$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.mft File: 8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.mft (raw, json) Hash identifier: DyupcgMrW7F1Ht8kTVZ3V4GRdzxgn7DGrLUPFq0/Yoo= Subject key identifier: 8A:4F:79:E8:47:85:74:B4:E3:09:8E:98:91:57:8F:F3:E4:E8:EB:D8 Authority key identifier: 92:04:3A:A3:CA:F8:0F:3C:8D:45:A1:49:B5:5F:4B:AD:F5:C3:D9:0E Certificate issuer: /CN=8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5 Certificate serial: 010D0C9F4328584D813B31A9B76D172F8AC5BF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.mft Manifest number: 010D0C9F4328584073A857C917236088F8E561F9 Signing time: Tue 14 Apr 2026 15:00:03 +0000 Manifest this update: Tue 14 Apr 2026 15:00:03 +0000 Manifest next update: Fri 17 Apr 2026 15:00:00 +0000 Files and hashes: 1: 45097e41-5714-3974-bd1e-65826485fa4f.roa (hash: W+vqIvl2xwDCz1AfQ/BVULfZUIfr+Vo0QtRDhiD5BnY=) 2: 74501d1b-e2c8-3e0d-9717-e4f589ed0c54.roa (hash: lhjALsZhbqe9RCvGzwhFC4MS/LpVzabXjYOGieBf0Qw=) 3: 8224a7d5-4b3b-3daa-8e24-fb36d7355ee4.roa (hash: 4uyJ4MRXrboXW8RgC7C2bKctEHM+nrOLUxlsuaJKT6g=) 4: 8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.crl (hash: OcreM9F/EfcuB37+09B4yGNe2dxJBJSxW3DOlXyHnbk=) 5: 8dfd5f6d-30c2-3ab5-9e90-8fdec3ef44ea.roa (hash: XXovbaFSyMMLMdIMBQMfh7aFoDE3q+q8sh++M3TpU1U=) 6: a0a1273c-2f6d-300c-a5ce-7d83dce91f71.roa (hash: iKD+cXWacZ8vVSkMUi4Zi5PmVuvfouwqoZXcQR4FRgA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:81:3b:31:a9:b7:6d:17:2f:8a:c5:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5 Validity Not Before: Apr 14 15:00:03 2026 GMT Not After : Apr 17 15:00:00 2026 GMT Subject: CN=51a69c52-7406-45e7-adfe-8b54fe7ce497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:6b:16:d8:00:e6:2a:94:ca:06:e6:fa:6b:8c: 4e:68:af:d3:bf:6a:b6:7e:49:64:db:05:1c:e1:23: fa:d7:a4:dc:13:c4:62:8b:f6:16:6d:4c:74:ed:f8: 7e:a3:85:93:ab:0e:0c:42:ee:40:43:7e:84:02:93: cd:e1:eb:0b:1d:eb:1a:45:f4:0c:55:3a:59:e7:2b: bf:91:ac:d0:aa:55:cf:f3:19:b8:03:45:4e:b9:e7: 5c:70:0e:cf:79:f3:bb:af:91:56:e9:02:b3:e9:7c: be:9d:87:7e:22:d0:20:16:1c:90:16:52:d3:58:5b: 51:e1:9c:b4:94:90:52:da:fc:7e:18:d4:d6:49:6a: e2:17:cc:da:7b:da:db:e9:39:6c:e2:c9:e4:29:02: a6:a0:b2:41:6a:82:9d:16:99:64:25:73:c3:5e:51: bf:8b:8e:70:be:79:c7:3d:ff:94:60:7a:86:9f:92: 0b:01:02:b7:9e:d4:0f:cd:3e:50:53:46:5a:b9:51: af:1e:de:f1:c1:8e:96:89:6d:ad:ec:e4:21:91:44: ea:c7:ae:42:49:21:fb:46:2e:66:ce:a7:3e:e3:db: bd:bd:36:44:d6:ee:ea:57:93:ae:a1:b5:20:64:0c: 64:b5:80:b6:7b:8e:8a:6b:71:03:b6:d6:02:13:bb: ca:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:4F:79:E8:47:85:74:B4:E3:09:8E:98:91:57:8F:F3:E4:E8:EB:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.crl