$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.mft File: 4adc9f42-8201-4af2-a3c2-223d1e2687a2.mft (raw, json) Hash identifier: 60AEtVfchZbFqrZ9SXxv/4LGVntM6kNIeQRm/8ysInQ= Subject key identifier: AE:24:B6:1B:63:B3:3B:4E:32:B3:2E:0F:72:D0:04:FC:BB:60:36:C1 Authority key identifier: E1:BB:68:98:83:73:DF:25:58:58:CF:EB:46:41:A0:01:FC:61:3D:5F Certificate issuer: /CN=4adc9f42-8201-4af2-a3c2-223d1e2687a2 Certificate serial: 010D0C9F4328584D6B5CD2DE6DD76FBDDB294F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.mft Manifest number: 010D0C9F4328584073A821C16306B4600A59557F Signing time: Mon 06 Apr 2026 19:00:03 +0000 Manifest this update: Mon 06 Apr 2026 19:00:03 +0000 Manifest next update: Wed 08 Apr 2026 19:00:00 +0000 Files and hashes: 1: 15695d7d-5655-3250-ba9f-dea695ff46a8.roa (hash: mlmhKVx3+GO/hk0zKMg18YUer7Y+8IEH34rkyFkFpYs=) 2: 499f708c-a3fd-3b53-9ae1-95855a7ebf3f.roa (hash: imeJ07Tget8ZOGcpEoyNb8ALpdkDrntaLgjyXo4827Q=) 3: 4adc9f42-8201-4af2-a3c2-223d1e2687a2.crl (hash: YJyE/GLwCfbYV31nzH6o01OXmnJP53RgouqF+mC2Ezw=) 4: 82bb00f5-b592-37a1-8e68-c14feb40c92d.roa (hash: 0dM2UUQpssQzPYAv28YDcVJ2EpNxZhpVOVKWUf94GK8=) 5: d59b8c12-a1e4-38bb-857d-ea78ed3a3193.roa (hash: 7k2NKbhBZ4rMTLktOxF0kv6WvQRKQVOCht3LpL0ABJY=) 6: de3ea48a-afe6-3f81-ac77-01bdc995874d.roa (hash: Ui7jUCz5GRxJHMd8SsojBSeqnAQges8HqXwgX/qTiBc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6b:5c:d2:de:6d:d7:6f:bd:db:29:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4adc9f42-8201-4af2-a3c2-223d1e2687a2 Validity Not Before: Apr 6 19:00:03 2026 GMT Not After : Apr 8 19:00:00 2026 GMT Subject: CN=12156543-5e21-40fe-917c-c6d9ef25291a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d9:66:50:df:1a:15:c4:f4:98:52:dc:b4:13: 4a:5c:af:12:48:3a:ea:d0:6c:4f:e9:2c:40:3e:f8: 0b:ae:0a:54:3a:f0:ac:7f:f6:f8:cd:c2:54:2b:00: a1:01:11:b3:79:32:70:34:ae:fc:b2:30:b7:5f:8d: fc:d7:75:71:c8:8f:4d:b9:fb:b7:56:59:74:38:46: 56:2d:66:3f:74:ca:45:31:32:ad:1a:89:49:8f:81: 58:de:c3:73:ff:0d:27:2e:fb:b2:89:00:5f:dc:e6: 78:b6:7f:a1:2d:30:a9:b1:9c:d7:2a:1a:3b:24:7b: f5:d1:53:eb:a7:f7:ae:a5:1c:92:ce:0f:1b:a6:92: b1:78:81:70:ea:3a:cc:6c:fe:be:db:96:5d:bb:9e: 86:37:2d:4a:63:1b:53:84:1f:cc:9a:4d:ce:1e:5f: 10:bf:98:09:76:0c:a1:96:d6:60:d0:45:c2:ff:18: 1e:cc:ed:0b:ed:40:d1:f8:67:04:11:b0:37:af:87: 1d:43:04:05:12:a7:6e:a2:9e:02:88:ce:8b:fc:35: a7:7a:05:a2:1e:a1:d6:09:da:0c:d6:6c:78:08:48: 22:40:69:f2:be:90:a4:e3:55:2d:96:e4:a1:cf:71: c9:b7:ea:b5:fa:4d:65:42:98:b6:79:93:43:63:f0: 17:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:24:B6:1B:63:B3:3B:4E:32:B3:2E:0F:72:D0:04:FC:BB:60:36:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.crl