$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/ded84a4b-9790-4a18-bca9-43e49e2f0b71.mft File: ded84a4b-9790-4a18-bca9-43e49e2f0b71.mft (raw, json) Hash identifier: 6QOrr54fm8vqy6ttc4H+5CX4c7Xs01nnmWtHHWQwudg= Subject key identifier: 95:8C:48:91:F8:71:06:EA:BA:8D:73:0D:EE:AC:3F:43:E1:5C:0E:BD Authority key identifier: 83:45:07:D1:4B:C2:27:F0:66:F0:B8:58:F3:CE:65:72:A8:1A:01:C8 Certificate issuer: /CN=ded84a4b-9790-4a18-bca9-43e49e2f0b71 Certificate serial: 010D0C9F4328584D86D08CCA24720C2C9C992500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/ded84a4b-9790-4a18-bca9-43e49e2f0b71.mft Manifest number: 010D0C9F4328584A2AF8D6A86D21A3E42E10A1B6 Signing time: Thu 16 Apr 2026 15:00:03 +0000 Manifest this update: Thu 16 Apr 2026 15:00:03 +0000 Manifest next update: Sun 19 Apr 2026 15:00:00 +0000 Files and hashes: 1: 682e9a68-26a9-36ec-8edc-50811bfe62f7.roa (hash: oCjbsCTrE14rEzOpCy0cyC2HTyLVLLoPAdSbo04qfug=) 2: 9dca4ab6-05a9-3fec-a108-a009b99cd415.roa (hash: 8eZ1BPhYlVbA5RcpSHC0B6sSWpI8bPZ7RWCLeqHkkr8=) 3: bd668f92-776c-355d-9660-3354ba68dbd0.roa (hash: TyhgvmNc6HN+yDr3hfrAe6T1ix6OCjJhBI7OMwCV7Ss=) 4: ded84a4b-9790-4a18-bca9-43e49e2f0b71.crl (hash: ljDMxKIi/BWv5bckJxbt2tmqXqLXOv8ls0J4UynaPgw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/ded84a4b-9790-4a18-bca9-43e49e2f0b71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/ded84a4b-9790-4a18-bca9-43e49e2f0b71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:d0:8c:ca:24:72:0c:2c:9c:99:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ded84a4b-9790-4a18-bca9-43e49e2f0b71 Validity Not Before: Apr 16 15:00:03 2026 GMT Not After : Apr 19 15:00:00 2026 GMT Subject: CN=ac008fb2-965d-4632-95cb-d86aa8b63fb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4e:d8:73:02:a1:35:64:6f:5a:a5:34:ec:9d: f2:b3:4f:f8:8d:74:ea:5b:16:41:cc:96:f1:8b:3e: 90:89:49:f3:82:ee:9f:b4:d2:51:3a:35:e7:ad:9d: 46:c0:64:e1:56:ca:e7:6e:31:5f:b3:41:9b:c8:9e: c1:cd:5b:f3:50:f2:6b:84:26:0e:65:d5:bd:d6:eb: f6:6a:fc:1a:06:be:fa:0a:71:93:fd:48:87:c6:e6: 8a:6e:a7:7e:08:5b:b2:3a:af:25:ec:12:79:ad:2e: 62:c6:4e:09:2b:00:fc:2b:6d:5d:f7:29:f1:ea:d4: 56:67:2a:a2:95:be:79:86:8d:f5:f5:22:e7:64:4c: 68:fa:c7:dc:01:5a:67:f1:34:ae:66:2b:bc:6d:bb: ab:2f:7d:79:8f:a6:92:b2:a0:a6:42:42:99:37:35: 96:19:42:ef:f5:70:d9:54:bc:f8:f2:1b:1e:07:ba: 6b:b2:5b:7f:61:49:0f:71:6a:64:d0:39:a1:e9:bf: 41:b4:52:80:c0:95:f4:b5:de:ae:16:ed:98:4a:03: eb:25:6d:29:30:5c:23:77:87:57:0b:be:c8:bd:2f: a9:4d:c6:1a:fe:71:87:32:41:e1:e6:c2:82:4e:4c: a2:90:d7:04:8e:74:94:b6:f5:62:c4:8a:22:4b:2f: e0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:8C:48:91:F8:71:06:EA:BA:8D:73:0D:EE:AC:3F:43:E1:5C:0E:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/ded84a4b-9790-4a18-bca9-43e49e2f0b71.