$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6/2a604bed-acbd-4708-aa13-73f700eaabf6.mft File: 2a604bed-acbd-4708-aa13-73f700eaabf6.mft (raw, json) Hash identifier: E7rda/ky6D6sp9zlhjWWHCoXzKgD7yDQfUkBIH4+CSY= Subject key identifier: 32:A1:19:33:1E:F1:47:CE:FC:CB:F9:3B:59:FE:78:C8:B6:AC:F1:73 Authority key identifier: 6C:57:E2:66:32:44:4A:B5:CE:A5:FA:DF:68:97:DC:BB:59:81:95:63 Certificate issuer: /CN=2a604bed-acbd-4708-aa13-73f700eaabf6 Certificate serial: 010D0C9F4328584D86D08D9BF1CC44C2991B8D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6/2a604bed-acbd-4708-aa13-73f700eaabf6.mft Manifest number: 010D0C9F4328584073A857F838F4DBE70B52BF1D Signing time: Thu 16 Apr 2026 15:00:03 +0000 Manifest this update: Thu 16 Apr 2026 15:00:03 +0000 Manifest next update: Sun 19 Apr 2026 15:00:00 +0000 Files and hashes: 1: 2a604bed-acbd-4708-aa13-73f700eaabf6.crl (hash: UcReLr0wMK3UlfZQ3AK9sPV4dOBoPQ41pVIFis6a+pQ=) 2: 9441ac5d-8038-3804-a070-de79dbd3c348.roa (hash: yFrEcYwI844pZYI6AXQw/MyArZwMd5ZyluTAinVbwbo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6/2a604bed-acbd-4708-aa13-73f700eaabf6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6/2a604bed-acbd-4708-aa13-73f700eaabf6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:d0:8d:9b:f1:cc:44:c2:99:1b:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a604bed-acbd-4708-aa13-73f700eaabf6 Validity Not Before: Apr 16 15:00:03 2026 GMT Not After : Apr 19 15:00:00 2026 GMT Subject: CN=11fd54bf-6087-4057-b049-cae866c1e9de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6f:18:e3:eb:cf:37:fe:ce:11:e8:e1:a6:b8: ce:d9:aa:48:49:28:d5:26:a5:08:d0:b7:62:33:55: f3:0d:2c:59:57:c1:c3:8e:69:9c:2d:8e:b9:52:a0: bd:57:c9:bd:9c:dd:f9:39:fd:3e:c4:f1:7c:8d:b4: 80:81:de:95:80:b8:63:b1:fc:0f:0f:ae:f7:79:0d: 6c:a3:0c:d7:0a:37:bb:15:4e:34:1a:6b:6e:19:87: 72:19:a0:5d:97:7b:3c:cb:ff:62:b9:e0:3e:9b:9d: 74:7d:df:07:1a:64:e7:6e:a0:2a:36:33:07:ba:80: 17:23:45:02:6d:aa:bb:43:09:c2:df:b4:96:f1:3f: 10:ce:77:72:f6:d9:02:c7:9f:22:c8:b7:11:97:70: 85:ed:de:5f:0e:78:04:ac:12:09:07:f0:d1:a4:03: c2:63:c0:cc:93:9e:c4:6d:1f:c6:41:ed:1f:92:22: ba:f0:04:ed:37:a2:5d:cb:41:19:d5:99:ac:cc:ce: 9a:06:6c:80:8e:ac:ac:30:72:71:3b:9c:ac:3f:db: 99:0f:6f:00:da:f5:e3:29:6b:68:38:f3:d3:47:8a: 88:19:17:55:11:cb:89:07:48:1c:f2:25:6a:b8:fe: f3:98:7a:99:b0:d4:1e:df:f1:be:f7:e3:08:a3:17: e1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A1:19:33:1E:F1:47:CE:FC:CB:F9:3B:59:FE:78:C8:B6:AC:F1:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6/2a604bed-acbd-4708-aa13-73f700eaabf6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6/2a604bed-acbd-4708-aa13-73f700eaabf6.crl X509v3 Authority Key Identifier: keyid:6C:57:E2:66:32:44:4A:B5:CE:A5:FA:DF:68:97:DC:BB:59:81:95:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a604bed-acbd-4708-aa13-73f700eaabf6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:08:7c:f5:8d:a7:a3:b9:c7:ab:ff:25:96:d1:2e:77:a6:10: 61:37:00:bd:c6:a1:27:7a:e2:1f:8e:26:f4:5a:ad:4a:8a:ae: a8:33:22:7b:69:ff:11:c2:3d:20:0a:4c:4b:b4:41:02:8b:b8: 52:5c:89:36:2e:ef:4d:00:85:d0:ee:30:38:3b:d6:b5:c1:b4: 83:78:3f:22:45:4a:58:b4:a6:b5:ff:60:78:c3:05:d6:82:45: 99:33:a4:69:33:d7:c5:08:38:67:55:b2:43:0d:de:6e:da:0c: 9d:af:8e:a3:39:f1:b0:df:cd:97:30:05:ef:cc:94:ac:23:93: f4:54:15:fd:14:83:49:04:7a:da:6f:61:90:19:f5:e9:bc:f8: 77:25:0e:9d:ca:b9:5d:d1:d5:79:43:bb:9e:86:2c:da:0a:16: 7e:25:b4:9d:8a:26:a1:22:19:19:d1:74:45:98:0b:86:56:5e: da:36:eb:03:3c:fc:62:c6:b7:f7:7e:15:cd:d5:5a:69:2f:51: b7:1e:01:46:45:7a:f0:8d:66:47:f7:33:28:43:ed:f1:1e:c2: e6:ee:27:5f:03:4a:de:95:77:91:b2:c4:78:31:7d:69:e4:5e: be:88:3b:52:40:72:e8:3d:38:93:fe:a8:8b:0a:03:ad:ec:5c: 0d:d0:2f:e1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2G0I2b8cxEwpkbjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE2MDRiZWQtYWNiZC00NzA4LWFhMTMtNzNmNzAwZWFh YmY2MB4XDTI2MDQxNjE1MDAwM1oXDTI2MDQxOTE1MDAwMFowLzEtMCsGA1UEAxMk MTFmZDU0YmYtNjA4Ny00MDU3LWIwNDktY2FlODY2YzFlOWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjW8Y4+vPN/7OEejhprjO2apISSjVJqUI0Ldi M1XzDSxZV8HDjmmcLY65UqC9V8m9nN35Of0+xPF8jbSAgd6VgLhjsfwPD673eQ1s owzXCje7FU40GmtuGYdyGaBdl3s8y/9iueA+m510fd8HGmTnbqAqNjMHuoAXI0UC baq7QwnC37SW8T8Qzndy9tkCx58iyLcRl3CF7d5fDngErBIJB/DRpAPCY8DMk57E bR/GQe0fkiK68ATtN6Jdy0EZ1ZmszM6aBmyAjqysMHJxO5ysP9uZD28A2vXjKWto OPPTR4qIGRdVEcuJB0gc8iVquP7zmHqZsNQe3/G+9+MIoxfhqwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDKhGTMe8UfO/Mv5O1n+eMi2rPFzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYTYw NGJlZC1hY2JkLTQ3MDgtYWExMy03M2Y3MDBlYWFiZjYvMmE2MDRiZWQtYWNiZC00 NzA4LWFhMTMtNzNmNzAwZWFhYmY2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmE2MDRiZWQtYWNiZC00NzA4LWFh MTMtNzNmNzAwZWFhYmY2LzJhNjA0YmVkLWFjYmQtNDcwOC1hYTEzLTczZjcwMGVh YWJmNi5jcmwwHwYDVR0jBBgwFoAUbFfiZjJESrXOpfrfaJfcu1mBlWMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYTYwNGJlZC1hY2JkLTQ3MDgtYWExMy03M2Y3 MDBlYWFiZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAOCHz1jaejucer/yWW0S53 phBhNwC9xqEneuIfjib0Wq1Kiq6oMyJ7af8Rwj0gCkxLtEECi7hSXIk2Lu9NAIXQ 7jA4O9a1wbSDeD8iRUpYtKa1/2B4wwXWgkWZM6RpM9fFCDhnVbJDDd5u2gydr46j OfGw382XMAXvzJSsI5P0VBX9FINJBHrab2GQGfXpvPh3JQ6dyrld0dV5Q7uehiza ChZ+JbSdiiahIhkZ0XRFmAuGVl7aNusDPPxixrf3fhXN1VppL1G3HgFGRXrwjWZH 9zMoQ+3xHsLm7idfA0relXeRssR4MX1p5F6+iDtSQHLoPTiT/qiLCgOt7FwN0C/h -----END CERTIFICATE-----Generated at Fri Apr 17 11:06:17 2026 by rpki-client