$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/841d3ce8-d29f-40af-b883-2f114aee4d29.mft File: 841d3ce8-d29f-40af-b883-2f114aee4d29.mft (raw, json) Hash identifier: vBKVdkvge4uZ1rISFKq/QezAbjA6i39rGaxfjJq6+W8= Subject key identifier: D8:F0:EC:29:73:53:0C:E8:35:1E:D4:97:AF:7E:65:C0:5F:D8:CA:B2 Authority key identifier: DC:AE:0C:99:9A:44:86:66:5A:A7:3A:3A:49:5F:BD:2A:B3:58:21:C4 Certificate issuer: /CN=841d3ce8-d29f-40af-b883-2f114aee4d29 Certificate serial: 010D0C9F4328584D6B7A9BB479BCE1469EA4E900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/841d3ce8-d29f-40af-b883-2f114aee4d29.mft Manifest number: 010D0C9F4328584B42B9264CFB82D9B9D412D2DF Signing time: Mon 06 Apr 2026 20:00:03 +0000 Manifest this update: Mon 06 Apr 2026 20:00:03 +0000 Manifest next update: Thu 09 Apr 2026 20:00:00 +0000 Files and hashes: 1: 7f753e12-673a-3a2b-9155-84fc15154977.roa (hash: 98AW+ORD6ZQanHup73xkID7MbsOWydwTqB2SJvgfjJw=) 2: 841d3ce8-d29f-40af-b883-2f114aee4d29.crl (hash: M0sKu5HnesPVJ98uIHbVHgCJ2J8RdjD3pcrwDwN851Y=) 3: ae0ce974-b160-3b50-8606-6a49c27c111f.roa (hash: f0m+wD379zfmnvYVJZooxYNgQvtp/Jd2MPpDNs9NZhU=) 4: cac81a67-312e-33f8-966d-322161e7bd8e.roa (hash: WOW4TXXyjcLPwJz2C67bLQN6EzU3G2J5BGatrFwam5A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/841d3ce8-d29f-40af-b883-2f114aee4d29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/841d3ce8-d29f-40af-b883-2f114aee4d29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6b:7a:9b:b4:79:bc:e1:46:9e:a4:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=841d3ce8-d29f-40af-b883-2f114aee4d29 Validity Not Before: Apr 6 20:00:03 2026 GMT Not After : Apr 9 20:00:00 2026 GMT Subject: CN=2211175c-cec4-4a18-9b1f-70448b40842d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ba:19:fd:c9:bd:19:cc:75:00:dd:67:8f:24: 24:aa:66:e8:c8:13:bd:e5:92:f1:d9:69:ad:4d:89: 0d:00:c1:5a:f1:5f:63:fd:c0:0d:b0:61:a3:ee:90: 23:07:75:ec:e5:10:e2:3b:93:32:c5:75:a3:de:8e: 86:6a:db:54:5b:12:14:72:19:ac:4c:3b:ec:5b:e2: d3:80:f5:40:e6:3e:d2:30:1b:24:4e:02:95:12:cc: cd:12:ba:6f:de:77:9b:b9:58:18:1e:9c:b8:e9:0e: 51:4b:9b:f7:ba:33:9b:2e:b8:c6:be:2e:c7:96:0b: 46:f7:49:3b:11:94:04:2a:cc:8e:ec:e7:39:5f:8c: 0e:54:83:87:87:29:bc:9b:d5:b9:a6:1d:b4:a7:12: c8:e1:46:8f:59:31:79:e8:73:f0:2a:04:4c:81:d1: 21:4d:f4:c6:29:68:e5:c7:5b:9a:07:b6:31:91:8a: b4:bd:0e:d4:13:a8:71:9b:ed:b2:e2:dc:72:25:26: 84:af:1c:19:4f:f4:39:74:a9:cb:b2:70:6d:c8:49: 9e:8a:e9:72:21:9c:8e:a5:3d:4b:cd:8c:56:aa:1c: 30:a4:e2:cf:76:ad:2b:1b:76:e4:46:83:7f:57:c5: 6d:97:d6:12:de:f4:36:c6:1f:09:3e:8e:e8:a8:de: 15:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F0:EC:29:73:53:0C:E8:35:1E:D4:97:AF:7E:65:C0:5F:D8:CA:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/841d3ce8-d29f-40af-b883-2f114aee4d29.