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/ded84a4b-9790-4a18-bca9-43e49e2f0b71.crl X509v3 Authority Key Identifier: keyid:83:45:07:D1:4B:C2:27:F0:66:F0:B8:58:F3:CE:65:72:A8:1A:01:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:65:bd:82:9d:c0:c3:ab:f6:e9:bf:43:c5:80:f4:29:de:02: 60:65:b9:b0:e3:d2:bf:f7:0b:13:31:70:8b:57:83:9e:3c:6a: 47:b1:7a:7c:d8:fd:01:ce:f9:6b:72:f8:d7:71:5b:bb:32:0a: 7b:66:29:87:39:95:55:8b:8b:02:a1:30:0a:35:d0:a4:74:ac: 28:18:37:81:e0:8b:af:ee:48:25:6c:27:c8:43:0a:c1:48:8c: b7:30:29:be:fd:8e:31:15:c8:6f:08:67:e6:7e:1f:12:5b:19: a9:21:fd:34:31:bf:7e:88:6b:4d:d0:d1:d3:48:ce:92:91:6b: 15:d8:ce:6d:ce:fc:84:34:8b:dc:d2:a8:79:4f:5d:24:d3:13: 41:bd:1f:17:74:20:b4:89:df:df:20:a5:02:94:7e:4d:13:45: e7:16:e5:d5:88:f9:bf:fb:37:0c:0c:ea:22:1d:27:eb:13:23: ed:02:be:fb:5a:3f:7e:b2:7b:34:b9:38:bf:02:51:d6:60:ce: 05:e0:fc:9f:f1:d0:af:28:b0:13:3b:9a:92:ef:0b:9a:a6:a8: 72:38:bf:08:52:06:e8:fe:4e:5a:b2:4b:c5:81:0a:0b:39:17: 9d:82:8a:3d:3f:cb:f9:6f:36:fa:42:cb:28:76:a6:9c:75:11: 39:ee:7e:f5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2G0IzKJHIMLJyZJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGVkODRhNGItOTc5MC00YTE4LWJjYTktNDNlNDllMmYw YjcxMB4XDTI2MDQxNjE1MDAwM1oXDTI2MDQxOTE1MDAwMFowLzEtMCsGA1UEAxMk YWMwMDhmYjItOTY1ZC00NjMyLTk1Y2ItZDg2YWE4YjYzZmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU7YcwKhNWRvWqU07J3ys0/4jXTqWxZBzJbx iz6QiUnzgu6ftNJROjXnrZ1GwGThVsrnbjFfs0GbyJ7BzVvzUPJrhCYOZdW91uv2 avwaBr76CnGT/UiHxuaKbqd+CFuyOq8l7BJ5rS5ixk4JKwD8K21d9ynx6tRWZyqi lb55ho319SLnZExo+sfcAVpn8TSuZiu8bburL315j6aSsqCmQkKZNzWWGULv9XDZ VLz48hseB7prslt/YUkPcWpk0Dmh6b9BtFKAwJX0td6uFu2YSgPrJW0pMFwjd4dX C77IvS+pTcYa/nGHMkHh5sKCTkyikNcEjnSUtvVixIoiSy/gOwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJWMSJH4cQbquo1zDe6sP0PhXA69MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kZWQ4 NGE0Yi05NzkwLTRhMTgtYmNhOS00M2U0OWUyZjBiNzEvZGVkODRhNGItOTc5MC00 YTE4LWJjYTktNDNlNDllMmYwYjcxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGVkODRhNGItOTc5MC00YTE4LWJj YTktNDNlNDllMmYwYjcxL2RlZDg0YTRiLTk3OTAtNGExOC1iY2E5LTQzZTQ5ZTJm MGI3MS5jcmwwHwYDVR0jBBgwFoAUg0UH0UvCJ/Bm8LhY885lcqgaAcgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kZWQ4NGE0Yi05NzkwLTRhMTgtYmNhOS00M2U0 OWUyZjBiNzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBcZb2CncDDq/bpv0PFgPQp 3gJgZbmw49K/9wsTMXCLV4OePGpHsXp82P0BzvlrcvjXcVu7Mgp7ZimHOZVVi4sC oTAKNdCkdKwoGDeB4Iuv7kglbCfIQwrBSIy3MCm+/Y4xFchvCGfmfh8SWxmpIf00 Mb9+iGtN0NHTSM6SkWsV2M5tzvyENIvc0qh5T10k0xNBvR8XdCC0id/fIKUClH5N E0XnFuXViPm/+zcMDOoiHSfrEyPtAr77Wj9+sns0uTi/AlHWYM4F4Pyf8dCvKLAT O5qS7wuapqhyOL8IUgbo/k5askvFgQoLORedgoo9P8v5bzb6QssodqacdRE57n71 -----END CERTIFICATE-----Generated at Fri Apr 17 13:04:09 2026 by rpki-client