X509v3 Authority Key Identifier: keyid:E1:BB:68:98:83:73:DF:25:58:58:CF:EB:46:41:A0:01:FC:61:3D:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:16:3a:97:94:6a:25:ae:46:ae:e2:d0:8e:e3:83:ca:6a:dc: a2:0b:64:4e:03:48:43:bd:1a:4c:8b:6d:27:69:94:7a:c4:e4: 65:f5:84:6c:41:bb:9f:f1:ee:6f:4e:2b:85:48:c6:b5:42:ad: 2b:f7:13:68:ff:4c:44:65:14:fb:93:73:67:d4:0f:53:e9:a9: 0d:ad:64:00:9e:be:04:7c:bc:a7:d7:6d:94:d0:87:22:60:76: 28:88:ff:c8:52:df:b2:f7:e1:68:15:2f:56:24:6f:8c:9e:e7: d0:89:20:17:3c:a5:8b:5f:25:b1:82:0e:5b:ec:c5:86:a0:55: b5:29:5d:a5:8e:8b:10:79:92:14:5e:b6:bc:74:2b:eb:d0:15: c6:ba:dc:49:23:b1:aa:b5:e7:38:56:8b:97:9b:c4:2e:e8:24: 86:4d:d0:e7:74:77:14:dc:da:b3:af:c0:69:31:9a:81:51:52: d4:a1:c3:1a:d6:74:99:a3:c4:5c:88:00:3e:54:b0:af:92:a7: 0f:2d:b9:3b:9a:5d:f7:2d:1e:98:18:40:fc:5f:bb:f3:b6:4c: 1a:99:2f:7c:1c:35:79:b8:12:dd:6c:8b:b3:f1:3a:ca:da:31: 72:1c:c2:5e:00:06:0d:4f:2f:94:ab:d4:0a:91:97:49:15:86: e3:fb:59:a4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1rXNLebddvvdspTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFkYzlmNDItODIwMS00YWYyLWEzYzItMjIzZDFlMjY4 N2EyMB4XDTI2MDQwNjE5MDAwM1oXDTI2MDQwODE5MDAwMFowLzEtMCsGA1UEAxMk MTIxNTY1NDMtNWUyMS00MGZlLTkxN2MtYzZkOWVmMjUyOTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtlmUN8aFcT0mFLctBNKXK8SSDrq0GxP6SxA PvgLrgpUOvCsf/b4zcJUKwChARGzeTJwNK78sjC3X43813VxyI9Nufu3Vll0OEZW LWY/dMpFMTKtGolJj4FY3sNz/w0nLvuyiQBf3OZ4tn+hLTCpsZzXKho7JHv10VPr p/eupRySzg8bppKxeIFw6jrMbP6+25Zdu56GNy1KYxtThB/Mmk3OHl8Qv5gJdgyh ltZg0EXC/xgezO0L7UDR+GcEEbA3r4cdQwQFEqduop4CiM6L/DWnegWiHqHWCdoM 1mx4CEgiQGnyvpCk41UtluShz3HJt+q1+k1lQpi2eZNDY/AXDwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFK4kthtjsztOMrMuD3LQBPy7YDbBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YWRj OWY0Mi04MjAxLTRhZjItYTNjMi0yMjNkMWUyNjg3YTIvNGFkYzlmNDItODIwMS00 YWYyLWEzYzItMjIzZDFlMjY4N2EyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGFkYzlmNDItODIwMS00YWYyLWEz YzItMjIzZDFlMjY4N2EyLzRhZGM5ZjQyLTgyMDEtNGFmMi1hM2MyLTIyM2QxZTI2 ODdhMi5jcmwwHwYDVR0jBBgwFoAU4btomINz3yVYWM/rRkGgAfxhPV8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YWRjOWY0Mi04MjAxLTRhZjItYTNjMi0yMjNk MWUyNjg3YTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBwFjqXlGolrkau4tCO44PK atyiC2ROA0hDvRpMi20naZR6xORl9YRsQbuf8e5vTiuFSMa1Qq0r9xNo/0xEZRT7 k3Nn1A9T6akNrWQAnr4EfLyn122U0IciYHYoiP/IUt+y9+FoFS9WJG+MnufQiSAX PKWLXyWxgg5b7MWGoFW1KV2ljosQeZIUXra8dCvr0BXGutxJI7Gqtec4VouXm8Qu 6CSGTdDndHcU3Nqzr8BpMZqBUVLUocMa1nSZo8RciAA+VLCvkqcPLbk7ml33LR6Y GED8X7vztkwamS98HDV5uBLdbIuz8TrK2jFyHMJeAAYNTy+Uq9QKkZdJFYbj+1mk -----END CERTIFICATE-----Generated at Tue Apr 7 12:07:34 2026 by rpki-client