$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/a509a7f2-7b5a-4e82-86cc-217eab093131.mft File: a509a7f2-7b5a-4e82-86cc-217eab093131.mft (raw, json) Hash identifier: HwJLyhcFz/t66gQ2KssJ60oT87fpfIhq3h2pEn34Vp8= Subject key identifier: 0C:D2:2A:18:B8:C4:9F:AD:4A:08:1A:2C:36:FF:E9:B4:44:5E:83:85 Authority key identifier: F5:09:E8:F5:08:1E:9C:78:DB:AF:52:A3:00:53:35:94:85:24:8E:EB Certificate issuer: /CN=a509a7f2-7b5a-4e82-86cc-217eab093131 Certificate serial: 010D0C9F4328584D6AE5B64FD40952F58D3DD400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/a509a7f2-7b5a-4e82-86cc-217eab093131.mft Manifest number: 010D0C9F4328584B87BEB96F73DDF44E5D0EB074 Signing time: Mon 06 Apr 2026 15:00:03 +0000 Manifest this update: Mon 06 Apr 2026 15:00:03 +0000 Manifest next update: Wed 08 Apr 2026 15:00:00 +0000 Files and hashes: 1: 33952f95-e900-31ea-860e-de63f1452611.roa (hash: Dy8Fqn67GSGM9vHtxZ5Rhu18oaabjTzwhXLIGMShReA=) 2: 9ae1aebc-6069-3990-8770-ae6a8fcd84c1.roa (hash: ZrdecWjRX+DGTvMp8eHowP3CSGtst5de5j/uyGcKcMI=) 3: a509a7f2-7b5a-4e82-86cc-217eab093131.crl (hash: ThJfSUms1skSEjbeIYTaUwIVBP8njexPyXw4HTZlVDA=) 4: efd5b1a7-a066-35e8-b1de-4f3895d78184.roa (hash: a7GGcBMlCR+DMih9OnbCEUEb/Tiga+K8/315qfmJfpY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/a509a7f2-7b5a-4e82-86cc-217eab093131.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/a509a7f2-7b5a-4e82-86cc-217eab093131.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:e5:b6:4f:d4:09:52:f5:8d:3d:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a509a7f2-7b5a-4e82-86cc-217eab093131 Validity Not Before: Apr 6 15:00:03 2026 GMT Not After : Apr 8 15:00:00 2026 GMT Subject: CN=ba4df0ff-f3d2-4e9e-8c95-44690a0e431d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:46:9a:d2:7c:25:c5:b5:e7:c5:4a:47:05:74: a1:78:07:a8:b9:a6:65:16:61:3c:7f:e6:11:c2:ca: 52:d6:e0:ff:a2:2a:f6:67:52:f6:15:6a:53:8a:3c: b7:af:43:df:3b:92:7a:ef:77:cf:1a:27:85:33:3d: eb:e1:3e:04:a7:7f:e9:db:11:e0:1f:dc:d4:1b:e3: 24:8d:1c:b7:da:c8:e1:eb:06:87:f6:64:d8:60:25: 37:3d:6b:dc:da:d9:f8:6c:9f:d5:bb:71:e7:dd:e8: 05:53:f5:5c:55:5e:df:61:0f:39:11:dd:17:18:0f: cb:1c:25:ca:91:44:05:8c:f3:c5:aa:de:34:96:ad: 8c:72:0a:49:e3:67:48:38:3e:e3:af:12:e9:c0:6c: f2:ca:0b:54:dd:94:bd:35:66:b5:f6:ae:78:54:42: b1:e6:4d:b7:0b:58:0f:82:1e:9f:04:3a:17:7c:c0: 61:59:b6:1e:71:a1:57:f9:6a:76:4d:37:91:66:c2: b8:e4:99:60:51:aa:3d:22:1b:c0:c4:d3:ad:2d:2c: 43:57:32:c6:60:27:4b:f3:d9:6a:99:01:90:ac:a8: 05:c4:bd:10:ac:00:87:c5:31:f6:44:8f:a1:66:a1: b5:4d:f5:8d:6f:0d:87:f5:2a:d5:1f:56:79:db:1c: 04:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D2:2A:18:B8:C4:9F:AD:4A:08:1A:2C:36:FF:E9:B4:44:5E:83:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/a509a7f2-7b5a-4e82-86cc-217eab093131.