$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.mft File: d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.mft (raw, json) Hash identifier: 9aVNrBp+hfYGLRAMNhOsi5XfI/cNA3fCgM0T1r400ME= Subject key identifier: A5:CB:1F:E6:20:3A:95:C9:1A:EB:FE:45:7A:24:59:67:3D:32:6E:16 Authority key identifier: 9F:17:3E:C4:F4:5B:C5:67:20:A6:CD:81:15:0D:C2:4B:63:29:4E:F5 Certificate issuer: /CN=d131ffaa-85f2-4bd5-8961-9dc8adf15b8b Certificate serial: 010D0C9F4328584D8729E679D8240BC7B8F2D260 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.mft Manifest number: 010D0C9F4328584073A81E42E921E4AC9A93D469 Signing time: Thu 16 Apr 2026 18:00:03 +0000 Manifest this update: Thu 16 Apr 2026 18:00:03 +0000 Manifest next update: Sat 18 Apr 2026 18:00:00 +0000 Files and hashes: 1: 09ef4b44-ba95-30f1-91ff-60c41204628c.roa (hash: 44LxGEeqmLpooWYMX3mvuVokgRwDoPaC/ZSXSP6sFzs=) 2: be6ca291-2d27-3d55-bd3a-edcae2d27349.roa (hash: URRfqfChIGAKUlFpWpKMGOIEqidXZWxyt0kxO3W7kiY=) 3: d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.crl (hash: Kk0/m++yTEOhE+ADKgUaxIEYRpXyxHDwqCifkELnJAg=) 4: de8e7996-bfa8-34b8-b2b8-a025b6adc8c8.roa (hash: CgZNHJMKF6ZnYzTiRwiXc6cH1oqkHN9diCqZgjzb92s=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:29:e6:79:d8:24:0b:c7:b8:f2:d2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d131ffaa-85f2-4bd5-8961-9dc8adf15b8b Validity Not Before: Apr 16 18:00:03 2026 GMT Not After : Apr 18 18:00:00 2026 GMT Subject: CN=a458ff95-99b2-4ab0-a2b2-edc4de24fda1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:da:c3:9c:2c:a2:7b:c8:9d:e1:05:67:67:f0: 9c:85:e1:92:f7:93:60:70:8a:80:be:50:f7:f7:e7: e0:8d:84:48:1f:48:21:7a:f2:aa:88:6c:32:c8:ec: f2:25:e8:6c:d2:cc:c3:11:0c:df:f4:0d:45:2b:54: 1b:bb:82:3e:c1:2f:f1:ac:4e:19:c3:7c:76:e7:c8: 9c:03:c2:57:ed:75:70:d1:88:a5:bd:98:2d:37:fb: 65:5f:85:0d:04:01:c0:01:d8:a0:ee:72:7f:c6:e8: 07:5a:a3:a9:ec:4d:92:cc:60:90:19:28:f8:e9:da: 47:bf:1b:93:e7:0c:7f:c7:83:a4:72:9a:63:1c:29: 58:32:d8:52:fa:6c:e5:fe:ac:13:0f:d4:1a:5b:ad: 4e:7f:b5:5a:98:bf:23:7f:10:44:d0:fa:65:19:21: 3a:80:55:b3:8b:67:13:3d:8c:2e:43:3f:77:46:58: 75:3a:37:31:18:89:44:07:c3:00:8f:31:e9:c7:ae: f7:b2:60:18:3a:90:35:6d:4c:95:80:5d:13:87:e7: 2c:59:28:63:af:3e:69:8a:10:28:fc:29:3b:db:a2: f4:b9:f2:58:66:4c:03:6d:0d:c7:aa:68:98:2c:9c: 94:09:73:82:11:74:e2:82:57:09:a8:5d:f4:3e:d4: e9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:CB:1F:E6:20:3A:95:C9:1A:EB:FE:45:7A:24:59:67:3D:32:6E:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.crl X509v3 Authority Key Identifier: keyid:9F:17:3E:C4:F4:5B:C5:67:20:A6:CD:81:15:0D:C2:4B:63:29:4E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:35:ed:18:d8:20:7d:ab:e8:f8:c9:8e:8f:83:d1:e9:34:8c: 6f:fb:ed:07:c1:f6:ee:57:80:30:b0:83:b1:89:e0:db:51:56: e4:c1:59:83:34:5b:c0:81:40:aa:0b:a2:67:b5:1f:a6:2e:0e: a3:0a:6a:31:63:25:15:20:1d:6a:2b:22:9e:dd:ab:fb:4c:3a: e2:b7:9d:de:be:a2:38:97:b4:90:aa:ae:3e:58:09:72:45:c0: e9:90:d0:72:65:d6:ef:89:20:b3:d1:19:18:81:25:f9:25:e7: 2d:19:94:8e:02:7d:c0:b2:54:e1:97:d7:aa:c2:b0:c4:45:0e: 07:ab:2e:06:63:b8:40:b5:6f:ed:b8:33:fd:62:eb:52:56:d8: dc:bd:5a:2d:83:33:b6:0b:44:8b:ee:a5:f2:82:2a:e3:9b:62: f8:57:37:13:9f:1a:0d:c9:2e:81:2d:98:30:07:77:39:5e:4a: b9:13:51:86:ce:21:f3:e5:1b:ae:0e:3a:59:24:35:ff:1d:ad: 73:bc:9a:0f:75:e3:44:28:41:97:1b:64:59:f5:a2:16:61:83: 40:29:7d:da:cc:1c:8f:89:b7:0a:79:5f:65:23:ba:0f:0f:be: 0d:22:c8:f4:48:2c:d9:a5:28:c9:38:4f:cc:f9:f8:f9:14:55: 94:ec:ba:ef -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2HKeZ52CQLx7jy0mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDEzMWZmYWEtODVmMi00YmQ1LTg5NjEtOWRjOGFkZjE1 YjhiMB4XDTI2MDQxNjE4MDAwM1oXDTI2MDQxODE4MDAwMFowLzEtMCsGA1UEAxMk YTQ1OGZmOTUtOTliMi00YWIwLWEyYjItZWRjNGRlMjRmZGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNrDnCyie8id4QVnZ/CcheGS95NgcIqAvlD3 9+fgjYRIH0ghevKqiGwyyOzyJehs0szDEQzf9A1FK1Qbu4I+wS/xrE4Zw3x258ic A8JX7XVw0YilvZgtN/tlX4UNBAHAAdig7nJ/xugHWqOp7E2SzGCQGSj46dpHvxuT 5wx/x4OkcppjHClYMthS+mzl/qwTD9QaW61Of7VamL8jfxBE0PplGSE6gFWzi2cT PYwuQz93Rlh1OjcxGIlEB8MAjzHpx673smAYOpA1bUyVgF0Th+csWShjrz5pihAo /Ck726L0ufJYZkwDbQ3HqmiYLJyUCXOCEXTiglcJqF30PtTpIwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKXLH+YgOpXJGuv+RXokWWc9Mm4WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMTMx ZmZhYS04NWYyLTRiZDUtODk2MS05ZGM4YWRmMTViOGIvZDEzMWZmYWEtODVmMi00 YmQ1LTg5NjEtOWRjOGFkZjE1YjhiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDEzMWZmYWEtODVmMi00YmQ1LTg5 NjEtOWRjOGFkZjE1YjhiL2QxMzFmZmFhLTg1ZjItNGJkNS04OTYxLTlkYzhhZGYx NWI4Yi5jcmwwHwYDVR0jBBgwFoAUnxc+xPRbxWcgps2BFQ3CS2MpTvUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMTMxZmZhYS04NWYyLTRiZDUtODk2MS05ZGM4 YWRmMTViOGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBXNe0Y2CB9q+j4yY6Pg9Hp NIxv++0HwfbuV4AwsIOxieDbUVbkwVmDNFvAgUCqC6JntR+mLg6jCmoxYyUVIB1q KyKe3av7TDrit53evqI4l7SQqq4+WAlyRcDpkNByZdbviSCz0RkYgSX5JectGZSO An3AslThl9eqwrDERQ4Hqy4GY7hAtW/tuDP9YutSVtjcvVotgzO2C0SL7qXygirj m2L4VzcTnxoNyS6BLZgwB3c5Xkq5E1GGziHz5RuuDjpZJDX/Ha1zvJoPdeNEKEGX G2RZ9aIWYYNAKX3azByPibcKeV9lI7oPD74NIsj0SCzZpSjJOE/M+fj5FFWU7Lrv -----END CERTIFICATE-----Generated at Fri Apr 17 09:52:07 2026 by rpki-client