$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft File: dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft (raw, json) Hash identifier: +5lXPQ69FoDE4Ql6d+IKIykz1fI3JA9EJXZXYaMC75U= Subject key identifier: 24:8E:0E:EC:02:44:C0:C1:DD:26:37:3E:F3:10:8D:11:85:E6:D8:72 Authority key identifier: AF:F9:55:50:A5:C1:90:18:CE:5A:7D:78:32:56:3C:3A:0B:02:AD:DE Certificate issuer: /CN=dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2 Certificate serial: 010D0C9F4328584D89D6CC461EF2706D2304DE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft Manifest number: 010D0C9F43285843E05DB4B41D1D11863F6C370C Signing time: Fri 17 Apr 2026 17:00:03 +0000 Manifest this update: Fri 17 Apr 2026 17:00:03 +0000 Manifest next update: Mon 20 Apr 2026 17:00:00 +0000 Files and hashes: 1: 4925d209-f003-3bb9-b12d-10cc44b06d40.roa (hash: mefp+2oR3tNQVU65+HSTzL8fwN34Ybd+zinSKBIME30=) 2: dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.crl (hash: t4PYcA7SPYoY+0ba8wy29IpkUNovVN/C5JgLTCC2LLg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:89:d6:cc:46:1e:f2:70:6d:23:04:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2 Validity Not Before: Apr 17 17:00:03 2026 GMT Not After : Apr 20 17:00:00 2026 GMT Subject: CN=c1b0cc4e-b00a-4368-9cf0-5d692aab6b8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ab:5e:cc:96:4b:cc:e2:ba:fa:92:f1:d4:a5: 8b:39:8e:04:70:ad:68:2a:b7:c9:b2:1a:31:cd:a2: ed:5a:e9:ed:aa:ba:57:87:27:36:8b:81:22:63:a5: 10:7c:20:8e:ab:2a:50:ee:f3:74:e9:2b:fb:2b:4c: 94:e3:a9:28:de:b8:54:9b:29:b7:5f:29:37:05:2b: 1c:b1:bd:95:49:73:57:c5:fb:34:56:6f:48:bd:ca: 9c:93:3a:8a:63:da:90:89:72:86:17:f9:7d:c0:6d: 3c:ff:6c:fc:19:24:73:4b:ca:5f:ea:27:50:66:6f: a0:8c:49:35:b6:e8:0c:46:c3:51:7f:a9:5f:2a:42: f0:66:8f:2d:bd:b1:f7:84:11:0f:14:03:0a:a5:e9: 82:0b:48:bb:5d:6a:e2:31:70:0b:1c:71:f6:4a:74: 5c:2c:a7:4e:e8:c5:40:57:90:e0:e9:d1:dc:1b:2e: a2:71:e1:e1:8d:23:8d:4d:29:87:73:5f:df:83:15: 47:62:30:a8:a5:88:22:41:44:2a:36:56:cb:ec:1d: ea:85:e5:ea:e2:66:26:99:0a:b0:a6:21:b3:69:8a: 57:71:f8:5d:f3:96:7b:ab:74:72:e6:53:de:24:e6: 5c:e4:fd:fc:54:50:f4:cb:4c:5e:7e:6a:8e:de:67: 01:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:8E:0E:EC:02:44:C0:C1:DD:26:37:3E:F3:10:8D:11:85:E6:D8:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.crl X509v3 Authority Key Identifier: keyid:AF:F9:55:50:A5:C1:90:18:CE:5A:7D:78:32:56:3C:3A:0B:02:AD:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:88:ab:00:72:50:ad:b5:e5:04:dc:33:11:14:8e:6d:1e:9c: 