$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/252bb797-8be3-4178-8149-ed86949ba85a/252bb797-8be3-4178-8149-ed86949ba85a.mft File: 252bb797-8be3-4178-8149-ed86949ba85a.mft (raw, json) Hash identifier: VkuR001Ww+eIYtXJUis5pnlDVBp54PUbgWCris/vRGQ= Subject key identifier: 5E:D1:58:B7:AA:44:DA:00:00:59:AE:9B:70:EB:2F:33:42:49:53:47 Authority key identifier: 99:EA:81:71:12:6E:46:86:D9:3D:7C:6F:E1:D5:1B:5E:96:9E:40:40 Certificate issuer: /CN=252bb797-8be3-4178-8149-ed86949ba85a Certificate serial: 010D0C9F4328584D870C1CE9E0D80F6AE957CD50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/252bb797-8be3-4178-8149-ed86949ba85a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/252bb797-8be3-4178-8149-ed86949ba85a/252bb797-8be3-4178-8149-ed86949ba85a.mft Manifest number: 010D0C9F432858487A2FF7DC32D4C8FDAFAE67D9 Signing time: Thu 16 Apr 2026 17:00:03 +0000 Manifest this update: Thu 16 Apr 2026 17:00:03 +0000 Manifest next update: Sat 18 Apr 2026 17:00:00 +0000 Files and hashes: 1: 251e3654-fce7-3166-94e5-b4de0876ecca.roa (hash: sJn5XXUCsPYKxG7OR7Su1NsrUHFfrgF4dhLB4LySb88=) 2: 252bb797-8be3-4178-8149-ed86949ba85a.crl (hash: g/TPhLkz+KjAl93y+h2HPi/CDlUaDst5jD3BV4EH4kI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/252bb797-8be3-4178-8149-ed86949ba85a/252bb797-8be3-4178-8149-ed86949ba85a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/252bb797-8be3-4178-8149-ed86949ba85a/252bb797-8be3-4178-8149-ed86949ba85a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/252bb797-8be3-4178-8149-ed86949ba85a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:0c:1c:e9:e0:d8:0f:6a:e9:57:cd:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=252bb797-8be3-4178-8149-ed86949ba85a Validity Not Before: Apr 16 17:00:03 2026 GMT Not After : Apr 18 17:00:00 2026 GMT Subject: CN=08cfda04-027e-4ae8-9a77-d4f9fd98d40e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8f:1c:4b:44:6c:c3:c9:50:c6:95:51:9d:70: 73:ca:fd:fb:d5:c0:08:b7:c6:d7:38:02:de:9b:c8: ac:69:d4:42:c3:de:5a:24:3b:3d:54:85:af:00:72: 46:19:4b:9a:e3:78:13:91:54:d2:5f:71:c1:3c:74: b2:28:e1:89:28:59:63:a3:1d:f4:79:22:e0:84:1b: c4:8e:34:69:0b:2d:02:92:35:53:b8:3e:66:98:0e: 23:4b:25:95:12:aa:67:cd:19:a8:a8:61:b3:4e:12: a9:b0:d7:5e:6f:18:2a:db:6f:5c:a7:cd:cf:eb:2c: a7:59:92:7b:27:f1:80:f8:08:6e:39:1b:00:98:76: c6:5d:80:72:a3:b3:60:49:9c:4f:cd:9f:65:11:95: bb:19:76:1b:49:af:af:47:5d:10:42:1b:6c:88:f2: 9e:22:d9:0f:68:41:55:cc:b9:24:bb:05:3f:6a:a0: 0a:d1:6d:2c:4c:a1:d3:f0:d4:c2:e7:b7:b9:f8:20: 4c:d9:b4:43:8e:16:50:1e:f4:bf:84:7c:30:62:39: 32:d2:46:3c:a8:8e:44:40:8b:73:cc:e9:42:ef:4f: 33:0a:70:7f:7d:c3:58:a4:3c:21:e5:e4:75:a3:39: 9a:f9:3f:54:b7:c7:1f:d5:1d:f8:b9:e3:3f:17:6d: b3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D1:58:B7:AA:44:DA:00:00:59:AE:9B:70:EB:2F:33:42:49:53:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/252bb797-8be3-4178-8149-ed86949ba85a/252bb797-8be3-4178-8149-ed86949ba85a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/252bb797-8be3-4178-8149-ed86949ba85a/252bb797-8be3-4178-8149-ed86949ba85a.crl