$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/a1c33c08-b27a-4120-9af0-e2c3eef2713e.mft File: a1c33c08-b27a-4120-9af0-e2c3eef2713e.mft (raw, json) Hash identifier: ngJ5sB5+NI6DxvBp+s/Lvc+yMTEs+tC1llGHZLG1AuU= Subject key identifier: 0A:83:38:1C:B6:E5:92:3A:E2:25:12:54:D1:1A:78:73:DE:91:19:11 Authority key identifier: 23:D4:80:FE:7D:88:22:2F:E2:ED:6F:EC:C6:1F:91:F3:9D:E6:02:F3 Certificate issuer: /CN=a1c33c08-b27a-4120-9af0-e2c3eef2713e Certificate serial: 010D0C9F4328584D8D8FB6F724BDF2AB8C520FC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/a1c33c08-b27a-4120-9af0-e2c3eef2713e.mft Manifest number: 010D0C9F4328584073A8340FD2B65F21CD12F54F Signing time: Sun 19 Apr 2026 01:00:04 +0000 Manifest this update: Sun 19 Apr 2026 01:00:04 +0000 Manifest next update: Tue 21 Apr 2026 01:00:00 +0000 Files and hashes: 1: a1c33c08-b27a-4120-9af0-e2c3eef2713e.crl (hash: 3eJKSblaVoQ9cW1+iVS4j9cgUsnlE/ollPzyqy2eGM8=) 2: fad26696-a1c5-32d5-9507-e3a68a28d6f7.roa (hash: 8AP5r9wA9mGFOPKvQQGa7AgTK1uEVOhuXOh32hK5PmQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/a1c33c08-b27a-4120-9af0-e2c3eef2713e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/a1c33c08-b27a-4120-9af0-e2c3eef2713e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8d:8f:b6:f7:24:bd:f2:ab:8c:52:0f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1c33c08-b27a-4120-9af0-e2c3eef2713e Validity Not Before: Apr 19 01:00:04 2026 GMT Not After : Apr 21 01:00:00 2026 GMT Subject: CN=7c879f59-2a51-421b-9d3a-ae19e9eae789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c8:ee:39:85:3e:a9:9e:f4:41:07:99:47:43: 26:a0:b2:dc:10:c9:39:2f:0a:86:78:6d:d8:78:f4: 92:a8:ca:53:05:12:3f:4b:f5:c2:74:c0:8c:c3:6a: 31:b6:b5:1a:61:02:c4:09:85:f9:d3:80:da:a5:e2: 21:4a:34:ba:fe:31:bc:12:7a:53:7a:4b:ab:b8:f7: a3:63:37:42:e4:8e:4b:bc:7f:19:af:ec:46:87:20: db:02:7c:12:30:ff:16:db:ab:3d:53:0b:2c:f0:a3: 2a:d8:08:21:06:23:d8:8b:00:5b:eb:e0:18:06:d3: 44:4c:46:01:0f:ef:0a:91:e7:22:f6:d2:cf:cf:2a: aa:6d:94:52:db:33:da:6a:b4:29:51:1f:71:53:5c: a0:db:dd:22:40:80:d9:3b:b6:f9:ef:ef:a1:f6:45: d8:f7:b6:53:2a:83:51:87:94:fd:51:f6:bf:8e:e6: 26:61:05:74:e2:a2:32:5d:6e:74:b3:21:1b:79:98: 16:db:97:80:69:fa:90:fd:12:71:6d:ee:5e:fe:e8: 8d:9a:36:d2:3d:e4:bb:1f:83:0e:86:bf:74:34:b9: 14:b2:7e:1c:f7:97:a7:14:a6:56:d8:84:d0:83:32: 11:31:15:6c:2b:f2:36:2f:4d:41:7f:9b:ac:d9:26: c1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:83:38:1C:B6:E5:92:3A:E2:25:12:54:D1:1A:78:73:DE:91:19:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/a1c33c08-b27a-4120-9af0-e2c3eef2713e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/a1c33c08-b27a-4120-9af0-e2c3eef2713e.crl