$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922/5248b6be-3e69-4e67-8c1c-9f85fde15922.mft File: 5248b6be-3e69-4e67-8c1c-9f85fde15922.mft (raw, json) Hash identifier: dLxlBels+tNTmC4pR/tXTcNKJ5aEC54vxxG6HCWKCag= Subject key identifier: 72:B9:06:EE:5E:B5:7B:2D:E3:53:09:7E:05:FF:AD:AC:78:34:AB:DC Authority key identifier: 5B:92:2A:D2:78:10:1C:9D:3D:E7:DF:B2:09:20:35:F6:D0:75:24:D6 Certificate issuer: /CN=5248b6be-3e69-4e67-8c1c-9f85fde15922 Certificate serial: 010D0C9F4328584D8E249B0F82A727C05470F080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922/5248b6be-3e69-4e67-8c1c-9f85fde15922.mft Manifest number: 010D0C9F4328584073A842EDE733AB9658C35FCF Signing time: Sun 19 Apr 2026 06:00:03 +0000 Manifest this update: Sun 19 Apr 2026 06:00:03 +0000 Manifest next update: Tue 21 Apr 2026 06:00:00 +0000 Files and hashes: 1: 5248b6be-3e69-4e67-8c1c-9f85fde15922.crl (hash: KBJgS++K92jCWR69/vgMVOormCzFu9G1rIJkJEsvgH0=) 2: a662b604-8a40-31fd-848a-cd7f0cad04af.roa (hash: 6aUMmXbG3wl63vJW6jazPlP/bzGqXH9hwvzc6LFdB+I=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922/5248b6be-3e69-4e67-8c1c-9f85fde15922.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922/5248b6be-3e69-4e67-8c1c-9f85fde15922.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:24:9b:0f:82:a7:27:c0:54:70:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5248b6be-3e69-4e67-8c1c-9f85fde15922 Validity Not Before: Apr 19 06:00:03 2026 GMT Not After : Apr 21 06:00:00 2026 GMT Subject: CN=1fa0b3e8-acec-43ae-a855-0f3de4ef6102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f9:bd:53:69:53:6c:25:bd:12:1f:d7:6c:15: 98:b8:43:b6:0e:3c:85:6c:4e:2c:fa:e9:9d:65:76: c6:9b:22:3c:a9:c8:d6:98:94:7c:6a:86:c1:b8:ff: 41:e6:f8:47:a7:4e:50:52:a2:47:fd:d0:d8:37:8c: 91:59:f5:ef:38:b8:81:aa:57:ef:10:d2:dd:40:9b: d0:27:67:92:39:2d:42:d5:55:30:c4:5c:df:e4:d8: a4:68:3d:c2:75:e2:72:68:0e:77:9f:f7:85:87:ed: ce:6c:49:67:9c:3e:7f:ab:14:b2:b9:e8:22:67:d3: bf:a7:fa:98:5b:1a:0e:83:2b:36:4c:5a:a9:9a:d6: 82:9a:83:da:9e:04:b6:58:ae:d5:46:0f:81:92:84: 80:61:e8:47:11:39:e4:40:89:a9:e5:f8:d6:99:29: 80:ab:52:32:f8:90:51:db:8d:48:9b:79:14:32:92: 26:9b:e8:3b:82:13:a8:c4:37:51:f8:a2:49:53:87: 2d:e0:e5:03:08:44:fd:6c:b1:d9:c4:6e:f2:1d:ce: 2c:9e:fb:ce:bb:02:82:91:d5:47:da:52:ac:68:07: e5:01:8e:3e:fd:41:4f:60:8b:2d:be:c8:9d:c7:3f: 7b:07:c8:59:05:a2:95:93:66:13:b0:25:bf:e6:bf: 43:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B9:06:EE:5E:B5:7B:2D:E3:53:09:7E:05:FF:AD:AC:78:34:AB:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922/5248b6be-3e69-4e67-8c1c-9f85fde15922.