$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/2a43a868-3d14-440f-a95a-5428c232c5d0.mft File: 2a43a868-3d14-440f-a95a-5428c232c5d0.mft (raw, json) Hash identifier: DscXO+w93LVbEJLgb/LqZyLCkimGFsa+2y9smg8oR3c= Subject key identifier: A9:43:F8:8E:A2:CA:4A:EE:2E:71:B9:6B:07:C9:41:62:8E:2B:4A:9D Authority key identifier: 8A:E9:B1:DB:3E:1C:E3:90:30:AA:C9:E4:44:E2:AF:BB:97:F1:4B:32 Certificate issuer: /CN=2a43a868-3d14-440f-a95a-5428c232c5d0 Certificate serial: 010D0C9F4328584D87DC9236819E1F82A5015700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/2a43a868-3d14-440f-a95a-5428c232c5d0.mft Manifest number: 010D0C9F4328584D12A4CFA7D715AE6277072EAB Signing time: Fri 17 Apr 2026 00:00:03 +0000 Manifest this update: Fri 17 Apr 2026 00:00:03 +0000 Manifest next update: Mon 20 Apr 2026 00:00:00 +0000 Files and hashes: 1: 2a43a868-3d14-440f-a95a-5428c232c5d0.crl (hash: wzEnVy1L8Pp4rVb3IDnPHi1ewRBSMhVg6akC04/2gdc=) 2: e93a5b63-6268-38f6-b20d-f5c2fcf1e8d7.roa (hash: PbHlIYHOIGfmnKF5s7nnGds4clQ2E/kgM/1/bzBkEEY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/2a43a868-3d14-440f-a95a-5428c232c5d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/2a43a868-3d14-440f-a95a-5428c232c5d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:dc:92:36:81:9e:1f:82:a5:01:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a43a868-3d14-440f-a95a-5428c232c5d0 Validity Not Before: Apr 17 00:00:03 2026 GMT Not After : Apr 20 00:00:00 2026 GMT Subject: CN=f53da910-8cbc-4c31-968f-69cccc10b9a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cf:b7:2a:54:69:cd:7b:79:45:36:bd:9c:4d: c6:78:31:24:9b:2a:82:8e:c2:3d:31:65:89:7d:4d: 4d:4c:7b:20:b5:9a:b6:dc:5f:d6:c9:d0:79:8f:94: 47:f1:19:fb:51:86:d8:5f:7e:77:92:cf:7d:69:cf: ad:76:9e:97:13:bd:96:c4:6f:65:48:3f:f3:4d:52: 0c:32:41:cf:5b:e1:53:fa:dd:dc:86:73:e8:1f:13: ca:45:ab:fa:e6:96:af:25:5a:a9:a6:0e:44:2f:d8: 8e:77:6e:80:e1:45:b6:d0:86:a7:b8:17:5a:f1:1a: 93:4d:7d:b1:cc:f2:ad:78:b5:ee:0d:1e:fb:9a:9e: 07:2a:c4:b1:fe:0d:6c:a7:02:01:46:8a:62:cf:ab: d7:ea:cd:1e:bc:2e:a1:4f:0d:3a:e8:46:ea:39:ed: a6:38:ba:f6:63:6b:8a:8b:eb:57:39:d3:ea:c5:d9: 1d:1a:2e:7b:01:e0:fe:80:88:15:50:3d:ae:38:b9: 55:24:95:8e:7f:7b:64:25:1b:85:b1:9b:d3:a4:ca: 28:68:58:cf:79:13:05:b1:0f:16:5e:6f:4a:e6:d7: 96:ac:09:6f:9b:60:6d:0e:a7:13:d9:8c:91:c1:0c: 04:21:d5:fb:ed:31:ea:41:a4:52:83:68:d3:82:26: 34:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:43:F8:8E:A2:CA:4A:EE:2E:71:B9:6B:07:C9:41:62:8E:2B:4A:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/2a43a868-3d14-440f-a95a-5428c232c5d0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/2a43a868-3d14-440f-a95a-5428c232c5d0.crl