$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.mft File: d1d57239-6176-4c8d-9a7e-f9fea380a1a2.mft (raw, json) Hash identifier: e3pQCalbWQQIlVJ6o0o+vmDm+4rx+bbgQd+b4UGb6BA= Subject key identifier: 5A:09:4B:0A:2F:BA:46:43:FD:66:64:30:56:EA:4B:7D:BA:C9:17:DE Authority key identifier: 6D:0E:19:88:64:18:83:E1:80:8D:48:79:CD:51:23:88:2E:59:37:A1 Certificate issuer: /CN=d1d57239-6176-4c8d-9a7e-f9fea380a1a2 Certificate serial: 010D0C9F4328584D89D6CCA015A2A553F397CB40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.mft Manifest number: 010D0C9F4328584AB6D97DEA626003C5D3B1F405 Signing time: Fri 17 Apr 2026 17:00:03 +0000 Manifest this update: Fri 17 Apr 2026 17:00:03 +0000 Manifest next update: Sun 19 Apr 2026 17:00:00 +0000 Files and hashes: 1: 1dace265-d08a-36e1-8cec-c84e5147a33c.roa (hash: 33uV4dmIvKJTkDwucsFH+7EAQkDJwJoLG9W+NfPoodQ=) 2: d1d57239-6176-4c8d-9a7e-f9fea380a1a2.crl (hash: fi02+Vpfe/zbekIS7i2DB0faTGhuDXFLi+c55oR8J+Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:89:d6:cc:a0:15:a2:a5:53:f3:97:cb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1d57239-6176-4c8d-9a7e-f9fea380a1a2 Validity Not Before: Apr 17 17:00:03 2026 GMT Not After : Apr 19 17:00:00 2026 GMT Subject: CN=f896ae2c-8220-4f5c-a4b2-a58409577bcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cd:1f:d1:ed:c8:e5:67:ac:16:85:b5:49:c9: f0:75:f8:df:dc:09:f9:36:52:76:fa:ac:14:d8:f1: bd:9e:cb:63:a9:67:62:9a:23:a3:87:08:8d:8c:c7: b0:25:d5:28:49:80:65:89:68:4c:5a:11:36:3a:d7: f4:dc:d3:94:b7:ac:29:a9:37:e4:dc:cb:f1:e3:14: 41:48:4e:77:0d:84:68:11:02:7b:c9:b7:88:8b:45: 92:5e:95:31:bd:9a:3c:71:83:b2:03:a7:0b:90:27: 26:40:2e:98:0b:dd:c2:3e:55:9d:09:48:85:68:fc: 9c:69:22:38:d1:7f:ae:03:6b:1f:de:9e:19:34:44: 90:98:8a:c4:0f:e0:db:85:8b:ff:dd:94:75:6c:41: 77:58:ac:3e:ed:6c:15:5d:fc:08:20:07:67:47:bf: 28:d4:bd:fb:1f:47:27:39:88:ed:25:ef:51:c6:f6: fd:4c:cd:fd:79:72:5b:fe:0a:b3:67:11:25:6b:27: 86:a2:81:30:97:43:52:7e:d9:fb:a6:ea:a9:04:d7: be:f0:04:f1:96:ce:58:65:b1:21:ba:e9:96:b0:ce: 5d:7f:b3:09:77:42:8d:7f:ff:b3:27:4d:ea:1b:fc: c3:82:f7:1b:df:b0:8d:18:6a:8b:4e:7a:5d:7e:cb: 1b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:09:4B:0A:2F:BA:46:43:FD:66:64:30:56:EA:4B:7D:BA:C9:17:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.crl X509v3 Authority Key Identifier: keyid:6D:0E:19:88:64:18:83:E1:80:8D:48:79:CD:51:23:88:2E:59:37:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:b4:24:84:75:be:62:8e:25:25:8c:21:91:b4:86:03:61:05: c0:b3:41:a3:cc:3c:ba:8e:5b:f2:b4:d5:e6:de:f8:3d:bb:ab: da:11:95:60:45:1f:d6:8b:b4:65:9c:5b:5f:d1:ef:80:f0:ab: 37:35:b0:57:ba:3e:e7:cd:6b:e8:14:ac:b9:c9:a8:4a:aa:ce: d0:40:26:fe:c7:04:95:43:e0:1d:27:93:93:e6:f1:40:29:e1: 3c:4e:f2:04:7e:7c:41:19:59:d7:11:0a:60:ef:5c:37:cb:15: d8:9c:51:43:d4:3d:f6:db:56:78:b9:34:d0:d8:cb:97:6c:8a: 6a:c5:d5:57:68:c7:eb:4d:eb:66:a8:82:af:27:45:9c:06:02: 7b:09:27:95:05:07:41:3a:1e:98:bd:a6:7a:a7:10:51:00:d5: 4a:5f:f0:da:86:80:00:28:25:45:50:f5:98:0e:ea:5a:81:3e: db:55:b0:40:f4:9d:0d:62:31:c6:7d:ed:84:9d:d0:d2:95:57: 99:b7:36:57:b5:d3:d5:b9:1b:44:fd:bd:43:7d:b0:83:db:9e: 46:90:3e:b7:a6:a5:ab:bf:4e:f9:e3:89:47:b2:93:bb:54:7e: c1:24:99:bc:5d:b8:59:53:eb:c7:ab:5d:c2:51:92:2f:98:d1: 3b:1b:0c:e9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2J1sygFaKlU/OXy0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFkNTcyMzktNjE3Ni00YzhkLTlhN2UtZjlmZWEzODBh MWEyMB4XDTI2MDQxNzE3MDAwM1oXDTI2MDQxOTE3MDAwMFowLzEtMCsGA1UEAxMk Zjg5NmFlMmMtODIyMC00ZjVjLWE0YjItYTU4NDA5NTc3YmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz80f0e3I5WesFoW1Scnwdfjf3An5NlJ2+qwU 2PG9nstjqWdimiOjhwiNjMewJdUoSYBliWhMWhE2Otf03NOUt6wpqTfk3Mvx4xRB SE53DYRoEQJ7ybeIi0WSXpUxvZo8cYOyA6cLkCcmQC6YC93CPlWdCUiFaPycaSI4 0X+uA2sf3p4ZNESQmIrED+DbhYv/3ZR1bEF3WKw+7WwVXfwIIAdnR78o1L37H0cn OYjtJe9Rxvb9TM39eXJb/gqzZxElayeGooEwl0NSftn7puqpBNe+8ATxls5YZbEh uumWsM5df7MJd0KNf/+zJ03qG/zDgvcb37CNGGqLTnpdfssb0QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFoJSwovukZD/WZkMFbqS326yRfeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kMWQ1 NzIzOS02MTc2LTRjOGQtOWE3ZS1mOWZlYTM4MGExYTIvZDFkNTcyMzktNjE3Ni00 YzhkLTlhN2UtZjlmZWEzODBhMWEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDFkNTcyMzktNjE3Ni00YzhkLTlh N2UtZjlmZWEzODBhMWEyL2QxZDU3MjM5LTYxNzYtNGM4ZC05YTdlLWY5ZmVhMzgw YTFhMi5jcmwwHwYDVR0jBBgwFoAUbQ4ZiGQYg+GAjUh5zVEjiC5ZN6EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kMWQ1NzIzOS02MTc2LTRjOGQtOWE3ZS1mOWZl YTM4MGExYTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCbtCSEdb5ijiUljCGRtIYD YQXAs0GjzDy6jlvytNXm3vg9u6vaEZVgRR/Wi7RlnFtf0e+A8Ks3NbBXuj7nzWvo FKy5yahKqs7QQCb+xwSVQ+AdJ5OT5vFAKeE8TvIEfnxBGVnXEQpg71w3yxXYnFFD 1D3221Z4uTTQ2MuXbIpqxdVXaMfrTetmqIKvJ0WcBgJ7CSeVBQdBOh6YvaZ6pxBR ANVKX/DahoAAKCVFUPWYDupagT7bVbBA9J0NYjHGfe2EndDSlVeZtzZXtdPVuRtE /b1DfbCD255GkD63pqWrv07544lHspO7VH7BJJm8XbhZU+vHq13CUZIvmNE7Gwzp -----END CERTIFICATE-----Generated at Sat Apr 18 07:52:56 2026 by rpki-client