$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225/a1d568c5-f4e7-4018-a050-a2f04280e225.mft File: a1d568c5-f4e7-4018-a050-a2f04280e225.mft (raw, json) Hash identifier: Ag5jT3Ab0OTMBZn7jJf+w15O4a/2F82ykSMxNdIE4rM= Subject key identifier: 64:C2:14:F4:4D:CC:3B:BA:4A:A6:AD:07:8C:5D:D4:8A:D8:86:A2:2C Authority key identifier: 60:AD:5F:B5:EE:2F:B2:2D:A4:34:0E:D7:19:B5:52:7B:7C:BA:DB:A0 Certificate issuer: /CN=a1d568c5-f4e7-4018-a050-a2f04280e225 Certificate serial: 010D0C9F4328584D87A1009F06AAB2A7D90A7190 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225/a1d568c5-f4e7-4018-a050-a2f04280e225.mft Manifest number: 010D0C9F43285847DBF247FABDDD04106F411F14 Signing time: Thu 16 Apr 2026 22:00:03 +0000 Manifest this update: Thu 16 Apr 2026 22:00:03 +0000 Manifest next update: Sun 19 Apr 2026 22:00:00 +0000 Files and hashes: 1: a1d568c5-f4e7-4018-a050-a2f04280e225.crl (hash: pumuz0typNnwj1SKI2PEH51ApMNsDFuD7uE+FUP2Ey4=) 2: e456fbb0-395d-3a80-bce8-b02c3b92dedf.roa (hash: jOvDZaKoBv7U1DSoKcqkeFE7Nh8qivLXc0luNM7o+Zc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225/a1d568c5-f4e7-4018-a050-a2f04280e225.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225/a1d568c5-f4e7-4018-a050-a2f04280e225.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:a1:00:9f:06:aa:b2:a7:d9:0a:71:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1d568c5-f4e7-4018-a050-a2f04280e225 Validity Not Before: Apr 16 22:00:03 2026 GMT Not After : Apr 19 22:00:00 2026 GMT Subject: CN=50d70ada-a66d-41a3-9546-3be557bd798b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:33:6f:b5:ec:35:36:15:61:06:8a:e3:fd:33: 51:f3:2b:2d:5b:40:e2:79:bf:de:49:c5:5b:c2:ac: 0a:32:7e:b7:a4:07:fd:bc:11:c4:fa:ee:29:95:57: 2b:32:f6:97:c3:b9:1a:7f:0a:bd:3c:48:0c:bb:1f: 0a:e8:7e:32:a6:79:14:6b:00:4e:63:c5:04:6e:82: b5:96:c9:57:40:fb:81:22:ed:a1:47:a9:87:85:40: 8a:75:bd:c9:76:74:28:1d:ca:e0:d4:d2:e0:9c:60: 34:44:29:29:87:2f:65:f0:8e:69:b3:0f:6f:61:b6: 50:4e:31:67:f6:87:3f:0b:05:ac:27:fe:d0:59:3e: c3:6b:c2:8b:37:d4:ca:07:47:b4:8e:14:5d:81:19: 8a:ae:ff:eb:c8:b8:58:ba:32:1f:74:c7:8a:68:f6: 54:f0:bc:63:6e:f5:1a:60:3c:7b:56:ec:77:95:cb: 47:46:f1:a4:28:e4:15:6a:81:74:08:ee:da:db:05: bd:0e:98:af:b0:b1:47:46:0e:6d:38:1b:43:9c:48: 19:bb:47:5f:f3:ce:db:b5:df:94:48:d1:29:b2:62: 7f:9e:23:06:08:e1:55:6e:01:8f:a8:9a:8c:de:61: 40:77:e6:84:ff:dd:cb:89:7d:2f:61:b1:bd:95:9a: 22:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C2:14:F4:4D:CC:3B:BA:4A:A6:AD:07:8C:5D:D4:8A:D8:86:A2:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225/a1d568c5-f4e7-4018-a050-a2f04280e225.