$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.mft File: b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.mft (raw, json) Hash identifier: H3bITrfLy3nZyN9dmkcW+VjHroWSh76AxX1mNhvaW0g= Subject key identifier: 20:38:59:BF:78:FD:13:40:75:8C:A8:8A:4F:7C:76:08:1E:2E:DA:40 Authority key identifier: 4F:84:29:20:F1:6A:65:B2:5E:48:CA:51:3F:B5:25:8B:50:8A:F5:FB Certificate issuer: /CN=b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6 Certificate serial: 010D0C9F4328584D88CACA13F0784F2B30141E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.mft Manifest number: 010D0C9F4328584073A848110A4299D6DF1F1973 Signing time: Fri 17 Apr 2026 08:00:03 +0000 Manifest this update: Fri 17 Apr 2026 08:00:03 +0000 Manifest next update: Sun 19 Apr 2026 08:00:00 +0000 Files and hashes: 1: 7955ed0f-1153-3896-a51e-5d367bf0cc64.roa (hash: UcPRXvFUiQ/9GqFJl8xrw6QrVRFy/1Ii3uHaeq4087M=) 2: b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.crl (hash: RW98+HQkX6Qe5KInQNpl8tldfwaEyiEdv3ER5UmzwJY=) 3: ee1a4e04-68da-38e4-9471-1d40d048b137.roa (hash: Kag5Gq1vKV3zvjruwX9VJ5Vcy82h8pAblZGlzrSH5ho=) 4: ffd9f8d6-0f97-3fc2-87fc-63cc08d4488f.roa (hash: 01BFVXiGsb+301Ll2EoFYXtqNbHDna0NZUKmE05mHy0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:88:ca:ca:13:f0:78:4f:2b:30:14:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6 Validity Not Before: Apr 17 08:00:03 2026 GMT Not After : Apr 19 08:00:00 2026 GMT Subject: CN=bb90de0f-502f-419a-9173-5c5f33fbc586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9d:0a:cb:68:14:b7:66:b1:1e:cc:cd:d2:b5: fc:a4:d7:e2:3d:6a:aa:06:56:1f:ac:fa:41:36:11: a0:ef:5e:49:7b:8d:4c:27:65:3a:d0:08:20:89:4c: 02:c6:3f:ce:f3:a6:1e:43:c4:2b:23:77:ad:7d:ce: 7f:f9:92:7a:15:70:61:22:d2:8f:af:7e:20:a8:8b: 5b:93:a3:83:16:bc:b7:a4:0a:5c:97:b8:62:b7:ac: 17:ba:6d:e5:0c:fe:4b:ca:0c:7b:4a:06:26:68:4a: b4:f2:8d:d8:f5:7a:68:3f:a5:3d:0b:29:19:55:5c: 01:d8:8b:1f:bd:5f:91:04:26:c1:3d:dc:68:81:f6: df:ea:03:f3:91:94:9d:a9:e8:23:3e:68:e4:e9:e3: d5:85:10:b3:58:8c:18:db:d6:8c:95:f5:79:c1:f9: b9:90:b5:44:88:81:db:d1:8f:8e:82:d2:ce:6e:e5: be:59:cc:03:24:f8:3d:f0:62:85:6d:95:a3:df:69: 9d:d2:b4:d8:b2:0a:09:de:f8:3d:41:46:48:3c:98: 49:14:a2:2b:a0:3a:63:97:ff:72:e9:d2:a1:8b:d3: bc:f6:8c:fe:2a:dc:de:13:05:78:b3:e3:21:aa:69: 52:6a:c9:79:03:98:41:6e:82:63:62:bd:8d:5a:39: b7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:38:59:BF:78:FD:13:40:75:8C:A8:8A:4F:7C:76:08:1E:2E:DA:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.crl X509v3 Authority Key Identifier: keyid:4F:84:29:20:F1:6A:65:B2:5E:48:CA:51:3F:B5:25:8B:50:8A:F5:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:3f:71:fc:db:18:34:18:66:41:0e:6d:cd:eb:a5:24:93:09: c9:b5:dd:ac:ce:bd:da:c1:09:3d:62:44:81:f9:49:4a:56:24: 8e:6c:f2:9e:93:b0:df:f6:76:78:34:fe:56:7a:9a:b8:34:da: 7a:5c:dc:ba:1b:97:30:56:3d:98:dc:1c:04:b4:b2:0e:e3:33: ed:93:59:65:9f:d0:f0:9a:41:db:f5:ed:b5:3b:7f:91:f2:44: 1a:0a:11:e6:49:07:b0:0d:88:f4:86:60:37:58:41:28:85:9f: 29:4c:33:51:e5:87:de:cc:a6:40:88:d8:74:4d:86:1f:c6:f1: bf:7e:6f:4c:98:15:d3:a9:79:7b:37:3d:a4:d5:e8:5e:85:4d: 37:50:c5:5c:4c:3c:d2:78:5e:f6:00:85:a8:51:f0:9d:02:76: 98:8d:8b:a9:83:b1:ed:1b:5d:82:7c:51:5a:52:ea:0f:a1:3a: e3:78:e1:10:57:45:81:91:c8:d7:bc:91:f5:8e:77:df:05:74: 6d:d3:57:64:a3:dd:93:a3:02:74:10:b0:c5:a0:9b:15:95:22: 89:5d:db:df:79:7f:fd:c8:0b:b4:ea:30:59:f0:fa:fa:77:07: af:79:da:14:41:66:36:ec:0a:96:ef:66:04:a0:39:a1:8c:50: 72:c1:ee:e3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2IysoT8HhPKzAUHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjRkNzFkYTktNmZmMS00OWFiLWExZTUtNmM0OGY4ZjBj MWQ2MB4XDTI2MDQxNzA4MDAwM1oXDTI2MDQxOTA4MDAwMFowLzEtMCsGA1UEAxMk YmI5MGRlMGYtNTAyZi00MTlhLTkxNzMtNWM1ZjMzZmJjNTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZ0Ky2gUt2axHszN0rX8pNfiPWqqBlYfrPpB NhGg715Je41MJ2U60AggiUwCxj/O86YeQ8QrI3etfc5/+ZJ6FXBhItKPr34gqItb k6ODFry3pApcl7hit6wXum3lDP5Lygx7SgYmaEq08o3Y9XpoP6U9CykZVVwB2Isf vV+RBCbBPdxogfbf6gPzkZSdqegjPmjk6ePVhRCzWIwY29aMlfV5wfm5kLVEiIHb 0Y+OgtLObuW+WcwDJPg98GKFbZWj32md0rTYsgoJ3vg9QUZIPJhJFKIroDpjl/9y 6dKhi9O89oz+KtzeEwV4s+MhqmlSasl5A5hBboJjYr2NWjm3QQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCA4Wb94/RNAdYyoik98dggeLtpAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNGQ3 MWRhOS02ZmYxLTQ5YWItYTFlNS02YzQ4ZjhmMGMxZDYvYjRkNzFkYTktNmZmMS00 OWFiLWExZTUtNmM0OGY4ZjBjMWQ2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjRkNzFkYTktNmZmMS00OWFiLWEx ZTUtNmM0OGY4ZjBjMWQ2L2I0ZDcxZGE5LTZmZjEtNDlhYi1hMWU1LTZjNDhmOGYw YzFkNi5jcmwwHwYDVR0jBBgwFoAUT4QpIPFqZbJeSMpRP7Uli1CK9fswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNGQ3MWRhOS02ZmYxLTQ5YWItYTFlNS02YzQ4 ZjhmMGMxZDYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAgP3H82xg0GGZBDm3N66Uk kwnJtd2szr3awQk9YkSB+UlKViSObPKek7Df9nZ4NP5Wepq4NNp6XNy6G5cwVj2Y 3BwEtLIO4zPtk1lln9DwmkHb9e21O3+R8kQaChHmSQewDYj0hmA3WEEohZ8pTDNR 5YfezKZAiNh0TYYfxvG/fm9MmBXTqXl7Nz2k1ehehU03UMVcTDzSeF72AIWoUfCd AnaYjYupg7HtG12CfFFaUuoPoTrjeOEQV0WBkcjXvJH1jnffBXRt01dko92TowJ0 ELDFoJsVlSKJXdvfeX/9yAu06jBZ8Pr6dwevedoUQWY27AqW72YEoDmhjFBywe7j -----END CERTIFICATE-----Generated at Fri Apr 17 16:21:14 2026 by rpki-client