$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft File: b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft (raw, json) Hash identifier: MsmWs8Lr1DSZ6ZO4yYIAkn+V7l8ssa8viK9MKzILSO0= Subject key identifier: C5:00:56:09:DB:E0:02:48:67:91:B3:50:AD:75:7B:A5:3A:98:6C:54 Authority key identifier: 60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C Certificate issuer: /CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Certificate serial: 010D0C9F4328584D88AD02A89806C51F21730A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft Manifest number: 010D0C9F4328584073A846314C8AB161C39A344B Signing time: Fri 17 Apr 2026 07:00:03 +0000 Manifest this update: Fri 17 Apr 2026 07:00:03 +0000 Manifest next update: Sun 19 Apr 2026 07:00:00 +0000 Files and hashes: 1: 95cbce52-a0f0-382c-8b81-d23c70ca3529.roa (hash: n3S4fnJ2tPTUqx19WPfvs2LPBwXVp588ob5jjCauYGI=) 2: b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl (hash: rM11DRMYsycSf2LYvXiQ0CencqD9Tam1FOPZmvs4gNA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:88:ad:02:a8:98:06:c5:1f:21:73:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Validity Not Before: Apr 17 07:00:03 2026 GMT Not After : Apr 19 07:00:00 2026 GMT Subject: CN=6d7f8bcc-663f-48ac-8dcf-e5fd1c06338c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c7:e0:a9:0f:69:ac:ee:42:af:1d:a8:15:f5: 67:f2:64:28:fe:34:1c:8a:4b:78:7e:72:84:71:e3: c9:87:6c:89:cd:96:98:88:1d:41:d7:92:55:c2:57: 06:99:a2:f7:19:38:86:85:a2:3a:df:29:ec:72:3b: cb:99:01:24:38:32:62:9b:5a:95:6d:2f:d7:a5:94: f9:21:b0:05:be:11:76:6d:6c:b9:48:cd:98:3b:4a: 38:e5:5e:ce:b3:fc:05:a5:ea:f9:4f:f7:25:bb:ae: c3:9b:3d:2d:a8:a6:37:a0:0d:39:6d:c4:31:d8:2a: 24:1e:49:9f:1f:36:a4:96:bf:63:76:ad:1b:46:5a: 6f:1f:85:55:d0:ba:66:0d:fc:33:0c:be:ea:68:0e: 6f:c1:86:0d:8c:da:9a:58:3a:ba:5f:12:60:0d:0c: 24:0d:54:05:6a:a2:4d:a7:1e:c5:c7:04:bd:b4:60: e0:67:0b:ec:4c:35:e0:53:9c:91:b0:ee:b0:b1:16: aa:e6:98:29:70:39:32:a9:4f:21:7a:93:89:21:05: a6:d0:6c:86:95:44:1f:a2:c1:a4:b8:b9:2f:a8:c1: de:af:f7:67:8d:f3:24:f6:29:4e:3b:b6:8a:0c:3c: 3b:f3:58:73:6c:c0:f7:cb:21:41:a0:54:45:bc:14: b7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:00:56:09:DB:E0:02:48:67:91:B3:50:AD:75:7B:A5:3A:98:6C:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl X509v3 Authority Key Identifier: keyid:60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:75:c4:bb:64:cf:6e:9a:ec:07:6e:ca:d3:bb:45:98:86:f3: c2:68:30:56:97:42:0a:8f:10:ce:1d:73:16:91:d6:d7:da:db: 38:aa:5a:8b:db:da:8f:d3:bd:9a:66:18:2a:6d:6f:2a:25:19: 0b:06:36:c3:9f:0d:fb:a5:ce:72:8b:98:37:3c:55:f9:3d:86: 63:95:09:6a:c1:19:2a:b8:8d:fe:8b:88:89:87:0c:62:77:48: bd:99:2c:dc:6a:89:5b:19:88:6a:50:84:22:ca:2f:c0:b7:ac: 65:c8:43:0d:3c:69:61:8d:7d:4b:a7:66:69:05:70:e3:0f:3b: 8d:47:fa:01:eb:79:ab:39:11:83:68:fa:a5:30:76:55:a5:32: 3d:e1:af:27:aa:85:c1:6a:d1:13:f5:e1:a4:30:b7:9f:ff:5f: 8c:73:0a:7b:09:26:5b:4a:77:6c:e0:4b:62:ee:8c:64:dc:92: da:cc:9e:e5:fd:a1:fe:61:a3:56:b5:89:28:31:bd:a9:5b:0f: 82:9b:2e:1b:3d:36:1b:df:1b:60:08:62:2c:0d:19:57:eb:3a: 17:36:eb:f7:8b:5b:32:bf:83:e6:e6:da:94:5f:84:8d:33:35: e5:f3:78:e0:36:15:6d:bd:c1:6d:fd:33:ff:5d:f0:5e:65:7b: 71:af:3e:aa -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2IrQKomAbFHyFzCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVjMmZlNzgtYTQ0Ny00MGQ5LThlMTEtOWM5ZTZmODFk MDgyMB4XDTI2MDQxNzA3MDAwM1oXDTI2MDQxOTA3MDAwMFowLzEtMCsGA1UEAxMk NmQ3ZjhiY2MtNjYzZi00OGFjLThkY2YtZTVmZDFjMDYzMzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8fgqQ9prO5Crx2oFfVn8mQo/jQcikt4fnKE cePJh2yJzZaYiB1B15JVwlcGmaL3GTiGhaI63ynscjvLmQEkODJim1qVbS/XpZT5 IbAFvhF2bWy5SM2YO0o45V7Os/wFper5T/clu67Dmz0tqKY3oA05bcQx2CokHkmf Hzaklr9jdq0bRlpvH4VV0LpmDfwzDL7qaA5vwYYNjNqaWDq6XxJgDQwkDVQFaqJN px7FxwS9tGDgZwvsTDXgU5yRsO6wsRaq5pgpcDkyqU8hepOJIQWm0GyGlUQfosGk uLkvqMHer/dnjfMk9ilOO7aKDDw781hzbMD3yyFBoFRFvBS3swIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMUAVgnb4AJIZ5GzUK11e6U6mGxUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMy ZmU3OC1hNDQ3LTQwZDktOGUxMS05YzllNmY4MWQwODIvYjVjMmZlNzgtYTQ0Ny00 MGQ5LThlMTEtOWM5ZTZmODFkMDgyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjVjMmZlNzgtYTQ0Ny00MGQ5LThl MTEtOWM5ZTZmODFkMDgyL2I1YzJmZTc4LWE0NDctNDBkOS04ZTExLTljOWU2Zjgx ZDA4Mi5jcmwwHwYDVR0jBBgwFoAUYEP282rtaIKx8gBu2kkraw9jVZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMyZmU3OC1hNDQ3LTQwZDktOGUxMS05Yzll NmY4MWQwODIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB+dcS7ZM9umuwHbsrTu0WY hvPCaDBWl0IKjxDOHXMWkdbX2ts4qlqL29qP072aZhgqbW8qJRkLBjbDnw37pc5y i5g3PFX5PYZjlQlqwRkquI3+i4iJhwxid0i9mSzcaolbGYhqUIQiyi/At6xlyEMN PGlhjX1Lp2ZpBXDjDzuNR/oB63mrORGDaPqlMHZVpTI94a8nqoXBatET9eGkMLef /1+Mcwp7CSZbSnds4Eti7oxk3JLazJ7l/aH+YaNWtYkoMb2pWw+Cmy4bPTYb3xtg CGIsDRlX6zoXNuv3i1syv4Pm5tqUX4SNMzXl83jgNhVtvcFt/TP/XfBeZXtxrz6q -----END CERTIFICATE-----Generated at Fri Apr 17 10:31:37 2026 by rpki-client