$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/fd41a5ea-0768-429c-8541-83d829a5518c.mft File: fd41a5ea-0768-429c-8541-83d829a5518c.mft (raw, json) Hash identifier: bep0/wJ7l1eVjUL4au0cuJgtULsYaRA2qcYQ0W0oyjA= Subject key identifier: 82:D1:9E:2B:B9:E6:B4:1F:D4:73:5E:AA:6B:86:69:4E:65:4C:5D:07 Authority key identifier: F3:6D:03:2A:F7:BB:FF:77:C1:97:8A:1A:D0:C9:09:51:92:3C:A7:24 Certificate issuer: /CN=fd41a5ea-0768-429c-8541-83d829a5518c Certificate serial: 010D0C9F4328584D87A102A434BAABA5B5B9CD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/fd41a5ea-0768-429c-8541-83d829a5518c.mft Manifest number: 010D0C9F4328584073A82CF6270475A8275DFCE7 Signing time: Thu 16 Apr 2026 22:00:03 +0000 Manifest this update: Thu 16 Apr 2026 22:00:03 +0000 Manifest next update: Sat 18 Apr 2026 22:00:00 +0000 Files and hashes: 1: 2a6bf328-cf96-3ace-bda5-7008e51790d7.roa (hash: KK+rX6Z5oV8QhrSbaKCSIYhwIijE1u+t23FxJBymKrU=) 2: 5291e49a-db98-3505-acf6-421d32c8cc5f.roa (hash: lsOY6XsN77L5qEVeu4ZhBE0flecxYajfhyweq0fuqKQ=) 3: 6fcc7d92-8595-368c-84db-26ab941ffc2f.roa (hash: 2EUuIqqbArE0syKVGt/oJNYeQCJQ4sZX3gpdLZeVAtU=) 4: fd41a5ea-0768-429c-8541-83d829a5518c.crl (hash: fEImT1r698YnW0aQPKAjTySo6BhyLo6ujWIIeB3gCu8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/fd41a5ea-0768-429c-8541-83d829a5518c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/fd41a5ea-0768-429c-8541-83d829a5518c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:a1:02:a4:34:ba:ab:a5:b5:b9:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd41a5ea-0768-429c-8541-83d829a5518c Validity Not Before: Apr 16 22:00:03 2026 GMT Not After : Apr 18 22:00:00 2026 GMT Subject: CN=fcb0f1f6-ffad-4f94-9c1d-b23986b582ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:38:f4:f9:81:b8:66:aa:0e:28:ae:a0:6c:a2: 7c:ae:33:64:68:bd:33:24:ab:52:02:08:28:14:59: 50:47:80:97:4c:5c:b7:e9:25:2a:61:1f:27:a8:cf: e9:07:83:c9:16:1b:4e:89:09:90:04:d5:99:ee:b7: ca:ac:f1:56:5d:bc:fa:7a:c6:31:75:cb:25:ea:8d: 43:d2:ca:5b:2b:e3:d9:e9:03:a0:ae:98:70:f4:bd: d3:02:90:94:73:45:8a:a1:60:7e:25:e8:a1:83:3d: d8:e0:9a:00:60:8c:28:b9:4c:5c:a7:6c:e8:81:10: ac:8f:c9:7a:29:1f:8b:3c:4a:76:64:07:ed:18:cb: de:2f:fe:1e:54:ab:18:0a:b2:cd:2b:fa:78:6a:11: 67:35:e6:44:9f:88:74:53:43:e0:a7:10:38:2a:00: bc:01:f8:bc:12:bb:e4:69:ea:ea:f4:4e:21:37:fb: ab:83:45:3f:b5:38:ce:cf:bd:c6:2e:b5:ac:47:bc: 4b:41:8b:6e:c3:86:35:24:31:d0:a6:33:52:f7:45: 24:16:23:a6:d7:eb:7f:aa:b3:95:b6:31:e5:d2:6c: 59:6c:b8:23:7b:c3:3d:48:cb:bf:f4:f7:00:d3:2e: 07:b8:57:a0:df:1d:8b:89:3b:9a:7b:a3:6f:ad:19: 6b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:D1:9E:2B:B9:E6:B4:1F:D4:73:5E:AA:6B:86:69:4E:65:4C:5D:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/fd41a5ea-0768-429c-8541-83d829a5518c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/fd41a5ea-0768-429c-8541-83d829a5518c.crl