X509v3 Authority Key Identifier: keyid:8A:E9:B1:DB:3E:1C:E3:90:30:AA:C9:E4:44:E2:AF:BB:97:F1:4B:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:05:dd:98:81:a2:62:13:06:6f:39:00:1c:2f:79:62:67:27: 18:3b:2f:4c:4d:1d:c4:57:a2:fe:58:5a:db:ad:ee:89:59:59: 88:1d:cb:e7:bb:8f:c8:5d:4a:81:84:65:41:64:8b:17:13:3a: 6f:b5:cf:67:d8:18:cc:e8:19:c5:7d:ae:af:f2:09:d7:aa:33: 8e:b3:5e:d8:18:68:c9:42:dc:3b:6e:8f:79:55:8f:a5:d1:8b: 90:78:c8:9f:bc:e0:ba:09:c6:1a:e0:ff:f3:c7:a3:c9:bd:b0: d8:0f:75:5b:ce:69:1d:4b:ed:cd:db:9d:97:37:e0:f9:dc:24: 98:b2:77:f0:1d:75:45:c1:24:7b:dd:8a:a0:8b:73:6d:90:c5: 16:7c:38:f9:eb:f6:33:b8:8e:72:23:e3:d4:c5:0c:89:94:a0: 1f:3d:c6:9b:35:d3:73:dd:0f:a0:51:27:1a:b0:f9:ff:e6:88: 58:40:3c:0b:29:0b:24:35:cc:1f:d9:41:07:f9:34:d9:c5:0c: b0:86:3c:e5:fd:16:38:2d:c3:b4:c2:b4:9e:80:e5:51:14:5a: e1:46:fa:ec:55:85:fc:6e:28:49:34:16:f7:58:34:ae:30:47: 23:55:8a:09:1b:ef:d6:06:62:63:10:d7:34:5b:10:96:10:bc: 71:8e:c6:f4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2H3JI2gZ4fgqUBVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE0M2E4NjgtM2QxNC00NDBmLWE5NWEtNTQyOGMyMzJj NWQwMB4XDTI2MDQxNzAwMDAwM1oXDTI2MDQyMDAwMDAwMFowLzEtMCsGA1UEAxMk ZjUzZGE5MTAtOGNiYy00YzMxLTk2OGYtNjljY2NjMTBiOWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAms+3KlRpzXt5RTa9nE3GeDEkmyqCjsI9MWWJ fU1NTHsgtZq23F/WydB5j5RH8Rn7UYbYX353ks99ac+tdp6XE72WxG9lSD/zTVIM MkHPW+FT+t3chnPoHxPKRav65pavJVqppg5EL9iOd26A4UW20IanuBda8RqTTX2x zPKteLXuDR77mp4HKsSx/g1spwIBRopiz6vX6s0evC6hTw066EbqOe2mOLr2Y2uK i+tXOdPqxdkdGi57AeD+gIgVUD2uOLlVJJWOf3tkJRuFsZvTpMooaFjPeRMFsQ8W Xm9K5teWrAlvm2BtDqcT2YyRwQwEIdX77THqQaRSg2jTgiY0HQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKlD+I6iykruLnG5awfJQWKOK0qdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8yYTQz YTg2OC0zZDE0LTQ0MGYtYTk1YS01NDI4YzIzMmM1ZDAvMmE0M2E4NjgtM2QxNC00 NDBmLWE5NWEtNTQyOGMyMzJjNWQwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMmE0M2E4NjgtM2QxNC00NDBmLWE5 NWEtNTQyOGMyMzJjNWQwLzJhNDNhODY4LTNkMTQtNDQwZi1hOTVhLTU0MjhjMjMy YzVkMC5jcmwwHwYDVR0jBBgwFoAUiumx2z4c45AwqsnkROKvu5fxSzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8yYTQzYTg2OC0zZDE0LTQ0MGYtYTk1YS01NDI4 YzIzMmM1ZDAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBRBd2YgaJiEwZvOQAcL3li ZycYOy9MTR3EV6L+WFrbre6JWVmIHcvnu4/IXUqBhGVBZIsXEzpvtc9n2BjM6BnF fa6v8gnXqjOOs17YGGjJQtw7bo95VY+l0YuQeMifvOC6CcYa4P/zx6PJvbDYD3Vb zmkdS+3N252XN+D53CSYsnfwHXVFwSR73Yqgi3NtkMUWfDj56/YzuI5yI+PUxQyJ lKAfPcabNdNz3Q+gUScasPn/5ohYQDwLKQskNcwf2UEH+TTZxQywhjzl/RY4LcO0 wrSegOVRFFrhRvrsVYX8bihJNBb3WDSuMEcjVYoJG+/WBmJjENc0WxCWELxxjsb0 -----END CERTIFICATE-----Generated at Fri Apr 17 10:25:26 2026 by rpki-client