$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8.mft File: 291f5e6d-adaa-43d5-93a3-f96c4b72f3c8.mft (raw, json) Hash identifier: 0Q/8Vy0iV8DfbG0kSPWuNBSPLUgDRypCStReUo5quh4= Subject key identifier: 28:DA:F2:5F:30:14:E3:1F:76:5E:00:B7:4E:E6:23:B6:75:01:39:FD Authority key identifier: 37:55:82:67:68:90:62:3F:A3:B2:67:E3:53:85:66:F2:16:A2:1E:04 Certificate issuer: /CN=291f5e6d-adaa-43d5-93a3-f96c4b72f3c8 Certificate serial: 010D0C9F4328584D870C1C474C1A9D2EB2EEF980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8.mft Manifest number: 010D0C9F4328584073A81C2C67D7F2FF67B10E4C Signing time: Thu 16 Apr 2026 17:00:03 +0000 Manifest this update: Thu 16 Apr 2026 17:00:03 +0000 Manifest next update: Sat 18 Apr 2026 17:00:00 +0000 Files and hashes: 1: 291f5e6d-adaa-43d5-93a3-f96c4b72f3c8.crl (hash: OQ2EAWaJbLBArCjRJ+5UsGFRTHqUirrNVYCE+516yYQ=) 2: 8462c1ed-9529-306f-9950-18fd383eb4c7.roa (hash: QHfSoBMmKMHAYC10Bg9NEwriw5Pa6nfh6HzIX9UGOPQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:0c:1c:47:4c:1a:9d:2e:b2:ee:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291f5e6d-adaa-43d5-93a3-f96c4b72f3c8 Validity Not Before: Apr 16 17:00:03 2026 GMT Not After : Apr 18 17:00:00 2026 GMT Subject: CN=aad08dbd-e665-411a-a0f1-e5e355a944c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ca:e8:ae:f6:41:24:ab:e4:b1:bb:a4:24:ce: 5d:77:b6:e1:8f:d1:2b:d1:36:6e:eb:5e:cb:66:71: 19:8d:31:61:86:2b:e6:21:5b:5f:66:24:bf:aa:31: 80:5a:a1:eb:cc:79:4a:49:8e:75:2b:62:af:58:02: 21:77:b4:39:84:e6:a2:be:81:0d:71:bb:c8:5f:d1: 22:2a:67:10:de:75:71:1f:7f:11:61:d0:28:2d:9f: 03:c7:ea:aa:b6:5e:21:eb:b8:46:b1:e9:6c:bd:42: 6e:55:12:38:a1:9a:5d:66:f6:22:13:f3:fb:49:97: d6:95:3f:ad:18:a9:0f:c9:90:55:70:b7:71:4e:da: 7c:b2:dd:9c:bf:3c:4d:00:17:6e:59:3d:9b:c1:53: e7:ce:b5:fc:89:7f:8a:23:64:4c:87:8e:d5:74:1e: 00:86:b8:81:04:7d:17:9a:21:ec:35:30:b9:c3:4b: fc:8f:7a:3b:e8:29:59:24:7e:80:50:6b:b8:c1:3b: 49:0b:53:f2:52:4b:b7:26:5c:f7:a3:7b:d1:fb:65: 6e:c6:ef:3a:30:16:c0:d6:d9:29:8c:47:7a:64:36: 95:8e:27:e4:37:f1:8d:97:70:4e:66:ac:0f:3c:bf: b0:50:bd:c2:d0:35:fa:ea:dd:4f:f3:26:17:bf:65: 9f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:DA:F2:5F:30:14:E3:1F:76:5E:00:B7:4E:E6:23:B6:75:01:39:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8.crl X509v3 Authority Key Identifier: keyid:37:55:82:67:68:90:62:3F:A3:B2:67:E3:53:85:66:F2:16:A2:1E:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291f5e6d-adaa-43d5-93a3-f96c4b72f3c8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:8f:2a:4a:17:a5:f0:5b:35:ec:7c:0d:a1:be:fc:cf:69:9f: 