$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/296282a6-ac2e-4818-b986-30c4b6361fd6/296282a6-ac2e-4818-b986-30c4b6361fd6.mft File: 296282a6-ac2e-4818-b986-30c4b6361fd6.mft (raw, json) Hash identifier: K1f4F5llQGMRBjDlF1mn2wmI8iruE60COhWwFkP+SnY= Subject key identifier: F9:1D:BC:8A:7A:5A:B1:CC:C3:BB:E9:EF:49:3C:07:B9:46:22:1B:6D Authority key identifier: 96:31:BD:77:4D:56:10:98:53:07:4B:A2:C7:E8:CC:B5:96:60:B4:64 Certificate issuer: /CN=296282a6-ac2e-4818-b986-30c4b6361fd6 Certificate serial: 010D0C9F4328584DA402F75D3CB76200FE439F40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/296282a6-ac2e-4818-b986-30c4b6361fd6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/296282a6-ac2e-4818-b986-30c4b6361fd6/296282a6-ac2e-4818-b986-30c4b6361fd6.mft Manifest number: 010D0C9F4328584073A836F3D14A88AA42C4A1D7 Signing time: Mon 27 Apr 2026 02:00:03 +0000 Manifest this update: Mon 27 Apr 2026 02:00:03 +0000 Manifest next update: Wed 29 Apr 2026 02:00:00 +0000 Files and hashes: 1: 258ca76c-1855-3b32-85cf-9ac34b9ff059.roa (hash: Sodun4PcfF2AIG7wjOmamh0xAliBRoiBvNpoqRQs6Vg=) 2: 296282a6-ac2e-4818-b986-30c4b6361fd6.crl (hash: 8BX3VKI2m58e0g0p0KQ1CNxAWYvUuoT4X6XJimdA/28=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/296282a6-ac2e-4818-b986-30c4b6361fd6/296282a6-ac2e-4818-b986-30c4b6361fd6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/296282a6-ac2e-4818-b986-30c4b6361fd6/296282a6-ac2e-4818-b986-30c4b6361fd6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/296282a6-ac2e-4818-b986-30c4b6361fd6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a4:02:f7:5d:3c:b7:62:00:fe:43:9f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=296282a6-ac2e-4818-b986-30c4b6361fd6 Validity Not Before: Apr 27 02:00:03 2026 GMT Not After : Apr 29 02:00:00 2026 GMT Subject: CN=d2cbff21-37a4-4b22-9d88-0db3ce2d6ef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c6:fe:23:b7:1e:aa:f5:3a:9f:2a:18:01:05: 86:7c:a0:82:b1:ce:b6:42:1b:dc:90:98:8f:8d:88: 9a:5c:27:d6:9e:ff:9e:c0:c6:0f:9f:19:97:24:f4: b8:fc:3b:fc:42:3d:55:36:07:3d:54:42:79:2d:27: 3d:8d:8b:8e:e7:76:8e:7b:24:4f:c6:bb:d4:dc:46: 29:d0:39:e7:58:16:0f:63:3b:4f:ba:3a:43:b1:15: 03:f4:21:60:61:3a:0b:ff:4a:d5:31:b8:90:4e:7a: 8d:fe:60:d7:8e:98:af:2b:5a:4f:3f:66:d1:56:af: e2:22:b2:e9:23:02:44:60:fa:d7:d1:9e:6a:04:65: 05:ae:d2:e8:1c:8e:32:58:85:0f:9b:e9:3b:dd:6e: 4c:29:18:72:87:48:fc:d5:7e:92:c7:ce:9c:17:75: 69:13:10:93:05:76:a4:77:54:1e:2e:f9:90:2c:83: ab:1c:67:2c:b0:a7:fb:20:cb:08:2b:ce:65:6d:b2: e6:d2:5c:20:9f:23:29:0a:5c:5b:a6:21:27:36:d0: 2d:02:36:b3:54:47:ad:de:9c:6c:c1:0a:8b:e9:06: ad:63:3f:f1:9f:64:e3:98:c2:62:5a:fc:68:6c:00: 8c:6f:ef:c3:12:0f:a7:00:3a:36:6c:7f:62:07:cc: bb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:1D:BC:8A:7A:5A:B1:CC:C3:BB:E9:EF:49:3C:07:B9:46:22:1B:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/296282a6-ac2e-4818-b986-30c4b6361fd6/296282a6-ac2e-4818-b986-30c4b6361fd6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/296282a6-ac2e-4818-b986-30c4b6361fd6/296282a6-ac2e-4818-b986-30c4b6361fd6.crl