$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/d9e22f6d-5551-4712-9f95-3008c51223ec.mft File: d9e22f6d-5551-4712-9f95-3008c51223ec.mft (raw, json) Hash identifier: jqXbPUSdaHlZYUQ2Kw/mmzzkA7pThF0q7kqJt8EgzzI= Subject key identifier: 25:E9:BA:0D:82:EE:28:2D:D4:DC:8F:AA:4B:13:A0:4F:33:65:34:E2 Authority key identifier: 28:C8:30:4D:BD:D8:4A:C0:1E:3B:86:1E:E5:4A:31:65:B6:B7:97:77 Certificate issuer: /CN=d9e22f6d-5551-4712-9f95-3008c51223ec Certificate serial: 010D0C9F4328584D6D74D90E7F342B886C693540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/d9e22f6d-5551-4712-9f95-3008c51223ec.mft Manifest number: 010D0C9F43285841E6A4ADE0B31162520C965DDC Signing time: Tue 07 Apr 2026 13:00:04 +0000 Manifest this update: Tue 07 Apr 2026 13:00:04 +0000 Manifest next update: Thu 09 Apr 2026 13:00:00 +0000 Files and hashes: 1: 8357b082-17dc-3d36-87f1-8e0746d54610.roa (hash: uWicFGpvvkk7rlZwx/heCzKnX/fotww/8uwDcVEK/RE=) 2: d9e22f6d-5551-4712-9f95-3008c51223ec.crl (hash: IQwylrN1uDucrvIPd0aIAah/EIzFpS5o4npqF+8WNBs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/d9e22f6d-5551-4712-9f95-3008c51223ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/d9e22f6d-5551-4712-9f95-3008c51223ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:74:d9:0e:7f:34:2b:88:6c:69:35:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9e22f6d-5551-4712-9f95-3008c51223ec Validity Not Before: Apr 7 13:00:04 2026 GMT Not After : Apr 9 13:00:00 2026 GMT Subject: CN=95400c5d-3ef4-46a6-a54e-cdd87365eec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5b:c4:77:81:ef:a3:52:8a:4e:a3:23:e7:d3: 9d:84:9c:fd:63:a0:1d:b1:a8:7c:2c:02:27:3c:d0: ef:ee:20:3f:5a:d3:71:9b:b3:e0:d6:88:0e:42:d3: 28:2e:6c:9d:d6:ea:ca:f1:42:44:f6:dd:ab:7e:d9: 16:55:7a:1c:85:4c:62:b0:57:fd:d6:34:69:67:7f: 5f:d6:fb:0e:9a:d2:42:4b:33:39:32:4c:d4:d1:1b: fa:6d:7b:24:8e:75:b8:66:72:32:38:ea:42:85:9d: fd:f3:e7:7c:b3:4f:a2:76:2c:6b:ad:e9:0e:4d:3b: 02:59:72:d5:f8:12:12:68:98:82:af:e3:ef:b5:ec: 9d:22:0f:e1:d1:c0:9e:4c:74:9c:7a:5d:a2:2f:e1: f7:89:35:0a:66:57:e1:b0:61:77:91:51:20:62:3e: 47:2f:ec:33:9c:f8:ec:7f:4b:40:9f:72:14:30:98: a5:6f:b9:46:74:71:fd:b5:5f:16:d3:11:01:ac:51: d7:f6:6e:bf:5a:aa:bb:01:46:d5:88:04:e7:e9:0c: 9f:c3:07:10:ce:37:53:2d:3e:6b:57:9e:64:c8:35: 60:7f:80:d0:93:10:ae:25:4c:53:5e:93:47:22:c2: 44:2c:0e:a1:06:6b:1f:8a:fb:50:cf:53:00:74:38: 55:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:E9:BA:0D:82:EE:28:2D:D4:DC:8F:AA:4B:13:A0:4F:33:65:34:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/d9e22f6d-5551-4712-9f95-3008c51223ec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/d9e22f6d-5551-4712-9f95-3008c51223ec.crl