$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/20ffd753-1cb0-470b-9810-1f98670d442f/20ffd753-1cb0-470b-9810-1f98670d442f.mft File: 20ffd753-1cb0-470b-9810-1f98670d442f.mft (raw, json) Hash identifier: N3UvKQ0KUSsrqOFIs+n9pncsTiOstkCYEwBNBCITD44= Subject key identifier: 0B:9E:98:40:ED:A5:85:EE:D2:74:66:60:AF:02:F5:29:B3:96:F1:B0 Authority key identifier: F6:17:85:03:40:3C:0D:22:37:3B:02:15:DF:8F:9A:50:F8:9B:86:80 Certificate issuer: /CN=20ffd753-1cb0-470b-9810-1f98670d442f Certificate serial: 010D0C9F4328584D88181E104B56B57A6DC49000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/20ffd753-1cb0-470b-9810-1f98670d442f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/20ffd753-1cb0-470b-9810-1f98670d442f/20ffd753-1cb0-470b-9810-1f98670d442f.mft Manifest number: 010D0C9F4328584C7C197954A173191D3E240FA3 Signing time: Fri 17 Apr 2026 02:00:03 +0000 Manifest this update: Fri 17 Apr 2026 02:00:03 +0000 Manifest next update: Mon 20 Apr 2026 02:00:00 +0000 Files and hashes: 1: 1c7c3735-449a-3ae7-9b82-d38b21a81f00.roa (hash: zoTZMd9i6aud4u3f6w6rRJHJyaYkkc+VwLNbwfFbsHs=) 2: 20ffd753-1cb0-470b-9810-1f98670d442f.crl (hash: pcHZIhKDWqoDtwZgcmo83VMkBhIbmEEIfESZB8xh/sY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/20ffd753-1cb0-470b-9810-1f98670d442f/20ffd753-1cb0-470b-9810-1f98670d442f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/20ffd753-1cb0-470b-9810-1f98670d442f/20ffd753-1cb0-470b-9810-1f98670d442f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/20ffd753-1cb0-470b-9810-1f98670d442f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:88:18:1e:10:4b:56:b5:7a:6d:c4:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20ffd753-1cb0-470b-9810-1f98670d442f Validity Not Before: Apr 17 02:00:03 2026 GMT Not After : Apr 20 02:00:00 2026 GMT Subject: CN=0ac7de45-33a1-41a9-bed1-648cf6f97220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e5:be:d9:64:fd:4a:cf:a3:72:3b:17:28:90: ce:02:a4:9b:32:b3:78:a4:8b:7c:e4:ef:8a:b3:85: fd:c8:f3:c7:de:85:e6:a9:b1:85:6b:13:ed:9e:62: 21:cb:69:ae:f2:1b:fc:fa:e6:fa:c4:3f:a2:a7:00: a7:37:9e:19:30:97:75:eb:e2:e6:e7:82:f5:6f:a3: da:43:a7:c0:8c:13:c3:53:bb:c7:20:cb:f1:4f:32: 2f:21:b2:fb:51:53:80:d2:5e:00:c4:85:46:64:15: d3:1f:09:dd:90:01:76:fd:90:4f:5c:9a:6b:93:34: c3:55:73:64:6f:5f:c7:0d:cc:01:a6:1f:1b:9a:44: 84:82:61:69:28:c5:f6:63:79:bd:53:af:ca:68:f7: 3d:11:89:de:dd:9f:c3:b9:a1:3f:ad:17:c6:cb:53: aa:7d:76:dd:56:06:43:0e:01:75:96:7f:68:36:e9: 44:69:c8:c0:0d:4c:8a:44:8d:07:51:d7:7b:74:49: e3:23:64:00:2c:31:3c:a4:a7:a0:d1:1b:00:37:b9: 2e:ac:7f:bb:89:1b:71:25:6e:c2:7e:19:3c:8e:df: 38:5b:0e:a5:fe:c3:28:58:6f:15:b0:67:2e:27:23: ad:76:cc:be:4e:d1:67:91:55:9f:6b:d1:15:58:e7: d8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:9E:98:40:ED:A5:85:EE:D2:74:66:60:AF:02:F5:29:B3:96:F1:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/20ffd753-1cb0-470b-9810-1f98670d442f/20ffd753-1cb0-470b-9810-1f98670d442f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/20ffd753-1cb0-470b-9810-1f98670d442f/20ffd753-1cb0-470b-9810-1f98670d442f.crl