$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.mft File: c58f92f8-4d8d-41da-af9d-d8fdec2e3025.mft (raw, json) Hash identifier: LRZXsp/HGkduMt6+vnewLSXegJafd8AaOfK+AGkzqUM= Subject key identifier: 99:AC:A4:69:6E:06:06:7B:4D:69:BF:B8:18:90:FD:BE:4F:FA:0D:C5 Authority key identifier: F5:28:F3:E5:4E:A6:20:65:57:C7:7A:3E:38:AA:D0:31:93:86:0B:95 Certificate issuer: /CN=c58f92f8-4d8d-41da-af9d-d8fdec2e3025 Certificate serial: 010D0C9F4328584D8E2499996D2061C05FFB6020 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.mft Manifest number: 010D0C9F4328584073A8414D073A3A5F6413B252 Signing time: Sun 19 Apr 2026 06:00:03 +0000 Manifest this update: Sun 19 Apr 2026 06:00:03 +0000 Manifest next update: Tue 21 Apr 2026 06:00:00 +0000 Files and hashes: 1: 6088769e-3429-32bd-88b7-3ac8d54f15a8.roa (hash: mAtwDFtL0OW+HyVmJLUqJb9FUVtoY3bVrhaEWslcapE=) 2: c58f92f8-4d8d-41da-af9d-d8fdec2e3025.crl (hash: w7fRzQ+gdLDHplm3f8bRwck44p5QU14uzen0Js/A1Z4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:24:99:99:6d:20:61:c0:5f:fb:60:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c58f92f8-4d8d-41da-af9d-d8fdec2e3025 Validity Not Before: Apr 19 06:00:03 2026 GMT Not After : Apr 21 06:00:00 2026 GMT Subject: CN=b2877f27-724d-41e5-bc9c-3126dcc8ee91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d8:b7:a8:ea:5f:7f:f5:d3:9e:aa:c0:11:73: d6:97:20:fd:93:4a:d8:93:63:52:33:78:0d:26:f0: 60:fe:8c:f2:2f:88:57:88:49:58:d3:af:b7:dc:f8: e1:29:35:71:92:42:af:17:74:0b:85:fc:7e:03:6c: 37:3e:45:a6:c1:96:9e:2c:7a:3a:5b:e9:49:d7:e0: 81:02:87:89:c4:74:6d:07:2a:52:07:43:8c:f1:5a: 4c:c9:7e:80:c0:c0:e6:c1:8a:c8:15:c6:4c:58:4a: e8:50:a9:c5:0d:a4:8b:85:90:48:3e:ce:14:0a:7b: 9c:0a:22:f7:cf:89:14:c3:84:37:2c:52:52:95:8c: 60:79:03:25:e1:ea:d3:47:78:1f:f9:07:b6:05:cb: f1:10:75:65:3a:a5:d1:9b:b6:97:cc:93:db:4c:53: da:92:de:f6:33:ec:f5:12:0d:35:21:de:f5:c0:0e: 2c:42:ee:47:a2:af:46:07:dd:c2:3b:96:cf:80:07: aa:cf:6f:82:b7:1a:02:e3:e6:7f:73:32:4f:ed:2d: 83:a3:4c:44:0e:60:ad:bb:e3:43:33:f4:7a:3f:cd: bb:49:e7:ff:6e:b6:fc:3b:58:f9:03:69:bc:4d:5d: b9:c0:1a:97:a0:f8:18:59:f6:72:4a:36:f7:4d:fb: e1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:AC:A4:69:6E:06:06:7B:4D:69:BF:B8:18:90:FD:BE:4F:FA:0D:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.crl X509v3 Authority Key Identifier: keyid:F5:28:F3:E5:4E:A6:20:65:57:C7:7A:3E:38:AA:D0:31:93:86:0B:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:da:9b:a9:41:fb:2a:77:d6:92:51:dd:90:49:9e:2d:3d:06: ce:8d:4f:0e:43:86:27:3d:e6:39:f3:0d:fe:ef:f4:f5:ff:d5: 49:b6:9b:72:e8:16:ac:08:b4:5a:ba:01:bd:c7:69:cf:83:be: 85:d9:0c:64:37:54:6d:93:85:a2:78:83:bf:5f:d7:c4:79:7a: b0:a4:5d:03:8c:4d:f1:ae:7b:af:ed:35:5a:80:5e:77:29:9a: 35:be:b2:f8:7a:23:06:67:df:1e:a1:b9:a1:13:4f:ab:b7:a8: ec:b4:03:fa:6c:0f:bd:fa:78:7b:fa:91:56:87:85:07:90:59: b8:5d:36:b5:b3:e5:7d:6d:1c:8a:f4:f8:b0:51:65:05:19:ca: 75:44:de:00:33:3a:58:e7:0d:66:4d:24:ef:2f:40:e4:c6:36: df:90:80:c9:17:43:e9:02:f3:63:06:fb:c5:f6:f3:d9:8c:9e: e7:ae:29:99:6f:71:2e:32:39:48:29:b2:26:02:8d:64:5a:bc: bf:7d:45:94:f9:a6:f3:8b:f2:19:bd:d3:1b:6c:b3:5e:6d:05: 9c:80:63:fa:69:cd:5a:5e:a1:01:00:e9:66:e5:fb:24:c2:f3: 85:da:f7:cc:f9:5c:ff:34:96:19:ad:1a:98:d0:0b:98:42:c2: f4:24:0f:ed -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2OJJmZbSBhwF/7YCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzU4ZjkyZjgtNGQ4ZC00MWRhLWFmOWQtZDhmZGVjMmUz MDI1MB4XDTI2MDQxOTA2MDAwM1oXDTI2MDQyMTA2MDAwMFowLzEtMCsGA1UEAxMk YjI4NzdmMjctNzI0ZC00MWU1LWJjOWMtMzEyNmRjYzhlZTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdi3qOpff/XTnqrAEXPWlyD9k0rYk2NSM3gN JvBg/ozyL4hXiElY06+33PjhKTVxkkKvF3QLhfx+A2w3PkWmwZaeLHo6W+lJ1+CB AoeJxHRtBypSB0OM8VpMyX6AwMDmwYrIFcZMWEroUKnFDaSLhZBIPs4UCnucCiL3 z4kUw4Q3LFJSlYxgeQMl4erTR3gf+Qe2BcvxEHVlOqXRm7aXzJPbTFPakt72M+z1 Eg01Id71wA4sQu5Hoq9GB93CO5bPgAeqz2+CtxoC4+Z/czJP7S2Do0xEDmCtu+ND M/R6P827Sef/brb8O1j5A2m8TV25wBqXoPgYWfZySjb3TfvhCwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJmspGluBgZ7TWm/uBiQ/b5P+g3FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jNThm OTJmOC00ZDhkLTQxZGEtYWY5ZC1kOGZkZWMyZTMwMjUvYzU4ZjkyZjgtNGQ4ZC00 MWRhLWFmOWQtZDhmZGVjMmUzMDI1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzU4ZjkyZjgtNGQ4ZC00MWRhLWFm OWQtZDhmZGVjMmUzMDI1L2M1OGY5MmY4LTRkOGQtNDFkYS1hZjlkLWQ4ZmRlYzJl MzAyNS5jcmwwHwYDVR0jBBgwFoAU9Sjz5U6mIGVXx3o+OKrQMZOGC5UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jNThmOTJmOC00ZDhkLTQxZGEtYWY5ZC1kOGZk ZWMyZTMwMjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAe2pupQfsqd9aSUd2QSZ4t PQbOjU8OQ4YnPeY58w3+7/T1/9VJtpty6BasCLRaugG9x2nPg76F2QxkN1Rtk4Wi eIO/X9fEeXqwpF0DjE3xrnuv7TVagF53KZo1vrL4eiMGZ98eobmhE0+rt6jstAP6 bA+9+nh7+pFWh4UHkFm4XTa1s+V9bRyK9PiwUWUFGcp1RN4AMzpY5w1mTSTvL0Dk xjbfkIDJF0PpAvNjBvvF9vPZjJ7nrimZb3EuMjlIKbImAo1kWry/fUWU+abzi/IZ vdMbbLNebQWcgGP6ac1aXqEBAOlm5fskwvOF2vfM+Vz/NJYZrRqY0AuYQsL0JA/t -----END CERTIFICATE-----Generated at Sun Apr 19 14:06:10 2026 by rpki-client