X509v3 Authority Key Identifier: keyid:99:EA:81:71:12:6E:46:86:D9:3D:7C:6F:E1:D5:1B:5E:96:9E:40:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/252bb797-8be3-4178-8149-ed86949ba85a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:ac:1d:81:b1:19:5f:d9:4c:2d:88:37:ea:28:f9:29:d8:6a: 31:8d:9a:67:dc:a2:d1:30:ec:55:01:68:b8:13:b7:04:d4:98: f2:8a:68:60:4b:6b:01:24:08:22:52:63:61:b6:2c:87:4f:92: 4b:3c:97:57:82:2a:28:23:04:20:bf:5a:22:c9:82:57:4c:9e: 7d:ce:37:1d:ba:18:d6:aa:ec:d1:f9:85:ce:b3:5a:89:e5:98: 0d:ea:51:7e:9c:32:d4:23:e3:ba:db:52:b8:eb:13:2d:a8:82: 37:96:7a:c4:e7:c7:83:10:b6:28:2d:90:2e:d1:49:44:6e:cb: 44:11:ea:3b:ba:2f:b0:69:16:aa:3c:e7:bf:76:69:58:d8:e8: 37:4b:89:d6:8d:2b:89:3c:5a:ef:a0:55:ea:f0:b4:59:0b:68: 06:65:bd:c7:44:c4:6c:82:9e:e3:fa:77:a4:a0:b6:5f:e1:d3: e3:cd:27:38:73:ba:af:c0:1c:79:65:64:fc:f0:c1:53:90:da: 7e:d7:00:e1:61:35:7e:0a:b3:bd:e2:8a:3d:3a:f8:6b:b3:08: d8:cf:c6:36:d7:a1:29:42:21:36:4b:6f:93:e3:11:98:d2:ba: cb:f6:26:71:c4:fb:4f:a4:02:e9:89:42:7f:6b:d0:43:72:73: d4:c0:d8:c3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2HDBzp4NgPaulXzVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUyYmI3OTctOGJlMy00MTc4LTgxNDktZWQ4Njk0OWJh ODVhMB4XDTI2MDQxNjE3MDAwM1oXDTI2MDQxODE3MDAwMFowLzEtMCsGA1UEAxMk MDhjZmRhMDQtMDI3ZS00YWU4LTlhNzctZDRmOWZkOThkNDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApY8cS0Rsw8lQxpVRnXBzyv371cAIt8bXOALe m8isadRCw95aJDs9VIWvAHJGGUua43gTkVTSX3HBPHSyKOGJKFljox30eSLghBvE jjRpCy0CkjVTuD5mmA4jSyWVEqpnzRmoqGGzThKpsNdebxgq229cp83P6yynWZJ7 J/GA+AhuORsAmHbGXYByo7NgSZxPzZ9lEZW7GXYbSa+vR10QQhtsiPKeItkPaEFV zLkkuwU/aqAK0W0sTKHT8NTC57e5+CBM2bRDjhZQHvS/hHwwYjky0kY8qI5EQItz zOlC708zCnB/fcNYpDwh5eR1ozma+T9Ut8cf1R34ueM/F22zawIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF7RWLeqRNoAAFmum3DrLzNCSVNHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yNTJi Yjc5Ny04YmUzLTQxNzgtODE0OS1lZDg2OTQ5YmE4NWEvMjUyYmI3OTctOGJlMy00 MTc4LTgxNDktZWQ4Njk0OWJhODVhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjUyYmI3OTctOGJlMy00MTc4LTgx NDktZWQ4Njk0OWJhODVhLzI1MmJiNzk3LThiZTMtNDE3OC04MTQ5LWVkODY5NDli YTg1YS5jcmwwHwYDVR0jBBgwFoAUmeqBcRJuRobZPXxv4dUbXpaeQEAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yNTJiYjc5Ny04YmUzLTQxNzgtODE0OS1lZDg2 OTQ5YmE4NWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAhrB2BsRlf2UwtiDfqKPkp 2GoxjZpn3KLRMOxVAWi4E7cE1JjyimhgS2sBJAgiUmNhtiyHT5JLPJdXgiooIwQg v1oiyYJXTJ59zjcduhjWquzR+YXOs1qJ5ZgN6lF+nDLUI+O621K46xMtqII3lnrE 58eDELYoLZAu0UlEbstEEeo7ui+waRaqPOe/dmlY2Og3S4nWjSuJPFrvoFXq8LRZ C2gGZb3HRMRsgp7j+nekoLZf4dPjzSc4c7qvwBx5ZWT88MFTkNp+1wDhYTV+CrO9 4oo9OvhrswjYz8Y216EpQiE2S2+T4xGY0rrL9iZxxPtPpALpiUJ/a9BDcnPUwNjD -----END CERTIFICATE-----Generated at Fri Apr 17 14:07:08 2026 by rpki-client