$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft File: d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft (raw, json) Hash identifier: GEgMq22qRR3yjY4/rNth/R0g2El/N9ETLuEqMpHdTi8= Subject key identifier: 78:89:43:A1:08:89:0E:25:EB:B2:88:C6:45:CE:6A:AF:53:D2:F2:66 Authority key identifier: F8:E0:54:64:56:2E:06:FC:45:40:3B:F8:F6:1F:52:85:28:DA:22:CA Certificate issuer: /CN=d3c1e47f-2bd9-4e42-a950-0f81e45cd461 Certificate serial: 010D0C9F4328584D8853AF11899E0EAE3DA209A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft Manifest number: 010D0C9F4328584073A83CCF3B74A2EBFF56448A Signing time: Fri 17 Apr 2026 04:00:03 +0000 Manifest this update: Fri 17 Apr 2026 04:00:03 +0000 Manifest next update: Sun 19 Apr 2026 04:00:00 +0000 Files and hashes: 1: 6fa801e3-3342-3f1c-a396-6f9201c0d56d.roa (hash: ROvcVUNgClHio/oIXuQyw4YERBkjMWoLzLrnPeV7u48=) 2: d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl (hash: fp5RQ8VcrDTF5zYUkmTgBKXq9FDknVo0VkKjFew9iN8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:88:53:af:11:89:9e:0e:ae:3d:a2:09:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3c1e47f-2bd9-4e42-a950-0f81e45cd461 Validity Not Before: Apr 17 04:00:03 2026 GMT Not After : Apr 19 04:00:00 2026 GMT Subject: CN=da4f2ae6-53ac-46bd-b610-21d6286ed158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:eb:f6:ea:44:f6:9d:ad:e8:8a:7d:24:c8:a9: 67:a4:04:55:63:33:55:c3:e1:9c:d8:a5:55:5a:b7: 1a:74:e1:f6:64:ed:c0:af:d6:77:ea:8d:7e:9d:80: 0e:5b:e3:a6:3c:01:89:ed:40:f1:c7:7c:dc:b6:ce: 3a:8b:e3:a6:a5:41:26:6b:47:cf:f8:ee:a3:81:9a: b7:0c:75:89:2e:07:0c:cf:34:35:e9:83:f5:8f:a4: c3:4e:93:e4:30:56:66:c8:67:ed:ab:0a:c9:28:0f: 21:e8:1d:1c:1f:c4:9d:6b:ab:91:95:93:2f:49:28: 52:2d:83:61:e5:a8:cf:06:d4:ec:f6:dd:1e:13:a4: 8e:7b:dc:93:d5:e8:75:fd:a7:aa:8f:bf:65:b9:41: 16:55:16:45:9a:3a:3f:1c:7d:dc:0a:fd:e1:9d:17: 67:93:58:eb:85:b1:6f:6c:e4:94:19:86:8b:49:06: d3:52:fb:16:bc:4d:94:dc:25:72:02:a7:40:d9:b9: 0b:5e:0f:96:22:86:40:5f:d8:a9:3a:8c:a4:8b:8b: ab:43:d6:a6:7c:c1:eb:2b:37:e3:cc:eb:cc:ac:f1: 7e:30:df:94:ae:c8:22:d8:e8:2a:68:89:ee:6c:3d: d2:bf:39:e0:9b:a5:da:5f:63:f6:71:e6:81:a0:12: 3e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:89:43:A1:08:89:0E:25:EB:B2:88:C6:45:CE:6A:AF:53:D2:F2:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl X509v3 Authority Key Identifier: keyid:F8:E0:54:64:56:2E:06:FC:45:40:3B:F8:F6:1F:52:85:28:DA:22:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:88:2c:ce:5a:ad:7a:11:c5:68:89:a0:de:4e:16:5b:21:a5: 