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/841d3ce8-d29f-40af-b883-2f114aee4d29.crl X509v3 Authority Key Identifier: keyid:DC:AE:0C:99:9A:44:86:66:5A:A7:3A:3A:49:5F:BD:2A:B3:58:21:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:ae:eb:20:48:2f:99:82:eb:a5:c2:b8:bf:73:08:59:c1:b9: 9b:bf:2a:23:50:55:55:cf:ef:4e:8e:56:cd:ab:48:91:7d:70: dc:49:7b:70:ab:30:3b:66:f2:05:48:86:c2:c3:7c:1d:df:6a: 32:d6:40:b8:78:4d:b8:3c:0a:b8:76:9d:3f:a1:0a:f5:3d:a3: c6:38:0c:88:f3:b4:43:e3:3c:8f:3d:8e:e2:ab:82:00:0a:0a: eb:d9:1f:f9:ac:d7:7e:22:07:94:67:88:ca:4d:e4:ad:93:c8: 47:b4:87:73:cc:5f:65:e6:41:ab:e7:8b:a9:a8:0f:b6:00:75: 78:bd:b5:98:d0:6b:b8:11:77:f7:b3:59:9b:4b:30:5d:15:a5: 86:54:46:4d:ba:e3:ef:35:d1:a1:8b:be:45:36:ee:90:3e:c2: 15:63:3a:ff:7b:4b:fe:63:b0:c0:4a:29:d1:41:8c:bf:a0:d8: 08:5d:31:85:4f:ca:6f:b4:4d:71:73:e8:ae:82:55:9a:c8:ff: 9b:dd:59:d6:0e:f6:90:db:56:fb:2f:34:dc:2c:3c:9e:af:19: e9:c6:60:c9:15:a6:55:24:29:5e:b5:aa:ae:6e:eb:f9:6e:33: 46:cd:9b:19:31:e2:16:fb:4a:2a:7a:5d:67:a7:c2:bf:83:a7: 54:f6:51:d0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1repu0ebzhRp6k6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQxZDNjZTgtZDI5Zi00MGFmLWI4ODMtMmYxMTRhZWU0 ZDI5MB4XDTI2MDQwNjIwMDAwM1oXDTI2MDQwOTIwMDAwMFowLzEtMCsGA1UEAxMk MjIxMTE3NWMtY2VjNC00YTE4LTliMWYtNzA0NDhiNDA4NDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsboZ/cm9Gcx1AN1njyQkqmboyBO95ZLx2Wmt TYkNAMFa8V9j/cANsGGj7pAjB3Xs5RDiO5MyxXWj3o6GattUWxIUchmsTDvsW+LT gPVA5j7SMBskTgKVEszNErpv3nebuVgYHpy46Q5RS5v3ujObLrjGvi7HlgtG90k7 EZQEKsyO7Oc5X4wOVIOHhym8m9W5ph20pxLI4UaPWTF56HPwKgRMgdEhTfTGKWjl x1uaB7YxkYq0vQ7UE6hxm+2y4txyJSaErxwZT/Q5dKnLsnBtyEmeiulyIZyOpT1L zYxWqhwwpOLPdq0rG3bkRoN/V8Vtl9YS3vQ2xh8JPo7oqN4VKQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNjw7ClzUwzoNR7Ul69+ZcBf2MqyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84NDFk M2NlOC1kMjlmLTQwYWYtYjg4My0yZjExNGFlZTRkMjkvODQxZDNjZTgtZDI5Zi00 MGFmLWI4ODMtMmYxMTRhZWU0ZDI5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvODQxZDNjZTgtZDI5Zi00MGFmLWI4 ODMtMmYxMTRhZWU0ZDI5Lzg0MWQzY2U4LWQyOWYtNDBhZi1iODgzLTJmMTE0YWVl NGQyOS5jcmwwHwYDVR0jBBgwFoAU3K4MmZpEhmZapzo6SV+9KrNYIcQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC84NDFkM2NlOC1kMjlmLTQwYWYtYjg4My0yZjEx NGFlZTRkMjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBcrusgSC+Zguulwri/cwhZ wbmbvyojUFVVz+9OjlbNq0iRfXDcSXtwqzA7ZvIFSIbCw3wd32oy1kC4eE24PAq4 dp0/oQr1PaPGOAyI87RD4zyPPY7iq4IACgrr2R/5rNd+IgeUZ4jKTeStk8hHtIdz zF9l5kGr54upqA+2AHV4vbWY0Gu4EXf3s1mbSzBdFaWGVEZNuuPvNdGhi75FNu6Q PsIVYzr/e0v+Y7DASinRQYy/oNgIXTGFT8pvtE1xc+iuglWayP+b3VnWDvaQ21b7 LzTcLDyerxnpxmDJFaZVJCletaqubuv5bjNGzZsZMeIW+0oqel1np8K/g6dU9lHQ -----END CERTIFICATE-----Generated at Tue Apr 7 15:06:44 2026 by rpki-client