$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft File: 324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft (raw, json) Hash identifier: Gzhf5DP1c7IVE/oFL0gxMLB8x2gJDs6rwP2J9XQs7Jg= Subject key identifier: 6A:B1:D0:A4:35:A8:30:FE:E7:82:FC:3A:9A:40:2A:45:4F:7F:06:F6 Authority key identifier: C4:19:AE:3D:87:CE:60:27:13:D2:8A:29:7C:75:10:F7:B8:30:3E:84 Certificate issuer: /CN=324b7e1b-1c29-4331-b0f5-ca9e220fd74e Certificate serial: 010D0C9F4328584D87833D76F71BF1793A3F2F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft Manifest number: 010D0C9F43285847EC999102C00F9169FD079AAE Signing time: Thu 16 Apr 2026 21:00:03 +0000 Manifest this update: Thu 16 Apr 2026 21:00:03 +0000 Manifest next update: Sun 19 Apr 2026 21:00:00 +0000 Files and hashes: 1: 324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl (hash: 4ebjlRuDUg76tUxNj5q+Gv9sT90B61F8mHtp4PDqycI=) 2: 80d79225-d47a-33b5-b17d-0e051345c7d6.roa (hash: jKC27pyMI/3aDf82xfTsk5FPxXSQsYlEaHhsl553p0A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:83:3d:76:f7:1b:f1:79:3a:3f:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324b7e1b-1c29-4331-b0f5-ca9e220fd74e Validity Not Before: Apr 16 21:00:03 2026 GMT Not After : Apr 19 21:00:00 2026 GMT Subject: CN=7ce5cdc8-63af-4d42-aca6-a64c14ec99b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fd:9b:8d:a6:91:35:83:45:0e:86:e8:f1:9e: f1:a8:7e:d3:23:da:9c:77:37:3c:e9:a8:01:2c:66: be:38:63:d4:1c:88:af:5e:5a:4a:6e:44:a9:71:92: 61:52:46:9b:90:0b:07:9f:09:8b:00:a0:c2:6f:dc: 64:6b:cd:07:67:b7:3e:f1:71:f0:83:96:89:51:d5: b9:17:77:c7:e1:21:56:88:71:8c:28:78:74:53:35: 6c:6d:26:ac:04:0a:16:ab:a1:02:41:5f:99:26:bb: 6c:c1:74:51:17:1c:ce:85:73:75:3c:b1:db:92:be: 79:c7:92:d4:24:85:99:17:ef:35:54:49:88:a4:de: 14:89:4f:0e:cb:ae:b2:18:63:2e:ed:bc:97:d9:90: 99:6d:a0:41:0c:fb:4e:bd:3c:71:d9:1a:e0:42:7e: 2a:17:2b:92:1e:4b:3f:53:32:51:d8:0b:2d:f9:b7: 81:34:cb:ad:0b:0e:9f:55:c0:8f:55:a7:2c:97:ad: 08:91:f4:b1:39:36:53:d9:32:31:df:43:58:15:f6: bd:73:79:81:76:81:86:3c:1d:8e:19:9f:3b:e1:c9: 95:5b:4e:66:27:cc:71:17:97:17:57:f0:0f:5c:b3: 1a:04:51:77:0f:fe:5a:30:2a:80:f9:0e:74:e5:7e: 95:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B1:D0:A4:35:A8:30:FE:E7:82:FC:3A:9A:40:2A:45:4F:7F:06:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl X509v3 Authority Key Identifier: keyid:C4:19:AE:3D:87:CE:60:27:13:D2:8A:29:7C:75:10:F7:B8:30:3E:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:de:d8:8a:8a:da:ee:fa:13:90:2a:f9:f6:af:27:c1:89:bf: