$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.mft File: 40392fe9-312c-47a6-8066-48fda2f4c80b.mft (raw, json) Hash identifier: wswGI17NWeFsB+9QBkRM0nIDfjd4fNUL0Dxs467QN1k= Subject key identifier: 62:34:72:90:9D:43:DD:76:8C:59:3A:CA:D6:28:52:46:99:55:EB:5D Authority key identifier: DA:1E:F6:6A:D9:31:B6:C6:1E:B2:40:C0:82:9E:5D:06:45:B8:2F:A8 Certificate issuer: /CN=40392fe9-312c-47a6-8066-48fda2f4c80b Certificate serial: 010D0C9F4328584D890658D096EF96D080FCB340 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.mft Manifest number: 010D0C9F4328584073A84E58EA4BACB47C0E2B36 Signing time: Fri 17 Apr 2026 10:00:03 +0000 Manifest this update: Fri 17 Apr 2026 10:00:03 +0000 Manifest next update: Sun 19 Apr 2026 10:00:00 +0000 Files and hashes: 1: 40392fe9-312c-47a6-8066-48fda2f4c80b.crl (hash: /1Pfjq8rN/EwHtOUMUpE7q5XB5pT0oZA9vqpm3ZEwNg=) 2: b93cc2fe-6a07-3b60-bbd2-12fdea98b02d.roa (hash: nR53JQcaVDa7Y9O4FIou609SIfGp49T4mwwqsI3jOaE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:89:06:58:d0:96:ef:96:d0:80:fc:b3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40392fe9-312c-47a6-8066-48fda2f4c80b Validity Not Before: Apr 17 10:00:03 2026 GMT Not After : Apr 19 10:00:00 2026 GMT Subject: CN=ca334bb1-79b8-440c-89cf-56af475f608c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:63:22:15:18:6e:e5:52:d0:a3:6d:ce:8d:f9: a6:22:36:5a:8f:3e:a2:03:c5:b3:39:b5:9f:da:ce: d6:35:40:c3:dc:1a:99:47:bc:a3:62:77:b1:b8:20: 3d:d8:62:3d:2d:58:8a:71:62:b8:b0:ae:18:e9:d0: ce:be:94:6c:55:f4:d1:53:24:ac:bc:a5:da:49:11: 37:9d:57:d0:67:ee:a7:1e:32:e6:08:3a:06:45:b0: f0:12:45:e6:19:48:10:7c:3f:51:41:4b:fd:80:e2: ef:a8:30:03:17:c6:3d:f7:b6:90:44:e4:2b:0d:75: 6b:9e:c5:44:1d:0f:b9:26:7e:ac:14:49:28:5b:15: 51:6b:27:d3:0c:5e:26:78:e7:2d:20:09:42:7c:4d: 94:c6:83:76:0c:52:65:ca:e0:2c:af:01:48:6b:f7: c5:64:30:00:34:cc:a4:60:cc:e3:fe:72:c6:cf:c7: 15:4c:83:19:0f:a7:89:ce:dd:29:e1:da:49:8b:b8: c5:7b:12:94:52:05:62:9d:f1:93:9e:b7:02:f3:a1: 02:1d:ba:7f:01:0d:38:4d:7c:02:e2:01:a5:a9:23: dc:18:ce:5c:3b:7c:69:f0:75:44:24:7a:f8:39:c3: 66:b7:3c:5e:c0:7f:7e:62:7a:ba:ef:88:b1:2e:56: 5f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:34:72:90:9D:43:DD:76:8C:59:3A:CA:D6:28:52:46:99:55:EB:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.crl X509v3 Authority Key Identifier: keyid:DA:1E:F6:6A:D9:31:B6:C6:1E:B2:40:C0:82:9E:5D:06:45:B8:2F:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:82:61:62:ac:99:b5:66:f3:db:53:7c:3c:1b:b5:90:82:c2: 