$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft File: de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft (raw, json) Hash identifier: zaJhv50pjimHrIH3MdaIq6CUkOmhmxxL9ImHnUQNCTg= Subject key identifier: 3C:63:ED:3B:F3:C2:57:B9:61:C6:CD:9F:D5:54:1E:24:56:3A:7C:0E Authority key identifier: F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 Certificate issuer: /CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Certificate serial: 010D0C9F4328584D87BECAF19E0BFF9AA4CAF500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft Manifest number: 010D0C9F4328584073A8304831365BDD4E70CB69 Signing time: Thu 16 Apr 2026 23:00:03 +0000 Manifest this update: Thu 16 Apr 2026 23:00:03 +0000 Manifest next update: Sat 18 Apr 2026 23:00:00 +0000 Files and hashes: 1: 28db5388-3028-3372-82b7-0e51f7f410ea.roa (hash: FdgcLu5c6DKRkOgzbYxHM4aNkQITSncejoa1UlvpVXk=) 2: 6d5ee0b0-8051-316d-8cab-edd1a702aaee.roa (hash: paFTnhtNnT11KFi1hSpcunqTlG2y2j6A2LrpdgzkqFU=) 3: de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl (hash: bvaJzTIPP8Q4dx26CGNoeDZJGCJXKQOKFNsqQ3bgv78=) 4: ed656f57-c876-3393-937a-7eabe0e6e42a.roa (hash: Sv3kt3zKTHyMtLkyPcXpX6sDSVe3Y0DqZurh+T6Hgoc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:be:ca:f1:9e:0b:ff:9a:a4:ca:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Validity Not Before: Apr 16 23:00:03 2026 GMT Not After : Apr 18 23:00:00 2026 GMT Subject: CN=84e8c432-f1ad-4ef1-bb34-6f082f06a1ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:30:3e:65:ac:9b:c0:ee:f7:e6:14:d2:ec:52: b0:1c:bb:df:2d:9a:48:ce:88:d7:31:b6:52:c8:fd: b2:f2:1b:c8:16:14:9b:79:3e:b4:14:39:e3:93:e8: 65:fc:ed:a2:31:f1:d0:cd:c4:2b:80:ed:7f:07:dd: c9:56:94:6c:b1:c3:b0:02:49:bd:e1:d8:cc:60:2f: 49:15:7f:3a:b2:7e:c4:f4:e8:a9:a6:2a:0d:73:1e: 91:bf:c0:99:57:b0:d8:09:a2:f9:c3:31:bf:28:93: d3:d8:e7:65:89:3b:a0:4f:56:06:a3:28:d7:43:b8: ca:b6:d4:36:c4:51:fd:00:99:1a:59:09:cb:26:4a: 84:13:ad:2d:9e:0f:e2:cb:6b:20:05:5a:0c:95:22: e9:40:64:b3:24:71:d7:61:27:c1:70:bd:10:38:d6: 4b:3d:8b:24:a4:3a:9e:73:02:64:92:b6:07:bd:ab: 82:e8:a3:ab:3d:ee:3b:95:8d:e8:8a:4a:61:48:cd: 15:be:06:e3:51:bd:8e:ed:b2:8b:a4:d0:7b:78:9e: 79:26:35:64:3f:d5:ce:16:c8:8a:50:07:ec:c3:d9: bd:ee:a1:86:6f:9b:8e:0f:dc:a4:fc:93:21:ca:4e: 36:1b:c7:75:97:49:ec:25:c4:af:fb:bf:f6:fc:ac: 6e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:63:ED:3B:F3:C2:57:B9:61:C6:CD:9F:D5:54:1E:24:56:3A:7C:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl X509v3 Authority Key Identifier: keyid:F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:5b:d8:f3:f6:ea:6d:bb:7c:ab:0a:2d:2c:85:99:2c:cc:4b: fd:01:bb:9f:73:bf:51:60:2b:ba:44:aa:14:78:dd:80:39:3d: da:c8:31:20:5b:3b:87:27:fe:4d:e8:b6:e7:70:26:ee:b2:9a: 86:6c:a5:6e:f7:58:6c:f8:e2:12:17:f3:c7:f8:7f:62:ba:fc: fe:ca:53:cc:19:be:f2:49:a8:e7:ae:8a:03:66:db:3a:1f:fc: 44:97:14:7a:af:b1:35:a8:b6:28:8e:b9:ff:21:d6:63:d5:80: 3c:3a:6f:46:70:4c:51:97:5d:a6:ec:8e:bc:45:1c:38:e4:e0: 3d:b3:ac:de:b9:ce:5c:14:b2:7c:5f:39:f1:20:cd:86:ac:d4: aa:dc:27:3b:d4:ac:bc:b2:4a:64:0e:dc:4c:b5:b9:b1:97:c9: 49:f9:bf:33:0f:f7:a1:5f:17:4f:70:88:e5:7b:a0:2c:c4:89: 78:2a:38:c6:e1:3e:9b:1e:3f:5f:85:c1:23:c5:c0:32:61:72: 24:b0:aa:7e:84:c5:a4:79:ef:60:0f:c6:08:a3:f4:59:77:81: fd:aa:80:7e:21:de:dd:59:87:88:69:6d:ff:b8:3f:7f:fc:c7: 02:ff:23:b5:34:5a:a2:c1:9a:14:8e:55:27:2b:72:a6:a9:b7: 7d:07:ab:83 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2Hvsrxngv/mqTK9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4OTM5YTYtNmFjYi00OGU1LWFmOWEtZDFmN2NjYTNi MThlMB4XDTI2MDQxNjIzMDAwM1oXDTI2MDQxODIzMDAwMFowLzEtMCsGA1UEAxMk ODRlOGM0MzItZjFhZC00ZWYxLWJiMzQtNmYwODJmMDZhMWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzA+ZaybwO735hTS7FKwHLvfLZpIzojXMbZS yP2y8hvIFhSbeT60FDnjk+hl/O2iMfHQzcQrgO1/B93JVpRsscOwAkm94djMYC9J FX86sn7E9OippioNcx6Rv8CZV7DYCaL5wzG/KJPT2OdliTugT1YGoyjXQ7jKttQ2 xFH9AJkaWQnLJkqEE60tng/iy2sgBVoMlSLpQGSzJHHXYSfBcL0QONZLPYskpDqe cwJkkrYHvauC6KOrPe47lY3oikphSM0VvgbjUb2O7bKLpNB7eJ55JjVkP9XOFsiK UAfsw9m97qGGb5uOD9yk/JMhyk42G8d1l0nsJcSv+7/2/KxuMQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDxj7Tvzwle5YcbNn9VUHiRWOnwOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5 MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3Y2NhM2IxOGUvZGU4OTM5YTYtNmFjYi00 OGU1LWFmOWEtZDFmN2NjYTNiMThlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGU4OTM5YTYtNmFjYi00OGU1LWFm OWEtZDFmN2NjYTNiMThlL2RlODkzOWE2LTZhY2ItNDhlNS1hZjlhLWQxZjdjY2Ez YjE4ZS5jcmwwHwYDVR0jBBgwFoAU9xsfJFQFgH9uxl1GG4KiieftgsYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3 Y2NhM2IxOGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBNW9jz9uptu3yrCi0shZks zEv9Abufc79RYCu6RKoUeN2AOT3ayDEgWzuHJ/5N6LbncCbuspqGbKVu91hs+OIS F/PH+H9iuvz+ylPMGb7ySajnrooDZts6H/xElxR6r7E1qLYojrn/IdZj1YA8Om9G cExRl12m7I68RRw45OA9s6zeuc5cFLJ8XznxIM2GrNSq3Cc71Ky8skpkDtxMtbmx l8lJ+b8zD/ehXxdPcIjle6AsxIl4KjjG4T6bHj9fhcEjxcAyYXIksKp+hMWkee9g D8YIo/RZd4H9qoB+Id7dWYeIaW3/uD9//McC/yO1NFqiwZoUjlUnK3Kmqbd9B6uD -----END CERTIFICATE-----Generated at Fri Apr 17 14:09:01 2026 by rpki-client