dd:63:79:3b:98:b6:70:f3:5b:c7:81:d1:78:a7:44:69:43:e1: 5f:6f:84:6b:7b:ff:31:b0:43:1c:41:ef:79:eb:43:82:a4:91: 21:03:97:96:b9:8e:d5:b9:1a:a7:78:12:14:b2:d4:6a:90:fb: e9:69:43:30:13:9a:28:e3:92:45:f2:5b:82:3e:08:f6:ec:a1: 80:bc:19:57:0d:5f:7f:24:9b:08:8c:62:d2:ab:16:29:d6:35: 77:ef:db:15:77:03:14:74:91:a7:17:11:46:2d:98:f6:7d:15: 76:de:6e:d6:c8:74:27:4a:56:f9:65:aa:70:f1:b4:62:be:4c: f4:e8:c8:2f:09:60:bd:1b:23:a6:04:4f:29:51:c7:70:20:e2: af:47:42:ce:14:7a:57:a3:3a:59:8c:26:17:07:c7:60:2a:bb: e3:01:b5:fb:67:2a:88:61:b7:ad:60:21:f4:7c:ae:d7:b0:c8: ca:e6:11:0d:66:f1:55:34:5f:44:b4:66:e5:e5:23:a0:54:cd: d5:32:5d:c2:d9:16:92:8c:fb:1f:c2:fb:1c:79:16:9a:93:da: 89:84:c7:b2:49:05:9a:3c:81:61:fe:e1:38:10:11:a8:9f:03: b3:86:85:7c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2Hgz129xvxeTo/L4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI0YjdlMWItMWMyOS00MzMxLWIwZjUtY2E5ZTIyMGZk NzRlMB4XDTI2MDQxNjIxMDAwM1oXDTI2MDQxOTIxMDAwMFowLzEtMCsGA1UEAxMk N2NlNWNkYzgtNjNhZi00ZDQyLWFjYTYtYTY0YzE0ZWM5OWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmv2bjaaRNYNFDobo8Z7xqH7TI9qcdzc86agB LGa+OGPUHIivXlpKbkSpcZJhUkabkAsHnwmLAKDCb9xka80HZ7c+8XHwg5aJUdW5 F3fH4SFWiHGMKHh0UzVsbSasBAoWq6ECQV+ZJrtswXRRFxzOhXN1PLHbkr55x5LU JIWZF+81VEmIpN4UiU8Oy66yGGMu7byX2ZCZbaBBDPtOvTxx2RrgQn4qFyuSHks/ UzJR2Ast+beBNMutCw6fVcCPVacsl60IkfSxOTZT2TIx30NYFfa9c3mBdoGGPB2O GZ874cmVW05mJ8xxF5cXV/APXLMaBFF3D/5aMCqA+Q505X6VgQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGqx0KQ1qDD+54L8OppAKkVPfwb2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMjRi N2UxYi0xYzI5LTQzMzEtYjBmNS1jYTllMjIwZmQ3NGUvMzI0YjdlMWItMWMyOS00 MzMxLWIwZjUtY2E5ZTIyMGZkNzRlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzI0YjdlMWItMWMyOS00MzMxLWIw ZjUtY2E5ZTIyMGZkNzRlLzMyNGI3ZTFiLTFjMjktNDMzMS1iMGY1LWNhOWUyMjBm ZDc0ZS5jcmwwHwYDVR0jBBgwFoAUxBmuPYfOYCcT0oopfHUQ97gwPoQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMjRiN2UxYi0xYzI5LTQzMzEtYjBmNS1jYTll MjIwZmQ3NGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAg3tiKitru+hOQKvn2ryfB ib/dY3k7mLZw81vHgdF4p0RpQ+Ffb4Rre/8xsEMcQe9560OCpJEhA5eWuY7VuRqn eBIUstRqkPvpaUMwE5oo45JF8luCPgj27KGAvBlXDV9/JJsIjGLSqxYp1jV379sV dwMUdJGnFxFGLZj2fRV23m7WyHQnSlb5Zapw8bRivkz06MgvCWC9GyOmBE8pUcdw IOKvR0LOFHpXozpZjCYXB8dgKrvjAbX7ZyqIYbetYCH0fK7XsMjK5hENZvFVNF9E tGbl5SOgVM3VMl3C2RaSjPsfwvsceRaak9qJhMeySQWaPIFh/uE4EBGonwOzhoV8 -----END CERTIFICATE-----Generated at Fri Apr 17 07:04:47 2026 by rpki-client