$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.mft File: 5c9a7da0-3974-48c2-a2c5-fca1ec32848a.mft (raw, json) Hash identifier: ZKHWAIls8P8m5fntuLlPtznZV9utNQWSpSAZhDsc/9s= Subject key identifier: 22:D9:7C:7F:2D:BD:19:BC:5D:59:07:0C:F8:3C:FA:4D:37:DC:57:2B Authority key identifier: CB:78:E8:D0:CE:C6:C2:B5:5E:A4:23:E7:09:CE:01:8B:39:F2:5F:1E Certificate issuer: /CN=5c9a7da0-3974-48c2-a2c5-fca1ec32848a Certificate serial: 010D0C9F4328584D70D46A2245C3A65BB212CDC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.mft Manifest number: 010D0C9F43285847A94CB848E4E527CA2D688CA4 Signing time: Wed 08 Apr 2026 18:00:04 +0000 Manifest this update: Wed 08 Apr 2026 18:00:04 +0000 Manifest next update: Sat 11 Apr 2026 18:00:00 +0000 Files and hashes: 1: 49e5f290-618f-3550-b059-0c6232263b33.roa (hash: zOBGjlb7kOUEeKn7eoP5ziwc+EPl4hNO0AS7UEHD2XU=) 2: 5c9a7da0-3974-48c2-a2c5-fca1ec32848a.crl (hash: fcFsxzAaEZzs50yHrsq1PrMQMCk+fcymzA/MuKpB4+M=) 3: 7eef53f2-a70a-3de5-87e9-3cbc6bcc740d.roa (hash: vKWYBnlE98zX+zRaoXEjs/xzGslZ9IFXtO/sr74d9Ak=) 4: d489c930-352c-3f17-a5d2-b2cc806aff09.roa (hash: sFOuaS89Muxe+RAVsUGl9Asb8zfc2gnvvlrQ5L30x7s=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:d4:6a:22:45:c3:a6:5b:b2:12:cd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c9a7da0-3974-48c2-a2c5-fca1ec32848a Validity Not Before: Apr 8 18:00:04 2026 GMT Not After : Apr 11 18:00:00 2026 GMT Subject: CN=287137ce-9126-4a76-845f-b4e6058aa108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:14:e5:17:83:e6:17:a1:6a:63:d2:9b:7d:e5: 06:cc:55:76:8d:f1:3f:69:70:bf:fc:a1:26:a6:83: fd:b6:6d:d9:1d:5c:9c:c8:59:56:b4:cd:11:04:ce: e0:7f:84:c4:31:98:5f:25:6f:25:83:b9:8d:76:0b: d5:47:71:9f:b9:b6:8b:92:97:29:ff:69:2f:d7:d8: 1d:1d:98:19:59:e3:12:4f:ff:eb:c3:19:92:8d:90: 09:1b:94:54:05:60:15:8d:ba:ee:50:c6:38:89:da: b6:0f:6f:61:99:46:78:5f:f9:6a:61:7d:de:e1:2b: 66:a3:eb:87:2b:25:f6:78:32:64:ed:87:c6:24:db: bb:b7:af:8c:db:42:40:6b:9a:c3:94:a0:e6:ba:6b: 57:ee:6d:84:9a:57:87:c8:86:38:72:88:b0:76:a0: f9:f2:83:7c:bc:1b:46:65:50:cc:f8:dd:f4:5e:8f: 88:eb:cd:6a:98:48:d0:28:7e:92:9c:2b:34:cd:10: 7c:d2:e1:1c:c1:b0:cd:db:88:4b:89:72:88:47:4d: dc:71:5e:52:4d:7d:99:a1:d9:14:98:ed:e0:7f:43: b9:11:54:9e:8d:15:66:f2:6e:72:b4:bb:18:c4:19: 90:16:e9:5b:0d:59:ae:8d:8f:15:8d:02:76:94:5c: 1e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D9:7C:7F:2D:BD:19:BC:5D:59:07:0C:F8:3C:FA:4D:37:DC:57:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.crl X509v3 Authority Key Identifier: keyid:CB:78:E8:D0:CE:C6:C2:B5:5E:A4:23:E7:09:CE:01:8B:39:F2:5F:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:52:19:1a:50:24:23:b6:81:56:a4:53:5b:eb:55:cb:30:32: 28:a1:eb:f5:6b:79:01:e5:60:4d:b2:98:db:ae:43:72:9d:66: 21:91:04:df:e6:4a:10:5a:a6:f1:aa:9b:11:ca:4e:82:62:d9: e8:7e:a5:af:e8:2b:28:d6:2b:b2:ae:72:a5:d7:66:38:75:ad: 83:57:b9:df:a8:80:2d:fc:b4:58:e4:20:d2:1f:8b:97:47:b6: 2c:61:52:a6:67:08:e5:89:57:47:3e:1c:8a:5b:2c:ba:08:c0: 8f:e4:49:84:af:49:59:2d:80:98:4d:68:b0:3f:fc:fd:3c:99: b4:8d:4b:dc:59:da:65:55:11:41:f7:a8:1f:aa:8a:68:f8:ab: 39:0e:58:c6:a7:dc:09:1a:7f:8f:96:ab:da:b6:33:01:ee:e7: 5c:ec:4b:9c:fb:6c:48:f7:21:96:9d:01:51:ee:19:60:3e:18: e3:0b:aa:f9:4f:75:91:f9:29:ef:a7:31:40:9a:15:4e:75:c7: 04:97:41:51:a8:68:21:76:c2:a8:17:4c:bc:d8:88:0d:84:e7: df:cd:a0:8f:d4:ae:31:59:94:60:fc:27:81:2f:0b:ee:db:3b: 03:56:9a:c7:d9:8c:ca:47:a0:40:50:6c:df:e5:5f:d6:27:bd: e4:d2:62:04 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1w1GoiRcOmW7ISzcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM5YTdkYTAtMzk3NC00OGMyLWEyYzUtZmNhMWVjMzI4 NDhhMB4XDTI2MDQwODE4MDAwNFoXDTI2MDQxMTE4MDAwMFowLzEtMCsGA1UEAxMk Mjg3MTM3Y2UtOTEyNi00YTc2LTg0NWYtYjRlNjA1OGFhMTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBTlF4PmF6FqY9KbfeUGzFV2jfE/aXC//KEm poP9tm3ZHVycyFlWtM0RBM7gf4TEMZhfJW8lg7mNdgvVR3GfubaLkpcp/2kv19gd HZgZWeMST//rwxmSjZAJG5RUBWAVjbruUMY4idq2D29hmUZ4X/lqYX3e4Stmo+uH KyX2eDJk7YfGJNu7t6+M20JAa5rDlKDmumtX7m2EmleHyIY4coiwdqD58oN8vBtG ZVDM+N30Xo+I681qmEjQKH6SnCs0zRB80uEcwbDN24hLiXKIR03ccV5STX2ZodkU mO3gf0O5EVSejRVm8m5ytLsYxBmQFulbDVmujY8VjQJ2lFweSQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCLZfH8tvRm8XVkHDPg8+k033FcrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81Yzlh N2RhMC0zOTc0LTQ4YzItYTJjNS1mY2ExZWMzMjg0OGEvNWM5YTdkYTAtMzk3NC00 OGMyLWEyYzUtZmNhMWVjMzI4NDhhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWM5YTdkYTAtMzk3NC00OGMyLWEy YzUtZmNhMWVjMzI4NDhhLzVjOWE3ZGEwLTM5NzQtNDhjMi1hMmM1LWZjYTFlYzMy ODQ4YS5jcmwwHwYDVR0jBBgwFoAUy3jo0M7GwrVepCPnCc4BiznyXx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81YzlhN2RhMC0zOTc0LTQ4YzItYTJjNS1mY2Ex ZWMzMjg0OGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAJUhkaUCQjtoFWpFNb61XL MDIooev1a3kB5WBNspjbrkNynWYhkQTf5koQWqbxqpsRyk6CYtnofqWv6Cso1iuy rnKl12Y4da2DV7nfqIAt/LRY5CDSH4uXR7YsYVKmZwjliVdHPhyKWyy6CMCP5EmE r0lZLYCYTWiwP/z9PJm0jUvcWdplVRFB96gfqopo+Ks5DljGp9wJGn+PlqvatjMB 7udc7Euc+2xI9yGWnQFR7hlgPhjjC6r5T3WR+SnvpzFAmhVOdccEl0FRqGghdsKo F0y82IgNhOffzaCP1K4xWZRg/CeBLwvu2zsDVprH2YzKR6BAUGzf5V/WJ73k0mIE -----END CERTIFICATE-----Generated at Wed Apr 8 21:42:56 2026 by rpki-client