$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.mft File: d2e45912-e6e3-400c-b0be-4f6c7001f5cb.mft (raw, json) Hash identifier: K9tORJhoprtYwlN8HjEIGM+HwGk9lLg65MEyKEfdHiA= Subject key identifier: 06:20:2D:0E:18:E9:FF:53:E8:AE:99:44:EC:57:5A:B8:20:16:99:BE Authority key identifier: A9:73:FD:56:AC:61:59:83:F6:BF:21:CC:B6:51:38:86:B1:2E:20:1F Certificate issuer: /CN=d2e45912-e6e3-400c-b0be-4f6c7001f5cb Certificate serial: 010D0C9F4328584D6B2145C10460BACB2CDB0400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.mft Manifest number: 010D0C9F4328584B2ECE132C6AE5C59EACD9EBD2 Signing time: Mon 06 Apr 2026 17:00:03 +0000 Manifest this update: Mon 06 Apr 2026 17:00:03 +0000 Manifest next update: Wed 08 Apr 2026 17:00:00 +0000 Files and hashes: 1: 19dc87c2-d464-34e5-b947-58aae145ee40.roa (hash: 7sDmLPFW8QTeSd0dONglrfB4UCsMpNTeyXe6srUcBJ0=) 2: 7ca1b234-cb9f-3eac-9ac5-a53bb3cd6429.roa (hash: cKenf62SB03yKZKTLwIBlCk8FTxHvkI3B4NzGcXf6y8=) 3: a96cb05b-0c60-3552-884a-bbc614e95519.roa (hash: HekR6I74mhSWfa6FI8qEg2R70ijxpjRG1wG9xeGld2E=) 4: cf261d6c-a652-301a-9b41-868da8fbfa85.roa (hash: jo8nvPKE855wTQ/+rKC5oDw5i/ezUb29Lvk1TxaERMk=) 5: cf91ca11-443d-3cf8-bc30-6bb96e36d272.roa (hash: 9wy/RSWn1c5HA5tnDdB8HEjm8eHdI7yp+PvaBtajcj8=) 6: d2e45912-e6e3-400c-b0be-4f6c7001f5cb.crl (hash: DukyPwJ6pIWVAixlLQp3Wa76d9MpW9ZnFn97p0zZhMA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6b:21:45:c1:04:60:ba:cb:2c:db:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2e45912-e6e3-400c-b0be-4f6c7001f5cb Validity Not Before: Apr 6 17:00:03 2026 GMT Not After : Apr 8 17:00:00 2026 GMT Subject: CN=164f1154-2328-4c86-8027-6a46b8f464bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:13:e4:fc:09:04:45:dc:94:fd:e1:bc:be:cd: 8e:ac:5f:d5:62:6f:a1:13:7c:8e:28:d7:89:35:27: a8:75:a6:d0:64:c3:c5:c7:b2:7f:82:bd:85:81:da: 53:5e:bd:45:53:30:9d:b5:0d:ea:7f:10:b8:4e:c3: 57:96:17:47:58:c0:75:51:86:4e:70:85:02:a3:c2: 7b:bf:43:96:44:b9:d7:ab:f5:55:b3:3f:84:20:e2: 95:44:5f:dc:0f:23:4c:6c:be:fd:9b:86:a4:45:25: c4:fe:99:cf:e9:36:c4:3c:77:4e:ab:c7:e4:58:11: a4:a0:6d:ac:1d:55:fe:3b:4d:65:86:7f:ce:8e:88: 17:cc:6a:6d:49:36:b0:19:96:c9:10:5f:5d:00:cc: 74:e5:f5:50:1b:cf:2f:c3:46:8b:31:33:da:7b:55: 02:c6:71:bd:b8:3d:a6:98:ad:b0:df:a1:66:0b:cd: a7:99:2f:72:83:75:3e:b8:99:b7:7a:ad:37:cb:09: a7:bc:80:74:32:a5:e9:0f:89:05:d0:3a:2a:38:3d: f2:02:e8:44:a2:2a:e8:ac:5f:b3:72:93:22:ab:62: 5e:2f:79:e5:c8:56:b8:4e:74:de:c7:e0:b7:25:d6: 05:ff:89:72:f7:74:54:22:2b:a0:93:39:29:72:0d: 2c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:20:2D:0E:18:E9:FF:53:E8:AE:99:44:EC:57:5A:B8:20:16:99:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.crl