X509v3 Authority Key Identifier: keyid:F3:6D:03:2A:F7:BB:FF:77:C1:97:8A:1A:D0:C9:09:51:92:3C:A7:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:d2:36:4b:f3:6b:08:66:e5:ac:76:c5:fa:46:fb:d6:de:fe: 8b:76:c6:e4:7b:e5:b7:d5:d5:73:de:c5:ea:27:3b:d4:c4:00: 34:e7:8e:9f:42:60:a0:e7:73:90:81:b4:12:ea:00:1d:3f:8a: 3a:f2:fd:04:48:48:6e:c4:fa:b2:23:e5:fa:22:e1:cd:49:8d: 6a:30:00:de:07:83:b5:46:7a:6d:9f:c8:f2:1d:b6:31:17:94: 65:53:ca:69:06:8f:9a:8e:d5:e5:82:0e:46:a7:d2:e1:fa:7a: ac:43:1b:95:b6:48:14:27:ce:04:e7:8e:e0:58:34:da:89:7a: 9f:7a:f2:f7:53:29:10:2a:f1:e5:23:ef:ab:99:e0:ca:04:c2: 47:59:fb:08:0d:b5:0d:16:21:32:df:32:a4:4d:6c:f1:a6:b0: d1:98:8f:e5:4f:37:77:e6:e3:cc:dd:be:d3:8e:63:0b:e4:3d: 83:f0:2c:ab:e6:7a:99:68:18:16:d0:83:97:9f:74:1b:ee:17: fa:24:ae:6c:8f:98:76:fd:68:87:69:8c:9d:d6:1d:9c:e0:72: 3d:b0:73:77:b5:b0:a9:cd:3c:59:35:e0:1c:7e:07:9d:53:50: 68:71:33:a9:cc:b5:98:9b:47:1d:dc:e0:9e:c8:b6:d9:27:19: 8e:33:a4:d6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2HoQKkNLqrpbW5zYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ0MWE1ZWEtMDc2OC00MjljLTg1NDEtODNkODI5YTU1 MThjMB4XDTI2MDQxNjIyMDAwM1oXDTI2MDQxODIyMDAwMFowLzEtMCsGA1UEAxMk ZmNiMGYxZjYtZmZhZC00Zjk0LTljMWQtYjIzOTg2YjU4MmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjj0+YG4ZqoOKK6gbKJ8rjNkaL0zJKtSAggo FFlQR4CXTFy36SUqYR8nqM/pB4PJFhtOiQmQBNWZ7rfKrPFWXbz6esYxdcsl6o1D 0spbK+PZ6QOgrphw9L3TApCUc0WKoWB+Jeihgz3Y4JoAYIwouUxcp2zogRCsj8l6 KR+LPEp2ZAftGMveL/4eVKsYCrLNK/p4ahFnNeZEn4h0U0PgpxA4KgC8Afi8Ervk aerq9E4hN/urg0U/tTjOz73GLrWsR7xLQYtuw4Y1JDHQpjNS90UkFiOm1+t/qrOV tjHl0mxZbLgje8M9SMu/9PcA0y4HuFeg3x2LiTuae6NvrRlrawIDAQABo4IDbjCC A2owHQYDVR0OBBYEFILRniu55rQf1HNeqmuGaU5lTF0HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDQx YTVlYS0wNzY4LTQyOWMtODU0MS04M2Q4MjlhNTUxOGMvZmQ0MWE1ZWEtMDc2OC00 MjljLTg1NDEtODNkODI5YTU1MThjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQ0MWE1ZWEtMDc2OC00MjljLTg1 NDEtODNkODI5YTU1MThjL2ZkNDFhNWVhLTA3NjgtNDI5Yy04NTQxLTgzZDgyOWE1 NTE4Yy5jcmwwHwYDVR0jBBgwFoAU820DKve7/3fBl4oa0MkJUZI8pyQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDQxYTVlYS0wNzY4LTQyOWMtODU0MS04M2Q4 MjlhNTUxOGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA60jZL82sIZuWsdsX6RvvW 3v6Ldsbke+W31dVz3sXqJzvUxAA0546fQmCg53OQgbQS6gAdP4o68v0ESEhuxPqy I+X6IuHNSY1qMADeB4O1Rnptn8jyHbYxF5RlU8ppBo+ajtXlgg5Gp9Lh+nqsQxuV tkgUJ84E547gWDTaiXqfevL3UykQKvHlI++rmeDKBMJHWfsIDbUNFiEy3zKkTWzx prDRmI/lTzd35uPM3b7TjmML5D2D8Cyr5nqZaBgW0IOXn3Qb7hf6JK5sj5h2/WiH aYyd1h2c4HI9sHN3tbCpzTxZNeAcfgedU1BocTOpzLWYm0cd3OCeyLbZJxmOM6TW -----END CERTIFICATE-----Generated at Fri Apr 17 18:32:04 2026 by rpki-client