$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74.mft File: 811af7cb-bc82-4a78-ba0f-2ba88b6d9f74.mft (raw, json) Hash identifier: zC7z9ooZKyTG33gndpswltQasndiuGuXlPx/oHEQdqM= Subject key identifier: 52:5E:AB:AC:B2:26:5B:79:5B:A2:7B:BE:94:AD:FE:3F:A7:FC:F8:28 Authority key identifier: 68:10:33:A3:A6:E3:17:1D:56:9B:32:AF:83:B7:27:D6:B6:B1:FF:5F Certificate issuer: /CN=811af7cb-bc82-4a78-ba0f-2ba88b6d9f74 Certificate serial: 010D0C9F4328584D6B3F0F3806722F23C9585D20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74.mft Manifest number: 010D0C9F432858447130F064B7DB6A6B5E498160 Signing time: Mon 06 Apr 2026 18:00:03 +0000 Manifest this update: Mon 06 Apr 2026 18:00:03 +0000 Manifest next update: Wed 08 Apr 2026 18:00:00 +0000 Files and hashes: 1: 3c9ff416-5bd9-3a07-b17f-edb68eb64346.roa (hash: Tg9UjSREzOb7LdnG4x8EKT+uMoOb48h3dhT0tfiT/XU=) 2: 811af7cb-bc82-4a78-ba0f-2ba88b6d9f74.crl (hash: ixuMIRSZFqmy0MfDGW/LGFqgsFgUgijh3oxnnQgE/64=) 3: 93dc11b7-7124-37e2-8d65-cd194a2a6836.roa (hash: LrJZQmG6LymBm/sY6fc0IB9GPSxTXPxshaNEQkN/QPE=) 4: db330c31-1b6a-3251-9b70-0ceb5be8c9b0.roa (hash: 1nPs5ywzqekH+zvSp2w1CAX8DO0v99atjWOG+fWac6M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6b:3f:0f:38:06:72:2f:23:c9:58:5d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=811af7cb-bc82-4a78-ba0f-2ba88b6d9f74 Validity Not Before: Apr 6 18:00:03 2026 GMT Not After : Apr 8 18:00:00 2026 GMT Subject: CN=d29b0348-ffc5-4343-b63d-977d8d4f0840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:02:e6:0d:eb:10:e9:8e:41:19:bd:8b:d7:14: 06:9a:6e:c5:93:ea:60:c9:94:ed:ed:a3:9e:10:4e: cc:df:7c:1f:2a:ed:2c:21:dd:0e:09:46:ab:4b:cc: 3e:16:8f:27:c0:9f:b4:7a:a9:fc:64:4c:55:a8:94: 4a:8e:69:f7:f2:fc:fc:61:34:60:4e:03:a1:0b:26: 35:be:f4:fd:71:13:ea:cc:55:63:92:b8:25:28:42: 9a:52:be:f0:97:9e:01:8d:8a:b4:41:00:ab:a6:80: aa:0a:13:9d:27:6d:5e:bd:5b:b2:63:fe:e6:16:9a: e1:d4:66:0e:c3:5f:5c:cc:f9:be:77:59:4c:eb:98: dd:8c:d9:3f:15:12:34:db:3d:fe:d8:d0:08:fc:0c: 46:e1:fc:47:58:7c:2c:84:5a:09:fc:4f:6c:64:e2: 36:ba:79:9c:39:67:65:b5:e1:8d:12:30:f8:dd:50: f3:e2:6b:95:46:3a:08:80:c3:bb:83:3a:26:30:4b: 46:6e:53:76:1b:46:8a:05:70:9b:2c:5b:94:f1:87: e0:7b:1b:ff:27:5b:ab:3e:c1:5a:6c:63:f0:19:ff: e9:49:88:13:f9:2e:02:c6:31:ab:f5:e9:ee:76:af: ec:ce:f7:bd:57:3e:a8:8e:4a:81:63:6f:e5:db:6b: 07:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:5E:AB:AC:B2:26:5B:79:5B:A2:7B:BE:94:AD:FE:3F:A7:FC:F8:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74.crl X509v3 Authority Key Identifier: keyid:68:10:33:A3:A6:E3:17:1D:56:9B:32:AF:83:B7:27:D6:B6:B1:FF:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:26:51:16:d8:2b:d7:09:28:b0:f4:77:f4:22:8f:d1:9c:96: b6:db:5d:88:18:7c:36:70:68:08:22:5e:68:6b:9c:d9:7f:36: cf:f0:3d:6a:58:b1:91:6d:6b:23:69:66:f9:e5:13:4d:22:e3: 1f:c3:0a:f3:8d:c9:d2:c8:97:a3:a3:99:e2:8e:27:5b:fa:dc: 84:63:7e:05:7f:97:0a:4d:39:b2:58:3c:8c:3f:89:00:62:87: 61:25:5a:72:36:90:3d:f5:77:0d:09:35:d4:67:82:1a:37:cb: 80:b3:fc:09:ff:fb:0f:55:bc:bc:79:a0:94:30:0a:95:2d:39: 8d:eb:86:9d:0c:2b:12:44:5d:15:1d:0b:22:f7:e0:83:6f:92: ad:5b:03:9e:10:73:4c:8a:82:de:ba:3f:18:5c:33:91:08:a8: c9:1a:00:2b:fb:a4:62:84:da:6d:87:39:94:6c:53:73:09:74: da:7f:a2:cb:53:ed:59:6f:8d:d6:d5:4e:05:89:a6:03:e2:30: bd:44:16:ef:30:15:11:9d:df:44:2f:76:f0:c9:ee:1a:57:97: fd:ac:23:f7:27:df:8f:7d:1a:89:84:25:1b:61:a1:c1:85:5a: f0:b9:34:db:5b:6b:4c:fe:54:4c:fd:1a:7a:61:f5:11:a9:55: c0:a3:af:a5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1rPw84BnIvI8lYXSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODExYWY3Y2ItYmM4Mi00YTc4LWJhMGYtMmJhODhiNmQ5 Zjc0MB4XDTI2MDQwNjE4MDAwM1oXDTI2MDQwODE4MDAwMFowLzEtMCsGA1UEAxMk ZDI5YjAzNDgtZmZjNS00MzQzLWI2M2QtOTc3ZDhkNGYwODQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgLmDesQ6Y5BGb2L1xQGmm7Fk+pgyZTt7aOe EE7M33wfKu0sId0OCUarS8w+Fo8nwJ+0eqn8ZExVqJRKjmn38vz8YTRgTgOhCyY1 vvT9cRPqzFVjkrglKEKaUr7wl54BjYq0QQCrpoCqChOdJ21evVuyY/7mFprh1GYO w19czPm+d1lM65jdjNk/FRI02z3+2NAI/AxG4fxHWHwshFoJ/E9sZOI2unmcOWdl teGNEjD43VDz4muVRjoIgMO7gzomMEtGblN2G0aKBXCbLFuU8Yfgexv/J1urPsFa bGPwGf/pSYgT+S4CxjGr9enudq/szve9Vz6ojkqBY2/l22sHpQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFJeq6yyJlt5W6J7vpSt/j+n/PgoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84MTFh ZjdjYi1iYzgyLTRhNzgtYmEwZi0yYmE4OGI2ZDlmNzQvODExYWY3Y2ItYmM4Mi00 YTc4LWJhMGYtMmJhODhiNmQ5Zjc0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODExYWY3Y2ItYmM4Mi00YTc4LWJh MGYtMmJhODhiNmQ5Zjc0LzgxMWFmN2NiLWJjODItNGE3OC1iYTBmLTJiYTg4YjZk OWY3NC5jcmwwHwYDVR0jBBgwFoAUaBAzo6bjFx1WmzKvg7cn1rax/18wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84MTFhZjdjYi1iYzgyLTRhNzgtYmEwZi0yYmE4 OGI2ZDlmNzQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA5JlEW2CvXCSiw9Hf0Io/R nJa2212IGHw2cGgIIl5oa5zZfzbP8D1qWLGRbWsjaWb55RNNIuMfwwrzjcnSyJej o5nijidb+tyEY34Ff5cKTTmyWDyMP4kAYodhJVpyNpA99XcNCTXUZ4IaN8uAs/wJ //sPVby8eaCUMAqVLTmN64adDCsSRF0VHQsi9+CDb5KtWwOeEHNMioLeuj8YXDOR CKjJGgAr+6RihNpthzmUbFNzCXTaf6LLU+1Zb43W1U4FiaYD4jC9RBbvMBURnd9E L3bwye4aV5f9rCP3J9+PfRqJhCUbYaHBhVrwuTTbW2tM/lRM/Rp6YfURqVXAo6+l -----END CERTIFICATE-----Generated at Tue Apr 7 15:07:00 2026 by rpki-client