X509v3 Authority Key Identifier: keyid:28:C8:30:4D:BD:D8:4A:C0:1E:3B:86:1E:E5:4A:31:65:B6:B7:97:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:1b:38:b0:90:3b:8a:77:b8:97:62:e0:d0:d9:c3:2b:92:09: 40:9c:28:92:45:be:32:cc:3f:5f:9d:2a:00:17:8f:5e:42:b6: 2d:7a:90:63:0e:59:18:04:65:3d:a2:ba:d3:26:3e:2b:ee:fb: 00:e3:76:31:e5:5f:67:cc:06:5a:a3:73:07:2e:0c:c2:c6:75: d7:99:cc:9e:36:de:8d:10:65:93:fa:d8:07:a4:82:b9:ba:2a: 9a:81:d3:e7:38:af:29:85:1f:20:f8:44:08:8a:23:7e:ff:fe: 90:83:94:91:b0:93:9c:e9:63:34:52:1a:00:28:7c:3f:e4:96: 6f:52:3b:28:45:06:9e:92:22:af:f9:a8:9c:fc:c5:6c:a7:2f: 97:d2:c8:38:e1:f6:c6:3b:37:18:19:51:af:8c:17:af:d6:34: ce:e7:15:05:e2:e5:6b:e3:ed:01:ef:2e:13:02:a1:7b:4d:ff: be:06:fc:83:cf:b9:33:b3:e2:b0:fa:de:e2:63:3b:b8:f5:97: b3:8f:ea:49:83:47:f0:b7:9b:79:82:da:7e:33:56:52:75:e6: 56:d3:88:e4:26:8d:12:8a:8f:e6:d3:7c:8b:47:7a:52:78:a0: aa:05:29:6c:1f:d7:76:d6:cd:cd:bb:f3:61:29:c2:18:29:bf: af:4d:cb:92 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1tdNkOfzQriGxpNUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDllMjJmNmQtNTU1MS00NzEyLTlmOTUtMzAwOGM1MTIy M2VjMB4XDTI2MDQwNzEzMDAwNFoXDTI2MDQwOTEzMDAwMFowLzEtMCsGA1UEAxMk OTU0MDBjNWQtM2VmNC00NmE2LWE1NGUtY2RkODczNjVlZWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVvEd4Hvo1KKTqMj59OdhJz9Y6Adsah8LAIn PNDv7iA/WtNxm7Pg1ogOQtMoLmyd1urK8UJE9t2rftkWVXochUxisFf91jRpZ39f 1vsOmtJCSzM5MkzU0Rv6bXskjnW4ZnIyOOpChZ398+d8s0+idixrrekOTTsCWXLV +BISaJiCr+PvteydIg/h0cCeTHScel2iL+H3iTUKZlfhsGF3kVEgYj5HL+wznPjs f0tAn3IUMJilb7lGdHH9tV8W0xEBrFHX9m6/Wqq7AUbViATn6QyfwwcQzjdTLT5r V55kyDVgf4DQkxCuJUxTXpNHIsJELA6hBmsfivtQz1MAdDhV5QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCXpug2C7igt1NyPqksToE8zZTTiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWUy MmY2ZC01NTUxLTQ3MTItOWY5NS0zMDA4YzUxMjIzZWMvZDllMjJmNmQtNTU1MS00 NzEyLTlmOTUtMzAwOGM1MTIyM2VjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDllMjJmNmQtNTU1MS00NzEyLTlm OTUtMzAwOGM1MTIyM2VjL2Q5ZTIyZjZkLTU1NTEtNDcxMi05Zjk1LTMwMDhjNTEy MjNlYy5jcmwwHwYDVR0jBBgwFoAUKMgwTb3YSsAeO4Ye5UoxZba3l3cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWUyMmY2ZC01NTUxLTQ3MTItOWY5NS0zMDA4 YzUxMjIzZWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAlGziwkDuKd7iXYuDQ2cMr kglAnCiSRb4yzD9fnSoAF49eQrYtepBjDlkYBGU9orrTJj4r7vsA43Yx5V9nzAZa o3MHLgzCxnXXmcyeNt6NEGWT+tgHpIK5uiqagdPnOK8phR8g+EQIiiN+//6Qg5SR sJOc6WM0UhoAKHw/5JZvUjsoRQaekiKv+aic/MVspy+X0sg44fbGOzcYGVGvjBev 1jTO5xUF4uVr4+0B7y4TAqF7Tf++BvyDz7kzs+Kw+t7iYzu49Zezj+pJg0fwt5t5 gtp+M1ZSdeZW04jkJo0Sio/m03yLR3pSeKCqBSlsH9d21s3Nu/NhKcIYKb+vTcuS -----END CERTIFICATE-----Generated at Wed Apr 8 13:32:08 2026 by rpki-client