$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.mft File: 25422be5-720b-40bc-8a4d-02579ec1bead.mft (raw, json) Hash identifier: UDFhMhLfbUsLcQGPG7lTy5AQbo0ZJElxTBX0NyPjhBQ= Subject key identifier: 25:C5:E4:60:CE:B5:5F:70:3D:71:B7:4D:5C:8A:2C:8B:11:D9:79:5B Authority key identifier: CE:D2:97:2D:47:2B:D4:F9:C0:90:20:70:DB:AC:BA:3B:D5:62:63:6A Certificate issuer: /CN=25422be5-720b-40bc-8a4d-02579ec1bead Certificate serial: 010D0C9F4328584D88E89278A725DFB019502780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.mft Manifest number: 010D0C9F4328584073A84B9C832FD0665142AB2C Signing time: Fri 17 Apr 2026 09:00:04 +0000 Manifest this update: Fri 17 Apr 2026 09:00:04 +0000 Manifest next update: Sun 19 Apr 2026 09:00:00 +0000 Files and hashes: 1: 25422be5-720b-40bc-8a4d-02579ec1bead.crl (hash: TvVur0/n9md9bmEOYTo/550NfzuMJX6WGgf1vgDfDXE=) 2: 8a5c0e90-ec6b-3ac8-85d7-908f880e7035.roa (hash: l8ybn5b2mUrLiKsP+K6Nc5vzfXhR9I7Pv30hi45ySJ0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:88:e8:92:78:a7:25:df:b0:19:50:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25422be5-720b-40bc-8a4d-02579ec1bead Validity Not Before: Apr 17 09:00:04 2026 GMT Not After : Apr 19 09:00:00 2026 GMT Subject: CN=43b32340-417b-4330-9ee1-ef7ee55a1102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:66:a9:60:36:f2:60:0c:36:c6:a6:c4:24:c0: f0:12:8e:5d:df:e2:29:a5:6f:26:4f:c1:6d:b8:e1: 01:6c:1d:c0:0e:87:d1:0b:f5:89:f9:b7:6e:de:f3: ac:2b:f1:23:c4:c8:1b:8a:68:cd:4c:c4:99:be:5e: 77:45:46:4d:f9:3b:ad:81:09:de:d6:f3:e7:e6:14: d0:48:01:01:97:d0:e4:9f:66:d3:40:ca:4b:d6:63: 9d:5a:90:8f:5e:f7:92:ac:3b:1b:db:82:ba:b3:10: 2b:82:a0:d1:07:dc:28:4d:9f:c0:79:28:f7:c0:1f: be:cc:4e:40:42:f5:f5:eb:69:f4:44:07:39:9b:45: e5:b8:05:ec:8c:b5:b5:17:2a:a2:c4:52:52:b3:6e: 09:aa:4c:fc:8b:9e:79:36:4a:c4:1e:cb:03:2b:00: 02:a4:e3:83:ec:1b:70:b4:42:66:b6:5f:36:cf:41: 56:d4:ba:ec:f6:68:95:14:58:b8:c0:c1:53:2b:ad: e0:92:a8:5c:29:df:84:ef:66:03:26:7f:55:8a:21: 51:54:eb:79:5b:49:2f:28:d4:72:4c:10:80:ae:6d: ac:89:d5:fe:ad:68:e1:3d:05:28:d3:c2:e4:23:5c: 8d:7b:22:5b:e2:0f:81:0a:d2:00:d5:87:3a:37:66: 4c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C5:E4:60:CE:B5:5F:70:3D:71:B7:4D:5C:8A:2C:8B:11:D9:79:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.crl X509v3 Authority Key Identifier: keyid:CE:D2:97:2D:47:2B:D4:F9:C0:90:20:70:DB:AC:BA:3B:D5:62:63:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:b9:ec:70:97:b8:f9:ce:aa:49:66:39:93:dc:cd:c1:66:cb: 