X509v3 Authority Key Identifier: keyid:F6:17:85:03:40:3C:0D:22:37:3B:02:15:DF:8F:9A:50:F8:9B:86:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/20ffd753-1cb0-470b-9810-1f98670d442f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:8a:cf:34:3e:bd:64:2e:3c:c0:e1:47:ce:3d:38:21:cc:1f: b0:39:a6:7d:06:58:f5:de:58:8c:cb:30:99:11:d6:53:5f:31: b1:5f:5a:1a:a6:73:30:c3:f0:91:dc:d0:03:39:7d:b6:3b:d4: e9:63:b9:c8:33:8e:fc:8e:a1:a7:ee:3d:24:2b:0a:d9:19:04: 30:9f:9b:03:e6:50:59:a1:38:83:f9:1e:d5:e9:3c:2f:64:95: 6f:03:1d:81:7f:a1:21:cd:0d:69:2c:95:c8:64:a2:d1:95:58: 65:15:17:00:06:d5:79:de:68:23:25:85:5b:c1:32:d9:22:2b: 1c:94:f8:4a:d9:71:c8:71:81:16:4c:fa:1c:c9:16:ea:bc:22: e2:71:66:62:93:8f:34:57:88:da:3f:93:fa:e2:8c:fc:ef:06: a0:5a:72:61:8b:e1:84:c4:1e:ab:e2:2f:9a:14:86:7d:1a:7a: 59:5d:fb:1d:06:42:77:40:54:ac:c7:ac:5e:d5:c5:4c:9a:40: ea:2b:3b:a5:43:83:96:ff:e3:3f:25:be:93:51:7e:9b:95:bd: b9:22:ba:0f:bf:4e:16:b3:45:97:a0:af:d5:bc:25:47:d0:75: 5a:bc:6a:5e:53:38:5c:72:ba:ef:65:36:83:a1:f9:90:76:21: 01:70:cd:24 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2IGB4QS1a1em3EkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBmZmQ3NTMtMWNiMC00NzBiLTk4MTAtMWY5ODY3MGQ0 NDJmMB4XDTI2MDQxNzAyMDAwM1oXDTI2MDQyMDAyMDAwMFowLzEtMCsGA1UEAxMk MGFjN2RlNDUtMzNhMS00MWE5LWJlZDEtNjQ4Y2Y2Zjk3MjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+W+2WT9Ss+jcjsXKJDOAqSbMrN4pIt85O+K s4X9yPPH3oXmqbGFaxPtnmIhy2mu8hv8+ub6xD+ipwCnN54ZMJd16+Lm54L1b6Pa Q6fAjBPDU7vHIMvxTzIvIbL7UVOA0l4AxIVGZBXTHwndkAF2/ZBPXJprkzTDVXNk b1/HDcwBph8bmkSEgmFpKMX2Y3m9U6/KaPc9EYne3Z/DuaE/rRfGy1OqfXbdVgZD DgF1ln9oNulEacjADUyKRI0HUdd7dEnjI2QALDE8pKeg0RsAN7kurH+7iRtxJW7C fhk8jt84Ww6l/sMoWG8VsGcuJyOtdsy+TtFnkVWfa9EVWOfYYQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAuemEDtpYXu0nRmYK8C9SmzlvGwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yMGZm ZDc1My0xY2IwLTQ3MGItOTgxMC0xZjk4NjcwZDQ0MmYvMjBmZmQ3NTMtMWNiMC00 NzBiLTk4MTAtMWY5ODY3MGQ0NDJmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjBmZmQ3NTMtMWNiMC00NzBiLTk4 MTAtMWY5ODY3MGQ0NDJmLzIwZmZkNzUzLTFjYjAtNDcwYi05ODEwLTFmOTg2NzBk NDQyZi5jcmwwHwYDVR0jBBgwFoAU9heFA0A8DSI3OwIV34+aUPibhoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yMGZmZDc1My0xY2IwLTQ3MGItOTgxMC0xZjk4 NjcwZDQ0MmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAZis80Pr1kLjzA4UfOPTgh zB+wOaZ9Blj13liMyzCZEdZTXzGxX1oapnMww/CR3NADOX22O9TpY7nIM478jqGn 7j0kKwrZGQQwn5sD5lBZoTiD+R7V6TwvZJVvAx2Bf6EhzQ1pLJXIZKLRlVhlFRcA BtV53mgjJYVbwTLZIisclPhK2XHIcYEWTPocyRbqvCLicWZik480V4jaP5P64oz8 7wagWnJhi+GExB6r4i+aFIZ9GnpZXfsdBkJ3QFSsx6xe1cVMmkDqKzulQ4OW/+M/ Jb6TUX6blb25IroPv04Ws0WXoK/VvCVH0HVavGpeUzhccrrvZTaDofmQdiEBcM0k -----END CERTIFICATE-----Generated at Fri Apr 17 17:01:27 2026 by rpki-client