$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.mft File: a86f0f6f-da67-4fff-a83e-60e91fcd9f41.mft (raw, json) Hash identifier: HjWdPw7ntwK4EWZExgwair/LZXva3yncknmky50oeu0= Subject key identifier: 3F:06:AE:74:5A:63:AE:5A:26:87:C7:96:64:4C:B3:8E:A7:DB:80:8A Authority key identifier: 64:A0:D2:C8:EA:78:48:D5:6A:1E:F0:50:B0:C1:51:90:4E:20:F4:07 Certificate issuer: /CN=a86f0f6f-da67-4fff-a83e-60e91fcd9f41 Certificate serial: 010D0C9F4328584D8DCB42133733389D54993700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.mft Manifest number: 010D0C9F4328584073A839821729DB76AB67A294 Signing time: Sun 19 Apr 2026 03:00:03 +0000 Manifest this update: Sun 19 Apr 2026 03:00:03 +0000 Manifest next update: Tue 21 Apr 2026 03:00:00 +0000 Files and hashes: 1: a86f0f6f-da67-4fff-a83e-60e91fcd9f41.crl (hash: DcqpS5AZ3igjwRZ5DfgjRATUxVXqh3i/Ihj1pALqSlA=) 2: be7ad7b9-a247-3a4b-8764-f23d8fb0c013.roa (hash: KgKAKVDnJywdm+ogAwVSVATBNQFU/f5fZPf3hWtQ4E8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8d:cb:42:13:37:33:38:9d:54:99:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a86f0f6f-da67-4fff-a83e-60e91fcd9f41 Validity Not Before: Apr 19 03:00:03 2026 GMT Not After : Apr 21 03:00:00 2026 GMT Subject: CN=6aa1a564-2a2d-4a9e-bfd5-81ee42b93355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:9e:8d:ad:ec:c8:30:14:f9:fd:c2:38:44:f4: 14:a9:70:c5:1c:67:98:26:19:b4:71:a0:ae:5d:bf: db:7b:17:47:d1:f0:c6:9d:bc:5b:c0:60:ff:bb:fa: 1e:00:bc:b2:0c:2a:94:27:18:0d:cc:20:1c:79:c6: a6:1c:e3:4c:70:9c:53:a9:a5:90:97:2e:43:35:ca: b0:51:78:55:ce:e3:87:96:c2:54:be:bd:3d:70:b4: 7f:d8:7a:b5:3e:1e:14:e3:f1:14:d5:d9:30:d0:3f: df:f7:1e:4c:95:aa:0b:33:3e:b6:e0:58:db:19:1e: a6:99:ec:f3:a1:b7:ac:b2:b8:66:0e:dd:c0:3c:56: 03:30:87:1e:a9:2c:a6:f0:d1:29:d9:04:21:b5:17: c3:c6:bf:92:ff:8d:39:9d:c3:c2:3e:9c:78:c8:a2: ac:91:74:b2:51:e7:09:69:a6:81:11:f5:31:a4:a0: d2:ad:3a:20:11:45:aa:52:65:3c:8a:4f:6d:c0:83: 88:cc:9e:c0:81:3a:54:fa:42:77:82:9b:19:59:90: 51:60:e4:4f:c8:23:1f:f7:2f:db:51:21:aa:cf:2c: 5d:a8:88:34:05:e6:d8:d9:f3:10:e9:67:27:7e:3e: 83:df:68:57:e8:41:0c:48:d9:4f:83:4b:55:2a:bf: 23:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:06:AE:74:5A:63:AE:5A:26:87:C7:96:64:4C:B3:8E:A7:DB:80:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.crl X509v3 Authority Key Identifier: keyid:64:A0:D2:C8:EA:78:48:D5:6A:1E:F0:50:B0:C1:51:90:4E:20:F4:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:af:bf:af:f5:12:d8:8f:da:41:12:3f:a4:e8:5e:f8:8d:5d: 