$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.mft File: b433860d-ab5d-45f4-a11e-f313b584710a.mft (raw, json) Hash identifier: wiNYcduEjzG1+81cC8nDpT8dnwFb4sTYVLTn50NNnQ8= Subject key identifier: E9:AA:3C:98:8D:F7:55:9C:6E:F0:CC:35:10:C3:F1:0D:77:B8:53:68 Authority key identifier: CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55 Certificate issuer: /CN=b433860d-ab5d-45f4-a11e-f313b584710a Certificate serial: 010D0C9F4328584D8D8FB7065099784211B5DD40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.mft Manifest number: 010D0C9F4328584073A833A02A07E904E124DC28 Signing time: Sun 19 Apr 2026 01:00:04 +0000 Manifest this update: Sun 19 Apr 2026 01:00:04 +0000 Manifest next update: Tue 21 Apr 2026 01:00:00 +0000 Files and hashes: 1: 002e220d-5567-33ef-bd92-28d89dfe57f5.roa (hash: gM1Y6ZXXYpE8WDd0DokKj9YTP6nJwZw/CGZqUcXuCoQ=) 2: b433860d-ab5d-45f4-a11e-f313b584710a.crl (hash: RX4eKZ5gX0OBq+/nROSlo2IH/9+YO/T3AXAJSscayMo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8d:8f:b7:06:50:99:78:42:11:b5:dd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433860d-ab5d-45f4-a11e-f313b584710a Validity Not Before: Apr 19 01:00:04 2026 GMT Not After : Apr 21 01:00:00 2026 GMT Subject: CN=9c1c8a8e-d0f8-4215-9d46-2a85d7afbf79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5e:97:d1:ce:49:54:5f:b7:9a:63:be:d0:3c: e6:13:06:bd:b5:b7:30:c6:01:b0:22:18:aa:05:22: 41:cf:4d:37:02:22:74:f0:05:ec:0a:d1:9b:bc:a3: 56:4e:29:6a:62:e2:ad:a2:88:21:3f:fd:e4:99:a4: 7f:2c:12:e9:db:46:e1:6b:6f:0f:68:2b:d4:77:55: 75:8d:0b:8f:c0:1a:23:58:4f:8e:7c:18:96:17:48: ef:f4:da:71:9b:e0:ef:92:fe:08:de:f2:bb:8e:f4: 7d:47:da:1b:a5:af:4b:35:a8:6a:65:2b:26:0b:b4: 2f:9d:46:10:1a:21:b3:6b:db:2f:84:da:1f:54:af: 09:06:09:7e:22:a0:40:93:92:41:12:4b:fd:03:eb: 06:ab:4b:1b:64:41:54:68:3f:01:e7:62:7a:92:d8: 1c:86:56:6a:bc:25:04:7d:d0:cc:9d:69:af:09:b7: 48:cd:fd:fd:64:c2:3c:a0:e0:98:7d:b7:1c:1c:e1: af:fb:43:39:35:95:f0:8b:55:2f:4c:04:5f:53:3f: bc:37:a4:35:40:4b:58:a1:6c:85:f5:16:89:53:3e: a3:10:6f:a8:b0:1f:a7:6f:07:f2:2a:29:23:cd:2c: 81:3f:36:a6:da:b8:c0:1b:37:73:3a:dd:24:0b:50: b1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:AA:3C:98:8D:F7:55:9C:6E:F0:CC:35:10:C3:F1:0D:77:B8:53:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.crl X509v3 Authority Key Identifier: keyid:CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:70:68:1d:81:30:cd:9c:a2:3d:9c:e0:9d:45:46:7a:47:7f: d7:45:7a:eb:c8:39:34:be:b6:1c:15:f1:78:93:c6:04:14:32: a3:ac:31:11:c3:63:c0:24:a8:11:65:52:2b:9c:66:d4:91:c1: c9:b3:d9:e8:6e:a3:57:43:70:d8:d3:4c:8a:84:33:bd:77:e6: d0:0d:10:b4:da:e9:38:8d:5c:30:a1:f7:35:d1:26:c8:7f:af: 90:97:06:93:98:f9:37:f5:8b:8f:cb:05:d7:3e:05:d4:50:4b: 9e:dc:15:ab:56:5d:a8:ed:cf:5b:e9:24:b4:db:53:f8:e8:f0: e3:09:dc:e4:5b:1d:f4:41:34:a1:05:f5:5c:8a:ed:8d:5f:ea: fb:76:2e:a2:71:a6:b0:d4:18:f1:df:e8:51:b9:56:02:10:69: 73:43:9d:fa:93:df:f1:09:a0:fe:d5:46:79:f8:e6:10:a4:ae: 75:99:0b:98:8e:87:0a:93:2f:62:6d:78:94:61:8d:90:7b:27: d6:0e:91:f3:a6:5e:45:9a:64:e8:78:72:98:d5:cd:f6:90:26: 74:e5:08:c6:6b:c3:6f:9b:a4:78:c8:e4:2a:32:90:7d:95:bc: 53:f7:3a:0d:b8:55:7d:31:08:e8:06:87:f8:2b:18:e0:07:82: c0:4e:0f:11 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2Nj7cGUJl4QhG13UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzMzg2MGQtYWI1ZC00NWY0LWExMWUtZjMxM2I1ODQ3 MTBhMB4XDTI2MDQxOTAxMDAwNFoXDTI2MDQyMTAxMDAwMFowLzEtMCsGA1UEAxMk OWMxYzhhOGUtZDBmOC00MjE1LTlkNDYtMmE4NWQ3YWZiZjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi16X0c5JVF+3mmO+0DzmEwa9tbcwxgGwIhiq BSJBz003AiJ08AXsCtGbvKNWTilqYuKtooghP/3kmaR/LBLp20bha28PaCvUd1V1 jQuPwBojWE+OfBiWF0jv9Npxm+Dvkv4I3vK7jvR9R9obpa9LNahqZSsmC7QvnUYQ GiGza9svhNofVK8JBgl+IqBAk5JBEkv9A+sGq0sbZEFUaD8B52J6ktgchlZqvCUE fdDMnWmvCbdIzf39ZMI8oOCYfbccHOGv+0M5NZXwi1UvTARfUz+8N6Q1QEtYoWyF 9RaJUz6jEG+osB+nbwfyKikjzSyBPzam2rjAGzdzOt0kC1CxowIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOmqPJiN91WcbvDMNRDD8Q13uFNoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iNDMz ODYwZC1hYjVkLTQ1ZjQtYTExZS1mMzEzYjU4NDcxMGEvYjQzMzg2MGQtYWI1ZC00 NWY0LWExMWUtZjMxM2I1ODQ3MTBhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjQzMzg2MGQtYWI1ZC00NWY0LWEx MWUtZjMxM2I1ODQ3MTBhL2I0MzM4NjBkLWFiNWQtNDVmNC1hMTFlLWYzMTNiNTg0 NzEwYS5jcmwwHwYDVR0jBBgwFoAUz9UTZdOGkQNiuVzEe6KxGXpl5VUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iNDMzODYwZC1hYjVkLTQ1ZjQtYTExZS1mMzEz YjU4NDcxMGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBEcGgdgTDNnKI9nOCdRUZ6 R3/XRXrryDk0vrYcFfF4k8YEFDKjrDERw2PAJKgRZVIrnGbUkcHJs9nobqNXQ3DY 00yKhDO9d+bQDRC02uk4jVwwofc10SbIf6+QlwaTmPk39YuPywXXPgXUUEue3BWr Vl2o7c9b6SS021P46PDjCdzkWx30QTShBfVciu2NX+r7di6icaaw1Bjx3+hRuVYC EGlzQ536k9/xCaD+1UZ5+OYQpK51mQuYjocKky9ibXiUYY2QeyfWDpHzpl5FmmTo eHKY1c32kCZ05QjGa8Nvm6R4yOQqMpB9lbxT9zoNuFV9MQjoBof4KxjgB4LATg8R -----END CERTIFICATE-----Generated at Sun Apr 19 11:44:14 2026 by rpki-client