4d:2d:28:9a:36:0c:e5:60:02:01:6f:53:74:81:6a:a2:8e:09: 25:ab:42:d4:4c:36:17:35:3b:dd:21:c2:b4:7a:14:75:95:c5: 95:cf:4e:d8:1a:35:e0:b3:53:e3:2a:a0:b5:19:42:8a:c4:7a: 81:96:f3:7f:b8:71:5a:ee:48:d5:ba:a5:83:43:7c:82:d1:9d: eb:26:77:39:24:81:b9:42:72:f2:e8:33:5b:7a:1f:17:49:1d: ab:1b:cb:1d:d1:fe:13:41:4e:08:92:9b:42:c8:a6:10:7a:78: 4a:87:6d:3f:42:eb:62:02:ae:d6:e8:6d:85:9e:41:b5:49:3e: 19:8b:2a:90:e5:0f:a8:bb:c0:c5:8c:e9:7b:44:6b:da:e3:a9: 4b:80:49:e7:c3:32:34:2b:18:96:4d:de:43:5f:03:c1:4f:cd: 51:20:a0:a6:72:fe:50:6c:2a:31:b2:b9:44:cf:ad:fa:f4:a1: a9:54:20:d4:6f:d3:41:7a:67:e7:1c:22:49:17:5c:1c:7c:2d: 36:ce:d0:e8:6c:6c:9b:e2:d3:c2:b0:11:d4:0c:fb:25:bc:94: bf:44:6e:56:e8:72:f9:c5:04:fe:5c:83:05:18:37:8b:f4:9f: 64:8d:25:ab -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2I6JJ4pyXfsBlQJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjU0MjJiZTUtNzIwYi00MGJjLThhNGQtMDI1NzllYzFi ZWFkMB4XDTI2MDQxNzA5MDAwNFoXDTI2MDQxOTA5MDAwMFowLzEtMCsGA1UEAxMk NDNiMzIzNDAtNDE3Yi00MzMwLTllZTEtZWY3ZWU1NWExMTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2apYDbyYAw2xqbEJMDwEo5d3+IppW8mT8Ft uOEBbB3ADofRC/WJ+bdu3vOsK/EjxMgbimjNTMSZvl53RUZN+TutgQne1vPn5hTQ SAEBl9Dkn2bTQMpL1mOdWpCPXveSrDsb24K6sxArgqDRB9woTZ/AeSj3wB++zE5A QvX162n0RAc5m0XluAXsjLW1FyqixFJSs24Jqkz8i555NkrEHssDKwACpOOD7Btw tEJmtl82z0FW1Lrs9miVFFi4wMFTK63gkqhcKd+E72YDJn9ViiFRVOt5W0kvKNRy TBCArm2sidX+rWjhPQUo08LkI1yNeyJb4g+BCtIA1Yc6N2ZM3QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCXF5GDOtV9wPXG3TVyKLIsR2XlbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yNTQy MmJlNS03MjBiLTQwYmMtOGE0ZC0wMjU3OWVjMWJlYWQvMjU0MjJiZTUtNzIwYi00 MGJjLThhNGQtMDI1NzllYzFiZWFkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjU0MjJiZTUtNzIwYi00MGJjLThh NGQtMDI1NzllYzFiZWFkLzI1NDIyYmU1LTcyMGItNDBiYy04YTRkLTAyNTc5ZWMx YmVhZC5jcmwwHwYDVR0jBBgwFoAUztKXLUcr1PnAkCBw26y6O9ViY2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yNTQyMmJlNS03MjBiLTQwYmMtOGE0ZC0wMjU3 OWVjMWJlYWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCiuexwl7j5zqpJZjmT3M3B ZstNLSiaNgzlYAIBb1N0gWqijgklq0LUTDYXNTvdIcK0ehR1lcWVz07YGjXgs1Pj KqC1GUKKxHqBlvN/uHFa7kjVuqWDQ3yC0Z3rJnc5JIG5QnLy6DNbeh8XSR2rG8sd 0f4TQU4IkptCyKYQenhKh20/QutiAq7W6G2FnkG1ST4ZiyqQ5Q+ou8DFjOl7RGva 46lLgEnnwzI0KxiWTd5DXwPBT81RIKCmcv5QbCoxsrlEz6369KGpVCDUb9NBemfn HCJJF1wcfC02ztDobGyb4tPCsBHUDPslvJS/RG5W6HL5xQT+XIMFGDeL9J9kjSWr -----END CERTIFICATE-----Generated at Fri Apr 17 15:24:09 2026 by rpki-client