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/a509a7f2-7b5a-4e82-86cc-217eab093131.crl X509v3 Authority Key Identifier: keyid:F5:09:E8:F5:08:1E:9C:78:DB:AF:52:A3:00:53:35:94:85:24:8E:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:b4:4c:4b:d3:89:9d:04:88:f5:8d:3d:6d:f9:51:f6:c9:83: 12:e2:21:dc:42:1c:5e:95:9e:2a:73:c3:dd:52:08:51:0d:c7: f7:d9:59:a4:4d:e8:27:76:a3:88:4e:71:11:1c:22:12:ae:61: 5a:d9:19:c3:a7:01:8f:69:3c:9d:0d:ba:ea:5e:c5:32:28:cd: cc:6d:bd:5e:3f:02:81:1e:ab:09:9c:40:2e:9c:00:7e:36:40: 02:47:f0:c6:fe:6c:db:bd:83:33:22:6e:ba:80:ad:40:67:95: 6e:41:17:55:40:d4:23:e6:fd:72:1f:ad:85:4a:ff:df:7f:f6: 77:32:81:2b:cd:d7:ec:39:21:af:32:d6:7f:ae:f9:76:5a:f8: b8:15:a3:0c:01:59:2e:0c:45:b5:44:36:b6:b2:67:02:c7:6f: bb:85:0b:dd:70:40:84:86:fd:88:08:cf:d9:32:83:33:21:52: f0:f8:f3:fc:c2:80:0f:71:5c:06:3c:52:c8:79:0d:d4:15:c8: 22:b6:b6:d0:5b:93:8c:9a:eb:b4:e1:98:4a:df:29:19:59:c2: 96:a0:02:87:85:10:81:4c:4c:f9:5d:0f:9b:10:bf:cb:83:5c: 48:58:07:0f:a8:e6:08:72:01:39:df:93:c4:5f:e3:f7:3f:cc: a3:0c:d4:60 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1q5bZP1AlS9Y091AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUwOWE3ZjItN2I1YS00ZTgyLTg2Y2MtMjE3ZWFiMDkz MTMxMB4XDTI2MDQwNjE1MDAwM1oXDTI2MDQwODE1MDAwMFowLzEtMCsGA1UEAxMk YmE0ZGYwZmYtZjNkMi00ZTllLThjOTUtNDQ2OTBhMGU0MzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEaa0nwlxbXnxUpHBXSheAeouaZlFmE8f+YR wspS1uD/oir2Z1L2FWpTijy3r0PfO5J673fPGieFMz3r4T4Ep3/p2xHgH9zUG+Mk jRy32sjh6waH9mTYYCU3PWvc2tn4bJ/Vu3Hn3egFU/VcVV7fYQ85Ed0XGA/LHCXK kUQFjPPFqt40lq2McgpJ42dIOD7jrxLpwGzyygtU3ZS9NWa19q54VEKx5k23C1gP gh6fBDoXfMBhWbYecaFX+Wp2TTeRZsK45JlgUao9IhvAxNOtLSxDVzLGYCdL89lq mQGQrKgFxL0QrACHxTH2RI+hZqG1TfWNbw2H9SrVH1Z52xwE9QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAzSKhi4xJ+tSggaLDb/6bREXoOFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hNTA5 YTdmMi03YjVhLTRlODItODZjYy0yMTdlYWIwOTMxMzEvYTUwOWE3ZjItN2I1YS00 ZTgyLTg2Y2MtMjE3ZWFiMDkzMTMxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYTUwOWE3ZjItN2I1YS00ZTgyLTg2 Y2MtMjE3ZWFiMDkzMTMxL2E1MDlhN2YyLTdiNWEtNGU4Mi04NmNjLTIxN2VhYjA5 MzEzMS5jcmwwHwYDVR0jBBgwFoAU9Qno9QgenHjbr1KjAFM1lIUkjuswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hNTA5YTdmMi03YjVhLTRlODItODZjYy0yMTdl YWIwOTMxMzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAZtExL04mdBIj1jT1t+VH2 yYMS4iHcQhxelZ4qc8PdUghRDcf32VmkTegndqOITnERHCISrmFa2RnDpwGPaTyd DbrqXsUyKM3Mbb1ePwKBHqsJnEAunAB+NkACR/DG/mzbvYMzIm66gK1AZ5VuQRdV QNQj5v1yH62FSv/ff/Z3MoErzdfsOSGvMtZ/rvl2Wvi4FaMMAVkuDEW1RDa2smcC x2+7hQvdcECEhv2ICM/ZMoMzIVLw+PP8woAPcVwGPFLIeQ3UFcgitrbQW5OMmuu0 4ZhK3ykZWcKWoAKHhRCBTEz5XQ+bEL/Lg1xIWAcPqOYIcgE535PEX+P3P8yjDNRg -----END CERTIFICATE-----Generated at Tue Apr 7 15:06:09 2026 by rpki-client