$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.mft File: a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.mft (raw, json) Hash identifier: Sk7dmTkVxYQtyJ1xPiQgCf7fYAIazQrCB8+/C6zaAFs= Subject key identifier: 27:ED:D4:A6:8A:FD:8F:57:68:0F:94:69:DB:FA:A7:B5:26:03:0D:7F Authority key identifier: 68:52:4C:59:0A:31:A3:42:1D:AB:7F:F6:7F:17:0D:9F:64:BE:41:4A Certificate issuer: /CN=a52f3b42-2c19-4141-8d8a-fa84b3d6a49e Certificate serial: 010D0C9F4328584D878339E01C2DE5C600555080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.mft Manifest number: 010D0C9F43285844428AC3B86B4E57E2FE15F2D7 Signing time: Thu 16 Apr 2026 21:00:03 +0000 Manifest this update: Thu 16 Apr 2026 21:00:03 +0000 Manifest next update: Sun 19 Apr 2026 21:00:00 +0000 Files and hashes: 1: 9a56588a-a022-38cf-a593-5622658a6eae.roa (hash: IwkamgVGGVTYKxas9QrBx1hMYBKoYCg3FX46Da40wqY=) 2: a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.crl (hash: CRDO1LtO2fXib43n3HkEsKEREMwPui8hdpOIuMRujlE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:83:39:e0:1c:2d:e5:c6:00:55:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a52f3b42-2c19-4141-8d8a-fa84b3d6a49e Validity Not Before: Apr 16 21:00:03 2026 GMT Not After : Apr 19 21:00:00 2026 GMT Subject: CN=70e991b3-72c4-4e96-b96d-1585ed6c6f77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8d:6e:2a:68:7d:7a:80:90:d4:8c:ec:de:ac: 11:8f:fe:74:b8:bd:c0:f0:54:43:6e:aa:46:99:a5: f9:ae:e0:9d:db:c3:8e:0d:00:0f:1b:e9:b7:58:11: 9b:34:5e:f3:b5:55:9f:87:68:eb:ad:d8:89:a1:f2: 1c:96:8f:b4:99:e9:9f:43:98:4a:ff:d0:42:b8:ec: c3:0f:fc:73:84:70:33:fe:dd:44:bc:b9:e2:d6:83: e6:73:00:ff:63:dc:ce:58:08:ba:72:4f:04:eb:32: d7:66:cd:a2:b4:9f:05:7c:0a:4a:9d:04:2f:a8:00: 0f:75:61:d8:e8:cc:78:ce:56:8e:e4:ff:dd:9c:ba: de:7a:4d:38:1a:66:25:78:c6:06:19:e2:d1:67:4c: db:49:2c:ea:06:23:ba:85:b6:4f:f2:66:a6:d0:83: b8:6e:42:0d:0d:a8:84:c6:59:65:58:f2:c5:e8:8f: 32:f3:0f:a6:cf:7f:f7:2c:40:50:cd:75:61:ad:77: 09:08:df:f8:da:88:4a:eb:bf:0f:f3:bf:12:73:2a: 54:38:bb:ca:66:5a:91:22:8d:25:91:68:77:21:f2: 2f:33:2f:e7:39:8d:0e:c8:da:e1:64:99:b6:c3:d4: 95:10:ec:24:2d:ec:fe:b2:92:41:d7:b6:02:d5:7b: 8f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:ED:D4:A6:8A:FD:8F:57:68:0F:94:69:DB:FA:A7:B5:26:03:0D:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.crl X509v3 Authority Key Identifier: keyid:68:52:4C:59:0A:31:A3:42:1D:AB:7F:F6:7F:17:0D:9F:64:BE:41:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:fc:79:89:aa:03:e5:ba:5c:a4:db:86:03:d6:84:0a:9b:0e: 