$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8f35530c-97c7-4e60-9a44-86cf5b7715a2/8f35530c-97c7-4e60-9a44-86cf5b7715a2.mft File: 8f35530c-97c7-4e60-9a44-86cf5b7715a2.mft (raw, json) Hash identifier: t8HFNVctPyoBTR1iqxCWlSlUqotJE9tmp2ZlC1tI4zA= Subject key identifier: E1:51:AA:75:CA:92:10:83:DB:54:AB:12:82:14:29:89:49:B0:BA:1D Authority key identifier: 5F:80:7A:B7:8E:C5:D7:FE:41:53:3E:67:5D:7F:29:6E:5F:EE:1B:8C Certificate issuer: /CN=8f35530c-97c7-4e60-9a44-86cf5b7715a2 Certificate serial: 010D0C9F4328584D6AE5BB58656479998393E180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8f35530c-97c7-4e60-9a44-86cf5b7715a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8f35530c-97c7-4e60-9a44-86cf5b7715a2/8f35530c-97c7-4e60-9a44-86cf5b7715a2.mft Manifest number: 010D0C9F4328584B76FBAE4A7F655918CAC4E938 Signing time: Mon 06 Apr 2026 15:00:03 +0000 Manifest this update: Mon 06 Apr 2026 15:00:03 +0000 Manifest next update: Wed 08 Apr 2026 15:00:00 +0000 Files and hashes: 1: 8f35530c-97c7-4e60-9a44-86cf5b7715a2.crl (hash: SVMOC0MglJ+XOVipvuaPqpCgZDwbDHQYwuB8QYFqviI=) 2: fb908917-c491-34f1-b319-3e29a99f6486.roa (hash: T/gPjcpyHjgOY8qKtuOIl9Cnfo4GgJtCEHQHpmDUHcs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8f35530c-97c7-4e60-9a44-86cf5b7715a2/8f35530c-97c7-4e60-9a44-86cf5b7715a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8f35530c-97c7-4e60-9a44-86cf5b7715a2/8f35530c-97c7-4e60-9a44-86cf5b7715a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8f35530c-97c7-4e60-9a44-86cf5b7715a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:e5:bb:58:65:64:79:99:83:93:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f35530c-97c7-4e60-9a44-86cf5b7715a2 Validity Not Before: Apr 6 15:00:03 2026 GMT Not After : Apr 8 15:00:00 2026 GMT Subject: CN=afcc4a80-7d48-459e-94cc-1e853e832cc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b5:7e:bb:01:6d:d7:2f:bb:01:c3:05:f6:8e: a3:1c:3f:e6:d6:70:c6:25:cc:12:76:3f:38:dd:05: 2d:02:d8:2a:7b:dc:4e:cd:4d:50:a4:0b:ac:e6:73: 34:80:d2:4e:62:0b:d7:2e:28:75:01:f7:4d:08:9a: f3:b9:10:22:70:45:51:2b:bc:6d:54:c9:4d:d1:27: 95:db:cf:4a:44:70:97:50:fe:3a:62:7c:4a:1a:83: 1b:5a:9f:77:b8:59:09:9d:5b:83:af:86:7f:a0:03: bc:e2:46:16:9a:f4:50:46:61:21:06:54:8c:65:2d: 70:bd:7c:c4:0e:d1:78:0f:68:9d:03:66:35:63:39: 25:33:b2:e5:d6:67:3b:7f:c7:99:c9:50:87:e0:68: fe:c9:51:1f:13:8b:7b:7d:b9:4d:09:88:bf:b3:15: 4f:f1:36:2f:8a:f5:4a:3a:e5:81:e0:86:64:b7:96: 35:85:c4:1e:06:a4:3d:5f:38:4f:e0:52:21:70:97: c4:20:97:01:3a:e5:a1:ad:10:98:ac:b6:90:cd:f1: db:04:da:22:80:c6:64:86:38:0a:14:66:55:c3:bb: 15:ec:1d:59:64:77:68:b4:ab:ac:40:84:4b:78:63: c6:db:b5:57:af:01:ac:6a:86:e9:20:45:7a:cc:c5: 4a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:51:AA:75:CA:92:10:83:DB:54:AB:12:82:14:29:89:49:B0:BA:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8f35530c-97c7-4e60-9a44-86cf5b7715a2/8f35530c-97c7-4e60-9a44-86cf5b7715a2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8f35530c-97c7-4e60-9a44-86cf5b7715a2/8f35530c-97c7-4e60-9a44-86cf5b7715a2.crl