$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.mft File: d899d3d2-c968-408b-b21e-5744f982c130.mft (raw, json) Hash identifier: VTOHiUBUCfL0crmLr3yNsOVuG00dMipDzcbNHnSLvPk= Subject key identifier: E8:12:4A:1B:79:AD:76:61:E0:75:57:6A:8C:0C:B7:95:9E:17:D4:D8 Authority key identifier: 2A:CF:72:BD:2C:A5:C6:D9:49:F2:A2:93:83:97:80:C1:81:ED:87:67 Certificate issuer: /CN=d899d3d2-c968-408b-b21e-5744f982c130 Certificate serial: 010D0C9F4328584D6B7A9CE7518E38C68B472380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.mft Manifest number: 010D0C9F4328584373EE2FA83D79ED8AEA2A3CE9 Signing time: Mon 06 Apr 2026 20:00:03 +0000 Manifest this update: Mon 06 Apr 2026 20:00:03 +0000 Manifest next update: Thu 09 Apr 2026 20:00:00 +0000 Files and hashes: 1: d899d3d2-c968-408b-b21e-5744f982c130.crl (hash: 0pQ5YbwxXvbrKqMVSEwaMAmYvO5IB5SIFByhB99l1kw=) 2: dff21604-1698-3188-98f1-6b0994e52624.roa (hash: NbpqVWOf+qWzj9lWb3526lNro+nf1CTC09A34TU35Fk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6b:7a:9c:e7:51:8e:38:c6:8b:47:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d899d3d2-c968-408b-b21e-5744f982c130 Validity Not Before: Apr 6 20:00:03 2026 GMT Not After : Apr 9 20:00:00 2026 GMT Subject: CN=7414e79c-5079-4c92-ae35-d8373c6952b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a7:f2:92:dd:d6:dc:63:75:4c:42:5a:c5:61: 4d:20:45:42:14:12:af:27:40:5a:c5:be:02:cf:36: 87:95:48:ad:fe:12:84:d2:3b:b1:30:b2:64:7f:90: 0f:cf:fe:16:37:00:9e:82:a6:bf:09:d0:c7:8a:3c: d6:bd:a0:0d:ea:71:b2:c3:c2:d8:08:70:ea:f2:ed: cf:c7:6b:b7:9e:dc:01:18:ed:07:5f:9a:84:4b:fe: 01:bd:74:30:93:5a:e3:8c:e7:af:42:62:ff:d5:8c: 9b:44:38:99:8b:30:ac:be:66:e8:2d:e9:d3:e9:a0: 47:c4:d3:4e:41:e5:5a:ff:f4:0d:ed:5c:15:4b:57: 6d:be:60:21:3e:c2:25:6a:29:5d:4f:52:b9:62:48: c4:77:86:5e:c0:b0:9d:e6:44:28:a7:20:45:91:31: c6:74:80:de:ea:0f:8f:b6:8d:72:b4:9f:4b:13:a4: a6:51:37:96:3e:95:64:7a:36:86:7a:c4:ca:f1:d7: cf:bb:3d:83:dd:81:d6:23:9d:e2:e2:ee:74:41:64: 3c:3c:d4:e0:f2:46:71:9c:91:d1:d6:75:96:67:62: 8f:2a:43:49:45:93:3e:cd:da:a3:eb:b9:a8:b1:b0: 09:f5:72:0d:28:47:3c:c0:3f:ee:64:18:b2:f1:75: c9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:12:4A:1B:79:AD:76:61:E0:75:57:6A:8C:0C:B7:95:9E:17:D4:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.crl X509v3 Authority Key Identifier: keyid:2A:CF:72:BD:2C:A5:C6:D9:49:F2:A2:93:83:97:80:C1:81:ED:87:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:b0:ef:88:27:74:4c:2c:6e:d9:7b:62:b1:26:63:f4:72:fd: f1:a5:8f:23:1c:99:26:76:40:40:c6:31:81:b7:da:6b:97:ec: 48:fb:be:a0:62:3c:2b:bd:d7:cc:fb:ff:79:69:40:5d:36:16: cd:ab:59:00:96:8b:6e:5c:2d:8b:0b:3a:17:fb:f8:10:f1:6a: fb:6c:a6:78:3f:c0:36:71:c3:7d:86:8c:25:6a:43:00:49:e8: 1c:bf:01:0e:7a:93:16:0b:b4:55:b0:eb:11:81:38:ac:38:35: 35:a1:92:61:ff:5a:9e:16:ba:98:93:a8:05:9c:98:80:a1:6d: 5b:b8:bf:59:57:40:0c:5e:87:2d:24:9e:b5:d7:15:f7:47:03: b6:22:7c:c7:df:1f:c9:76:ef:be:e0:14:0c:fd:75:d5:d3:ea: 12:80:05:84:62:3a:8d:b0:e6:08:1e:51:e3:ad:7a:7c:c9:fb: ed:80:47:77:0f:da:16:e9:75:89:75:eb:df:1d:3f:04:52:26: b0:56:f6:41:09:4a:ea:bf:fe:f6:08:26:16:f1:f6:a4:a3:14: ac:e4:db:00:dc:13:be:54:21:a6:76:a2:17:4e:cc:70:b7:af: 99:60:7b:05:6f:d9:0d:3a:80:70:3b:3e:c3:27:4e:88:02:8d: a2:d7:93:a6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1repznUY44xotHI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg5OWQzZDItYzk2OC00MDhiLWIyMWUtNTc0NGY5ODJj MTMwMB4XDTI2MDQwNjIwMDAwM1oXDTI2MDQwOTIwMDAwMFowLzEtMCsGA1UEAxMk NzQxNGU3OWMtNTA3OS00YzkyLWFlMzUtZDgzNzNjNjk1MmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqfykt3W3GN1TEJaxWFNIEVCFBKvJ0Baxb4C zzaHlUit/hKE0juxMLJkf5APz/4WNwCegqa/CdDHijzWvaAN6nGyw8LYCHDq8u3P x2u3ntwBGO0HX5qES/4BvXQwk1rjjOevQmL/1YybRDiZizCsvmboLenT6aBHxNNO QeVa//QN7VwVS1dtvmAhPsIlaildT1K5YkjEd4ZewLCd5kQopyBFkTHGdIDe6g+P to1ytJ9LE6SmUTeWPpVkejaGesTK8dfPuz2D3YHWI53i4u50QWQ8PNTg8kZxnJHR 1nWWZ2KPKkNJRZM+zdqj67mosbAJ9XINKEc8wD/uZBiy8XXJwQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOgSSht5rXZh4HVXaowMt5WeF9TYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kODk5 ZDNkMi1jOTY4LTQwOGItYjIxZS01NzQ0Zjk4MmMxMzAvZDg5OWQzZDItYzk2OC00 MDhiLWIyMWUtNTc0NGY5ODJjMTMwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDg5OWQzZDItYzk2OC00MDhiLWIy MWUtNTc0NGY5ODJjMTMwL2Q4OTlkM2QyLWM5NjgtNDA4Yi1iMjFlLTU3NDRmOTgy YzEzMC5jcmwwHwYDVR0jBBgwFoAUKs9yvSylxtlJ8qKTg5eAwYHth2cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kODk5ZDNkMi1jOTY4LTQwOGItYjIxZS01NzQ0 Zjk4MmMxMzAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAjsO+IJ3RMLG7Ze2KxJmP0 cv3xpY8jHJkmdkBAxjGBt9prl+xI+76gYjwrvdfM+/95aUBdNhbNq1kAlotuXC2L CzoX+/gQ8Wr7bKZ4P8A2ccN9howlakMASegcvwEOepMWC7RVsOsRgTisODU1oZJh /1qeFrqYk6gFnJiAoW1buL9ZV0AMXoctJJ611xX3RwO2InzH3x/Jdu++4BQM/XXV 0+oSgAWEYjqNsOYIHlHjrXp8yfvtgEd3D9oW6XWJdevfHT8EUiawVvZBCUrqv/72 CCYW8fakoxSs5NsA3BO+VCGmdqIXTsxwt6+ZYHsFb9kNOoBwOz7DJ06IAo2i15Om -----END CERTIFICATE-----Generated at Tue Apr 7 15:07:38 2026 by rpki-client