$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.mft File: 91c894d6-b991-4966-bec4-7c58dac779b5.mft (raw, json) Hash identifier: LF9Ch7LwQvPFdfCfkCVcPecT+qQO6XZRoAbELmERBgk= Subject key identifier: 25:9B:DA:87:0A:C1:30:84:7F:EF:EA:B6:69:F1:E2:1A:B7:48:2E:D1 Authority key identifier: 13:B2:2C:28:79:5A:A5:CA:BB:C0:79:BF:76:C3:D6:8B:67:23:7B:C2 Certificate issuer: /CN=91c894d6-b991-4966-bec4-7c58dac779b5 Certificate serial: 010D0C9F4328584D8853ABED178502A42CAA0D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.mft Manifest number: 010D0C9F4328584073A83B5D8905A808541C5B28 Signing time: Fri 17 Apr 2026 04:00:03 +0000 Manifest this update: Fri 17 Apr 2026 04:00:03 +0000 Manifest next update: Sun 19 Apr 2026 04:00:00 +0000 Files and hashes: 1: 91c894d6-b991-4966-bec4-7c58dac779b5.crl (hash: uTeFDTaKJT4OznV5Y8rCSsHsIY6JJANZO8U3u2EhWfY=) 2: ab708923-0613-3a2c-b170-cadae0fe2f49.roa (hash: t2+4m8lcVOCJ40uPDpAS5QYrtpf+xC4ezXZEuKP0wyE=) 3: e07ffccc-e92d-3740-bf40-b1ce295ad731.roa (hash: QBGMDIfoQcE+nwrmlEoFu5uATeJXKlHyRVCc7kM0CEk=) 4: fdbb69fe-b9b0-3266-b784-4d8845e65f53.roa (hash: 7QsaCbAngYMbJsicA8oJgZWCK1ajwVSt9QOfZl2vDVM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:88:53:ab:ed:17:85:02:a4:2c:aa:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91c894d6-b991-4966-bec4-7c58dac779b5 Validity Not Before: Apr 17 04:00:03 2026 GMT Not After : Apr 19 04:00:00 2026 GMT Subject: CN=3a3ffe3c-1824-4849-b6fc-1b1868e2f5b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7f:a8:63:16:4b:e8:79:e7:3d:84:9a:3b:02: c4:2d:9f:02:88:3e:a7:ee:49:85:c6:ec:ab:af:37: c4:14:09:45:0f:90:46:e1:59:93:b6:90:06:14:d7: 2d:c7:b6:9d:47:ad:2e:f7:e2:f2:74:84:0e:50:58: a8:6b:74:2b:8c:74:f2:68:d1:f8:91:89:a8:d2:8d: cf:67:3b:4f:e8:80:79:f0:b7:8c:a7:8f:ca:2a:60: 14:16:c7:fe:60:0c:dd:c1:86:1d:13:2c:20:15:9d: 3e:6b:5c:d6:b7:d6:b7:c7:7a:08:99:f2:aa:8a:18: 83:d6:42:96:f1:03:0f:d1:d3:11:de:5a:0a:dc:82: bd:ce:32:1a:58:4c:87:ae:f3:88:1b:ca:dd:7c:82: f4:86:0e:30:f8:71:27:15:3a:2a:45:4d:c8:44:86: 27:70:19:21:3b:b5:65:7a:15:66:16:bc:a2:85:4a: d8:fb:dc:e2:bb:23:ae:00:77:15:ec:03:b0:03:c8: 53:4e:87:78:64:f7:86:0f:ed:d1:ee:c9:a1:3e:36: c7:b5:17:df:ce:c2:d0:ed:6f:b2:21:6f:c6:81:c8: 7d:f4:c8:2c:52:36:f8:38:6b:7f:93:30:32:f0:42: b3:3f:46:59:ec:2e:82:85:59:80:15:1a:8c:35:39: 4f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:9B:DA:87:0A:C1:30:84:7F:EF:EA:B6:69:F1:E2:1A:B7:48:2E:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.crl X509v3 Authority Key Identifier: keyid:13:B2:2C:28:79:5A:A5:CA:BB:C0:79:BF:76:C3:D6:8B:67:23:7B:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:a7:1d:2d:a6:60:01:e8:df:57:86:4f:d2:9d:2c:45:e9:55: 00:8c:40:22:b9:81:7f:62:ad:d1:9d:f9:69:1e:cc:be:c9:7e: 70:37:8a:eb:5d:b2:d6:bd:3a:1f:16:f9:b5:2c:11:6f:58:87: 32:51:60:c6:a6:4f:44:f6:76:13:4c:67:4b:db:56:3e:dd:c5: d8:e8:8c:4d:d5:b4:17:90:72:2b:b9:27:8e:e6:21:47:a1:8f: f1:38:dd:e2:07:b4:5b:4f:d8:3d:77:90:77:da:0c:f7:57:50: 12:3c:ea:dd:d0:e8:ee:94:af:db:0e:7d:09:a3:4f:9d:46:96: ae:48:b3:ff:97:4d:d3:94:28:16:22:e8:0b:0a:1c:e4:7a:b5: d2:b0:f4:23:af:1a:70:07:1e:e4:e0:41:a6:df:42:80:74:3f: d1:7b:73:5f:7c:7f:f6:9c:9f:e3:e4:03:16:f3:9e:b1:2d:8f: 15:dd:76:31:d7:f2:ef:01:f7:a5:b5:d2:ec:fa:b4:58:3b:f7: b5:ca:c8:0f:df:96:a2:b8:85:8f:1d:e9:99:bf:4a:c3:78:36: 11:45:a3:13:9e:0e:38:16:82:50:3c:69:75:f7:5e:5b:6c:6f: a1:b4:68:d1:bc:0e:06:df:be:88:63:d3:d7:20:cf:9c:6c:80: 6a:73:fd:2c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2IU6vtF4UCpCyqDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFjODk0ZDYtYjk5MS00OTY2LWJlYzQtN2M1OGRhYzc3 OWI1MB4XDTI2MDQxNzA0MDAwM1oXDTI2MDQxOTA0MDAwMFowLzEtMCsGA1UEAxMk M2EzZmZlM2MtMTgyNC00ODQ5LWI2ZmMtMWIxODY4ZTJmNWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3+oYxZL6HnnPYSaOwLELZ8CiD6n7kmFxuyr rzfEFAlFD5BG4VmTtpAGFNctx7adR60u9+LydIQOUFioa3QrjHTyaNH4kYmo0o3P ZztP6IB58LeMp4/KKmAUFsf+YAzdwYYdEywgFZ0+a1zWt9a3x3oImfKqihiD1kKW 8QMP0dMR3loK3IK9zjIaWEyHrvOIG8rdfIL0hg4w+HEnFToqRU3IRIYncBkhO7Vl ehVmFryihUrY+9ziuyOuAHcV7AOwA8hTTod4ZPeGD+3R7smhPjbHtRffzsLQ7W+y IW/Ggch99MgsUjb4OGt/kzAy8EKzP0ZZ7C6ChVmAFRqMNTlPaQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCWb2ocKwTCEf+/qtmnx4hq3SC7RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MWM4 OTRkNi1iOTkxLTQ5NjYtYmVjNC03YzU4ZGFjNzc5YjUvOTFjODk0ZDYtYjk5MS00 OTY2LWJlYzQtN2M1OGRhYzc3OWI1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTFjODk0ZDYtYjk5MS00OTY2LWJl YzQtN2M1OGRhYzc3OWI1LzkxYzg5NGQ2LWI5OTEtNDk2Ni1iZWM0LTdjNThkYWM3 NzliNS5jcmwwHwYDVR0jBBgwFoAUE7IsKHlapcq7wHm/dsPWi2cje8IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MWM4OTRkNi1iOTkxLTQ5NjYtYmVjNC03YzU4 ZGFjNzc5YjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBopx0tpmAB6N9Xhk/SnSxF 6VUAjEAiuYF/Yq3RnflpHsy+yX5wN4rrXbLWvTofFvm1LBFvWIcyUWDGpk9E9nYT TGdL21Y+3cXY6IxN1bQXkHIruSeO5iFHoY/xON3iB7RbT9g9d5B32gz3V1ASPOrd 0OjulK/bDn0Jo0+dRpauSLP/l03TlCgWIugLChzkerXSsPQjrxpwBx7k4EGm30KA dD/Re3NffH/2nJ/j5AMW856xLY8V3XYx1/LvAfeltdLs+rRYO/e1ysgP35aiuIWP HemZv0rDeDYRRaMTng44FoJQPGl1915bbG+htGjRvA4G376IY9PXIM+cbIBqc/0s -----END CERTIFICATE-----Generated at Fri Apr 17 17:18:18 2026 by rpki-client