$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f/4625cd05-e90e-4f91-9b34-2899122cfc5f.mft File: 4625cd05-e90e-4f91-9b34-2899122cfc5f.mft (raw, json) Hash identifier: Ov3viVS2hY0aP/5oj30VEzpFD4tSDMJUnid+YtFBsXA= Subject key identifier: DD:17:DC:A3:1E:42:BD:B3:55:E2:7E:E8:94:D9:9E:D6:87:28:21:29 Authority key identifier: 52:17:9E:71:6C:75:7E:1D:73:05:EF:16:BD:4D:56:21:CA:22:63:5A Certificate issuer: /CN=4625cd05-e90e-4f91-9b34-2899122cfc5f Certificate serial: 010D0C9F4328584D8729E4A69383C253B3C41E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f/4625cd05-e90e-4f91-9b34-2899122cfc5f.mft Manifest number: 010D0C9F4328584B963D1DFEB59C4ACB2FD67236 Signing time: Thu 16 Apr 2026 18:00:03 +0000 Manifest this update: Thu 16 Apr 2026 18:00:03 +0000 Manifest next update: Sun 19 Apr 2026 18:00:00 +0000 Files and hashes: 1: 00583209-5ea8-3fc8-9999-e6dec99e63c9.roa (hash: VmoTDsEYCun2Xf9AA7zUYUCrcTI82gLMwmRncBgOMwU=) 2: 4625cd05-e90e-4f91-9b34-2899122cfc5f.crl (hash: HqlCEOwusMAx2jRaxDSJQQHzs7la5FE0S57ovnRCJlQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f/4625cd05-e90e-4f91-9b34-2899122cfc5f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f/4625cd05-e90e-4f91-9b34-2899122cfc5f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:29:e4:a6:93:83:c2:53:b3:c4:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4625cd05-e90e-4f91-9b34-2899122cfc5f Validity Not Before: Apr 16 18:00:03 2026 GMT Not After : Apr 19 18:00:00 2026 GMT Subject: CN=b485a977-4851-4580-9e54-18cbfd7c0b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:da:bb:66:73:f3:91:9f:60:aa:7c:c8:46:50: be:d0:58:4a:b5:cf:a9:32:6d:6e:ab:9e:0e:9e:bd: ce:2d:4f:ee:a9:ba:9c:1b:f4:c5:b5:5d:08:32:72: ad:82:d5:3a:c9:2c:81:36:22:3b:69:01:98:f6:3c: d6:d4:52:dc:19:14:22:d7:41:54:e6:53:ab:06:5d: cc:f7:66:f3:21:fd:f0:f7:8d:74:07:75:ce:75:b6: 3d:d0:9d:53:61:c2:94:34:1e:01:50:b9:ef:c6:e1: e5:d2:98:09:3f:e6:83:b3:6b:fc:aa:84:0d:e6:6e: 65:c3:5c:32:6c:64:97:86:c7:92:b7:4d:f8:6b:a6: 34:b9:b4:3c:72:25:e7:91:0f:4f:36:33:f7:ae:fe: f9:be:a7:5e:e6:62:94:ab:ce:50:48:a2:c4:6e:d4: bb:d3:d4:67:4a:02:95:2e:76:66:f7:30:e5:31:65: 20:07:81:a9:85:03:42:de:24:07:0b:50:da:e2:a6: 95:b1:be:eb:23:c1:9f:a9:94:f8:0d:64:70:b7:2d: a7:98:1d:f5:98:39:85:08:d7:c1:ef:d5:0e:c4:b3: 08:02:57:5f:a0:a7:82:a0:d7:f5:68:a4:3d:0e:a8: 4b:82:c3:f9:cc:4f:7e:65:29:b5:3c:76:3c:22:e6: e4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:17:DC:A3:1E:42:BD:B3:55:E2:7E:E8:94:D9:9E:D6:87:28:21:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f/4625cd05-e90e-4f91-9b34-2899122cfc5f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f/4625cd05-e90e-4f91-9b34-2899122cfc5f.crl X509v3 Authority Key Identifier: keyid:52:17:9E:71:6C:75:7E:1D:73:05:EF:16:BD:4D:56:21:CA:22:63:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4625cd05-e90e-4f91-9b34-2899122cfc5f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:b6:20:ee:3b:45:33:73:b8:04:e9:c4:84:ee:cf:12:38:7a: 88:49:e4:72:ea:de:45:91:5b:88:de:d5:8e:fa:c1:0a:21:4d: ec:49:b5:f8:8d:49:58:37:7a:2a:9e:47:5a:b4:55:50:94:e9: 14:07:50:bf:46:33:db:01:a4:7a:71:de:24:ff:5c:72:99:0e: 32:02:26:83:d7:54:cf:0f:9a:66:13:b4:bc:35:09:db:35:9f: e6:0c:25:6b:ab:75:16:c3:bb:4c:ef:db:ca:08:f7:ab:4a:4d: 46:ef:9a:31:a0:a9:45:e2:92:c2:bd:45:ab:38:14:77:e8:34: 35:28:7a:74:a7:4e:df:d4:f9:72:e0:df:0f:7e:de:b6:2a:c3: 77:40:b5:c9:88:c8:f8:85:0c:f2:9d:1d:5b:67:39:0c:1c:29: d3:e7:4b:9d:fc:85:a2:aa:5a:a6:64:6d:64:1c:f3:fd:59:b3: 75:56:b0:ae:06:00:d9:c5:22:21:35:45:e8:51:be:f1:00:db: 2c:20:a6:1f:31:89:d9:c6:1d:06:84:8a:c6:9c:de:ff:24:6e: fb:81:a1:24:98:07:63:de:c5:a6:f2:ef:ac:18:04:96:56:40: 87:ca:9f:cd:fb:dd:29:91:9a:33:f7:05:6f:fa:6f:6c:cc:95: 0f:f9:72:1f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2HKeSmk4PCU7PEHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDYyNWNkMDUtZTkwZS00ZjkxLTliMzQtMjg5OTEyMmNm YzVmMB4XDTI2MDQxNjE4MDAwM1oXDTI2MDQxOTE4MDAwMFowLzEtMCsGA1UEAxMk YjQ4NWE5NzctNDg1MS00NTgwLTllNTQtMThjYmZkN2MwYjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9q7ZnPzkZ9gqnzIRlC+0FhKtc+pMm1uq54O nr3OLU/uqbqcG/TFtV0IMnKtgtU6ySyBNiI7aQGY9jzW1FLcGRQi10FU5lOrBl3M 92bzIf3w9410B3XOdbY90J1TYcKUNB4BULnvxuHl0pgJP+aDs2v8qoQN5m5lw1wy bGSXhseSt034a6Y0ubQ8ciXnkQ9PNjP3rv75vqde5mKUq85QSKLEbtS709RnSgKV LnZm9zDlMWUgB4GphQNC3iQHC1Da4qaVsb7rI8GfqZT4DWRwty2nmB31mDmFCNfB 79UOxLMIAldfoKeCoNf1aKQ9DqhLgsP5zE9+ZSm1PHY8IubkhQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFN0X3KMeQr2zVeJ+6JTZntaHKCEpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80NjI1 Y2QwNS1lOTBlLTRmOTEtOWIzNC0yODk5MTIyY2ZjNWYvNDYyNWNkMDUtZTkwZS00 ZjkxLTliMzQtMjg5OTEyMmNmYzVmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNDYyNWNkMDUtZTkwZS00ZjkxLTli MzQtMjg5OTEyMmNmYzVmLzQ2MjVjZDA1LWU5MGUtNGY5MS05YjM0LTI4OTkxMjJj ZmM1Zi5jcmwwHwYDVR0jBBgwFoAUUheecWx1fh1zBe8WvU1WIcoiY1owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80NjI1Y2QwNS1lOTBlLTRmOTEtOWIzNC0yODk5 MTIyY2ZjNWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQARtiDuO0Uzc7gE6cSE7s8S OHqISeRy6t5FkVuI3tWO+sEKIU3sSbX4jUlYN3oqnkdatFVQlOkUB1C/RjPbAaR6 cd4k/1xymQ4yAiaD11TPD5pmE7S8NQnbNZ/mDCVrq3UWw7tM79vKCPerSk1G75ox oKlF4pLCvUWrOBR36DQ1KHp0p07f1Ply4N8Pft62KsN3QLXJiMj4hQzynR1bZzkM HCnT50ud/IWiqlqmZG1kHPP9WbN1VrCuBgDZxSIhNUXoUb7xANssIKYfMYnZxh0G hIrGnN7/JG77gaEkmAdj3sWm8u+sGASWVkCHyp/N+90pkZoz9wVv+m9szJUP+XIf -----END CERTIFICATE-----Generated at Fri Apr 17 09:35:23 2026 by rpki-client