$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft File: 2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft (raw, json) Hash identifier: NAz1U0KotoJNmVqSx0+utbiXGfb50zGg/TnW/3zOSmI= Subject key identifier: F0:F1:86:4F:9A:B4:A4:ED:C5:75:10:B0:CD:8D:90:35:52:03:6A:4A Authority key identifier: D9:97:C6:DD:81:55:F9:15:F5:04:63:45:39:D3:6A:51:2C:17:74:C7 Certificate issuer: /CN=2a1e9734-0a7f-48e6-87d3-ca7d837f4e50 Certificate serial: 010D0C9F4328584D5F7F6B7A0A3453B108CCFD40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft Manifest number: 010D0C9F4328584073A85689C6C67E2F0E4CA804 Signing time: Thu 02 Apr 2026 13:00:03 +0000 Manifest this update: Thu 02 Apr 2026 13:00:03 +0000 Manifest next update: Sun 05 Apr 2026 13:00:00 +0000 Files and hashes: 1: 0335608f-a9cd-3396-90f3-61164a83f73d.roa (hash: t+YZ0L8003+XIT+l2LdclhKvjDExo2bfUahSIk7Zgsc=) 2: 2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.crl (hash: 6LtQMWDPO+27K9TYQsjLAB3Stm5CfVQ3n/Rc6go8dow=) 3: cd3cb7de-2625-3893-a323-d1bec7d259a0.roa (hash: Un/wsca/kduwZfT/iTJDSNv7G3Ne4B87o4ZocVmFH24=) 4: e4eb8e84-793c-33ec-9088-110eaf427f80.asa (hash: Y0e8ZTVF02sVUrA1ppPaEIt1VNWewS1PNOZCo0NoRbA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:7f:6b:7a:0a:34:53:b1:08:cc:fd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a1e9734-0a7f-48e6-87d3-ca7d837f4e50 Validity Not Before: Apr 2 13:00:03 2026 GMT Not After : Apr 5 13:00:00 2026 GMT Subject: CN=40fa1a43-222e-400c-b488-a1bca427c1b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2b:90:6b:7d:60:85:48:ec:8e:3a:d9:eb:da: 06:cb:01:b3:66:23:29:c2:e2:8b:7a:19:f3:a4:a6: 6c:b8:d9:e9:b6:f3:65:b1:ee:b0:1c:cd:45:14:f1: 88:45:f3:e4:0b:88:af:88:29:56:e9:f1:8c:cb:98: e8:1a:f4:4f:99:a4:ec:82:cb:39:8b:53:e0:98:f2: e9:77:6a:0e:f8:67:d9:45:56:bc:ce:52:67:14:cb: c2:c0:d3:91:e1:0e:85:82:c8:93:f6:00:b8:bf:ee: 31:78:45:d6:0a:37:b3:13:cf:3e:f7:dd:de:35:74: e9:b7:f1:33:cc:4f:0e:16:31:e5:1f:cb:9e:2f:56: 9e:4e:7c:0a:ad:ae:ff:79:b2:16:31:73:22:16:80: d7:ae:50:cb:30:3e:a9:f7:84:f5:59:80:9b:83:d5: 8c:3a:51:38:18:3a:7a:e7:de:9c:04:8f:e0:dd:21: 77:70:68:1d:63:3e:5b:17:69:69:43:ce:a7:bd:b1: f6:e4:e2:1a:fe:2a:73:11:11:6c:aa:22:73:8f:a5: 94:7a:a1:c6:c3:1a:54:45:a0:31:1b:a6:f5:2d:7b: 41:8e:7c:c8:02:d2:0b:12:3d:6a:3d:55:94:44:df: f3:85:08:c9:9f:37:ea:84:b9:09:94:69:d3:3b:f5: 60:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F1:86:4F:9A:B4:A4:ED:C5:75:10:B0:CD:8D:90:35:52:03:6A:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.crl X509v3 Authority Key Identifier: keyid:D9:97:C6:DD:81:55:F9:15:F5:04:63:45:39:D3:6A:51:2C:17:74:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:d0:4a:c8:09:53:c9:59:f2:87:0d:2e:98:d6:a8:f2:46:ff: 30:b8:97:df:f2:6b:76:a9:23:3f:3e:4a:ad:b0:25:c4:10:3a: e8:47:33:e0:42:e9:52:97:e3:89:17:0c:f9:51:a7:dc:6b:47: 14:fb:12:a7:47:6b:1d:6d:1f:14:bb:c5:84:6b:bc:e4:17:8e: 0d:bf:f0:cc:05:be:15:6e:00:aa:90:96:82:d9:77:e5:46:d0: 5c:6a:39:29:4a:2b:a5:b7:91:ce:03:e8:01:0a:59:e1:ce:da: df:96:fe:74:84:e2:0e:06:6c:b6:90:50:e8:18:f1:66:07:cf: 7c:2e:45:23:fc:84:94:08:c4:c2:00:12:69:9b:ca:56:3a:39: 15:e4:9f:a6:7b:d8:31:59:4e:b8:ac:f3:d4:f7:3e:97:95:32: 44:99:b6:e6:63:ab:71:2b:a0:39:e5:a5:32:28:bc:ac:37:e2: 35:42:55:0b:a2:99:28:60:cd:1c:c9:b3:ba:a4:1b:20:f9:22: 02:d6:3e:66:18:21:ea:fb:c7:c8:c8:a8:f8:47:28:47:84:94: 4e:03:77:6f:b7:76:77:ea:d9:04:29:97:ea:66:25:6c:a5:68: b1:9e:74:51:68:e6:fe:d9:46:2a:92:74:0e:ef:3d:02:7c:b2: 7f:19:b5:53 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1ff2t6CjRTsQjM/UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmExZTk3MzQtMGE3Zi00OGU2LTg3ZDMtY2E3ZDgzN2Y0 ZTUwMB4XDTI2MDQwMjEzMDAwM1oXDTI2MDQwNTEzMDAwMFowLzEtMCsGA1UEAxMk NDBmYTFhNDMtMjIyZS00MDBjLWI0ODgtYTFiY2E0MjdjMWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCuQa31ghUjsjjrZ69oGywGzZiMpwuKLehnz pKZsuNnptvNlse6wHM1FFPGIRfPkC4iviClW6fGMy5joGvRPmaTsgss5i1PgmPLp d2oO+GfZRVa8zlJnFMvCwNOR4Q6FgsiT9gC4v+4xeEXWCjezE88+993eNXTpt/Ez zE8OFjHlH8ueL1aeTnwKra7/ebIWMXMiFoDXrlDLMD6p94T1WYCbg9WMOlE4GDp6 596cBI/g3SF3cGgdYz5bF2lpQ86nvbH25OIa/ipzERFsqiJzj6WUeqHGwxpURaAx G6b1LXtBjnzIAtILEj1qPVWURN/zhQjJnzfqhLkJlGnTO/VgIwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPDxhk+atKTtxXUQsM2NkDVSA2pKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yYTFl OTczNC0wYTdmLTQ4ZTYtODdkMy1jYTdkODM3ZjRlNTAvMmExZTk3MzQtMGE3Zi00 OGU2LTg3ZDMtY2E3ZDgzN2Y0ZTUwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmExZTk3MzQtMGE3Zi00OGU2LTg3 ZDMtY2E3ZDgzN2Y0ZTUwLzJhMWU5NzM0LTBhN2YtNDhlNi04N2QzLWNhN2Q4Mzdm NGU1MC5jcmwwHwYDVR0jBBgwFoAU2ZfG3YFV+RX1BGNFOdNqUSwXdMcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yYTFlOTczNC0wYTdmLTQ4ZTYtODdkMy1jYTdk ODM3ZjRlNTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBp0ErICVPJWfKHDS6Y1qjy Rv8wuJff8mt2qSM/PkqtsCXEEDroRzPgQulSl+OJFwz5Uafca0cU+xKnR2sdbR8U u8WEa7zkF44Nv/DMBb4VbgCqkJaC2XflRtBcajkpSiult5HOA+gBClnhztrflv50 hOIOBmy2kFDoGPFmB898LkUj/ISUCMTCABJpm8pWOjkV5J+me9gxWU64rPPU9z6X lTJEmbbmY6txK6A55aUyKLysN+I1QlULopkoYM0cybO6pBsg+SIC1j5mGCHq+8fI yKj4RyhHhJROA3dvt3Z36tkEKZfqZiVspWixnnRRaOb+2UYqknQO7z0CfLJ/GbVT -----END CERTIFICATE-----Generated at Fri Apr 3 09:17:27 2026 by rpki-client