X509v3 Authority Key Identifier: keyid:5F:80:7A:B7:8E:C5:D7:FE:41:53:3E:67:5D:7F:29:6E:5F:EE:1B:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8f35530c-97c7-4e60-9a44-86cf5b7715a2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:6f:2a:b1:8a:43:64:29:71:57:96:ea:2c:e9:aa:33:74:d1: 8f:1f:ab:c5:f0:9b:aa:d2:cc:2d:e3:48:82:54:a5:da:60:3e: 14:b7:3c:59:cf:74:64:70:73:50:e2:0c:c7:e7:4b:0c:38:36: 6a:70:c0:dc:76:0b:fd:98:bf:28:56:f7:ee:84:2c:5d:c6:5f: 63:01:05:65:81:4d:cb:60:86:ee:49:ee:ca:4b:cd:54:27:93: c6:ba:ca:31:2c:89:c8:7b:28:a8:3e:1c:88:36:b8:80:ac:27: d5:d2:38:fa:1e:b9:62:b4:8b:7f:46:59:4c:b0:bd:65:47:cc: 69:b7:a4:3d:9c:52:a4:fd:33:02:f0:58:c3:10:ea:2c:66:3d: 65:82:dd:a3:d7:60:3c:8a:66:c8:d6:73:9f:9b:83:9e:44:82: 8e:c0:7e:e7:8d:d5:0b:19:22:de:e6:81:a7:2f:cb:78:2c:be: 23:ba:7f:8e:ec:65:b9:7a:5c:8b:22:c9:6c:34:c9:72:23:e9: 28:3d:62:3d:35:04:b8:9e:ae:1c:b8:39:e7:b3:09:c9:e2:e8: 07:08:90:0e:59:de:6d:01:e1:d9:38:81:63:87:b7:2f:1a:67: b9:05:d5:07:1e:8d:2d:0e:60:3d:fb:a4:ad:47:0b:d5:0a:78: 89:a9:9a:cc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1q5btYZWR5mYOT4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYzNTUzMGMtOTdjNy00ZTYwLTlhNDQtODZjZjViNzcx NWEyMB4XDTI2MDQwNjE1MDAwM1oXDTI2MDQwODE1MDAwMFowLzEtMCsGA1UEAxMk YWZjYzRhODAtN2Q0OC00NTllLTk0Y2MtMWU4NTNlODMyY2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrV+uwFt1y+7AcMF9o6jHD/m1nDGJcwSdj84 3QUtAtgqe9xOzU1QpAus5nM0gNJOYgvXLih1AfdNCJrzuRAicEVRK7xtVMlN0SeV 289KRHCXUP46YnxKGoMbWp93uFkJnVuDr4Z/oAO84kYWmvRQRmEhBlSMZS1wvXzE DtF4D2idA2Y1YzklM7Ll1mc7f8eZyVCH4Gj+yVEfE4t7fblNCYi/sxVP8TYvivVK OuWB4IZkt5Y1hcQeBqQ9XzhP4FIhcJfEIJcBOuWhrRCYrLaQzfHbBNoigMZkhjgK FGZVw7sV7B1ZZHdotKusQIRLeGPG27VXrwGsaobpIEV6zMVKUwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOFRqnXKkhCD21SrEoIUKYlJsLodMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84ZjM1 NTMwYy05N2M3LTRlNjAtOWE0NC04NmNmNWI3NzE1YTIvOGYzNTUzMGMtOTdjNy00 ZTYwLTlhNDQtODZjZjViNzcxNWEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOGYzNTUzMGMtOTdjNy00ZTYwLTlh NDQtODZjZjViNzcxNWEyLzhmMzU1MzBjLTk3YzctNGU2MC05YTQ0LTg2Y2Y1Yjc3 MTVhMi5jcmwwHwYDVR0jBBgwFoAUX4B6t47F1/5BUz5nXX8pbl/uG4wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC84ZjM1NTMwYy05N2M3LTRlNjAtOWE0NC04NmNm NWI3NzE1YTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCJbyqxikNkKXFXluos6aoz dNGPH6vF8Juq0swt40iCVKXaYD4UtzxZz3RkcHNQ4gzH50sMODZqcMDcdgv9mL8o VvfuhCxdxl9jAQVlgU3LYIbuSe7KS81UJ5PGusoxLInIeyioPhyINriArCfV0jj6 HrlitIt/RllMsL1lR8xpt6Q9nFKk/TMC8FjDEOosZj1lgt2j12A8imbI1nOfm4Oe RIKOwH7njdULGSLe5oGnL8t4LL4jun+O7GW5elyLIslsNMlyI+koPWI9NQS4nq4c uDnnswnJ4ugHCJAOWd5tAeHZOIFjh7cvGme5BdUHHo0tDmA9+6StRwvVCniJqZrM -----END CERTIFICATE-----Generated at Tue Apr 7 15:05:41 2026 by rpki-client