$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/d41e310e-2b6f-4f90-9f70-bc303b64a823.mft File: d41e310e-2b6f-4f90-9f70-bc303b64a823.mft (raw, json) Hash identifier: JbAMkB+RcbQcU6C4n6X0pixE7b1gbXxZ+DOF8aR1+TE= Subject key identifier: D7:21:8E:22:31:71:3E:5A:70:2A:DF:AE:EE:44:03:24:4B:F9:B9:BC Authority key identifier: D7:1F:02:7D:0E:D3:31:BA:F5:C5:80:CE:B4:D2:95:31:07:11:BA:26 Certificate issuer: /CN=d41e310e-2b6f-4f90-9f70-bc303b64a823 Certificate serial: 010D0C9F4328584D6CA4628926EC185F44153580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/d41e310e-2b6f-4f90-9f70-bc303b64a823.mft Manifest number: 010D0C9F4328584A914D069C4B436A480CA623DA Signing time: Tue 07 Apr 2026 06:00:03 +0000 Manifest this update: Tue 07 Apr 2026 06:00:03 +0000 Manifest next update: Fri 10 Apr 2026 06:00:00 +0000 Files and hashes: 1: 14fe8f30-8678-31d1-911f-18215dcdb7b3.roa (hash: Ypj0hWKiLGfghTxB9rDVHVYdIW2cTRMPvx74HLM+654=) 2: 833210ac-a67b-3a10-82ef-cb43c989ed93.roa (hash: wIwmLACSZtbUu/RWX3THhmP5nsa5K+EPL0eETZXfdZw=) 3: 87bc001e-190b-3e44-a051-4ca709f13cec.roa (hash: kFkLvWNFhe2raMhXlPL5G8aXo1IX9AtrnHxrlwVW4Tk=) 4: d41e310e-2b6f-4f90-9f70-bc303b64a823.crl (hash: LwQdSafibo/tDkVJltvyeDOawwPSpgV4wwxCE/ySuvQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/d41e310e-2b6f-4f90-9f70-bc303b64a823.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/d41e310e-2b6f-4f90-9f70-bc303b64a823.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:a4:62:89:26:ec:18:5f:44:15:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d41e310e-2b6f-4f90-9f70-bc303b64a823 Validity Not Before: Apr 7 06:00:03 2026 GMT Not After : Apr 10 06:00:00 2026 GMT Subject: CN=d7843922-d7c3-4da7-9712-eacc333b3089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:28:8b:6b:ac:6d:32:98:f6:b3:97:36:b5:2e: 21:d8:4c:bc:f9:f4:09:5e:fb:22:28:21:68:60:20: 92:20:61:22:c6:16:7a:46:28:c2:f7:69:f2:8c:82: b1:e0:22:fd:a4:91:9b:33:da:45:0f:ec:63:9c:a5: c3:ce:15:8c:d0:0a:44:dd:18:1b:f8:7a:98:84:46: 5d:2c:e9:fc:72:b2:b7:9b:71:dd:56:fe:cf:46:17: 7c:ef:11:c5:8f:99:43:ec:fa:77:dc:9f:c6:df:ab: 4d:82:93:d2:46:0a:6b:a7:3b:b0:a0:62:f0:94:25: 15:2f:c4:71:bf:c9:87:f1:7e:d6:20:bc:f7:54:16: b1:74:4d:74:84:d6:57:d5:f0:23:34:3c:63:cb:1d: 26:7b:ba:50:6c:17:33:cd:ff:86:10:d7:df:c1:aa: ed:e3:6f:f7:ea:c8:90:36:eb:81:ac:5e:89:18:1e: f9:c0:a9:fd:99:2a:c9:56:52:0f:30:f7:ee:b6:3a: 7e:91:96:20:4f:35:c9:3e:97:6b:66:43:6b:f3:96: 40:9a:72:22:7a:c6:c0:21:34:47:b4:25:22:c9:a4: 2a:86:7c:8c:47:5f:df:e1:38:16:54:b1:13:db:e3: fe:65:96:1c:10:c9:7b:0a:d1:de:6e:84:ec:43:ea: f0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:21:8E:22:31:71:3E:5A:70:2A:DF:AE:EE:44:03:24:4B:F9:B9:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/d41e310e-2b6f-4f90-9f70-bc303b64a823.