaf427f80.asa (hash: 6AuavwcBgquI3LDnP1Hca+G3BaHrJEdcAoSfidUKLYE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:94:fe:9e:b8:ba:b9:e3:d9:66:b2:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a1e9734-0a7f-48e6-87d3-ca7d837f4e50 Validity Not Before: Apr 16 13:00:03 2026 GMT Not After : Apr 19 13:00:00 2026 GMT Subject: CN=8ba79d6d-a4b6-4da7-a20a-61798dc2b8cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:69:58:94:da:f2:05:5e:2c:38:f2:27:fa:7e: ef:3e:cc:41:72:a5:38:cd:c1:df:ae:16:a4:71:5f: 32:c8:ca:d1:ec:3d:70:5f:78:77:4d:20:d8:e4:cf: 34:a4:6f:50:65:b1:64:1c:c3:b9:84:0b:70:e4:f9: a8:99:b0:8d:4c:e2:c3:b5:e0:20:44:a9:8e:2c:ec: 5d:20:bd:94:c5:cf:79:e2:83:d1:7e:03:9b:40:5b: 09:36:58:e3:11:b1:18:cc:14:8b:7f:4e:85:14:54: 55:7e:ba:07:97:3a:0a:71:94:0e:b7:19:8f:36:6d: c5:50:0a:fb:3f:6e:f5:b9:14:51:2f:f3:cf:6a:7d: e3:d5:19:02:db:9d:82:5d:ce:bc:84:93:b8:a0:ef: ef:17:46:d0:76:68:87:fe:5e:f9:4e:b3:d2:0b:0f: 72:49:c5:68:5f:7b:0f:3a:0f:7e:88:1e:c7:ef:87: 8d:7e:4f:8c:0d:f7:8b:81:89:68:03:1d:39:bd:88: fe:38:0f:19:05:6e:c1:7c:1e:ef:66:2b:ec:81:84: 63:3e:32:9e:e6:79:1a:18:b9:98:49:e4:50:f6:d8: fd:81:19:0a:cf:58:56:1f:ad:ff:c7:68:2d:5f:cb: 2f:57:be:c2:66:a1:b5:eb:67:5c:13:b7:09:ca:4a: 41:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:57:CA:F5:C4:0A:4D:F2:39:0A:ED:E4:02:83:8E:D9:8C:6F:72:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.crl X509v3 Authority Key Identifier: keyid:D9:97:C6:DD:81:55:F9:15:F5:04:63:45:39:D3:6A:51:2C:17:74:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:f3:6e:36:ac:4d:23:96:95:e0:53:45:2c:91:84:37:76:46: fe:26:e3:fc:92:e5:e2:42:2d:ee:c9:d8:e0:1a:95:44:9f:7f: f4:8d:a6:0f:72:ba:50:0e:e7:c3:af:ad:1a:4a:0e:11:78:cb: 36:68:cf:ac:b8:1e:57:53:db:a7:ff:7c:cb:09:2e:df:2b:a7: 5a:95:a6:5e:9a:72:de:33:af:b7:ed:72:35:80:20:cd:8c:fb: b9:4f:c9:93:92:e2:ee:66:05:10:cf:f6:db:8d:f4:b2:a4:2a: f2:64:75:98:a7:8d:3a:31:bf:39:b0:eb:b6:95:bd:0d:ab:86: 75:da:dc:18:dd:75:c9:9d:0c:98:f5:2e:ad:14:34:bb:c1:c9: 88:20:18:d4:f8:1d:8f:8b:45:22:25:ff:9a:be:75:41:31:28: d1:ce:67:13:f1:d2:f4:ed:a0:c0:2d:02:87:3c:54:c9:47:0e: 6a:14:56:48:52:76:25:2a:18:6c:9f:d4:d6:76:fd:38:74:30: 74:b8:88:05:38:74:2f:ab:91:c7:c3:da:a5:ed:5f:21:95:69: 16:dd:9d:84:d1:77:2d:27:68:96:5e:33:8d:c1:63:18:65:dc: f3:1c:cc:5d:05:3c:6a:0e:6c:92:02:cc:59:30:68:95:19:9f: a7:f7:20:53 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2GlP6euLq549lmsnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmExZTk3MzQtMGE3Zi00OGU2LTg3ZDMtY2E3ZDgzN2Y0 ZTUwMB4XDTI2MDQxNjEzMDAwM1oXDTI2MDQxOTEzMDAwMFowLzEtMCsGA1UEAxMk OGJhNzlkNmQtYTRiNi00ZGE3LWEyMGEtNjE3OThkYzJiOGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGlYlNryBV4sOPIn+n7vPsxBcqU4zcHfrhak cV8yyMrR7D1wX3h3TSDY5M80pG9QZbFkHMO5hAtw5PmombCNTOLDteAgRKmOLOxd IL2Uxc954oPRfgObQFsJNljjEbEYzBSLf06FFFRVfroHlzoKcZQOtxmPNm3FUAr7 P271uRRRL/PPan3j1RkC252CXc68hJO4oO/vF0bQdmiH/l75TrPSCw9yScVoX3sP Og9+iB7H74eNfk+MDfeLgYloAx05vYj+OA8ZBW7BfB7vZivsgYRjPjKe5nkaGLmY SeRQ9tj9gRkKz1hWH63/x2gtX8svV77CZqG162dcE7cJykpB1wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMRXyvXECk3yOQrt5AKDjtmMb3LkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yYTFl OTczNC0wYTdmLTQ4ZTYtODdkMy1jYTdkODM3ZjRlNTAvMmExZTk3MzQtMGE3Zi00 OGU2LTg3ZDMtY2E3ZDgzN2Y0ZTUwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmExZTk3MzQtMGE3Zi00OGU2LTg3 ZDMtY2E3ZDgzN2Y0ZTUwLzJhMWU5NzM0LTBhN2YtNDhlNi04N2QzLWNhN2Q4Mzdm NGU1MC5jcmwwHwYDVR0jBBgwFoAU2ZfG3YFV+RX1BGNFOdNqUSwXdMcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yYTFlOTczNC0wYTdmLTQ4ZTYtODdkMy1jYTdk ODM3ZjRlNTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAm8242rE0jlpXgU0UskYQ3 dkb+JuP8kuXiQi3uydjgGpVEn3/0jaYPcrpQDufDr60aSg4ReMs2aM+suB5XU9un /3zLCS7fK6dalaZemnLeM6+37XI1gCDNjPu5T8mTkuLuZgUQz/bbjfSypCryZHWY p406Mb85sOu2lb0Nq4Z12twY3XXJnQyY9S6tFDS7wcmIIBjU+B2Pi0UiJf+avnVB MSjRzmcT8dL07aDALQKHPFTJRw5qFFZIUnYlKhhsn9TWdv04dDB0uIgFOHQvq5HH w9ql7V8hlWkW3Z2E0XctJ2iWXjONwWMYZdzzHMxdBTxqDmySAsxZMGiVGZ+n9yBT -----END CERTIFICATE-----Generated at Fri Apr 17 08:01:33 2026 by rpki-client