8c:69:b6:16:ce:f8:db:69:fe:8b:07:65:b4:a0:6b:cd:14:ec: f5:15:ac:ce:0d:67:74:19:08:62:5a:18:1c:63:c2:e3:0c:f0: 15:4f:2d:55:e8:16:68:c2:63:49:01:85:c3:e9:09:8c:c5:2e: 02:77:9b:e7:00:37:79:67:83:2b:98:3e:c8:01:8e:90:d1:7d: 12:41:00:b4:5a:0d:c5:ed:b6:d5:38:bb:ca:14:44:96:6b:0e: 26:12:3e:6e:96:92:38:a4:c0:20:db:b4:b5:32:bd:ff:17:02: c3:ad:ab:87:8f:52:8a:2c:22:1a:2d:55:18:72:ba:f1:6f:33: f8:df:68:df:be:eb:6c:f4:ad:38:5a:37:85:7f:7d:e0:0d:7a: d2:07:f8:2f:c8:a5:9a:be:b5:60:aa:6f:96:c6:2c:78:50:ba: 75:c4:e3:60:cc:04:03:51:e4:41:80:55:cf:6c:aa:7d:28:cc: c2:2e:6d:c3:b2:1e:52:e8:5d:aa:ee:bc:3c:5a:8a:1a:95:4a: dc:8d:8e:34:08:5c:eb:aa:19:3a:45:6f:03:01:ad:fb:de:fb: 1b:c0:6c:9f:fc:75:c5:a3:cb:f0:40:01:3f:10:1a:81:89:e5: 81:3d:e2:8e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2J1sxGHvJwbSME3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQwZmYyMjEtZjBjNC00YzU0LTk2ZDktNWYzZTBmMTZi OGUyMB4XDTI2MDQxNzE3MDAwM1oXDTI2MDQyMDE3MDAwMFowLzEtMCsGA1UEAxMk YzFiMGNjNGUtYjAwYS00MzY4LTljZjAtNWQ2OTJhYWI2YjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqtezJZLzOK6+pLx1KWLOY4EcK1oKrfJshox zaLtWuntqrpXhyc2i4EiY6UQfCCOqypQ7vN06Sv7K0yU46ko3rhUmym3Xyk3BSsc sb2VSXNXxfs0Vm9IvcqckzqKY9qQiXKGF/l9wG08/2z8GSRzS8pf6idQZm+gjEk1 tugMRsNRf6lfKkLwZo8tvbH3hBEPFAMKpemCC0i7XWriMXALHHH2SnRcLKdO6MVA V5Dg6dHcGy6iceHhjSONTSmHc1/fgxVHYjCopYgiQUQqNlbL7B3qheXq4mYmmQqw piGzaYpXcfhd85Z7q3Ry5lPeJOZc5P38VFD0y0xefmqO3mcBBwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCSODuwCRMDB3SY3PvMQjRGF5thyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kZDBm ZjIyMS1mMGM0LTRjNTQtOTZkOS01ZjNlMGYxNmI4ZTIvZGQwZmYyMjEtZjBjNC00 YzU0LTk2ZDktNWYzZTBmMTZiOGUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGQwZmYyMjEtZjBjNC00YzU0LTk2 ZDktNWYzZTBmMTZiOGUyL2RkMGZmMjIxLWYwYzQtNGM1NC05NmQ5LTVmM2UwZjE2 YjhlMi5jcmwwHwYDVR0jBBgwFoAUr/lVUKXBkBjOWn14MlY8OgsCrd4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kZDBmZjIyMS1mMGM0LTRjNTQtOTZkOS01ZjNl MGYxNmI4ZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAoiKsAclCtteUE3DMRFI5t HpyMabYWzvjbaf6LB2W0oGvNFOz1FazODWd0GQhiWhgcY8LjDPAVTy1V6BZowmNJ AYXD6QmMxS4Cd5vnADd5Z4MrmD7IAY6Q0X0SQQC0Wg3F7bbVOLvKFESWaw4mEj5u lpI4pMAg27S1Mr3/FwLDrauHj1KKLCIaLVUYcrrxbzP432jfvuts9K04WjeFf33g DXrSB/gvyKWavrVgqm+Wxix4ULp1xONgzAQDUeRBgFXPbKp9KMzCLm3Dsh5S6F2q 7rw8WooalUrcjY40CFzrqhk6RW8DAa373vsbwGyf/HXFo8vwQAE/EBqBieWBPeKO -----END CERTIFICATE-----Generated at Fri Apr 17 22:18:44 2026 by rpki-client