X509v3 Authority Key Identifier: keyid:23:D4:80:FE:7D:88:22:2F:E2:ED:6F:EC:C6:1F:91:F3:9D:E6:02:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:7a:f5:df:ae:05:64:ac:db:e8:d2:2b:d1:e5:1c:1d:62:0d: f6:5d:e5:c8:8f:44:f2:f6:37:08:a4:06:f3:aa:83:97:c5:f3: d2:d2:47:d8:bb:1c:11:b7:43:a7:f4:28:69:d4:0c:ab:38:44: 39:e9:42:e9:3b:55:71:41:2e:be:9c:06:47:b8:04:40:02:5a: a7:78:de:15:21:1b:f2:fa:38:3a:cc:5d:be:4c:e0:7f:b6:62: 91:e0:e7:d0:62:89:bb:21:f6:3a:7d:0b:e7:5c:e6:92:36:aa: ae:a6:6d:92:5a:b9:89:ce:17:66:25:08:9e:93:85:79:5b:4d: 19:f9:62:d3:f1:a9:e6:1e:b2:1d:7c:98:e4:97:cd:e1:25:11: 7d:ba:74:98:6a:d8:3f:49:44:55:d7:65:17:a5:4a:cb:0b:12: a1:6f:fb:91:2c:ee:28:7c:5c:86:6b:6b:cd:3d:7e:c3:16:9e: 21:4e:9f:36:2b:1d:96:5e:f5:de:dd:cc:a5:6c:44:b9:71:f1: dc:56:ff:5c:9b:9f:bf:a3:ea:7a:af:9f:f0:10:0e:26:eb:2e: d3:6d:00:aa:09:a4:1c:81:7e:d2:20:47:ad:3c:e6:ee:2c:63: bd:3e:f3:02:41:3a:bf:73:93:d9:12:95:62:91:61:ed:aa:35: d4:5c:01:e4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2Nj7b3JL3yq4xSD8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFjMzNjMDgtYjI3YS00MTIwLTlhZjAtZTJjM2VlZjI3 MTNlMB4XDTI2MDQxOTAxMDAwNFoXDTI2MDQyMTAxMDAwMFowLzEtMCsGA1UEAxMk N2M4NzlmNTktMmE1MS00MjFiLTlkM2EtYWUxOWU5ZWFlNzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsjuOYU+qZ70QQeZR0MmoLLcEMk5LwqGeG3Y ePSSqMpTBRI/S/XCdMCMw2oxtrUaYQLECYX504DapeIhSjS6/jG8EnpTekuruPej YzdC5I5LvH8Zr+xGhyDbAnwSMP8W26s9Uwss8KMq2AghBiPYiwBb6+AYBtNETEYB D+8Kkeci9tLPzyqqbZRS2zPaarQpUR9xU1yg290iQIDZO7b57++h9kXY97ZTKoNR h5T9Ufa/juYmYQV04qIyXW50syEbeZgW25eAafqQ/RJxbe5e/uiNmjbSPeS7H4MO hr90NLkUsn4c95enFKZW2ITQgzIRMRVsK/I2L01Bf5us2SbBowIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAqDOBy25ZI64iUSVNEaeHPekRkRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMWMz M2MwOC1iMjdhLTQxMjAtOWFmMC1lMmMzZWVmMjcxM2UvYTFjMzNjMDgtYjI3YS00 MTIwLTlhZjAtZTJjM2VlZjI3MTNlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTFjMzNjMDgtYjI3YS00MTIwLTlh ZjAtZTJjM2VlZjI3MTNlL2ExYzMzYzA4LWIyN2EtNDEyMC05YWYwLWUyYzNlZWYy NzEzZS5jcmwwHwYDVR0jBBgwFoAUI9SA/n2IIi/i7W/sxh+R853mAvMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMWMzM2MwOC1iMjdhLTQxMjAtOWFmMC1lMmMz ZWVmMjcxM2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAJevXfrgVkrNvo0ivR5Rwd Yg32XeXIj0Ty9jcIpAbzqoOXxfPS0kfYuxwRt0On9Chp1AyrOEQ56ULpO1VxQS6+ nAZHuARAAlqneN4VIRvy+jg6zF2+TOB/tmKR4OfQYom7IfY6fQvnXOaSNqqupm2S WrmJzhdmJQiek4V5W00Z+WLT8anmHrIdfJjkl83hJRF9unSYatg/SURV12UXpUrL CxKhb/uRLO4ofFyGa2vNPX7DFp4hTp82Kx2WXvXe3cylbES5cfHcVv9cm5+/o+p6 r5/wEA4m6y7TbQCqCaQcgX7SIEetPObuLGO9PvMCQTq/c5PZEpVikWHtqjXUXAHk -----END CERTIFICATE-----Generated at Sun Apr 19 14:06:31 2026 by rpki-client