$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.mft File: ff223998-3819-4b72-ade1-eec292b0a8d0.mft (raw, json) Hash identifier: IjHWTsexBeqLgDuOTWMhpeII4G24VhgDVEdB0Sk7gLU= Subject key identifier: C8:E5:51:EB:A6:47:91:D7:A9:F0:59:C6:D9:66:91:47:0E:08:53:0F Authority key identifier: 34:64:24:77:DE:D9:26:8C:BB:AE:95:D5:64:47:F4:A8:33:DD:92:79 Certificate issuer: /CN=ff223998-3819-4b72-ade1-eec292b0a8d0 Certificate serial: 010D0C9F4328584D86D08EF3A51063C0189DA000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.mft Manifest number: 010D0C9F4328584A520E74690BAECAAA28A478A4 Signing time: Thu 16 Apr 2026 15:00:03 +0000 Manifest this update: Thu 16 Apr 2026 15:00:03 +0000 Manifest next update: Sun 19 Apr 2026 15:00:00 +0000 Files and hashes: 1: 577cd51e-6e83-3a50-8679-c14536fe0c2d.roa (hash: HKALk7APB9C5aWicLi6TTCgStel3ebW62XQl7OQXD3w=) 2: ff223998-3819-4b72-ade1-eec292b0a8d0.crl (hash: oM4YPOKK4ab3i/5xoeEQfz3/fEt8C99za0zcO3V0vXQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:d0:8e:f3:a5:10:63:c0:18:9d:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff223998-3819-4b72-ade1-eec292b0a8d0 Validity Not Before: Apr 16 15:00:03 2026 GMT Not After : Apr 19 15:00:00 2026 GMT Subject: CN=b6e0104f-dec2-4c81-9a05-3d69bde4b0b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7e:3e:c6:c1:a3:b0:bc:b1:11:7d:76:cc:da: b1:30:ae:70:fa:01:d3:df:9c:fe:3e:03:fe:c3:5b: 6c:c5:5b:7b:12:8c:98:3c:02:52:1d:af:51:c7:a8: cf:46:6b:0e:0c:27:c8:8e:d1:8c:16:b2:0c:f0:58: 5b:d1:62:9e:e1:ef:d2:06:bb:e8:6e:d4:b3:99:3a: 67:4e:65:f1:ae:2e:11:7b:9b:e2:59:78:60:6e:93: 12:c5:3b:e1:48:c6:f2:c3:cd:d7:fb:ad:81:07:1a: a2:99:75:5b:99:51:7c:fd:05:dd:e9:f8:8c:17:78: cb:42:6f:43:54:42:0b:17:1d:ab:08:44:c1:92:cf: 06:c9:a6:3a:e1:a7:4d:e5:f9:5f:9e:bb:a0:3e:e3: e3:cf:f1:10:63:b2:85:90:2d:c0:0c:e6:e5:67:68: de:8c:a6:b2:c5:cb:96:dd:d3:c7:b4:f4:c9:a4:d8: ea:0a:c5:b1:70:1c:8f:2b:2f:40:fa:ab:a9:f0:36: 1b:2c:c2:cf:9f:b1:8d:b4:a1:2f:8e:49:c8:7e:14: 0e:1c:99:95:fa:71:72:d5:a8:06:c3:a3:79:80:ad: ef:64:bb:68:58:40:c4:28:59:89:be:35:c2:3d:a3: 31:04:a0:a6:69:4e:db:32:c2:c2:6d:21:f1:fb:d6: 25:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E5:51:EB:A6:47:91:D7:A9:F0:59:C6:D9:66:91:47:0E:08:53:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.crl X509v3 Authority Key Identifier: keyid:34:64:24:77:DE:D9:26:8C:BB:AE:95:D5:64:47:F4:A8:33:DD:92:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:10:4d:52:eb:cb:bd:59:70:d4:fc:b0:c5:ec:1a:3c:13:c1: 