$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.mft File: cb00fdf5-e28b-4e9d-9620-9504972438e2.mft (raw, json) Hash identifier: Tccl4CxTr/16g+SDZmWrxbybcpgtsSEbtbEP+ZKMpH0= Subject key identifier: D2:D5:1D:CB:D4:25:13:63:DE:04:96:63:66:E1:63:C3:CB:80:04:2B Authority key identifier: 49:08:38:C4:AD:B3:64:D0:A3:0D:D4:F7:B6:40:2F:C9:28:50:B8:8C Certificate issuer: /CN=cb00fdf5-e28b-4e9d-9620-9504972438e2 Certificate serial: 010D0C9F4328584D86B2C7EC017A843DF2F58700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.mft Manifest number: 010D0C9F4328584A89D04070D903DD88600D0B98 Signing time: Thu 16 Apr 2026 14:00:03 +0000 Manifest this update: Thu 16 Apr 2026 14:00:03 +0000 Manifest next update: Sun 19 Apr 2026 14:00:00 +0000 Files and hashes: 1: 8e87b93f-f077-3393-9870-dbc62c961c83.roa (hash: lIkk8i4+6OEo8gfesAfsXg3B0wZeai24b8iZzPyMkGI=) 2: cb00fdf5-e28b-4e9d-9620-9504972438e2.crl (hash: s8YM85yvTBEI+Z41qNGZ0xMOoZR83bDHsyi8KtSKxQY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:b2:c7:ec:01:7a:84:3d:f2:f5:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb00fdf5-e28b-4e9d-9620-9504972438e2 Validity Not Before: Apr 16 14:00:03 2026 GMT Not After : Apr 19 14:00:00 2026 GMT Subject: CN=4a08a6d2-8a65-412b-981d-f534792b0d05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b2:c1:7b:0a:68:3d:3e:82:06:e1:37:49:c1: 3a:52:f6:f8:6e:04:8d:6f:38:99:54:fa:e7:49:53: f5:38:56:30:e0:8a:8b:3f:95:d8:18:e6:aa:e8:c6: 8f:b6:2d:9d:0a:5f:8b:bb:2c:73:38:9c:8f:92:33: 6d:90:23:0d:01:a0:b7:1c:4f:b0:50:83:b3:6e:20: 62:5c:80:4a:42:1d:cd:e4:e5:93:35:17:f1:d9:e4: 7c:60:ee:3d:31:52:06:e1:1e:37:2b:66:e7:e3:ec: cf:34:36:c1:4a:7b:f4:79:7a:29:47:37:51:62:80: 91:81:4e:21:ef:2c:c1:2d:66:da:78:fb:e8:bf:8c: 16:86:7c:d9:15:e2:0a:a6:3e:27:1d:66:66:ce:4b: 60:5d:fa:7d:40:62:64:45:45:a8:76:0c:14:08:c9: 05:28:ee:bc:b4:62:98:e1:f0:8e:1c:6b:e4:b0:8a: 70:28:9c:fb:8c:7d:3d:33:4c:21:51:17:0f:a0:f5: 9e:5b:95:24:07:dd:9f:ab:18:6c:d6:c4:45:8e:31: 9c:e3:81:7f:a8:73:ae:9c:23:7d:ab:54:16:86:e3: 9c:87:1a:9e:49:3b:0b:58:3a:bf:e4:00:a0:a9:3d: c0:c8:6b:00:dc:4a:66:f7:5f:52:99:7a:93:f8:95: 1b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D5:1D:CB:D4:25:13:63:DE:04:96:63:66:E1:63:C3:CB:80:04:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.crl X509v3 Authority Key Identifier: keyid:49:08:38:C4:AD:B3:64:D0:A3:0D:D4:F7:B6:40:2F:C9:28:50:B8:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:14:ba:fa:7f:ce:6d:ab:cc:7d:fc:98:b4:58:67:58:16:81: 