$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft File: 2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft (raw, json) Hash identifier: difHoV5VjEy+mqpqzoRHHNEIYHkPlMCFzyk0SfqbXxk= Subject key identifier: BF:95:64:C5:95:82:89:31:6A:9A:B4:90:C9:B6:02:CF:9B:CD:39:CB Authority key identifier: 2B:89:09:2B:FF:EC:8F:78:27:D8:87:D9:14:DA:8E:24:E7:4C:1C:62 Certificate issuer: /CN=2bc648c2-2f95-48f5-acb7-9e8a2f9123a7 Certificate serial: 010D0C9F4328584D8E425FE693545C653DA4E380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft Manifest number: 010D0C9F432858496F11AC5DAA98339370060702 Signing time: Sun 19 Apr 2026 07:00:03 +0000 Manifest this update: Sun 19 Apr 2026 07:00:03 +0000 Manifest next update: Wed 22 Apr 2026 07:00:00 +0000 Files and hashes: 1: 1e1be535-508c-330e-a6e2-85aa2a913569.roa (hash: IEKRLorsgUVXy5+rH1T8KvpX1yQDhIgUMROvfanpNMc=) 2: 2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl (hash: zFcSsCOQma7VT6kvfwccNpmwrCpBJfD6ZzGlfZ5uOIg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:42:5f:e6:93:54:5c:65:3d:a4:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc648c2-2f95-48f5-acb7-9e8a2f9123a7 Validity Not Before: Apr 19 07:00:03 2026 GMT Not After : Apr 22 07:00:00 2026 GMT Subject: CN=5c68f107-eed8-435a-b5ea-bacfa96cc95a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:00:ca:03:e0:da:dd:29:e3:ac:93:57:90:c5: 0b:04:92:bf:b1:52:c0:ac:7b:d5:6d:e3:4e:1a:16: ea:7d:5d:f4:db:42:5b:54:30:48:32:b2:06:c9:5e: b5:b9:c8:0b:8a:7e:02:78:d3:59:4e:03:6c:f2:23: a2:34:e4:8a:95:8b:e8:7a:05:cd:2d:cd:b9:b5:83: b1:bd:97:fa:5a:54:cb:71:ec:03:b2:4b:13:3d:84: 04:d9:34:fa:05:b1:83:20:36:2a:46:83:6d:fb:03: 06:67:55:9a:c8:26:6e:78:d4:a1:04:1c:a6:e7:0a: 0d:df:f9:a6:fc:5f:2c:5b:36:0d:bf:0f:00:79:36: 02:36:44:56:87:9d:38:80:f7:6c:cf:f1:13:17:c9: 83:65:74:92:1a:ae:82:9a:a0:73:94:85:f9:47:2f: e8:9a:fb:50:46:47:f3:38:ba:16:6f:26:f2:ed:36: f1:30:51:11:e1:13:c4:61:74:b2:b1:99:65:fa:38: 98:e5:55:81:14:7e:a2:f4:76:b0:f6:93:e0:69:0a: 2a:f9:1e:c5:2c:91:7c:95:53:b3:08:96:72:5e:56: d2:8b:8e:03:08:49:fa:cd:ea:93:ee:a7:06:b9:bf: 88:40:e2:07:7e:b1:0f:e0:72:11:2c:03:c0:4f:f8: e9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:95:64:C5:95:82:89:31:6A:9A:B4:90:C9:B6:02:CF:9B:CD:39:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl X509v3 Authority Key Identifier: keyid:2B:89:09:2B:FF:EC:8F:78:27:D8:87:D9:14:DA:8E:24:E7:4C:1C:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:c6:a9:a1:af:10:98:93:7b:ef:90:1f:16:1d:a3:40:b7:b5: b7:6f:89:2a:fc:ff:75:7d:ae:af:4f:20:8a:c3:3c:d6:30:b4: 85:bf:81:71:8b:d4:d9:c1:44:d1:05:af:aa:3d:52:9d:6e:be: 05:19:1c:6c:f2:83:cb:e9:4b:43:d6:7e:9d:df:a6:3b:f4:c2: fb:33:23:0c:82:0b:c7:12:ca:17:31:06:c6:21:37:1a:a6:df: c3:f8:2d:b3:3b:f7:89:71:4c:86:c6:62:67:d0:1e:3f:5a:9e: 97:f9:d3:26:c5:cc:a3:a4:ed:d8:af:43:78:a0:7e:af:7d:04: 7e:48:9f:89:76:9d:2d:92:c8:19:14:7f:1e:15:36:9d:5a:fb: 54:ba:9f:2a:ce:e0:06:60:e7:0d:26:a5:0d:79:13:d6:a4:c5: f9:d1:f9:b4:6e:73:ba:98:67:07:65:1b:a1:44:9e:63:8b:0b: 64:51:97:9c:fb:d0:96:f9:15:aa:09:97:69:d9:37:12:e9:9e: 09:3c:82:76:80:65:8e:6b:8d:30:75:6e:62:ba:f2:d3:dd:76: 8a:73:38:60:49:73:4e:cc:5e:7d:65:b2:6b:36:0c:0f:02:da: 6b:58:53:ed:33:f5:fe:7d:43:36:90:2d:49:bd:d2:c6:35:3e: f9:d6:c9:e3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2OQl/mk1RcZT2k44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjQ4YzItMmY5NS00OGY1LWFjYjctOWU4YTJmOTEy M2E3MB4XDTI2MDQxOTA3MDAwM1oXDTI2MDQyMjA3MDAwMFowLzEtMCsGA1UEAxMk NWM2OGYxMDctZWVkOC00MzVhLWI1ZWEtYmFjZmE5NmNjOTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwDKA+Da3SnjrJNXkMULBJK/sVLArHvVbeNO GhbqfV3020JbVDBIMrIGyV61ucgLin4CeNNZTgNs8iOiNOSKlYvoegXNLc25tYOx vZf6WlTLcewDsksTPYQE2TT6BbGDIDYqRoNt+wMGZ1WayCZueNShBBym5woN3/mm /F8sWzYNvw8AeTYCNkRWh504gPdsz/ETF8mDZXSSGq6CmqBzlIX5Ry/omvtQRkfz OLoWbyby7TbxMFER4RPEYXSysZll+jiY5VWBFH6i9Haw9pPgaQoq+R7FLJF8lVOz CJZyXlbSi44DCEn6zeqT7qcGub+IQOIHfrEP4HIRLAPAT/jphwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL+VZMWVgokxapq0kMm2As+bzTnLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yYmM2 NDhjMi0yZjk1LTQ4ZjUtYWNiNy05ZThhMmY5MTIzYTcvMmJjNjQ4YzItMmY5NS00 OGY1LWFjYjctOWU4YTJmOTEyM2E3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmJjNjQ4YzItMmY5NS00OGY1LWFj YjctOWU4YTJmOTEyM2E3LzJiYzY0OGMyLTJmOTUtNDhmNS1hY2I3LTllOGEyZjkx MjNhNy5jcmwwHwYDVR0jBBgwFoAUK4kJK//sj3gn2IfZFNqOJOdMHGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yYmM2NDhjMi0yZjk1LTQ4ZjUtYWNiNy05ZThh MmY5MTIzYTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA/xqmhrxCYk3vvkB8WHaNA t7W3b4kq/P91fa6vTyCKwzzWMLSFv4Fxi9TZwUTRBa+qPVKdbr4FGRxs8oPL6UtD 1n6d36Y79ML7MyMMggvHEsoXMQbGITcapt/D+C2zO/eJcUyGxmJn0B4/Wp6X+dMm xcyjpO3Yr0N4oH6vfQR+SJ+Jdp0tksgZFH8eFTadWvtUup8qzuAGYOcNJqUNeRPW pMX50fm0bnO6mGcHZRuhRJ5jiwtkUZec+9CW+RWqCZdp2TcS6Z4JPIJ2gGWOa40w dW5iuvLT3XaKczhgSXNOzF59ZbJrNgwPAtprWFPtM/X+fUM2kC1JvdLGNT751snj -----END CERTIFICATE-----Generated at Sun Apr 19 10:17:09 2026 by rpki-client