X509v3 Authority Key Identifier: keyid:96:31:BD:77:4D:56:10:98:53:07:4B:A2:C7:E8:CC:B5:96:60:B4:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/296282a6-ac2e-4818-b986-30c4b6361fd6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:43:15:45:9b:cf:af:16:7f:ad:77:c2:b4:49:49:40:f5:49: 3d:f4:f4:1a:ef:2e:63:a1:09:15:3d:ae:74:6c:cd:63:1b:e7: b6:b5:e5:99:53:c5:69:b7:71:90:af:65:38:76:d6:25:c3:c5: 78:18:08:ae:8b:ce:4d:06:2d:b2:7a:d9:20:bc:a7:c1:98:18: b1:2d:97:d0:b2:50:c4:18:ac:f9:2c:57:4d:84:ba:f3:8b:7d: 52:14:73:08:c7:5a:4e:72:64:0f:5d:e5:fc:11:dd:20:ca:7e: a6:8d:24:6d:ce:97:be:a8:2b:92:5c:71:84:2e:81:ed:3d:a6: eb:a1:75:d5:86:ea:cc:9c:5d:ce:41:f8:f5:49:f5:e3:39:79: 4e:16:2c:34:83:d7:41:8b:5e:9e:4d:66:c1:50:d6:bb:84:18: 64:eb:55:b6:ca:44:18:26:cb:4c:e7:39:ed:ec:8a:44:76:4d: ce:55:48:78:65:ab:46:66:24:16:67:80:47:9b:bb:fd:ac:06: 1b:ff:82:59:14:74:e9:bb:da:be:44:e2:fd:db:ec:f5:02:4d: d5:f9:57:13:80:0f:1f:08:2c:39:82:db:19:59:fe:3a:2c:d3: d0:6e:cb:aa:c9:8f:14:a2:24:ae:02:26:43:dd:ee:46:c1:5f: bf:ff:88:66 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2kAvddPLdiAP5Dn0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk2MjgyYTYtYWMyZS00ODE4LWI5ODYtMzBjNGI2MzYx ZmQ2MB4XDTI2MDQyNzAyMDAwM1oXDTI2MDQyOTAyMDAwMFowLzEtMCsGA1UEAxMk ZDJjYmZmMjEtMzdhNC00YjIyLTlkODgtMGRiM2NlMmQ2ZWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsb+I7ceqvU6nyoYAQWGfKCCsc62QhvckJiP jYiaXCfWnv+ewMYPnxmXJPS4/Dv8Qj1VNgc9VEJ5LSc9jYuO53aOeyRPxrvU3EYp 0DnnWBYPYztPujpDsRUD9CFgYToL/0rVMbiQTnqN/mDXjpivK1pPP2bRVq/iIrLp IwJEYPrX0Z5qBGUFrtLoHI4yWIUPm+k73W5MKRhyh0j81X6Sx86cF3VpExCTBXak d1QeLvmQLIOrHGcssKf7IMsIK85lbbLm0lwgnyMpClxbpiEnNtAtAjazVEet3pxs wQqL6QatYz/xn2TjmMJiWvxobACMb+/DEg+nADo2bH9iB8y7gQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPkdvIp6WrHMw7vp70k8B7lGIhttMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yOTYy ODJhNi1hYzJlLTQ4MTgtYjk4Ni0zMGM0YjYzNjFmZDYvMjk2MjgyYTYtYWMyZS00 ODE4LWI5ODYtMzBjNGI2MzYxZmQ2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjk2MjgyYTYtYWMyZS00ODE4LWI5 ODYtMzBjNGI2MzYxZmQ2LzI5NjI4MmE2LWFjMmUtNDgxOC1iOTg2LTMwYzRiNjM2 MWZkNi5jcmwwHwYDVR0jBBgwFoAUljG9d01WEJhTB0uix+jMtZZgtGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yOTYyODJhNi1hYzJlLTQ4MTgtYjk4Ni0zMGM0 YjYzNjFmZDYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBWQxVFm8+vFn+td8K0SUlA 9Uk99PQa7y5joQkVPa50bM1jG+e2teWZU8Vpt3GQr2U4dtYlw8V4GAiui85NBi2y etkgvKfBmBixLZfQslDEGKz5LFdNhLrzi31SFHMIx1pOcmQPXeX8Ed0gyn6mjSRt zpe+qCuSXHGELoHtPabroXXVhurMnF3OQfj1SfXjOXlOFiw0g9dBi16eTWbBUNa7 hBhk61W2ykQYJstM5znt7IpEdk3OVUh4ZatGZiQWZ4BHm7v9rAYb/4JZFHTpu9q+ ROL92+z1Ak3V+VcTgA8fCCw5gtsZWf46LNPQbsuqyY8UoiSuAiZD3e5GwV+//4hm -----END CERTIFICATE-----Generated at Mon Apr 27 09:57:20 2026 by rpki-client