28:2c:b7:97:90:9b:e2:3c:14:65:bf:13:0c:07:4e:84:0c:07: 17:10:71:07:bf:bb:53:a0:38:49:7e:31:64:26:35:02:1f:51: 88:31:fb:ee:4f:40:95:20:d1:c8:db:73:75:42:f6:1b:25:d6: 63:a3:aa:49:21:6d:69:6e:2a:52:cf:16:b3:fa:06:4f:1f:dd: 86:af:03:5c:4c:6b:60:6e:e9:19:c9:b1:4c:c9:06:9e:50:18: e0:7b:55:b7:9e:50:23:c2:8d:ed:2d:ba:87:f0:29:4b:4f:30: 6b:ec:8c:c2:95:03:0f:79:d6:71:12:86:c0:df:70:5b:07:b2: df:36:92:5d:8f:3f:aa:d2:9a:7e:62:e3:7f:f0:94:ef:d2:ab: 98:98:7f:70:2f:64:4c:89:d0:11:e4:0a:06:07:ed:19:7d:67: 9d:1e:0b:19:c2:ac:22:4b:7b:38:42:00:80:68:2e:97:5d:ed: 15:a0:1e:99:71:a3:7f:e6:a7:65:a7:64:a1:65:c7:ec:26:e0: ff:0e:a2:f5:e1:22:dc:1b:af:dc:68:44:3c:46:25:ad:fe:f7: e7:4b:63:7e:24:01:a1:7c:f4:1e:42:4b:ef:f6:a4:75:83:d7: f1:1c:c6:4e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2IU68RiZ4Orj2iCaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDNjMWU0N2YtMmJkOS00ZTQyLWE5NTAtMGY4MWU0NWNk NDYxMB4XDTI2MDQxNzA0MDAwM1oXDTI2MDQxOTA0MDAwMFowLzEtMCsGA1UEAxMk ZGE0ZjJhZTYtNTNhYy00NmJkLWI2MTAtMjFkNjI4NmVkMTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuv26kT2na3oin0kyKlnpARVYzNVw+Gc2KVV WrcadOH2ZO3Ar9Z36o1+nYAOW+OmPAGJ7UDxx3zcts46i+OmpUEma0fP+O6jgZq3 DHWJLgcMzzQ16YP1j6TDTpPkMFZmyGftqwrJKA8h6B0cH8Sda6uRlZMvSShSLYNh 5ajPBtTs9t0eE6SOe9yT1eh1/aeqj79luUEWVRZFmjo/HH3cCv3hnRdnk1jrhbFv bOSUGYaLSQbTUvsWvE2U3CVyAqdA2bkLXg+WIoZAX9ipOoyki4urQ9amfMHrKzfj zOvMrPF+MN+Ursgi2OgqaInubD3Svzngm6XaX2P2ceaBoBI+bwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHiJQ6EIiQ4l67KIxkXOaq9T0vJmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kM2Mx ZTQ3Zi0yYmQ5LTRlNDItYTk1MC0wZjgxZTQ1Y2Q0NjEvZDNjMWU0N2YtMmJkOS00 ZTQyLWE5NTAtMGY4MWU0NWNkNDYxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDNjMWU0N2YtMmJkOS00ZTQyLWE5 NTAtMGY4MWU0NWNkNDYxL2QzYzFlNDdmLTJiZDktNGU0Mi1hOTUwLTBmODFlNDVj ZDQ2MS5jcmwwHwYDVR0jBBgwFoAU+OBUZFYuBvxFQDv49h9ShSjaIsowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kM2MxZTQ3Zi0yYmQ5LTRlNDItYTk1MC0wZjgx ZTQ1Y2Q0NjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAWiCzOWq16EcVoiaDeThZb IaUoLLeXkJviPBRlvxMMB06EDAcXEHEHv7tToDhJfjFkJjUCH1GIMfvuT0CVINHI 23N1QvYbJdZjo6pJIW1pbipSzxaz+gZPH92GrwNcTGtgbukZybFMyQaeUBjge1W3 nlAjwo3tLbqH8ClLTzBr7IzClQMPedZxEobA33BbB7LfNpJdjz+q0pp+YuN/8JTv 0quYmH9wL2RMidAR5AoGB+0ZfWedHgsZwqwiS3s4QgCAaC6XXe0VoB6ZcaN/5qdl p2ShZcfsJuD/DqL14SLcG6/caEQ8RiWt/vfnS2N+JAGhfPQeQkvv9qR1g9fxHMZO -----END CERTIFICATE-----Generated at Fri Apr 17 10:44:33 2026 by rpki-client