$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e/9539fe98-d93c-4eef-8521-e7da1838ec1e.mft File: 9539fe98-d93c-4eef-8521-e7da1838ec1e.mft (raw, json) Hash identifier: QoADRxgjZVszNYpOeSprxILw57O8b0WRtb/WlP44LHk= Subject key identifier: 4B:77:1D:4E:86:33:C7:BF:63:CC:6B:1A:19:24:C0:11:7A:70:7D:7D Authority key identifier: 30:60:F3:7D:D6:9A:74:5F:72:B7:96:87:23:A1:7A:5D:BC:20:03:18 Certificate issuer: /CN=9539fe98-d93c-4eef-8521-e7da1838ec1e Certificate serial: 010D0C9F4328584D8C2A5CF50886283D01B53180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e/9539fe98-d93c-4eef-8521-e7da1838ec1e.mft Manifest number: 010D0C9F4328584BBCBED6EC344BF691BCD3F229 Signing time: Sat 18 Apr 2026 13:00:03 +0000 Manifest this update: Sat 18 Apr 2026 13:00:03 +0000 Manifest next update: Tue 21 Apr 2026 13:00:00 +0000 Files and hashes: 1: 909c57ca-1673-3501-8057-61ea309b4109.roa (hash: 8gjsaKp55Lw1bZw3+iWgXqBMlAZDkE5NgXt3hn/lYDI=) 2: 9539fe98-d93c-4eef-8521-e7da1838ec1e.crl (hash: Kxhp/ZQRpILibV0VRJsTwF2EHH8wkdUy3YjDAtKxuzU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e/9539fe98-d93c-4eef-8521-e7da1838ec1e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e/9539fe98-d93c-4eef-8521-e7da1838ec1e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:2a:5c:f5:08:86:28:3d:01:b5:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9539fe98-d93c-4eef-8521-e7da1838ec1e Validity Not Before: Apr 18 13:00:03 2026 GMT Not After : Apr 21 13:00:00 2026 GMT Subject: CN=394fd1a4-1924-4b8b-a61e-6b6d5b53024d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9d:ad:b3:8b:92:b4:67:9c:02:61:ba:e5:8c: e4:58:7b:75:14:e8:0e:bb:a6:0f:b7:78:55:59:08: 44:c6:42:64:44:20:d6:47:13:ba:3f:85:52:6f:a9: a2:e0:a0:66:fe:4f:39:e1:c0:ab:56:18:34:e0:6b: 11:09:6d:6f:f8:b2:53:2b:cb:42:42:37:f4:9a:70: b2:be:74:a4:7c:07:f2:9f:82:01:f8:de:c9:0e:81: f5:03:a1:d0:cd:82:ea:bd:7e:8d:40:2a:f6:3c:d8: 71:c6:8d:80:7b:7f:ba:62:27:f9:b6:44:3e:b3:ae: 6b:f7:33:11:4b:c1:d9:51:bd:09:fe:25:de:d7:36: 26:85:4e:5f:f1:dd:73:e4:e4:1d:5c:6b:5a:42:db: c2:df:91:38:9b:60:e1:de:7f:24:29:72:f1:36:39: 36:fe:34:9b:7e:b8:37:61:a2:9e:a8:50:64:7a:90: 3d:c3:65:f9:ff:78:d6:fe:de:e9:d4:cd:c3:d3:7d: bb:54:20:9f:b3:c1:22:64:38:b5:93:8c:37:8b:55: c5:dd:16:47:83:a8:71:7a:c9:a1:46:c5:59:8b:04: 3e:74:52:32:54:79:93:33:2e:b5:0d:75:3b:a9:9a: f4:74:ae:ef:52:9c:be:9b:60:0a:22:01:80:0a:bf: 3d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:77:1D:4E:86:33:C7:BF:63:CC:6B:1A:19:24:C0:11:7A:70:7D:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e/9539fe98-d93c-4eef-8521-e7da1838ec1e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e/9539fe98-d93c-4eef-8521-e7da1838ec1e.crl X509v3 Authority Key Identifier: keyid:30:60:F3:7D:D6:9A:74:5F:72:B7:96:87:23:A1:7A:5D:BC:20:03:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9539fe98-d93c-4eef-8521-e7da1838ec1e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:69:b3:b6:5f:43:af:64:39:8f:98:7a:04:fa:12:00:7a:58: cf:be:cb:ab:7c:9d:05:5d:e3:c1:1e:32:c1:7b:09:5a:63:fc: 6f:0f:39:1c:7d:a1:29:2f:21:a6:57:1f:00:ba:08:9c:75:37: 29:70:c5:b4:35:ab:77:7a:ee:4d:3f:17:4e:fd:e5:b6:e7:d0: e6:ef:bf:e3:7a:59:12:ea:3e:5f:7b:b7:78:8a:cf:d4:aa:b9: de:3d:39:b6:71:82:11:a6:14:8e:f4:5c:30:60:d1:af:58:ee: 43:bf:f5:dc:81:8e:19:c9:41:58:b0:aa:29:e5:c1:27:10:e7: 90:39:f2:0d:e2:a3:c8:b6:e4:df:71:fd:45:be:3b:60:da:3d: 1a:68:cb:fe:1d:d2:e6:47:0a:c1:44:33:25:32:90:26:45:42: 31:06:f3:1c:44:db:90:31:d4:13:fa:3b:1c:b7:59:25:87:3e: 82:5c:18:3a:8e:59:39:f3:ac:95:dc:8e:dd:c3:b5:83:73:f8: cb:a3:63:2a:ad:f9:4f:7f:15:57:85:b5:48:f6:4f:d5:09:91: 86:70:32:8d:f1:11:2d:23:d3:10:48:51:41:a9:74:56:c7:13: 57:05:16:bd:90:d1:ca:95:4e:dc:b2:44:cc:b9:75:50:31:1a: 51:84:99:2d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2MKlz1CIYoPQG1MYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTUzOWZlOTgtZDkzYy00ZWVmLTg1MjEtZTdkYTE4Mzhl YzFlMB4XDTI2MDQxODEzMDAwM1oXDTI2MDQyMTEzMDAwMFowLzEtMCsGA1UEAxMk Mzk0ZmQxYTQtMTkyNC00YjhiLWE2MWUtNmI2ZDViNTMwMjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ2ts4uStGecAmG65YzkWHt1FOgOu6YPt3hV WQhExkJkRCDWRxO6P4VSb6mi4KBm/k854cCrVhg04GsRCW1v+LJTK8tCQjf0mnCy vnSkfAfyn4IB+N7JDoH1A6HQzYLqvX6NQCr2PNhxxo2Ae3+6Yif5tkQ+s65r9zMR S8HZUb0J/iXe1zYmhU5f8d1z5OQdXGtaQtvC35E4m2Dh3n8kKXLxNjk2/jSbfrg3 YaKeqFBkepA9w2X5/3jW/t7p1M3D0327VCCfs8EiZDi1k4w3i1XF3RZHg6hxesmh RsVZiwQ+dFIyVHmTMy61DXU7qZr0dK7vUpy+m2AKIgGACr89bwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEt3HU6GM8e/Y8xrGhkkwBF6cH19MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85NTM5 ZmU5OC1kOTNjLTRlZWYtODUyMS1lN2RhMTgzOGVjMWUvOTUzOWZlOTgtZDkzYy00 ZWVmLTg1MjEtZTdkYTE4MzhlYzFlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOTUzOWZlOTgtZDkzYy00ZWVmLTg1 MjEtZTdkYTE4MzhlYzFlLzk1MzlmZTk4LWQ5M2MtNGVlZi04NTIxLWU3ZGExODM4 ZWMxZS5jcmwwHwYDVR0jBBgwFoAUMGDzfdaadF9yt5aHI6F6XbwgAxgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85NTM5ZmU5OC1kOTNjLTRlZWYtODUyMS1lN2Rh MTgzOGVjMWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAfabO2X0OvZDmPmHoE+hIA eljPvsurfJ0FXePBHjLBewlaY/xvDzkcfaEpLyGmVx8AugicdTcpcMW0Nat3eu5N PxdO/eW259Dm77/jelkS6j5fe7d4is/UqrnePTm2cYIRphSO9FwwYNGvWO5Dv/Xc gY4ZyUFYsKop5cEnEOeQOfIN4qPItuTfcf1Fvjtg2j0aaMv+HdLmRwrBRDMlMpAm RUIxBvMcRNuQMdQT+jsct1klhz6CXBg6jlk586yV3I7dw7WDc/jLo2MqrflPfxVX hbVI9k/VCZGGcDKN8REtI9MQSFFBqXRWxxNXBRa9kNHKlU7cskTMuXVQMRpRhJkt -----END CERTIFICATE-----Generated at Sun Apr 19 08:40:36 2026 by rpki-client