$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.mft File: a856eb04-e27d-4da2-8c39-a38263828e38.mft (raw, json) Hash identifier: XJ6yp5TvkBQDSSznNRNrsRjqZ82rr4i8Y5dx7OTAGAU= Subject key identifier: 40:31:13:A9:C3:EC:A5:D7:1C:FA:46:CC:E8:1E:8C:F0:F7:3C:8A:22 Authority key identifier: 7A:DD:97:21:BB:C0:9A:10:69:15:FB:59:5D:D0:69:D7:A9:9A:79:A0 Certificate issuer: /CN=a856eb04-e27d-4da2-8c39-a38263828e38 Certificate serial: 010D0C9F4328584D8D189752AE48EF6E3F054D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.mft Manifest number: 010D0C9F432858482F910EBCA643DC9360F49479 Signing time: Sat 18 Apr 2026 21:00:03 +0000 Manifest this update: Sat 18 Apr 2026 21:00:03 +0000 Manifest next update: Tue 21 Apr 2026 21:00:00 +0000 Files and hashes: 1: 82be32f8-6a7c-3ac5-9559-807dea4ec27d.roa (hash: tNn0JRjrVMWjG0tFnbdp5EJlIFOPi80RGUyBS68mg1k=) 2: a856eb04-e27d-4da2-8c39-a38263828e38.crl (hash: A3uzDg3nJSt4b6JCgvwrv7cMJCrN8yV21lK0uMQhxZs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8d:18:97:52:ae:48:ef:6e:3f:05:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a856eb04-e27d-4da2-8c39-a38263828e38 Validity Not Before: Apr 18 21:00:03 2026 GMT Not After : Apr 21 21:00:00 2026 GMT Subject: CN=500c5c48-625d-4c2e-85c4-96fe39a239ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4b:6f:95:02:fc:0d:1f:7e:21:80:5b:0f:26: 3d:76:67:18:fa:73:26:04:bc:55:78:0e:dd:98:56: 21:03:b4:47:52:6b:8d:0f:8f:6f:a1:ff:47:65:32: 76:5e:42:54:b7:f3:a8:b1:bd:06:a5:12:dc:23:a6: 66:1b:a7:37:50:12:90:c3:95:d3:23:c2:89:a7:0d: 55:5d:39:8f:df:d7:2b:aa:de:fa:9c:a1:28:66:f0: 37:d4:2f:0c:29:9b:67:0f:5b:4f:0c:43:dd:f4:fd: a0:72:aa:47:b8:4a:73:a4:05:b2:f6:8c:d1:b3:27: b7:1f:24:51:8c:dd:48:9b:0d:94:93:02:2a:d4:92: d2:b6:6a:d5:cb:12:1f:63:4e:95:94:44:67:6d:5f: ea:9f:0a:9e:34:95:4e:cf:ea:dd:13:a7:b2:de:32: fb:4b:f0:c3:11:59:dd:8a:da:46:cc:7d:b6:20:36: c3:73:7b:aa:96:17:6d:48:a6:58:a0:1e:d0:5f:03: 16:c5:34:e9:5b:55:66:5b:02:6c:11:43:8a:3d:c2: f0:da:3d:c5:fc:02:20:0c:be:88:e6:a0:aa:19:5c: 16:e3:8e:05:0f:35:fe:d4:bf:22:c9:a1:56:68:a6: 24:db:22:6d:68:ba:49:94:5b:a3:08:3e:bc:64:20: b0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:31:13:A9:C3:EC:A5:D7:1C:FA:46:CC:E8:1E:8C:F0:F7:3C:8A:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.crl X509v3 Authority Key Identifier: keyid:7A:DD:97:21:BB:C0:9A:10:69:15:FB:59:5D:D0:69:D7:A9:9A:79:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:2e:d3:2e:23:35:c4:5a:2f:0f:df:f2:93:21:73:12:1c:bc: 