$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.mft File: 91c894d6-b991-4966-bec4-7c58dac779b5.mft (raw, json) Hash identifier: h6dKPVW/iHToZG6DrdWN+hVfsBLLwLN6+Um8ioIeyMQ= Subject key identifier: 1F:3F:7C:77:2E:E9:50:F8:48:2F:41:C0:4C:F6:65:63:54:09:B3:76 Authority key identifier: 13:B2:2C:28:79:5A:A5:CA:BB:C0:79:BF:76:C3:D6:8B:67:23:7B:C2 Certificate issuer: /CN=91c894d6-b991-4966-bec4-7c58dac779b5 Certificate serial: 010D0C9F4328584D6C68D6CFE069BD667AD05480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.mft Manifest number: 010D0C9F4328584073A83B5D8905A808541C5B1D Signing time: Tue 07 Apr 2026 04:00:03 +0000 Manifest this update: Tue 07 Apr 2026 04:00:03 +0000 Manifest next update: Thu 09 Apr 2026 04:00:00 +0000 Files and hashes: 1: 91c894d6-b991-4966-bec4-7c58dac779b5.crl (hash: DZLOjcoXWmoOn+7Vy/CKAWMDgBB/QXw+d/3Xep6YZSo=) 2: ab708923-0613-3a2c-b170-cadae0fe2f49.roa (hash: t2+4m8lcVOCJ40uPDpAS5QYrtpf+xC4ezXZEuKP0wyE=) 3: e07ffccc-e92d-3740-bf40-b1ce295ad731.roa (hash: QBGMDIfoQcE+nwrmlEoFu5uATeJXKlHyRVCc7kM0CEk=) 4: fdbb69fe-b9b0-3266-b784-4d8845e65f53.roa (hash: FMCxQtrESyLQ1nNLcnGL1/FIzmUZCfr5n2p7FOy7AYg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:68:d6:cf:e0:69:bd:66:7a:d0:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91c894d6-b991-4966-bec4-7c58dac779b5 Validity Not Before: Apr 7 04:00:03 2026 GMT Not After : Apr 9 04:00:00 2026 GMT Subject: CN=f341857a-edb5-41f7-8055-3a3fedaf43a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:09:f4:8c:b5:f0:e5:a0:13:7b:07:37:81:55: 94:91:a0:37:e4:36:a6:25:42:bc:32:2f:1e:c4:a8: d8:a3:30:00:43:4c:44:98:21:3e:bf:f7:d4:be:85: 2c:07:7b:87:6c:4a:a3:60:82:67:2f:b5:0a:d7:e5: ba:15:71:d1:16:2d:12:9c:00:60:8e:ce:93:0d:fe: 0f:c1:54:e0:54:35:aa:ac:7c:af:8e:a5:eb:05:97: f1:1f:97:80:92:69:42:d3:23:f4:de:35:12:63:09: f2:40:e8:5d:fe:00:f3:a0:10:28:c6:86:f1:89:8f: 22:93:2e:16:a6:58:25:f4:6f:a6:a3:47:7a:dd:11: 82:ee:99:46:0c:bb:82:01:16:c3:16:d8:53:89:3e: 29:da:f6:1a:23:f1:88:fa:ce:05:16:ab:36:ad:3c: c2:92:a7:87:30:f0:0b:25:b0:48:bc:62:5a:5a:23: e2:8f:a8:88:10:2f:2c:e0:5e:5b:4b:4a:ed:38:57: 26:4c:f6:5f:d1:30:29:d8:00:96:01:a5:c1:bc:ba: e2:be:70:ad:9f:89:a2:9e:7e:06:79:a0:bb:e3:1e: 50:8f:e4:fe:1e:32:b1:53:d0:9c:a2:e4:24:4e:b0: ae:23:f5:56:53:f5:a2:ce:c8:4d:4e:f8:b1:a1:5d: b0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:3F:7C:77:2E:E9:50:F8:48:2F:41:C0:4C:F6:65:63:54:09:B3:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.crl X509v3 Authority Key Identifier: keyid:13:B2:2C:28:79:5A:A5:CA:BB:C0:79:BF:76:C3:D6:8B:67:23:7B:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:08:48:e7:fa:c7:c9:74:7b:64:a6:9c:7b:36:d2:a2:79:f8: 66:1d:68:f0:f1:45:9f:90:8f:7b:9d:61:0d:fa:d5:56:b8:98: e8:3f:b4:d5:b8:84:c0:ce:87:bf:f2:a5:a1:04:2c:0e:2c:b0: af:17:11:de:b1:7a:89:33:ff:51:78:98:cb:05:60:9f:17:42: 4d:1d:38:eb:0b:11:a2:d0:a2:5e:0c:d4:c1:f5:0a:bb:c1:cf: c6:28:51:c1:68:e3:ca:2e:8b:ef:47:3c:46:5a:08:b0:2b:ce: 7a:93:7a:3b:08:d5:b3:64:26:6f:4a:24:28:e2:c5:03:08:a4: d4:60:58:de:cf:68:aa:dd:04:33:e9:53:b5:be:17:a0:7e:78: 8c:90:f7:50:5b:40:ab:92:01:61:d5:c0:30:96:76:70:c4:be: d7:8e:95:8a:8e:c5:8d:8a:67:c0:2f:33:82:f0:08:34:d7:94: bb:3a:65:bf:3a:ba:10:9f:d6:91:cb:60:40:98:70:cc:d1:60: ec:cf:8a:5a:b7:3a:6c:7a:5d:3d:9e:e9:e0:8e:21:d4:4b:29: b3:59:b9:86:5b:3c:b5:9b:ea:3d:93:81:0f:e2:f0:88:d6:f6: ac:e2:6a:af:ec:72:4d:90:65:37:8a:2f:fc:0e:3d:b8:e7:de: e2:05:f7:f0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1saNbP4Gm9ZnrQVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFjODk0ZDYtYjk5MS00OTY2LWJlYzQtN2M1OGRhYzc3 OWI1MB4XDTI2MDQwNzA0MDAwM1oXDTI2MDQwOTA0MDAwMFowLzEtMCsGA1UEAxMk ZjM0MTg1N2EtZWRiNS00MWY3LTgwNTUtM2EzZmVkYWY0M2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgn0jLXw5aATewc3gVWUkaA35DamJUK8Mi8e xKjYozAAQ0xEmCE+v/fUvoUsB3uHbEqjYIJnL7UK1+W6FXHRFi0SnABgjs6TDf4P wVTgVDWqrHyvjqXrBZfxH5eAkmlC0yP03jUSYwnyQOhd/gDzoBAoxobxiY8iky4W plgl9G+mo0d63RGC7plGDLuCARbDFthTiT4p2vYaI/GI+s4FFqs2rTzCkqeHMPAL JbBIvGJaWiPij6iIEC8s4F5bS0rtOFcmTPZf0TAp2ACWAaXBvLrivnCtn4minn4G eaC74x5Qj+T+HjKxU9CcouQkTrCuI/VWU/WizshNTvixoV2wtwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFB8/fHcu6VD4SC9BwEz2ZWNUCbN2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MWM4 OTRkNi1iOTkxLTQ5NjYtYmVjNC03YzU4ZGFjNzc5YjUvOTFjODk0ZDYtYjk5MS00 OTY2LWJlYzQtN2M1OGRhYzc3OWI1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTFjODk0ZDYtYjk5MS00OTY2LWJl YzQtN2M1OGRhYzc3OWI1LzkxYzg5NGQ2LWI5OTEtNDk2Ni1iZWM0LTdjNThkYWM3 NzliNS5jcmwwHwYDVR0jBBgwFoAUE7IsKHlapcq7wHm/dsPWi2cje8IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MWM4OTRkNi1iOTkxLTQ5NjYtYmVjNC03YzU4 ZGFjNzc5YjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBTCEjn+sfJdHtkppx7NtKi efhmHWjw8UWfkI97nWEN+tVWuJjoP7TVuITAzoe/8qWhBCwOLLCvFxHesXqJM/9R eJjLBWCfF0JNHTjrCxGi0KJeDNTB9Qq7wc/GKFHBaOPKLovvRzxGWgiwK856k3o7 CNWzZCZvSiQo4sUDCKTUYFjez2iq3QQz6VO1vhegfniMkPdQW0CrkgFh1cAwlnZw xL7XjpWKjsWNimfALzOC8Ag015S7OmW/OroQn9aRy2BAmHDM0WDsz4patzpsel09 nungjiHUSymzWbmGWzy1m+o9k4EP4vCI1vas4mqv7HJNkGU3ii/8Dj24597iBffw -----END CERTIFICATE-----Generated at Tue Apr 7 12:07:44 2026 by rpki-client