86:44:d7:a4:38:5f:b2:bb:db:aa:68:d4:10:a5:83:53:5c:19: b9:b7:3c:31:3e:24:42:2a:1f:95:19:c5:0f:ca:f5:01:d4:b2: 1f:6f:33:ef:e5:f7:a1:13:13:b9:4d:2f:86:15:b8:d4:c5:1f: 3e:c1:ab:71:20:59:da:b9:80:5f:a5:82:74:fd:25:40:75:c3: 61:f2:84:11:2c:9d:78:67:b8:0f:07:77:0a:22:1a:c8:96:67: 93:54:d5:89:65:8a:dd:a2:3f:3d:b1:98:d2:d2:f1:09:c6:aa: e0:8b:31:d1:04:b4:3e:9f:9b:94:75:e0:9c:89:2d:a0:ad:85: 15:b6:ef:d6:ac:8a:b7:18:cf:0f:a7:7b:aa:0c:5a:9f:35:86: 40:a9:ae:6c:1c:22:da:02:46:6c:68:cd:06:11:3d:cd:ed:35: 3c:70:4f:b8:37:75:60:bf:42:24:b9:bf:99:12:b9:10:39:fc: 36:2f:b3:54:36:69:3a:0b:bf:89:7a:31:01:39:9b:1b:07:6b: 63:f5:a8:cf:f7:61:ce:79:1e:50:36:f1:9d:f3:c9:2d:57:2f: 5c:f5:ca:f2:aa:b3:05:34:9a:b1:6d:99:de:04:40:9e:f8:a6: bd:26:ca:41 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2HgzngHC3lxgBVUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUyZjNiNDItMmMxOS00MTQxLThkOGEtZmE4NGIzZDZh NDllMB4XDTI2MDQxNjIxMDAwM1oXDTI2MDQxOTIxMDAwMFowLzEtMCsGA1UEAxMk NzBlOTkxYjMtNzJjNC00ZTk2LWI5NmQtMTU4NWVkNmM2Zjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY1uKmh9eoCQ1Izs3qwRj/50uL3A8FRDbqpG maX5ruCd28OODQAPG+m3WBGbNF7ztVWfh2jrrdiJofIclo+0memfQ5hK/9BCuOzD D/xzhHAz/t1EvLni1oPmcwD/Y9zOWAi6ck8E6zLXZs2itJ8FfApKnQQvqAAPdWHY 6Mx4zlaO5P/dnLreek04GmYleMYGGeLRZ0zbSSzqBiO6hbZP8mam0IO4bkINDaiE xlllWPLF6I8y8w+mz3/3LEBQzXVhrXcJCN/42ohK678P878ScypUOLvKZlqRIo0l kWh3IfIvMy/nOY0OyNrhZJm2w9SVEOwkLez+spJB17YC1XuPzwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCft1KaK/Y9XaA+Uadv6p7UmAw1/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hNTJm M2I0Mi0yYzE5LTQxNDEtOGQ4YS1mYTg0YjNkNmE0OWUvYTUyZjNiNDItMmMxOS00 MTQxLThkOGEtZmE4NGIzZDZhNDllLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTUyZjNiNDItMmMxOS00MTQxLThk OGEtZmE4NGIzZDZhNDllL2E1MmYzYjQyLTJjMTktNDE0MS04ZDhhLWZhODRiM2Q2 YTQ5ZS5jcmwwHwYDVR0jBBgwFoAUaFJMWQoxo0Idq3/2fxcNn2S+QUowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hNTJmM2I0Mi0yYzE5LTQxNDEtOGQ4YS1mYTg0 YjNkNmE0OWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAw/HmJqgPlulyk24YD1oQK mw6GRNekOF+yu9uqaNQQpYNTXBm5tzwxPiRCKh+VGcUPyvUB1LIfbzPv5fehExO5 TS+GFbjUxR8+watxIFnauYBfpYJ0/SVAdcNh8oQRLJ14Z7gPB3cKIhrIlmeTVNWJ ZYrdoj89sZjS0vEJxqrgizHRBLQ+n5uUdeCciS2grYUVtu/WrIq3GM8Pp3uqDFqf NYZAqa5sHCLaAkZsaM0GET3N7TU8cE+4N3Vgv0Ikub+ZErkQOfw2L7NUNmk6C7+J ejEBOZsbB2tj9ajP92HOeR5QNvGd88ktVy9c9cryqrMFNJqxbZneBECe+Ka9JspB -----END CERTIFICATE-----Generated at Fri Apr 17 06:44:59 2026 by rpki-client