51:5a:64:1b:a9:9d:ca:aa:e2:f2:91:f7:c8:89:3b:47:02:ba: 6c:66:00:51:ae:9f:cb:49:05:69:65:84:c0:b4:f0:d5:4a:d2: 63:c4:3a:8f:cb:f1:8b:d9:7c:e1:49:e2:a9:7e:8a:51:b7:88: 8d:3d:cd:25:12:d2:3e:79:9e:a8:7f:10:ca:39:dd:af:7e:ab: 8e:83:62:c0:95:9e:c0:91:bd:2b:42:58:d0:19:c6:99:81:29: 94:da:21:79:d9:95:79:00:e8:71:5a:fc:ad:81:aa:5a:bb:2b: b2:9c:a7:da:42:e5:f9:8a:b3:56:a1:db:40:b0:64:f9:b7:6d: 5c:af:ad:db:13:79:d5:79:54:a2:f1:3e:1f:8d:4f:10:9a:47: 12:b7:ce:e3:df:f8:94:ab:d8:20:6e:b4:a1:50:d7:f5:28:26: 4d:12:44:70:64:23:09:45:f0:18:ea:16:aa:18:bf:22:f8:92: d3:f1:6e:d8:b7:50:e3:2d:97:38:9d:a2:f0:06:a2:8d:b6:88: e3:48:4b:66:5f:fd:4f:90:06:60:69:4f:8f:d3:00:19:b5:46: 73:c7:8a:ec:c1:a8:7b:aa:05:a5:9a:ab:c1:ee:f8:9f:70:27: fe:86:60:c4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2NGJdSrkjvbj8FTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg1NmViMDQtZTI3ZC00ZGEyLThjMzktYTM4MjYzODI4 ZTM4MB4XDTI2MDQxODIxMDAwM1oXDTI2MDQyMTIxMDAwMFowLzEtMCsGA1UEAxMk NTAwYzVjNDgtNjI1ZC00YzJlLTg1YzQtOTZmZTM5YTIzOWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlktvlQL8DR9+IYBbDyY9dmcY+nMmBLxVeA7d mFYhA7RHUmuND49vof9HZTJ2XkJUt/Oosb0GpRLcI6ZmG6c3UBKQw5XTI8KJpw1V XTmP39crqt76nKEoZvA31C8MKZtnD1tPDEPd9P2gcqpHuEpzpAWy9ozRsye3HyRR jN1Imw2UkwIq1JLStmrVyxIfY06VlERnbV/qnwqeNJVOz+rdE6ey3jL7S/DDEVnd itpGzH22IDbDc3uqlhdtSKZYoB7QXwMWxTTpW1VmWwJsEUOKPcLw2j3F/AIgDL6I 5qCqGVwW444FDzX+1L8iyaFWaKYk2yJtaLpJlFujCD68ZCCwCQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEAxE6nD7KXXHPpGzOgejPD3PIoiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hODU2 ZWIwNC1lMjdkLTRkYTItOGMzOS1hMzgyNjM4MjhlMzgvYTg1NmViMDQtZTI3ZC00 ZGEyLThjMzktYTM4MjYzODI4ZTM4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTg1NmViMDQtZTI3ZC00ZGEyLThj MzktYTM4MjYzODI4ZTM4L2E4NTZlYjA0LWUyN2QtNGRhMi04YzM5LWEzODI2Mzgy OGUzOC5jcmwwHwYDVR0jBBgwFoAUet2XIbvAmhBpFftZXdBp16maeaAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hODU2ZWIwNC1lMjdkLTRkYTItOGMzOS1hMzgy NjM4MjhlMzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAaLtMuIzXEWi8P3/KTIXMS HLxRWmQbqZ3KquLykffIiTtHArpsZgBRrp/LSQVpZYTAtPDVStJjxDqPy/GL2Xzh SeKpfopRt4iNPc0lEtI+eZ6ofxDKOd2vfquOg2LAlZ7Akb0rQljQGcaZgSmU2iF5 2ZV5AOhxWvytgapauyuynKfaQuX5irNWodtAsGT5t21cr63bE3nVeVSi8T4fjU8Q mkcSt87j3/iUq9ggbrShUNf1KCZNEkRwZCMJRfAY6haqGL8i+JLT8W7Yt1DjLZc4 naLwBqKNtojjSEtmX/1PkAZgaU+P0wAZtUZzx4rswah7qgWlmqvB7vifcCf+hmDE -----END CERTIFICATE-----Generated at Sun Apr 19 08:21:00 2026 by rpki-client