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922/5248b6be-3e69-4e67-8c1c-9f85fde15922.crl X509v3 Authority Key Identifier: keyid:5B:92:2A:D2:78:10:1C:9D:3D:E7:DF:B2:09:20:35:F6:D0:75:24:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:47:3f:8a:81:ad:73:56:f5:c0:0a:a5:72:30:95:26:73:25: 8b:33:39:ad:4b:14:08:44:ed:53:7b:e7:1f:0e:3e:6a:98:91: 84:a9:fd:b4:ff:a7:66:c3:47:86:50:ec:b7:54:d0:e1:78:61: 06:ed:e9:3a:4b:18:c1:44:ab:e3:9f:92:97:03:3f:fa:01:b1: c1:c3:65:92:9d:a1:5c:47:5c:fb:b9:1d:97:67:55:b4:4f:f0: ec:14:96:b4:d3:56:91:2c:08:95:ed:98:8b:06:2f:cb:bb:98: c7:21:0a:d2:85:1f:9f:68:b8:58:be:a9:45:64:65:f7:06:25: 3d:49:72:ae:0a:08:19:94:d8:72:9e:ba:e2:3b:3d:02:76:64: a2:74:57:fe:e0:0e:ac:e0:44:1b:2e:8f:47:84:17:bc:56:95: 65:84:24:d9:a7:24:f9:4d:c9:56:9a:91:2a:d3:9c:0c:2e:69: b3:a9:44:2c:fc:c6:3e:83:4e:9e:de:3a:46:3e:7e:9c:b5:0d: 4c:8b:4e:a5:7c:05:5a:7c:d8:97:2c:45:a4:29:04:6e:21:31: 1d:86:d9:46:ba:5b:16:4c:a6:99:ba:59:d9:04:af:70:30:9b: 57:0a:74:08:82:3a:e7:c4:81:75:ef:05:35:d5:f7:70:df:ee: fd:7e:3c:86 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2OJJsPgqcnwFRw8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTI0OGI2YmUtM2U2OS00ZTY3LThjMWMtOWY4NWZkZTE1 OTIyMB4XDTI2MDQxOTA2MDAwM1oXDTI2MDQyMTA2MDAwMFowLzEtMCsGA1UEAxMk MWZhMGIzZTgtYWNlYy00M2FlLWE4NTUtMGYzZGU0ZWY2MTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPm9U2lTbCW9Eh/XbBWYuEO2DjyFbE4s+umd ZXbGmyI8qcjWmJR8aobBuP9B5vhHp05QUqJH/dDYN4yRWfXvOLiBqlfvENLdQJvQ J2eSOS1C1VUwxFzf5NikaD3CdeJyaA53n/eFh+3ObElnnD5/qxSyuegiZ9O/p/qY WxoOgys2TFqpmtaCmoPangS2WK7VRg+BkoSAYehHETnkQImp5fjWmSmAq1Iy+JBR 241Im3kUMpImm+g7ghOoxDdR+KJJU4ct4OUDCET9bLHZxG7yHc4snvvOuwKCkdVH 2lKsaAflAY4+/UFPYIstvsidxz97B8hZBaKVk2YTsCW/5r9D2QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHK5Bu5etXst41MJfgX/rax4NKvcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81MjQ4 YjZiZS0zZTY5LTRlNjctOGMxYy05Zjg1ZmRlMTU5MjIvNTI0OGI2YmUtM2U2OS00 ZTY3LThjMWMtOWY4NWZkZTE1OTIyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTI0OGI2YmUtM2U2OS00ZTY3LThj MWMtOWY4NWZkZTE1OTIyLzUyNDhiNmJlLTNlNjktNGU2Ny04YzFjLTlmODVmZGUx NTkyMi5jcmwwHwYDVR0jBBgwFoAUW5Iq0ngQHJ0959+yCSA19tB1JNYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81MjQ4YjZiZS0zZTY5LTRlNjctOGMxYy05Zjg1 ZmRlMTU5MjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA6Rz+Kga1zVvXACqVyMJUm cyWLMzmtSxQIRO1Te+cfDj5qmJGEqf20/6dmw0eGUOy3VNDheGEG7ek6SxjBRKvj n5KXAz/6AbHBw2WSnaFcR1z7uR2XZ1W0T/DsFJa001aRLAiV7ZiLBi/Lu5jHIQrS hR+faLhYvqlFZGX3BiU9SXKuCggZlNhynrriOz0CdmSidFf+4A6s4EQbLo9HhBe8 VpVlhCTZpyT5TclWmpEq05wMLmmzqUQs/MY+g06e3jpGPn6ctQ1Mi06lfAVafNiX LEWkKQRuITEdhtlGulsWTKaZulnZBK9wMJtXCnQIgjrnxIF17wU11fdw3+79fjyG -----END CERTIFICATE-----Generated at Sun Apr 19 13:43:56 2026 by rpki-client