87:d8:02:12:a2:a7:10:fe:fc:1b:28:0b:b1:14:d3:60:fe:79: 7d:44:69:cb:54:75:c8:4e:c0:9e:34:19:b5:c0:40:9c:44:75: 4a:ba:fd:38:72:28:e5:0a:af:36:2f:f7:69:5b:79:93:9e:44: 5d:48:a4:0d:fc:03:bb:35:80:9b:52:fc:bf:78:f4:89:94:ae: 16:ed:d1:fa:51:59:af:4b:7d:4d:70:8a:fb:54:3a:2d:f4:e7: 37:d7:58:ca:0c:98:06:44:ef:cc:66:64:e7:13:f1:35:4a:98: e7:10:bf:c5:69:a6:c8:56:22:c1:3c:1b:34:41:10:87:04:54: b3:03:ba:0d:02:19:89:bb:53:1c:08:78:8c:d5:bf:ef:c8:b8: 74:83:25:63:85:1e:0e:d2:1f:29:80:82:0f:36:ab:af:86:47: 94:6a:7f:e1:23:24:da:a4:94:51:93:9d:d4:9a:88:96:74:02: 12:d2:30:1a:b5:f9:e8:c8:23:22:1d:f4:cb:d5:4c:2d:85:4c: e3:a7:dc:aa:fa:47:a5:76:59:37:79:b9:3b:ee:ee:2e:35:57: 7d:11:f5:c5:2e:a5:80:a7:ed:5b:31:fc:26:d6:07:4e:03:37: 41:89:03:5f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2HDBxHTBqdLrLu+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjkxZjVlNmQtYWRhYS00M2Q1LTkzYTMtZjk2YzRiNzJm M2M4MB4XDTI2MDQxNjE3MDAwM1oXDTI2MDQxODE3MDAwMFowLzEtMCsGA1UEAxMk YWFkMDhkYmQtZTY2NS00MTFhLWEwZjEtZTVlMzU1YTk0NGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8rorvZBJKvksbukJM5dd7bhj9Er0TZu617L ZnEZjTFhhivmIVtfZiS/qjGAWqHrzHlKSY51K2KvWAIhd7Q5hOaivoENcbvIX9Ei KmcQ3nVxH38RYdAoLZ8Dx+qqtl4h67hGselsvUJuVRI4oZpdZvYiE/P7SZfWlT+t GKkPyZBVcLdxTtp8st2cvzxNABduWT2bwVPnzrX8iX+KI2RMh47VdB4AhriBBH0X miHsNTC5w0v8j3o76ClZJH6AUGu4wTtJC1PyUku3Jlz3o3vR+2Vuxu86MBbA1tkp jEd6ZDaVjifkN/GNl3BOZqwPPL+wUL3C0DX66t1P8yYXv2WfnQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCja8l8wFOMfdl4At07mI7Z1ATn9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOTFm NWU2ZC1hZGFhLTQzZDUtOTNhMy1mOTZjNGI3MmYzYzgvMjkxZjVlNmQtYWRhYS00 M2Q1LTkzYTMtZjk2YzRiNzJmM2M4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjkxZjVlNmQtYWRhYS00M2Q1LTkz YTMtZjk2YzRiNzJmM2M4LzI5MWY1ZTZkLWFkYWEtNDNkNS05M2EzLWY5NmM0Yjcy ZjNjOC5jcmwwHwYDVR0jBBgwFoAUN1WCZ2iQYj+jsmfjU4Vm8haiHgQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOTFmNWU2ZC1hZGFhLTQzZDUtOTNhMy1mOTZj NGI3MmYzYzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAZjypKF6XwWzXsfA2hvvzP aZ+H2AISoqcQ/vwbKAuxFNNg/nl9RGnLVHXITsCeNBm1wECcRHVKuv04cijlCq82 L/dpW3mTnkRdSKQN/AO7NYCbUvy/ePSJlK4W7dH6UVmvS31NcIr7VDot9Oc311jK DJgGRO/MZmTnE/E1SpjnEL/FaabIViLBPBs0QRCHBFSzA7oNAhmJu1McCHiM1b/v yLh0gyVjhR4O0h8pgIIPNquvhkeUan/hIyTapJRRk53UmoiWdAIS0jAatfnoyCMi HfTL1UwthUzjp9yq+keldlk3ebk77u4uNVd9EfXFLqWAp+1bMfwm1gdOAzdBiQNf -----END CERTIFICATE-----Generated at Fri Apr 17 16:24:05 2026 by rpki-client