$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b5a35588-73da-4090-8511-b646a21aaabf/b5a35588-73da-4090-8511-b646a21aaabf.mft File: b5a35588-73da-4090-8511-b646a21aaabf.mft (raw, json) Hash identifier: qFKVN2pueFyg7lJ+i1W+cOoi8X9CpiPLjRtZRLaE6LE= Subject key identifier: B7:16:EA:27:1A:59:D4:72:D5:B3:F0:09:E8:30:A8:AF:C7:22:AB:96 Authority key identifier: 22:8C:36:7A:C8:9D:4F:4F:06:7A:3B:6D:02:EC:51:FA:0B:23:C1:22 Certificate issuer: /CN=b5a35588-73da-4090-8511-b646a21aaabf Certificate serial: 010D0C9F4328584D71E06B47944682BCD38B8300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b5a35588-73da-4090-8511-b646a21aaabf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b5a35588-73da-4090-8511-b646a21aaabf/b5a35588-73da-4090-8511-b646a21aaabf.mft Manifest number: 010D0C9F4328584C711C656BDA157CC884C9885F Signing time: Thu 09 Apr 2026 03:00:03 +0000 Manifest this update: Thu 09 Apr 2026 03:00:03 +0000 Manifest next update: Sun 12 Apr 2026 03:00:00 +0000 Files and hashes: 1: b09624de-0f56-32a0-b988-2e9dd543c200.roa (hash: xQ7BlawCU9dSOAWxiBIdBjkW6OniRfvggZkByaKSris=) 2: b5a35588-73da-4090-8511-b646a21aaabf.crl (hash: qWoeRxWDNEeq46mhQk0+zGhByift5wlphJVOHu2DyPQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b5a35588-73da-4090-8511-b646a21aaabf/b5a35588-73da-4090-8511-b646a21aaabf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b5a35588-73da-4090-8511-b646a21aaabf/b5a35588-73da-4090-8511-b646a21aaabf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b5a35588-73da-4090-8511-b646a21aaabf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:e0:6b:47:94:46:82:bc:d3:8b:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5a35588-73da-4090-8511-b646a21aaabf Validity Not Before: Apr 9 03:00:03 2026 GMT Not After : Apr 12 03:00:00 2026 GMT Subject: CN=cfd1ed1a-e9ab-415f-9e57-b1cb5f7a5ff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:89:97:ef:9a:94:a7:5f:a7:83:d8:69:44:96: 7a:c4:eb:d1:51:20:09:d7:c3:2d:75:83:1d:06:68: 82:60:7a:f2:6f:cc:55:42:f5:88:63:b3:b4:fc:d4: 34:40:d1:f1:bb:6b:77:f8:e3:11:29:1c:e9:87:eb: 95:f6:e3:76:6a:7f:ed:3f:cc:4e:b6:28:16:45:26: f3:e6:36:23:31:53:78:85:31:59:6f:aa:9f:f7:4c: 5d:a6:a6:bf:db:14:ef:36:40:89:d1:24:ec:d8:af: 3e:63:81:72:de:d7:b7:76:9e:49:c9:83:05:1c:8f: 5b:90:68:1f:29:7b:56:36:ca:05:68:eb:3c:6c:fd: 3e:9f:c0:ea:47:f1:db:48:39:0a:7b:ff:b1:44:fd: 16:f2:f6:5f:ce:e6:5f:da:32:9e:f5:65:52:8e:76: ec:3e:3c:f7:22:8a:0f:a6:87:94:41:9d:8f:0c:19: e6:12:29:bf:65:1a:f9:c7:25:02:e7:32:e4:0d:99: 63:31:f8:7f:a9:28:3a:f3:02:42:d1:80:d5:2f:04: 50:95:b9:5a:69:d6:27:a1:4e:3e:49:68:f4:2b:36: ff:9a:a1:bd:2a:cf:54:6b:3c:4c:59:7b:0b:14:b3: 5d:ca:50:d9:5b:39:21:6e:41:1c:96:ef:58:fc:3f: 3d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:16:EA:27:1A:59:D4:72:D5:B3:F0:09:E8:30:A8:AF:C7:22:AB:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b5a35588-73da-4090-8511-b646a21aaabf/b5a35588-73da-4090-8511-b646a21aaabf.