97:51:16:b3:73:de:ad:a0:d0:f9:06:c7:4b:70:88:3c:db:f2: 99:ff:7b:d0:84:af:00:b3:e1:5d:a2:89:21:72:9f:d0:73:9b: 37:cc:2e:e6:fe:0b:0e:22:1b:0f:3c:b4:74:d7:0a:4c:3a:ed: 73:b3:f7:e5:6f:6d:08:fd:c0:66:fc:90:dd:9e:2c:65:b2:8e: a2:02:8b:ba:f1:0f:1c:cb:d3:4c:92:49:b6:6e:60:bc:fe:2f: 31:74:48:88:cc:da:40:27:1b:f7:c9:db:be:ed:f0:c6:d6:ba: da:9f:d2:fc:5f:5e:ee:4d:8c:53:e5:61:64:c7:c7:c8:81:ae: 1c:58:18:e3:bd:da:c8:e8:28:69:71:a2:c2:9d:d7:56:ca:d4: 4b:80:eb:a9:61:d4:e2:45:1a:ed:6c:d7:71:5c:66:f1:da:d5: e2:a5:57:cc:9b:0c:df:46:f6:24:bc:47:e5:28:26:9f:a2:9c: 48:51:a7:ae:5a:c1:36:5f:3c:1e:05:1a:22:96:8b:88:d6:b6: ab:1e:a9:ea:bc:c8:48:89:03:2f:99:a4:35:be:d3:43:ac:ba: cd:86:bb:4c:08:fa:0b:c2:76:ed:7d:d2:92:f3:4b:12:79:59: b3:2f:b7:ed -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2GssfsAXqEPfL1hwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2IwMGZkZjUtZTI4Yi00ZTlkLTk2MjAtOTUwNDk3MjQz OGUyMB4XDTI2MDQxNjE0MDAwM1oXDTI2MDQxOTE0MDAwMFowLzEtMCsGA1UEAxMk NGEwOGE2ZDItOGE2NS00MTJiLTk4MWQtZjUzNDc5MmIwZDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbLBewpoPT6CBuE3ScE6Uvb4bgSNbziZVPrn SVP1OFYw4IqLP5XYGOaq6MaPti2dCl+LuyxzOJyPkjNtkCMNAaC3HE+wUIOzbiBi XIBKQh3N5OWTNRfx2eR8YO49MVIG4R43K2bn4+zPNDbBSnv0eXopRzdRYoCRgU4h 7yzBLWbaePvov4wWhnzZFeIKpj4nHWZmzktgXfp9QGJkRUWodgwUCMkFKO68tGKY 4fCOHGvksIpwKJz7jH09M0whURcPoPWeW5UkB92fqxhs1sRFjjGc44F/qHOunCN9 q1QWhuOchxqeSTsLWDq/5ACgqT3AyGsA3Epm919SmXqT+JUbGwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNLVHcvUJRNj3gSWY2bhY8PLgAQrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jYjAw ZmRmNS1lMjhiLTRlOWQtOTYyMC05NTA0OTcyNDM4ZTIvY2IwMGZkZjUtZTI4Yi00 ZTlkLTk2MjAtOTUwNDk3MjQzOGUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2IwMGZkZjUtZTI4Yi00ZTlkLTk2 MjAtOTUwNDk3MjQzOGUyL2NiMDBmZGY1LWUyOGItNGU5ZC05NjIwLTk1MDQ5NzI0 MzhlMi5jcmwwHwYDVR0jBBgwFoAUSQg4xK2zZNCjDdT3tkAvyShQuIwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jYjAwZmRmNS1lMjhiLTRlOWQtOTYyMC05NTA0 OTcyNDM4ZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBNFLr6f85tq8x9/Ji0WGdY FoGXURazc96toND5BsdLcIg82/KZ/3vQhK8As+Fdookhcp/Qc5s3zC7m/gsOIhsP PLR01wpMOu1zs/flb20I/cBm/JDdnixlso6iAou68Q8cy9NMkkm2bmC8/i8xdEiI zNpAJxv3ydu+7fDG1rran9L8X17uTYxT5WFkx8fIga4cWBjjvdrI6ChpcaLCnddW ytRLgOupYdTiRRrtbNdxXGbx2tXipVfMmwzfRvYkvEflKCafopxIUaeuWsE2Xzwe BRoilouI1rarHqnqvMhIiQMvmaQ1vtNDrLrNhrtMCPoLwnbtfdKS80sSeVmzL7ft -----END CERTIFICATE-----Generated at Fri Apr 17 13:35:14 2026 by rpki-client