48:45:ce:8b:9f:db:f6:0e:91:f5:13:2b:52:78:0b:07:87:6a: 5b:b0:8e:58:a3:94:dc:c3:f5:e8:79:91:29:78:68:03:71:37: d2:b0:9f:3c:14:90:64:3c:cd:95:69:f8:5d:d5:fa:f6:70:60: 2c:06:9e:79:81:34:a0:37:6f:23:ea:22:af:b7:ab:20:8c:2c: 0a:e8:54:c6:ed:7f:cf:50:08:ac:e0:e5:ec:e4:9f:6a:8b:fd: 6b:25:a9:d2:c6:c3:cf:a6:c5:8f:b3:54:34:8c:36:51:33:1f: ae:6e:85:d1:8a:f1:cd:94:50:aa:dc:8c:6b:b1:41:db:ba:6a: 8b:64:6f:29:36:41:05:90:18:04:56:34:74:b6:8b:97:df:42: 2e:ae:48:fc:71:c7:3b:a4:67:93:ae:b9:68:e8:b8:ec:59:2f: a9:e8:e7:61:bc:ea:74:71:25:a3:19:30:14:2f:8a:71:4a:13: 1d:19:f4:06:ad:82:d5:ad:19:0e:93:16:0a:eb:fd:ac:24:21: c7:3b:a4:51:17:51:a0:11:3c:3c:00:28:59:03:19:43:42:79: a4:fa:ea:9a:ef:28:6a:71:92:39:8b:ec:28:ed:73:25:15:15: 79:e4:85:fc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2G0I7zpRBjwBidoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmYyMjM5OTgtMzgxOS00YjcyLWFkZTEtZWVjMjkyYjBh OGQwMB4XDTI2MDQxNjE1MDAwM1oXDTI2MDQxOTE1MDAwMFowLzEtMCsGA1UEAxMk YjZlMDEwNGYtZGVjMi00YzgxLTlhMDUtM2Q2OWJkZTRiMGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjX4+xsGjsLyxEX12zNqxMK5w+gHT35z+PgP+ w1tsxVt7EoyYPAJSHa9Rx6jPRmsODCfIjtGMFrIM8Fhb0WKe4e/SBrvobtSzmTpn TmXxri4Re5viWXhgbpMSxTvhSMbyw83X+62BBxqimXVbmVF8/QXd6fiMF3jLQm9D VEILFx2rCETBks8GyaY64adN5flfnrugPuPjz/EQY7KFkC3ADOblZ2jejKayxcuW 3dPHtPTJpNjqCsWxcByPKy9A+qup8DYbLMLPn7GNtKEvjknIfhQOHJmV+nFy1agG w6N5gK3vZLtoWEDEKFmJvjXCPaMxBKCmaU7bMsLCbSHx+9YlMwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMjlUeumR5HXqfBZxtlmkUcOCFMPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZjIy Mzk5OC0zODE5LTRiNzItYWRlMS1lZWMyOTJiMGE4ZDAvZmYyMjM5OTgtMzgxOS00 YjcyLWFkZTEtZWVjMjkyYjBhOGQwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmYyMjM5OTgtMzgxOS00YjcyLWFk ZTEtZWVjMjkyYjBhOGQwL2ZmMjIzOTk4LTM4MTktNGI3Mi1hZGUxLWVlYzI5MmIw YThkMC5jcmwwHwYDVR0jBBgwFoAUNGQkd97ZJoy7rpXVZEf0qDPdknkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZjIyMzk5OC0zODE5LTRiNzItYWRlMS1lZWMy OTJiMGE4ZDAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBwEE1S68u9WXDU/LDF7Bo8 E8FIRc6Ln9v2DpH1EytSeAsHh2pbsI5Yo5Tcw/XoeZEpeGgDcTfSsJ88FJBkPM2V afhd1fr2cGAsBp55gTSgN28j6iKvt6sgjCwK6FTG7X/PUAis4OXs5J9qi/1rJanS xsPPpsWPs1Q0jDZRMx+uboXRivHNlFCq3IxrsUHbumqLZG8pNkEFkBgEVjR0touX 30Iurkj8ccc7pGeTrrlo6LjsWS+p6OdhvOp0cSWjGTAUL4pxShMdGfQGrYLVrRkO kxYK6/2sJCHHO6RRF1GgETw8AChZAxlDQnmk+uqa7yhqcZI5i+wo7XMlFRV55IX8 -----END CERTIFICATE-----Generated at Fri Apr 17 13:44:07 2026 by rpki-client