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/d41e310e-2b6f-4f90-9f70-bc303b64a823.crl X509v3 Authority Key Identifier: keyid:D7:1F:02:7D:0E:D3:31:BA:F5:C5:80:CE:B4:D2:95:31:07:11:BA:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:52:56:67:d7:4f:b0:28:7a:9a:9a:ca:57:90:21:48:01:c1: 40:e4:ac:9e:65:ff:11:23:47:92:73:1c:54:f2:af:49:b7:39: 40:28:cd:a2:71:af:d2:8d:51:9f:9d:27:46:ab:49:fa:13:8e: 56:e0:14:0f:a0:a2:a6:05:21:23:75:c4:26:02:cc:83:f3:26: f8:2a:a5:ee:09:ee:cd:ba:43:ac:b0:10:db:e4:0c:27:d3:3b: e8:f5:2b:0f:87:c7:6a:4e:9e:7d:2f:49:40:34:55:06:c5:4b: 7a:bd:35:41:ae:88:d1:63:0f:2e:87:2c:8b:d2:b4:89:76:ff: 88:8f:24:f2:19:00:2d:1f:3b:6f:1c:df:b7:1c:fb:57:ac:56: 60:b9:cd:8d:97:f9:ed:8e:dc:e3:94:a8:53:06:fa:f0:cb:08: 1a:df:79:20:6f:10:7f:a4:5c:88:7a:3a:b9:bd:a6:d6:e2:4e: 40:5b:12:18:a9:37:95:ff:94:71:8f:b9:4b:29:2d:b0:5c:6b: 49:84:c4:74:49:73:9d:44:fc:22:08:fd:30:20:e4:88:dd:72: 7e:cd:7e:bd:61:72:fa:bc:40:b2:ce:d2:c6:56:2b:b1:ec:98: 6a:af:bd:37:51:bc:dd:22:8e:54:bd:5f:98:d4:4f:2f:22:34: 64:37:63:80 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1spGKJJuwYX0QVNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQxZTMxMGUtMmI2Zi00ZjkwLTlmNzAtYmMzMDNiNjRh ODIzMB4XDTI2MDQwNzA2MDAwM1oXDTI2MDQxMDA2MDAwMFowLzEtMCsGA1UEAxMk ZDc4NDM5MjItZDdjMy00ZGE3LTk3MTItZWFjYzMzM2IzMDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliiLa6xtMpj2s5c2tS4h2Ey8+fQJXvsiKCFo YCCSIGEixhZ6RijC92nyjIKx4CL9pJGbM9pFD+xjnKXDzhWM0ApE3Rgb+HqYhEZd LOn8crK3m3HdVv7PRhd87xHFj5lD7Pp33J/G36tNgpPSRgprpzuwoGLwlCUVL8Rx v8mH8X7WILz3VBaxdE10hNZX1fAjNDxjyx0me7pQbBczzf+GENffwart42/36siQ NuuBrF6JGB75wKn9mSrJVlIPMPfutjp+kZYgTzXJPpdrZkNr85ZAmnIiesbAITRH tCUiyaQqhnyMR1/f4TgWVLET2+P+ZZYcEMl7CtHeboTsQ+rw1QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNchjiIxcT5acCrfru5EAyRL+bm8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kNDFl MzEwZS0yYjZmLTRmOTAtOWY3MC1iYzMwM2I2NGE4MjMvZDQxZTMxMGUtMmI2Zi00 ZjkwLTlmNzAtYmMzMDNiNjRhODIzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDQxZTMxMGUtMmI2Zi00ZjkwLTlm NzAtYmMzMDNiNjRhODIzL2Q0MWUzMTBlLTJiNmYtNGY5MC05ZjcwLWJjMzAzYjY0 YTgyMy5jcmwwHwYDVR0jBBgwFoAU1x8CfQ7TMbr1xYDOtNKVMQcRuiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kNDFlMzEwZS0yYjZmLTRmOTAtOWY3MC1iYzMw M2I2NGE4MjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQApUlZn10+wKHqamspXkCFI AcFA5KyeZf8RI0eScxxU8q9JtzlAKM2ica/SjVGfnSdGq0n6E45W4BQPoKKmBSEj dcQmAsyD8yb4KqXuCe7NukOssBDb5Awn0zvo9SsPh8dqTp59L0lANFUGxUt6vTVB rojRYw8uhyyL0rSJdv+IjyTyGQAtHztvHN+3HPtXrFZguc2Nl/ntjtzjlKhTBvrw ywga33kgbxB/pFyIejq5vabW4k5AWxIYqTeV/5Rxj7lLKS2wXGtJhMR0SXOdRPwi CP0wIOSI3XJ+zX69YXL6vECyztLGViux7Jhqr703UbzdIo5UvV+Y1E8vIjRkN2OA -----END CERTIFICATE-----Generated at Tue Apr 7 15:06:43 2026 by rpki-client