62:84:cb:e3:a3:f4:e0:95:d6:48:60:44:48:2b:fd:26:02:f7: fd:22:37:18:04:8d:07:d8:bb:37:a0:17:d9:c5:68:af:58:56: 0d:5f:d4:ee:f3:79:d3:6b:37:0b:5a:dd:f6:2d:17:01:91:d1: b4:c0:5c:a8:d8:ea:71:8a:ca:b9:fc:22:28:4c:ec:4e:01:99: 29:5c:4e:7f:72:91:21:9a:03:ae:e7:aa:9c:f6:e9:07:1f:67: 17:81:7a:bb:f5:07:aa:8c:03:25:87:90:33:b3:f2:6e:d8:7e: 76:86:16:dd:1e:48:f0:29:7c:c3:a7:9c:0a:97:d0:ff:8d:9e: 96:13:68:d8:0c:20:98:39:68:03:0d:e0:85:f4:cc:89:a2:60: de:b1:06:20:d6:57:2a:4f:d0:be:3e:30:0e:2b:12:a6:e1:d2: e6:3e:eb:24:a1:20:6c:85:88:b7:9a:c4:cf:a1:90:b6:be:9f: 67:be:98:64:db:22:e8:f3:4f:12:0f:cc:93:45:15:e4:30:2f: 0b:bd:4b:e8:41:cf:92:a3:8a:36:af:51:03:7e:13:75:37:17: af:23:9b:d0:9a:a2:c9:59:86:c3:61:0e:39:dd:90:e7:7f:76: 55:2e:ca:61 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2JBljQlu+W0ID8s0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAzOTJmZTktMzEyYy00N2E2LTgwNjYtNDhmZGEyZjRj ODBiMB4XDTI2MDQxNzEwMDAwM1oXDTI2MDQxOTEwMDAwMFowLzEtMCsGA1UEAxMk Y2EzMzRiYjEtNzliOC00NDBjLTg5Y2YtNTZhZjQ3NWY2MDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWMiFRhu5VLQo23OjfmmIjZajz6iA8WzObWf 2s7WNUDD3BqZR7yjYnexuCA92GI9LViKcWK4sK4Y6dDOvpRsVfTRUySsvKXaSRE3 nVfQZ+6nHjLmCDoGRbDwEkXmGUgQfD9RQUv9gOLvqDADF8Y997aQROQrDXVrnsVE HQ+5Jn6sFEkoWxVRayfTDF4meOctIAlCfE2UxoN2DFJlyuAsrwFIa/fFZDAANMyk YMzj/nLGz8cVTIMZD6eJzt0p4dpJi7jFexKUUgVinfGTnrcC86ECHbp/AQ04TXwC 4gGlqSPcGM5cO3xp8HVEJHr4OcNmtzxewH9+Ynq674ixLlZfiwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGI0cpCdQ912jFk6ytYoUkaZVetdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MDM5 MmZlOS0zMTJjLTQ3YTYtODA2Ni00OGZkYTJmNGM4MGIvNDAzOTJmZTktMzEyYy00 N2E2LTgwNjYtNDhmZGEyZjRjODBiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDAzOTJmZTktMzEyYy00N2E2LTgw NjYtNDhmZGEyZjRjODBiLzQwMzkyZmU5LTMxMmMtNDdhNi04MDY2LTQ4ZmRhMmY0 YzgwYi5jcmwwHwYDVR0jBBgwFoAU2h72atkxtsYeskDAgp5dBkW4L6gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MDM5MmZlOS0zMTJjLTQ3YTYtODA2Ni00OGZk YTJmNGM4MGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQABgmFirJm1ZvPbU3w8G7WQ gsJihMvjo/TgldZIYERIK/0mAvf9IjcYBI0H2Ls3oBfZxWivWFYNX9Tu83nTazcL Wt32LRcBkdG0wFyo2Opxisq5/CIoTOxOAZkpXE5/cpEhmgOu56qc9ukHH2cXgXq7 9QeqjAMlh5Azs/Ju2H52hhbdHkjwKXzDp5wKl9D/jZ6WE2jYDCCYOWgDDeCF9MyJ omDesQYg1lcqT9C+PjAOKxKm4dLmPuskoSBshYi3msTPoZC2vp9nvphk2yLo808S D8yTRRXkMC8LvUvoQc+So4o2r1EDfhN1NxevI5vQmqLJWYbDYQ453ZDnf3ZVLsph -----END CERTIFICATE-----Generated at Fri Apr 17 19:06:34 2026 by rpki-client