X509v3 Authority Key Identifier: keyid:A9:73:FD:56:AC:61:59:83:F6:BF:21:CC:B6:51:38:86:B1:2E:20:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:de:ef:c2:92:12:9a:49:44:64:0c:56:66:c7:5e:31:9b:76: ff:98:2d:82:45:95:fd:81:98:43:51:47:2e:b2:2b:68:29:8b: e7:07:24:8f:15:76:5a:08:41:82:1c:ec:94:6d:d2:71:95:18: 5d:2c:30:a3:64:01:6d:b1:9a:1f:43:37:2a:3c:da:22:2c:a8: 7c:5b:19:05:fb:2c:05:6c:7d:2b:2b:80:38:f8:30:8b:0d:6d: 12:83:be:30:31:2d:6f:fe:a2:dc:3a:10:88:fe:2e:bb:12:bf: af:71:5e:d9:57:27:13:2d:ff:66:22:3c:eb:9f:58:00:b8:9b: 3c:1b:6c:53:9c:f3:f1:d9:37:5f:7f:66:b7:c7:16:49:a4:26: dd:ba:a8:7b:dd:22:be:cc:bd:a2:60:06:d7:bc:31:d9:e6:8f: 70:3a:66:9c:de:4a:67:0f:02:11:62:97:d2:ea:e2:e2:ed:93: 8e:a6:2e:52:4d:87:93:87:17:ce:55:6d:48:c5:3b:fe:62:83: fc:3e:76:df:d4:e6:39:31:86:c3:ce:cf:e4:c5:e2:14:4a:ca: ef:75:7b:cf:03:40:a5:e8:45:1c:76:55:8e:a9:85:aa:0d:b2: 11:88:12:b5:24:a4:6b:d5:6f:7e:ef:31:ce:65:c7:f0:a3:ba: 0d:84:7c:5e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1rIUXBBGC6yyzbBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDJlNDU5MTItZTZlMy00MDBjLWIwYmUtNGY2YzcwMDFm NWNiMB4XDTI2MDQwNjE3MDAwM1oXDTI2MDQwODE3MDAwMFowLzEtMCsGA1UEAxMk MTY0ZjExNTQtMjMyOC00Yzg2LTgwMjctNmE0NmI4ZjQ2NGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxPk/AkERdyU/eG8vs2OrF/VYm+hE3yOKNeJ NSeodabQZMPFx7J/gr2FgdpTXr1FUzCdtQ3qfxC4TsNXlhdHWMB1UYZOcIUCo8J7 v0OWRLnXq/VVsz+EIOKVRF/cDyNMbL79m4akRSXE/pnP6TbEPHdOq8fkWBGkoG2s HVX+O01lhn/OjogXzGptSTawGZbJEF9dAMx05fVQG88vw0aLMTPae1UCxnG9uD2m mK2w36FmC82nmS9yg3U+uJm3eq03ywmnvIB0MqXpD4kF0DoqOD3yAuhEoirorF+z cpMiq2JeL3nlyFa4TnTex+C3JdYF/4ly93RUIiugkzkpcg0sIwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAYgLQ4Y6f9T6K6ZROxXWrggFpm+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kMmU0 NTkxMi1lNmUzLTQwMGMtYjBiZS00ZjZjNzAwMWY1Y2IvZDJlNDU5MTItZTZlMy00 MDBjLWIwYmUtNGY2YzcwMDFmNWNiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDJlNDU5MTItZTZlMy00MDBjLWIw YmUtNGY2YzcwMDFmNWNiL2QyZTQ1OTEyLWU2ZTMtNDAwYy1iMGJlLTRmNmM3MDAx ZjVjYi5jcmwwHwYDVR0jBBgwFoAUqXP9VqxhWYP2vyHMtlE4hrEuIB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kMmU0NTkxMi1lNmUzLTQwMGMtYjBiZS00ZjZj NzAwMWY1Y2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAH3u/CkhKaSURkDFZmx14x m3b/mC2CRZX9gZhDUUcusitoKYvnBySPFXZaCEGCHOyUbdJxlRhdLDCjZAFtsZof QzcqPNoiLKh8WxkF+ywFbH0rK4A4+DCLDW0Sg74wMS1v/qLcOhCI/i67Er+vcV7Z VycTLf9mIjzrn1gAuJs8G2xTnPPx2Tdff2a3xxZJpCbduqh73SK+zL2iYAbXvDHZ 5o9wOmac3kpnDwIRYpfS6uLi7ZOOpi5STYeThxfOVW1IxTv+YoP8Pnbf1OY5MYbD zs/kxeIUSsrvdXvPA0Cl6EUcdlWOqYWqDbIRiBK1JKRr1W9+7zHOZcfwo7oNhHxe -----END CERTIFICATE-----Generated at Tue Apr 7 15:06:06 2026 by rpki-client