$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft File: 040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft (raw, json) Hash identifier: hbMmUoje7HQ+PI+fx5fTwOevbkXZiHT0iqE1Sc6e8zg= Subject key identifier: DD:7E:1F:E5:E0:2D:A3:51:BA:AA:46:D2:BA:1A:AA:25:8B:A9:C4:1E Authority key identifier: 7D:BC:F6:B5:A8:72:7C:0A:82:7C:61:12:04:36:FE:84:2B:CC:1C:D1 Certificate issuer: /CN=040a98e1-0cb9-4e23-910e-20ec5dfe8bec Certificate serial: 010D0C9F4328584D89F495B8C3969FBAC3653CA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft Manifest number: 010D0C9F4328584A0F6F5277F198146B052F7CC6 Signing time: Fri 17 Apr 2026 18:00:04 +0000 Manifest this update: Fri 17 Apr 2026 18:00:04 +0000 Manifest next update: Sun 19 Apr 2026 18:00:00 +0000 Files and hashes: 1: 040a98e1-0cb9-4e23-910e-20ec5dfe8bec.crl (hash: jKLmWsx/dy+gaXgBOboqPDiNuBmaRrDaTvI9Ej18NeM=) 2: 7f1d7ee4-70d1-3195-8611-24c2a0956a19.roa (hash: nIrmKsBLw52/wxWjuDSuI9YUt/Ap145zEdAelcuo2Tc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:89:f4:95:b8:c3:96:9f:ba:c3:65:3c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040a98e1-0cb9-4e23-910e-20ec5dfe8bec Validity Not Before: Apr 17 18:00:04 2026 GMT Not After : Apr 19 18:00:00 2026 GMT Subject: CN=b4674146-1d10-4cc4-baf9-fa48d7eb407a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:05:1a:62:15:e9:7b:37:58:cd:70:26:1e:c0: 1f:0f:b6:bf:13:5c:f1:32:6a:d9:b6:4d:90:0e:69: 8d:b4:13:ba:fe:d7:58:94:b4:59:68:d5:aa:d9:d9: 73:5d:03:b7:10:d9:8c:ed:74:0c:11:40:63:bf:07: 61:cb:aa:9c:7e:d8:27:78:63:8d:aa:49:73:3e:7e: be:e6:6c:33:13:25:da:fb:3b:b7:65:bc:ef:39:d4: 9d:56:5a:45:0f:ef:41:b0:e8:31:c0:3c:0b:97:be: 37:18:f5:fb:8f:d7:53:ae:4e:c2:1a:4e:a2:3d:88: 4c:ec:db:84:4d:25:e3:fb:f3:2f:54:5f:8e:29:f3: 5c:ea:1a:49:9e:7d:88:c2:9c:7f:60:41:91:78:18: e2:43:84:0b:22:ae:ea:33:ce:39:3f:a1:de:c9:b4: e1:da:79:12:d1:34:85:51:a8:c2:d2:fa:52:43:0e: 5a:31:06:81:d4:97:99:e3:1c:2b:fd:e7:6b:ad:78: 08:fe:b1:c1:c1:ec:ab:97:76:38:e4:8b:7c:60:42: bb:e1:6f:9e:78:94:81:a6:3d:fc:40:c3:e6:d7:86: ca:2e:7b:c9:bb:6c:56:5e:ed:5d:31:ce:73:ee:79: b9:33:f1:e7:b0:9c:cd:a9:9d:0e:23:fb:85:59:72: 66:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:7E:1F:E5:E0:2D:A3:51:BA:AA:46:D2:BA:1A:AA:25:8B:A9:C4:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.crl X509v3 Authority Key Identifier: keyid:7D:BC:F6:B5:A8:72:7C:0A:82:7C:61:12:04:36:FE:84:2B:CC:1C:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:96:6b:21:8b:2e:ae:ea:b4:57:68:8c:25:a5:78:63:78:07: ed:e0:69:d3:28:a2:2f:de:56:98:58:8a:dd:2a:fc:bf:81:cb: 86:8e:cd:b5:05:57:c2:e9:77:36:77:0a:92:e3:bd:0c:74:19: 6d:48:81:18:36:76:ff:ac:51:c0:86:a6:f9:7f:d8:ad:c1:59: 1e:ee:f8:76:25:d1:b1:52:8a:a8:32:b4:72:09:f0:6d:ff:0d: e2:72:8e:29:ca:89:4c:fa:e6:df:89:7f:c7:5b:b7:a0:82:9a: 5d:29:88:5b:f9:5d:7c:2c:a6:e2:9b:ad:fc:4a:5c:9b:a7:4d: 0e:94:e0:28:d6:3e:3e:9f:f3:73:0d:6e:27:ae:a8:6c:87:93: a4:fc:6b:97:b0:c1:f3:d1:bb:97:c6:af:8d:c8:8a:ef:e5:33: 18:cb:6a:82:d3:17:6c:2c:f8:f0:9c:4d:7f:09:4d:06:86:8d: 88:ae:da:8c:8b:6b:39:49:e8:7c:75:b4:59:0d:4d:ba:a6:d6: fd:34:dd:ad:67:4a:06:ae:1f:cf:73:a5:e9:8c:9b:77:46:b2: bb:4f:cc:ec:c7:56:1a:6f:a0:d9:79:be:af:93:20:5e:e9:20: 93:ba:f8:76:29:35:fb:9a:36:73:9d:c8:84:9d:56:03:85:a4: a2:f7:03:c3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2J9JW4w5afusNlPKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQwYTk4ZTEtMGNiOS00ZTIzLTkxMGUtMjBlYzVkZmU4 YmVjMB4XDTI2MDQxNzE4MDAwNFoXDTI2MDQxOTE4MDAwMFowLzEtMCsGA1UEAxMk YjQ2NzQxNDYtMWQxMC00Y2M0LWJhZjktZmE0OGQ3ZWI0MDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAUaYhXpezdYzXAmHsAfD7a/E1zxMmrZtk2Q DmmNtBO6/tdYlLRZaNWq2dlzXQO3ENmM7XQMEUBjvwdhy6qcftgneGONqklzPn6+ 5mwzEyXa+zu3ZbzvOdSdVlpFD+9BsOgxwDwLl743GPX7j9dTrk7CGk6iPYhM7NuE TSXj+/MvVF+OKfNc6hpJnn2Iwpx/YEGReBjiQ4QLIq7qM845P6HeybTh2nkS0TSF UajC0vpSQw5aMQaB1JeZ4xwr/edrrXgI/rHBweyrl3Y45It8YEK74W+eeJSBpj38 QMPm14bKLnvJu2xWXu1dMc5z7nm5M/HnsJzNqZ0OI/uFWXJmqwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFN1+H+XgLaNRuqpG0roaqiWLqcQeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wNDBh OThlMS0wY2I5LTRlMjMtOTEwZS0yMGVjNWRmZThiZWMvMDQwYTk4ZTEtMGNiOS00 ZTIzLTkxMGUtMjBlYzVkZmU4YmVjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDQwYTk4ZTEtMGNiOS00ZTIzLTkx MGUtMjBlYzVkZmU4YmVjLzA0MGE5OGUxLTBjYjktNGUyMy05MTBlLTIwZWM1ZGZl OGJlYy5jcmwwHwYDVR0jBBgwFoAUfbz2tahyfAqCfGESBDb+hCvMHNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wNDBhOThlMS0wY2I5LTRlMjMtOTEwZS0yMGVj NWRmZThiZWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBqlmshiy6u6rRXaIwlpXhj eAft4GnTKKIv3laYWIrdKvy/gcuGjs21BVfC6Xc2dwqS470MdBltSIEYNnb/rFHA hqb5f9itwVke7vh2JdGxUoqoMrRyCfBt/w3ico4pyolM+ubfiX/HW7eggppdKYhb +V18LKbim638Slybp00OlOAo1j4+n/NzDW4nrqhsh5Ok/GuXsMHz0buXxq+NyIrv 5TMYy2qC0xdsLPjwnE1/CU0Gho2IrtqMi2s5Seh8dbRZDU26ptb9NN2tZ0oGrh/P c6XpjJt3RrK7T8zsx1Yab6DZeb6vkyBe6SCTuvh2KTX7mjZznciEnVYDhaSi9wPD -----END CERTIFICATE-----Generated at Sat Apr 18 08:54:19 2026 by rpki-client