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b5a35588-73da-4090-8511-b646a21aaabf/b5a35588-73da-4090-8511-b646a21aaabf.crl X509v3 Authority Key Identifier: keyid:22:8C:36:7A:C8:9D:4F:4F:06:7A:3B:6D:02:EC:51:FA:0B:23:C1:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b5a35588-73da-4090-8511-b646a21aaabf.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:95:0e:ca:e9:1e:b0:89:f7:2d:d6:9a:45:48:95:1b:77:63: da:52:c9:0d:d5:4c:cb:7b:7d:5b:56:d1:a8:cf:e6:45:d0:3b: ec:5d:36:80:fe:58:3d:51:45:f3:26:65:8b:ce:4e:c7:50:ce: cc:f4:1c:30:31:1e:8d:a8:ba:1e:d3:d8:3d:2e:7b:69:c1:af: 7a:ba:f0:1b:82:d9:ef:3c:b2:3a:48:bf:e0:96:fb:c1:16:41: 96:e4:68:23:be:83:c0:25:42:1d:28:ef:b6:27:6c:3d:04:65: ae:64:89:cd:eb:65:e9:fe:6e:94:fc:c4:fe:f8:79:1b:75:a9: cd:b3:44:3c:82:b1:ff:26:45:de:ab:dc:96:84:0a:32:38:d6: 8d:bd:b1:5a:fc:e7:c6:7e:47:92:93:77:5e:d2:0a:48:a9:8c: 8d:56:cc:0e:64:51:40:44:07:42:81:8c:72:a9:ac:dd:3d:ee: 67:4d:a3:e1:b5:ea:3b:76:68:46:5e:db:95:a1:bf:4a:5c:f8: 4f:fb:cb:28:ce:b5:b9:23:71:27:cf:4a:9b:48:f5:b0:a3:39: fd:5c:44:a3:ea:b5:a8:7b:e1:b0:23:00:27:99:47:05:ab:c1: dd:c2:49:38:5c:b7:0a:f6:5c:33:65:c5:47:e0:d3:58:2d:6b: 79:c4:83:23 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1x4GtHlEaCvNOLgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVhMzU1ODgtNzNkYS00MDkwLTg1MTEtYjY0NmEyMWFh YWJmMB4XDTI2MDQwOTAzMDAwM1oXDTI2MDQxMjAzMDAwMFowLzEtMCsGA1UEAxMk Y2ZkMWVkMWEtZTlhYi00MTVmLTllNTctYjFjYjVmN2E1ZmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgImX75qUp1+ng9hpRJZ6xOvRUSAJ18MtdYMd BmiCYHryb8xVQvWIY7O0/NQ0QNHxu2t3+OMRKRzph+uV9uN2an/tP8xOtigWRSbz 5jYjMVN4hTFZb6qf90xdpqa/2xTvNkCJ0STs2K8+Y4Fy3te3dp5JyYMFHI9bkGgf KXtWNsoFaOs8bP0+n8DqR/HbSDkKe/+xRP0W8vZfzuZf2jKe9WVSjnbsPjz3IooP poeUQZ2PDBnmEim/ZRr5xyUC5zLkDZljMfh/qSg68wJC0YDVLwRQlblaadYnoU4+ SWj0Kzb/mqG9Ks9UazxMWXsLFLNdylDZWzkhbkEclu9Y/D89/QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLcW6icaWdRy1bPwCegwqK/HIquWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNWEz NTU4OC03M2RhLTQwOTAtODUxMS1iNjQ2YTIxYWFhYmYvYjVhMzU1ODgtNzNkYS00 MDkwLTg1MTEtYjY0NmEyMWFhYWJmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjVhMzU1ODgtNzNkYS00MDkwLTg1 MTEtYjY0NmEyMWFhYWJmL2I1YTM1NTg4LTczZGEtNDA5MC04NTExLWI2NDZhMjFh YWFiZi5jcmwwHwYDVR0jBBgwFoAUIow2esidT08GejttAuxR+gsjwSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNWEzNTU4OC03M2RhLTQwOTAtODUxMS1iNjQ2 YTIxYWFhYmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBXlQ7K6R6wifct1ppFSJUb d2PaUskN1UzLe31bVtGoz+ZF0DvsXTaA/lg9UUXzJmWLzk7HUM7M9BwwMR6NqLoe 09g9Lntpwa96uvAbgtnvPLI6SL/glvvBFkGW5GgjvoPAJUIdKO+2J2w9BGWuZInN 62Xp/m6U/MT++HkbdanNs0Q8grH/JkXeq9yWhAoyONaNvbFa/OfGfkeSk3de0gpI qYyNVswOZFFARAdCgYxyqazdPe5nTaPhteo7dmhGXtuVob9KXPhP+8sozrW5I3En z0qbSPWwozn9XESj6rWoe+GwIwAnmUcFq8Hdwkk4XLcK9lwzZcVH4NNYLWt5xIMj -----END CERTIFICATE-----Generated at Thu Apr 9 20:29:10 2026 by rpki-client