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225/a1d568c5-f4e7-4018-a050-a2f04280e225.crl X509v3 Authority Key Identifier: keyid:60:AD:5F:B5:EE:2F:B2:2D:A4:34:0E:D7:19:B5:52:7B:7C:BA:DB:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:68:23:33:74:b2:71:0f:22:fd:c2:cc:57:d5:df:6a:d4:ac: 5e:7a:10:db:8f:8a:64:70:74:6c:1a:1a:ed:5c:18:44:8d:e9: e3:7e:60:90:cc:b2:76:11:04:bc:9c:5a:40:20:32:e7:b5:f8: 0d:76:2b:3b:d2:bc:f3:e0:68:82:9f:d8:b3:98:28:72:7a:e7: 25:ec:56:38:c5:75:33:87:d8:17:77:16:73:bf:b2:e0:47:03: 68:b6:d3:a8:a0:f2:23:64:b0:5e:79:75:f9:85:49:fe:eb:dc: bd:60:fb:ba:37:a4:f9:6f:2f:94:c0:dd:e8:fe:b5:c1:d9:e9: 42:35:26:b2:74:92:9f:8e:6a:d4:29:45:d8:d4:bb:a0:07:9c: 74:98:a1:c1:a5:59:ba:02:97:81:5b:1c:fd:05:53:e6:ca:15: 4d:92:50:b3:02:87:ce:c8:c6:64:66:5b:5d:9a:d9:c3:af:af: eb:5f:51:02:29:3e:13:1c:4b:45:c0:0f:6a:3e:80:ad:d7:00: 0a:c2:65:c9:cc:07:34:3d:dd:d1:5f:1e:49:f0:88:30:51:51: 4b:fa:e9:a1:16:c2:67:5f:13:ef:cb:93:a2:64:86:cd:a6:f3: f2:97:50:9b:bb:32:0e:87:70:87:0f:10:13:46:55:59:95:56: 2d:85:ac:82 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2HoQCfBqqyp9kKcZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFkNTY4YzUtZjRlNy00MDE4LWEwNTAtYTJmMDQyODBl MjI1MB4XDTI2MDQxNjIyMDAwM1oXDTI2MDQxOTIyMDAwMFowLzEtMCsGA1UEAxMk NTBkNzBhZGEtYTY2ZC00MWEzLTk1NDYtM2JlNTU3YmQ3OThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTNvtew1NhVhBorj/TNR8ystW0Dieb/eScVb wqwKMn63pAf9vBHE+u4plVcrMvaXw7kafwq9PEgMux8K6H4ypnkUawBOY8UEboK1 lslXQPuBIu2hR6mHhUCKdb3JdnQoHcrg1NLgnGA0RCkphy9l8I5psw9vYbZQTjFn 9oc/CwWsJ/7QWT7Da8KLN9TKB0e0jhRdgRmKrv/ryLhYujIfdMeKaPZU8LxjbvUa YDx7Vux3lctHRvGkKOQVaoF0CO7a2wW9DpivsLFHRg5tOBtDnEgZu0df887btd+U SNEpsmJ/niMGCOFVbgGPqJqM3mFAd+aE/93LiX0vYbG9lZoiEQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGTCFPRNzDu6SqatB4xd1IrYhqIsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hMWQ1 NjhjNS1mNGU3LTQwMTgtYTA1MC1hMmYwNDI4MGUyMjUvYTFkNTY4YzUtZjRlNy00 MDE4LWEwNTAtYTJmMDQyODBlMjI1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYTFkNTY4YzUtZjRlNy00MDE4LWEw NTAtYTJmMDQyODBlMjI1L2ExZDU2OGM1LWY0ZTctNDAxOC1hMDUwLWEyZjA0Mjgw ZTIyNS5jcmwwHwYDVR0jBBgwFoAUYK1fte4vsi2kNA7XGbVSe3y626AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hMWQ1NjhjNS1mNGU3LTQwMTgtYTA1MC1hMmYw NDI4MGUyMjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCMaCMzdLJxDyL9wsxX1d9q 1KxeehDbj4pkcHRsGhrtXBhEjenjfmCQzLJ2EQS8nFpAIDLntfgNdis70rzz4GiC n9izmChyeucl7FY4xXUzh9gXdxZzv7LgRwNottOooPIjZLBeeXX5hUn+69y9YPu6 N6T5by+UwN3o/rXB2elCNSaydJKfjmrUKUXY1LugB5x0mKHBpVm6ApeBWxz9BVPm yhVNklCzAofOyMZkZltdmtnDr6/rX1ECKT4THEtFwA9qPoCt1wAKwmXJzAc0Pd3R Xx5J8IgwUVFL+umhFsJnXxPvy5OiZIbNpvPyl1CbuzIOh3CHDxATRlVZlVYthayC -----END CERTIFICATE-----Generated at Fri Apr 17 19:46:03 2026 by rpki-client