$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft File: cd1efaa6-01e7-4528-8278-46b312a6e020.mft (raw, json) Hash identifier: TVzV0K02g0HgbK+oTEySPdM9y/omIUc8uashjKmbw54= Subject key identifier: 64:53:83:8F:FA:22:B2:5A:D5:BD:82:A7:DB:74:CE:A2:4C:FE:4A:B3 Authority key identifier: 89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B Certificate issuer: /CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Certificate serial: 010D0C9F4328584D88181D329553C9937A825700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft Manifest number: 010D0C9F4328584073A83840A2BEE7D9A3337A72 Signing time: Fri 17 Apr 2026 02:00:03 +0000 Manifest this update: Fri 17 Apr 2026 02:00:03 +0000 Manifest next update: Sun 19 Apr 2026 02:00:00 +0000 Files and hashes: 1: 15971b5a-708e-36a4-9675-d45099021eac.roa (hash: 4+LDLGdZzBRhLwZVa2xZTZYnWEhRgU3b4vMKTe0TD9E=) 2: 65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa (hash: EB2LWe+1WD39PSjs8qyH3cT1b6F92AbWWjUA+TOk25o=) 3: b24dbab2-534c-3e59-b62f-16d920e96e56.asa (hash: 9pC72qb6/k7yBVQ51FTAYivgq50rF/AFWbG77QAJVB0=) 4: cd1efaa6-01e7-4528-8278-46b312a6e020.crl (hash: MESrTMEiZJbTGQZWUKY+OlqUDPzQW3pqqB9QdpqAuJI=) 5: faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa (hash: X5H56wCb54eyPhgVf26tVICvXkywU3s4OFWmShVgH8o=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:88:18:1d:32:95:53:c9:93:7a:82:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Validity Not Before: Apr 17 02:00:03 2026 GMT Not After : Apr 19 02:00:00 2026 GMT Subject: CN=17ed3adb-02cd-45fe-bc5c-94ba4a1cca89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2e:b8:38:f8:d1:98:9f:05:73:6e:f4:4f:17: 50:ee:f9:d8:1f:25:f4:7c:0e:30:3c:1d:89:71:db: 32:1a:46:33:5d:24:c6:43:58:34:26:48:d5:e0:af: 8a:0c:b3:93:e1:fa:58:2f:47:0a:89:fd:0a:b6:d2: 78:c6:17:cf:ba:f6:35:2a:8c:32:27:72:84:41:8c: 1c:c1:bd:0f:0f:e5:b1:c5:f1:fd:43:1a:95:11:80: 73:f0:e9:02:68:5e:74:02:f5:f7:45:df:44:a0:20: 63:ec:44:d1:a7:c7:ed:38:a6:6a:ae:7d:8a:8f:7e: fe:14:8c:ba:f6:39:a8:38:81:f8:f9:0a:8c:db:fa: 5a:c0:ac:00:98:38:2f:d5:f0:ac:8f:68:bb:4d:4c: 17:21:6b:98:ba:ae:4b:ad:69:d9:e7:70:86:f3:34: 82:8e:38:52:50:b1:2c:69:97:60:05:d5:61:ea:88: d7:cb:27:d8:c5:98:39:55:0c:33:77:a5:36:9d:e7: 00:46:94:77:72:04:48:83:e4:29:37:25:7f:c8:c1: fb:93:83:81:db:bf:eb:12:fe:f2:fa:dd:25:af:58: f6:98:ec:81:85:7d:8d:a1:37:87:5e:4b:ea:ff:87: 03:b4:65:92:e1:bb:e5:19:2a:3c:3c:e9:47:41:ba: 79:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:53:83:8F:FA:22:B2:5A:D5:BD:82:A7:DB:74:CE:A2:4C:FE:4A:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl X509v3 Authority Key Identifier: keyid:89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:bd:27:79:47:bb:34:25:9b:f5:46:8d:c9:70:51:74:d7:2b: 69:08:c9:e5:36:a1:6e:56:03:23:2f:e8:bd:83:6a:50:77:68: 9a:7b:79:78:8c:0f:a7:7e:59:be:ff:45:27:5e:1e:c0:4e:ae: 3c:8b:13:87:51:80:eb:3b:c2:d1:e4:d8:83:93:f1:56:c4:bc: c0:e3:d2:2f:2f:0f:fa:61:25:9e:ea:e7:1a:d7:46:65:06:1b: d8:bc:52:fa:2e:ae:5e:74:eb:77:9d:83:cb:85:8d:71:f5:3a: 43:cb:d8:70:c8:ac:02:0b:97:e0:fd:a2:82:80:ca:d4:49:52: d1:1b:0f:6a:b9:8f:c9:d2:de:44:b0:49:3d:ba:58:9c:69:05: d3:39:ff:09:bd:68:5e:3e:49:1d:4e:c1:06:3f:5b:67:1e:b6: 7a:4d:64:23:1f:a4:96:ab:99:a8:51:cf:80:0f:02:a9:59:8a: 4d:1d:66:95:ca:b5:a3:0b:e5:e6:09:9f:ee:16:21:e7:44:09: 94:1c:49:6b:71:12:cf:ba:5f:ba:7e:ef:4f:cf:1b:71:3a:fa: 76:95:4f:7d:ef:1a:33:70:f2:c3:5c:13:05:45:71:75:44:85: f6:a0:db:16:0b:69:9b:20:18:b7:b7:de:3d:15:93:b9:f1:e1: c2:f1:80:e1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2IGB0ylVPJk3qCVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxZWZhYTYtMDFlNy00NTI4LTgyNzgtNDZiMzEyYTZl MDIwMB4XDTI2MDQxNzAyMDAwM1oXDTI2MDQxOTAyMDAwMFowLzEtMCsGA1UEAxMk MTdlZDNhZGItMDJjZC00NWZlLWJjNWMtOTRiYTRhMWNjYTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmy64OPjRmJ8Fc270TxdQ7vnYHyX0fA4wPB2J cdsyGkYzXSTGQ1g0JkjV4K+KDLOT4fpYL0cKif0KttJ4xhfPuvY1KowyJ3KEQYwc wb0PD+WxxfH9QxqVEYBz8OkCaF50AvX3Rd9EoCBj7ETRp8ftOKZqrn2Kj37+FIy6 9jmoOIH4+QqM2/pawKwAmDgv1fCsj2i7TUwXIWuYuq5LrWnZ53CG8zSCjjhSULEs aZdgBdVh6ojXyyfYxZg5VQwzd6U2necARpR3cgRIg+QpNyV/yMH7k4OB27/rEv7y +t0lr1j2mOyBhX2NoTeHXkvq/4cDtGWS4bvlGSo8POlHQbp5VwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGRTg4/6IrJa1b2Cp9t0zqJM/kqzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFl ZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIzMTJhNmUwMjAvY2QxZWZhYTYtMDFlNy00 NTI4LTgyNzgtNDZiMzEyYTZlMDIwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxZWZhYTYtMDFlNy00NTI4LTgy NzgtNDZiMzEyYTZlMDIwL2NkMWVmYWE2LTAxZTctNDUyOC04Mjc4LTQ2YjMxMmE2 ZTAyMC5jcmwwHwYDVR0jBBgwFoAUif7GoPBmoqNN/YF4r5KC7A05NpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFlZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIz MTJhNmUwMjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBFvSd5R7s0JZv1Ro3JcFF0 1ytpCMnlNqFuVgMjL+i9g2pQd2iae3l4jA+nflm+/0UnXh7ATq48ixOHUYDrO8LR 5NiDk/FWxLzA49IvLw/6YSWe6uca10ZlBhvYvFL6Lq5edOt3nYPLhY1x9TpDy9hw yKwCC5fg/aKCgMrUSVLRGw9quY/J0t5EsEk9ulicaQXTOf8JvWhePkkdTsEGP1tn HrZ6TWQjH6SWq5moUc+ADwKpWYpNHWaVyrWjC+XmCZ/uFiHnRAmUHElrcRLPul+6 fu9PzxtxOvp2lU997xozcPLDXBMFRXF1RIX2oNsWC2mbIBi3t949FZO58eHC8YDh -----END CERTIFICATE-----Generated at Fri Apr 17 18:33:07 2026 by rpki-client