56:35:9b:bd:17:e1:a1:96:85:f6:bd:1c:a7:44:f5:8f:48:e1: 8e:c3:2b:a3:79:83:1c:f8:2f:df:36:47:6f:2d:f1:4e:02:ac: 6f:b9:9a:16:8d:e8:89:21:f9:78:1e:a5:ae:28:78:bb:58:74: ff:1e:89:49:fb:2d:c6:f1:4b:94:59:0d:06:8f:5b:0c:c6:1d: 36:09:8f:a5:c7:50:11:a5:50:cf:cc:3b:e6:b1:c6:80:9b:7e: 74:4a:9f:f4:c4:13:8a:31:ea:83:1a:c0:18:1d:8c:a8:6b:59: 7f:f8:ca:0b:94:4f:10:75:65:0b:ce:fa:96:19:49:bb:c1:a7: f8:94:6b:0b:ad:30:ae:10:d9:a3:a5:fe:82:ed:75:a6:49:d9: 9a:3d:43:13:16:08:fe:57:4b:31:bc:c2:b0:e1:63:19:eb:12: 9a:68:d0:bb:97:05:62:69:55:03:ee:fa:00:e5:af:3b:9c:da: 59:7b:d2:cd:a5:a4:2c:38:26:04:f2:05:bc:7c:71:9a:08:0c: 24:d3:42:cb:6e:81:2f:68:5a:12:3e:0e:ed:f0:e1:45:e5:16: d0:92:0e:ed:95:28:a0:b6:f1:71:29:98:f3:cd:c8:d5:e9:c6: dc:61:a4:b0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2Ny0ITNzM4nVSZNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg2ZjBmNmYtZGE2Ny00ZmZmLWE4M2UtNjBlOTFmY2Q5 ZjQxMB4XDTI2MDQxOTAzMDAwM1oXDTI2MDQyMTAzMDAwMFowLzEtMCsGA1UEAxMk NmFhMWE1NjQtMmEyZC00YTllLWJmZDUtODFlZTQyYjkzMzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZ6NrezIMBT5/cI4RPQUqXDFHGeYJhm0caCu Xb/bexdH0fDGnbxbwGD/u/oeALyyDCqUJxgNzCAcecamHONMcJxTqaWQly5DNcqw UXhVzuOHlsJUvr09cLR/2Hq1Ph4U4/EU1dkw0D/f9x5MlaoLMz624FjbGR6mmezz obessrhmDt3APFYDMIceqSym8NEp2QQhtRfDxr+S/405ncPCPpx4yKKskXSyUecJ aaaBEfUxpKDSrTogEUWqUmU8ik9twIOIzJ7AgTpU+kJ3gpsZWZBRYORPyCMf9y/b USGqzyxdqIg0BebY2fMQ6Wcnfj6D32hX6EEMSNlPg0tVKr8j9wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFD8GrnRaY65aJofHlmRMs46n24CKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hODZm MGY2Zi1kYTY3LTRmZmYtYTgzZS02MGU5MWZjZDlmNDEvYTg2ZjBmNmYtZGE2Ny00 ZmZmLWE4M2UtNjBlOTFmY2Q5ZjQxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTg2ZjBmNmYtZGE2Ny00ZmZmLWE4 M2UtNjBlOTFmY2Q5ZjQxL2E4NmYwZjZmLWRhNjctNGZmZi1hODNlLTYwZTkxZmNk OWY0MS5jcmwwHwYDVR0jBBgwFoAUZKDSyOp4SNVqHvBQsMFRkE4g9AcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hODZmMGY2Zi1kYTY3LTRmZmYtYTgzZS02MGU5 MWZjZDlmNDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCir7+v9RLYj9pBEj+k6F74 jV1WNZu9F+GhloX2vRynRPWPSOGOwyujeYMc+C/fNkdvLfFOAqxvuZoWjeiJIfl4 HqWuKHi7WHT/HolJ+y3G8UuUWQ0Gj1sMxh02CY+lx1ARpVDPzDvmscaAm350Sp/0 xBOKMeqDGsAYHYyoa1l/+MoLlE8QdWULzvqWGUm7waf4lGsLrTCuENmjpf6C7XWm SdmaPUMTFgj+V0sxvMKw4WMZ6xKaaNC7lwViaVUD7voA5a87nNpZe9LNpaQsOCYE 8gW8fHGaCAwk00LLboEvaFoSPg7t8OFF5RbQkg7tlSigtvFxKZjzzcjV6cbcYaSw -----END CERTIFICATE-----Generated at Sun Apr 19 14:06:23 2026 by rpki-client