$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.mft File: 528385d7-74c5-424c-a337-95b993622fcc.mft (raw, json) Hash identifier: P4a/vpBpaYFrKzUr0T3v7KwT59j8DmT4wh+3SXK4R9Y= Subject key identifier: 28:C8:4C:3D:25:D1:BD:A7:3E:9A:02:F7:AF:A5:C5:6F:11:80:3A:03 Authority key identifier: B7:65:4B:42:01:41:71:E9:72:CE:6D:28:96:A4:93:25:D5:58:6E:CA Certificate issuer: /CN=528385d7-74c5-424c-a337-95b993622fcc Certificate serial: 010D0C9F4328584D8A30215C5EBD73237F080E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.mft Manifest number: 010D0C9F432858416F331E6674A4842C38970207 Signing time: Fri 17 Apr 2026 20:00:03 +0000 Manifest this update: Fri 17 Apr 2026 20:00:03 +0000 Manifest next update: Mon 20 Apr 2026 20:00:00 +0000 Files and hashes: 1: 37e379c2-123b-325c-ac07-0f1c59aac703.roa (hash: sg1pjj77P9ZoG6XkMS4px1LWe7s4ixfykmgspX57kVc=) 2: 528385d7-74c5-424c-a337-95b993622fcc.crl (hash: Wq9GmZG/44sSVf9qSl7/Y1xo4gkkfG74Unc0VPD41pQ=) 3: 94b598ca-650b-3b92-89a3-e0848c0cd981.roa (hash: g9OCMGKze6zMPFpptd2AXBVaZtulkJO5FyicA6WnkMc=) 4: ff89d9b4-d3a9-3e29-95a9-0916ac66d5ab.roa (hash: RzSvWOdqxtNDEf6j3SKl3RYeCwlsjHPiO+YnxJ26DQU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:30:21:5c:5e:bd:73:23:7f:08:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528385d7-74c5-424c-a337-95b993622fcc Validity Not Before: Apr 17 20:00:03 2026 GMT Not After : Apr 20 20:00:00 2026 GMT Subject: CN=b05ecd87-b0e7-42d0-85fc-15282f5de2c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d5:e9:f0:ab:25:12:13:c0:a2:fa:93:6d:ea: ba:67:df:df:b8:38:ff:2b:79:af:a6:27:33:0a:5b: 56:cf:8c:e7:ef:b3:7d:55:89:68:f5:a7:17:3c:13: ce:02:69:af:16:70:a9:28:b2:cc:4c:ed:b2:35:a2: 76:09:45:3b:3c:34:4c:cd:e3:e1:49:41:78:c5:94: 0b:cd:54:27:3e:99:61:4a:53:19:e5:b0:40:fe:2a: 0a:86:77:4d:68:f0:16:0d:ee:e3:da:ac:b4:2c:95: 8c:5a:a2:21:b6:8c:ec:86:eb:32:4f:14:6c:1f:69: 66:d9:5a:66:31:06:50:c1:d4:f0:fb:b8:c3:28:db: 8b:26:a5:94:33:d7:ed:92:1e:2d:df:2d:54:06:c6: 0b:2b:fa:fc:b8:15:a5:b8:fc:e6:43:ba:50:49:d2: a1:34:be:a2:00:a4:15:3b:b3:53:3c:9b:7d:ec:4c: 3e:f2:87:44:7b:3e:11:66:39:3a:87:0d:e4:3e:25: ad:3c:66:57:e0:b9:df:3d:f5:66:ee:b6:db:8f:ec: b1:db:1b:6a:c0:81:35:6f:c8:5a:0c:76:00:84:36: e7:bb:45:89:e3:a6:e8:36:87:f1:a9:2b:8f:cf:82: 14:27:d6:9a:41:6a:13:e0:e8:ae:cb:02:42:a8:1b: d1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C8:4C:3D:25:D1:BD:A7:3E:9A:02:F7:AF:A5:C5:6F:11:80:3A:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.crl X509v3 Authority Key Identifier: keyid:B7:65:4B:42:01:41:71:E9:72:CE:6D:28:96:A4:93:25:D5:58:6E:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:6f:8c:22:ad:81:19:37:c8:31:17:ec:25:6b:e8:e8:d2:b5: d0:12:92:39:2d:c1:6a:4e:5d:3f:1c:a2:68:b0:59:88:de:22: 57:0b:13:6a:71:e7:2e:78:31:73:2a:f9:b5:36:6e:f6:01:a9: fd:c6:ff:b6:3c:af:00:c5:55:b5:23:b7:24:57:63:d6:d7:31: c7:f8:67:6c:f6:e4:f7:b8:fc:ae:19:51:4f:2d:26:a7:8c:72: 5b:a7:2c:6b:51:22:a1:37:49:04:e5:b4:07:42:3b:8a:51:73: f7:4b:82:df:1c:d8:24:20:87:6b:06:52:e5:f4:41:f0:7c:96: 43:a4:93:fd:f1:73:14:07:76:e9:6b:6e:a3:38:08:6e:f7:73: 3b:1c:88:e6:9d:cf:8a:f4:2b:29:7a:65:12:cf:3e:8b:5f:c8: 3e:42:f7:e0:c9:a8:4f:66:ad:8c:0c:26:89:a8:13:eb:2f:88: 6b:29:95:ab:f5:27:34:42:af:0a:71:7a:67:4b:61:75:7c:57: 2e:2e:68:08:a1:28:9a:72:d7:64:e8:07:2a:32:63:54:33:f1: 63:29:fd:6b:4e:c1:37:a5:48:a3:62:aa:a6:6c:c7:77:08:a9: f8:a3:4b:f8:c9:66:34:57:22:7e:0d:8a:da:1a:b9:01:00:4c: d1:56:c3:cb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2KMCFcXr1zI38IDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTI4Mzg1ZDctNzRjNS00MjRjLWEzMzctOTViOTkzNjIy ZmNjMB4XDTI2MDQxNzIwMDAwM1oXDTI2MDQyMDIwMDAwMFowLzEtMCsGA1UEAxMk YjA1ZWNkODctYjBlNy00MmQwLTg1ZmMtMTUyODJmNWRlMmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtXp8KslEhPAovqTbeq6Z9/fuDj/K3mvpicz CltWz4zn77N9VYlo9acXPBPOAmmvFnCpKLLMTO2yNaJ2CUU7PDRMzePhSUF4xZQL zVQnPplhSlMZ5bBA/ioKhndNaPAWDe7j2qy0LJWMWqIhtozshusyTxRsH2lm2Vpm MQZQwdTw+7jDKNuLJqWUM9ftkh4t3y1UBsYLK/r8uBWluPzmQ7pQSdKhNL6iAKQV O7NTPJt97Ew+8odEez4RZjk6hw3kPiWtPGZX4LnfPfVm7rbbj+yx2xtqwIE1b8ha DHYAhDbnu0WJ46boNofxqSuPz4IUJ9aaQWoT4OiuywJCqBvRvQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCjITD0l0b2nPpoC96+lxW8RgDoDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81Mjgz ODVkNy03NGM1LTQyNGMtYTMzNy05NWI5OTM2MjJmY2MvNTI4Mzg1ZDctNzRjNS00 MjRjLWEzMzctOTViOTkzNjIyZmNjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTI4Mzg1ZDctNzRjNS00MjRjLWEz MzctOTViOTkzNjIyZmNjLzUyODM4NWQ3LTc0YzUtNDI0Yy1hMzM3LTk1Yjk5MzYy MmZjYy5jcmwwHwYDVR0jBBgwFoAUt2VLQgFBcelyzm0olqSTJdVYbsowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MjgzODVkNy03NGM1LTQyNGMtYTMzNy05NWI5 OTM2MjJmY2MuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBWb4wirYEZN8gxF+wla+jo 0rXQEpI5LcFqTl0/HKJosFmI3iJXCxNqcecueDFzKvm1Nm72Aan9xv+2PK8AxVW1 I7ckV2PW1zHH+Gds9uT3uPyuGVFPLSanjHJbpyxrUSKhN0kE5bQHQjuKUXP3S4Lf HNgkIIdrBlLl9EHwfJZDpJP98XMUB3bpa26jOAhu93M7HIjmnc+K9CspemUSzz6L X8g+QvfgyahPZq2MDCaJqBPrL4hrKZWr9Sc0Qq8KcXpnS2F1fFcuLmgIoSiactdk 6AcqMmNUM/FjKf1rTsE3pUijYqqmbMd3CKn4o0v4yWY0VyJ+DYraGrkBAEzRVsPL -----END CERTIFICATE-----Generated at Sat Apr 18 06:07:42 2026 by rpki-client