X509v3 Authority Key Identifier: keyid:92:04:3A:A3:CA:F8:0F:3C:8D:45:A1:49:B5:5F:4B:AD:F5:C3:D9:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:6e:09:3a:21:b7:b0:03:ff:81:7d:73:93:c6:7f:68:97:84: a5:f0:46:d2:8e:a3:28:33:16:f2:83:2b:cf:83:1f:4f:a0:1c: 9c:28:32:3d:27:48:3c:40:48:55:79:2c:28:3f:2e:5d:6f:0e: 05:53:44:70:e9:30:a7:4d:5e:f0:e3:55:11:48:a5:09:75:f8: 26:b3:57:4c:6c:8c:3f:d6:a9:c9:4c:56:9f:bd:0b:c1:78:a2: 47:34:87:a8:5f:ed:2b:75:8d:0e:71:d6:38:37:e1:04:cc:28: 71:da:cb:b5:6e:6a:87:e5:52:a3:90:bb:11:b8:7d:79:09:f2: 87:b8:c5:00:1d:f8:e2:e5:1d:42:7e:b7:aa:a6:6d:9f:fd:a8: d0:f0:7d:ca:e1:c8:ed:c2:e7:56:e5:31:af:40:32:eb:33:be: a0:b3:c7:95:42:12:21:6f:55:a0:3d:e2:03:36:fb:54:d2:e7: 62:1f:ea:77:e2:c4:8a:f5:14:45:f2:9d:80:a7:25:c2:ec:52: 06:8c:21:46:a8:ae:33:0a:eb:a5:63:da:78:d3:fe:61:45:5e: a0:37:6f:97:03:ff:82:69:f7:02:d5:f0:19:d4:bc:1f:66:06: da:99:43:05:cc:bd:a8:69:a8:02:07:f8:f1:d2:a1:a5:cb:33: 22:f0:1e:52 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2BOzGpt20XL4rFv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM5ZjUzYzctZTY0ZC00ZjE0LWE1ZTEtYzE0ZThiMWUz OGI1MB4XDTI2MDQxNDE1MDAwM1oXDTI2MDQxNzE1MDAwMFowLzEtMCsGA1UEAxMk NTFhNjljNTItNzQwNi00NWU3LWFkZmUtOGI1NGZlN2NlNDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGsW2ADmKpTKBub6a4xOaK/Tv2q2fklk2wUc 4SP616TcE8Rii/YWbUx07fh+o4WTqw4MQu5AQ36EApPN4esLHesaRfQMVTpZ5yu/ kazQqlXP8xm4A0VOuedccA7PefO7r5FW6QKz6Xy+nYd+ItAgFhyQFlLTWFtR4Zy0 lJBS2vx+GNTWSWriF8zae9rb6Tls4snkKQKmoLJBaoKdFplkJXPDXlG/i45wvnnH Pf+UYHqGn5ILAQK3ntQPzT5QU0ZauVGvHt7xwY6WiW2t7OQhkUTqx65CSSH7Ri5m zqc+49u9vTZE1u7qV5OuobUgZAxktYC2e46Ka3EDttYCE7vKHwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIpPeehHhXS04wmOmJFXj/Pk6OvYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84Yzlm NTNjNy1lNjRkLTRmMTQtYTVlMS1jMTRlOGIxZTM4YjUvOGM5ZjUzYzctZTY0ZC00 ZjE0LWE1ZTEtYzE0ZThiMWUzOGI1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGM5ZjUzYzctZTY0ZC00ZjE0LWE1 ZTEtYzE0ZThiMWUzOGI1LzhjOWY1M2M3LWU2NGQtNGYxNC1hNWUxLWMxNGU4YjFl MzhiNS5jcmwwHwYDVR0jBBgwFoAUkgQ6o8r4DzyNRaFJtV9LrfXD2Q4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84YzlmNTNjNy1lNjRkLTRmMTQtYTVlMS1jMTRl OGIxZTM4YjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBrbgk6IbewA/+BfXOTxn9o l4Sl8EbSjqMoMxbygyvPgx9PoBycKDI9J0g8QEhVeSwoPy5dbw4FU0Rw6TCnTV7w 41URSKUJdfgms1dMbIw/1qnJTFafvQvBeKJHNIeoX+0rdY0OcdY4N+EEzChx2su1 bmqH5VKjkLsRuH15CfKHuMUAHfji5R1Cfreqpm2f/ajQ8H3K4cjtwudW5TGvQDLr M76gs8eVQhIhb1WgPeIDNvtU0udiH+p34sSK9RRF8p2ApyXC7FIGjCFGqK4zCuul Y9p40/5hRV6gN2+XA/+CafcC1fAZ1LwfZgbamUMFzL2oaagCB/jx0qGlyzMi8B5S -----END CERTIFICATE-----Generated at Wed Apr 15 08:46:00 2026 by rpki-client