$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.mft File: e35c7007-7a33-480f-a32e-40481f8f1792.mft (raw, json) Hash identifier: zrtMW+brC0BrNaxOLtV/M45pyvQKtLL1f4qOMV29kf0= Subject key identifier: 9A:DE:84:15:3F:9C:A2:10:B1:B3:1B:E0:54:C7:F6:71:09:2E:B4:45 Authority key identifier: 69:C5:93:B3:CB:4A:4F:6B:F2:C7:1E:19:B2:7A:66:85:BA:C2:EA:EC Certificate issuer: /CN=e35c7007-7a33-480f-a32e-40481f8f1792 Certificate serial: 010D0C9F4328584D8960ACC62E6B9A7FCE020400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.mft Manifest number: 010D0C9F4328584073A828D6B15D74B5AB65F2A1 Signing time: Fri 17 Apr 2026 13:02:04 +0000 Manifest this update: Fri 17 Apr 2026 13:02:04 +0000 Manifest next update: Sat 18 Apr 2026 21:00:00 +0000 Files and hashes: 1: 0ce0c169-ef1f-32ec-967d-086703bd7584.roa (hash: 4Pmuvf4ZvrOXn9wICQSDpdwPe4Zjnre/3q2Izh1Qg6A=) 2: 14f2a9f3-f45d-3130-a7b0-514fb7251684.roa (hash: owyCHPQC2EmX+M3sgXI4or4cDgt5PXdfaHzfQxj6KBQ=) 3: 2c8c6ad3-e963-3175-a096-858ac3ef6191.roa (hash: smKGcC6et5L31jhzsCtioG5eSBZYkWRWvv0AN9XHgog=) 4: 5388bc64-7e00-3aef-b50b-4426eee59515.roa (hash: 6xqg2y5Vbw1KUeuZIRx6w1FkxnNaEF90d//nPsQ2nP8=) 5: 715a79b8-7d6d-38c6-aaad-3e50a6ebe785.roa (hash: /1P8HE+dTqYh6GlZU6fT7PCBaoiRvV3pquSsvJ3+I60=) 6: a3f0893a-35f0-324d-b592-cfd2098b1ae7.roa (hash: Uhlcbc2RZonyu1ZmpMzCF+ELl/cee7RKpw15kK9/6oU=) 7: e35c7007-7a33-480f-a32e-40481f8f1792.crl (hash: OoKycdsTKI5qE1u3CT86c3BlQEpmLFH53oIojuU/Gm0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:89:60:ac:c6:2e:6b:9a:7f:ce:02:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e35c7007-7a33-480f-a32e-40481f8f1792 Validity Not Before: Apr 17 13:02:04 2026 GMT Not After : Apr 18 21:00:00 2026 GMT Subject: CN=8aa1a689-a4f1-4e85-bcba-ba0c5b4ad5a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:1e:33:6f:f5:66:aa:27:47:1f:31:a9:d1:8d: d2:8d:bd:f0:ae:bb:c3:69:41:01:7f:73:28:83:e1: 26:f5:c5:2d:66:95:b1:e0:fa:f1:42:02:af:92:24: 91:bc:f3:c9:a9:f2:e7:0c:24:89:43:2b:cc:d3:ec: c9:8a:75:bf:f9:8b:31:19:b9:79:47:bd:f3:ed:74: 2b:af:cb:12:45:6d:be:6a:de:a5:03:78:a4:f6:6e: e3:ee:70:b1:ea:e7:61:7f:56:0a:39:58:88:c3:5a: 30:be:b6:1f:9d:fd:33:4b:d7:2f:f9:6d:01:33:e8: 34:64:42:e1:dd:d1:65:91:01:97:13:38:a3:2d:99: e4:e5:96:42:80:40:42:61:e1:e5:56:8a:d4:83:6f: a4:14:79:76:be:e2:3e:3f:49:e0:0a:08:05:05:30: af:9c:35:53:57:04:72:bf:62:37:d2:cd:2b:13:1d: 67:c6:b7:db:d6:be:a3:01:c0:00:51:bd:df:b0:ac: e0:dc:bf:c9:fe:c9:46:53:58:09:49:fd:e8:23:23: 15:00:a1:64:6b:95:7e:d8:95:f7:67:02:d5:d2:88: f4:92:9c:b1:0d:16:40:ae:db:fc:16:9e:29:1a:63: 97:6e:a2:40:c4:78:dd:51:90:a5:04:60:57:82:0e: 3f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:DE:84:15:3F:9C:A2:10:B1:B3:1B:E0:54:C7:F6:71:09:2E:B4:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.crl X509v3 Authority Key Identifier: keyid:69:C5:93:B3:CB:4A:4F:6B:F2:C7:1E:19:B2:7A:66:85:BA:C2:EA:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:ae:30:3d:79:4e:49:c2:65:e5:11:93:0f:54:a0:ac:7c:63: de:6b:c1:bb:4b:41:96:44:e1:99:e2:78:ec:d7:c9:a5:d0:d3: c9:8e:aa:90:06:86:2e:97:bb:72:3f:30:3a:de:0c:6c:4e:d6: 63:73:85:c0:cc:9a:40:24:c6:57:1b:4f:4b:c7:3d:04:38:e9: 3a:58:2d:01:92:2a:a6:89:04:19:aa:2d:0e:f5:6c:ac:13:fb: 55:0e:49:12:78:5a:43:d4:57:4b:e9:e9:bb:7a:9a:c5:f1:5b: 71:51:08:10:be:a9:bc:17:5a:bf:21:ec:5e:a5:58:57:89:2d: dd:cd:42:a0:ee:58:73:75:45:3d:3f:8d:14:05:fe:3a:f2:fe: a8:48:6e:cf:8f:2f:64:70:f7:d5:82:9b:16:aa:63:3e:30:09: 5c:14:b0:9f:c5:2d:14:16:29:2d:40:4d:50:39:88:8c:3d:8f: a1:ad:f1:fe:34:41:b9:51:82:b7:d3:5c:f8:b1:79:6b:75:60: 69:92:f3:66:cf:84:25:99:45:3b:06:b4:d8:99:d9:e9:2d:1d: 46:8a:f4:95:f7:ea:3c:ce:08:69:d4:9e:a7:3d:e6:9f:63:a1: da:9b:95:58:4d:56:f2:dd:c2:f3:cb:71:0c:12:ce:be:28:a2: 7c:23:aa:c8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2JYKzGLmuaf84CBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM1YzcwMDctN2EzMy00ODBmLWEzMmUtNDA0ODFmOGYx NzkyMB4XDTI2MDQxNzEzMDIwNFoXDTI2MDQxODIxMDAwMFowLzEtMCsGA1UEAxMk OGFhMWE2ODktYTRmMS00ZTg1LWJjYmEtYmEwYzViNGFkNWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgx4zb/VmqidHHzGp0Y3Sjb3wrrvDaUEBf3Mo g+Em9cUtZpWx4PrxQgKvkiSRvPPJqfLnDCSJQyvM0+zJinW/+YsxGbl5R73z7XQr r8sSRW2+at6lA3ik9m7j7nCx6udhf1YKOViIw1owvrYfnf0zS9cv+W0BM+g0ZELh 3dFlkQGXEzijLZnk5ZZCgEBCYeHlVorUg2+kFHl2vuI+P0ngCggFBTCvnDVTVwRy v2I30s0rEx1nxrfb1r6jAcAAUb3fsKzg3L/J/slGU1gJSf3oIyMVAKFka5V+2JX3 ZwLV0oj0kpyxDRZArtv8Fp4pGmOXbqJAxHjdUZClBGBXgg4/VwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJrehBU/nKIQsbMb4FTH9nEJLrRFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMzVj NzAwNy03YTMzLTQ4MGYtYTMyZS00MDQ4MWY4ZjE3OTIvZTM1YzcwMDctN2EzMy00 ODBmLWEzMmUtNDA0ODFmOGYxNzkyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTM1YzcwMDctN2EzMy00ODBmLWEz MmUtNDA0ODFmOGYxNzkyL2UzNWM3MDA3LTdhMzMtNDgwZi1hMzJlLTQwNDgxZjhm MTc5Mi5jcmwwHwYDVR0jBBgwFoAUacWTs8tKT2vyxx4ZsnpmhbrC6uwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lMzVjNzAwNy03YTMzLTQ4MGYtYTMyZS00MDQ4 MWY4ZjE3OTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCTrjA9eU5JwmXlEZMPVKCs fGPea8G7S0GWROGZ4njs18ml0NPJjqqQBoYul7tyPzA63gxsTtZjc4XAzJpAJMZX G09Lxz0EOOk6WC0BkiqmiQQZqi0O9WysE/tVDkkSeFpD1FdL6em7eprF8VtxUQgQ vqm8F1q/IexepVhXiS3dzUKg7lhzdUU9P40UBf468v6oSG7Pjy9kcPfVgpsWqmM+ MAlcFLCfxS0UFiktQE1QOYiMPY+hrfH+NEG5UYK301z4sXlrdWBpkvNmz4QlmUU7 BrTYmdnpLR1GivSV9+o8zghp1J6nPeafY6Ham5VYTVby3cLzy3EMEs6+KKJ8I6rI -----END CERTIFICATE-----Generated at Fri Apr 17 15:21:10 2026 by rpki-client