$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft File: 420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft (raw, json) Hash identifier: XZbFpId2lfJg2oFh6TmHRNwtrL/93AzNrVX38L3So9o= Subject key identifier: CE:13:CD:06:C6:3C:61:BC:1B:FC:8C:DA:11:0B:6B:59:A3:B3:DF:9B Authority key identifier: 53:58:B3:3F:4B:B8:8D:BD:03:49:18:6B:4A:14:87:BB:D3:EE:67:ED Certificate issuer: /CN=420f38eb-2683-4b79-8a5c-b16fedaaa9f5 Certificate serial: 010D0C9F4328584DB60AA1FA73FBD668EA2D4800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft Manifest number: 010D0C9F4328584073A856D03CF168C619A11C9C Signing time: Sun 03 May 2026 13:00:04 +0000 Manifest this update: Sun 03 May 2026 13:00:04 +0000 Manifest next update: Tue 05 May 2026 13:00:00 +0000 Files and hashes: 1: 3cc7131d-7a60-3712-92dd-3528026436b0.roa (hash: hxZAGgMk6TeAc0qN212NlgiAvjt1ff4rfUgAtGgPvR8=) 2: 420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl (hash: tsU05NNJ0cYXBQx1hsH0SL6tqWSLyv/cPZlQqpdHkps=) 3: 5d7f2a84-fbdf-341c-acc2-0dc424d3bd9d.roa (hash: e4/r4bAtMQMXBGY0AOFMiZyzRjYQZTSKlc1t1kGtF+g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b6:0a:a1:fa:73:fb:d6:68:ea:2d:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=420f38eb-2683-4b79-8a5c-b16fedaaa9f5 Validity Not Before: May 3 13:00:04 2026 GMT Not After : May 5 13:00:00 2026 GMT Subject: CN=4ae885b0-a0b2-4f1b-a972-3baff8473f94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:15:c7:0d:74:81:19:0e:0e:8e:9c:9f:ac:3a: f7:8a:e8:37:0a:de:c0:8c:29:c7:7b:2c:9d:46:2d: 50:37:df:59:0a:e8:68:b6:3b:39:3a:f5:e5:53:11: d0:c4:ea:a5:0d:e2:8c:bf:fe:b0:cc:1b:af:88:e0: 8d:b3:8c:26:ec:9e:5f:ae:b6:8f:32:c5:04:1f:5d: 5b:86:41:87:1b:06:f2:1f:d4:35:49:c5:63:d7:13: 76:2b:90:fd:c0:7e:18:2b:31:ce:9b:98:99:e3:f7: 7d:b0:33:42:ff:5a:4c:98:a5:6c:39:c3:4b:e7:aa: d1:31:7c:4d:7a:13:e0:1b:94:95:ed:45:30:9b:90: 3b:f7:a1:5c:f6:16:4b:a6:72:eb:ee:f2:cd:a0:0f: 55:26:47:47:c4:22:7e:9b:23:26:84:a1:cf:2a:b8: 2d:2f:e0:62:65:c5:45:30:88:42:50:23:ff:f7:9c: b1:a4:92:09:7a:08:e8:20:ac:14:76:b6:9d:a5:60: 49:95:09:ab:da:cc:42:be:dc:d4:ce:29:da:88:84: d4:88:8d:bb:51:b4:c4:98:39:e6:5b:ae:0a:09:8c: 74:b4:88:0d:56:69:5b:6b:5f:5e:9f:f3:68:cc:41: 02:29:75:9a:ff:53:37:7b:d5:3c:d5:ec:e0:47:6d: f7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:13:CD:06:C6:3C:61:BC:1B:FC:8C:DA:11:0B:6B:59:A3:B3:DF:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl X509v3 Authority Key Identifier: keyid:53:58:B3:3F:4B:B8:8D:BD:03:49:18:6B:4A:14:87:BB:D3:EE:67:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:03:96:80:5b:df:3b:db:2d:8c:94:32:ca:44:b3:d6:9b:a7: ab:d4:df:27:79:3b:b1:af:c7:d6:c9:a9:6a:08:fc:4f:0d:e3: 5f:5e:ba:e7:f8:bd:5c:1c:69:9f:18:50:83:4b:8c:c2:6f:77: e2:07:6f:c5:db:18:29:13:ef:66:08:7f:6f:fd:e7:f8:36:7e: a6:b0:e1:7d:cb:7c:ee:5b:75:21:fb:d9:b7:55:38:eb:e1:be: da:c9:62:9a:b8:31:e2:a6:2d:1c:c3:f6:28:95:69:99:ea:e5: c1:6f:bf:1a:b1:29:61:89:bb:57:08:71:94:83:25:a9:d9:a4: e4:2a:cd:4f:b0:1a:66:58:bd:09:5b:01:bf:3d:cf:0f:bd:28: fb:a8:81:16:39:a6:96:22:63:b0:8f:5e:2b:7a:f3:e2:e4:a7: 89:5d:58:ff:df:d6:74:c8:46:a0:a2:d7:b0:11:23:2f:a1:11: a9:ed:ca:62:e2:18:2b:0b:53:6f:72:7f:b2:bf:72:26:27:0b: 92:95:43:52:27:27:48:94:8a:6d:a7:5c:11:32:0a:16:ab:26: 4f:68:30:2c:c6:dd:52:95:ec:b5:40:36:fd:3d:c9:58:f1:1b: 8d:73:28:a5:0b:ba:a8:c8:31:ef:40:ef:f2:5b:5d:16:88:fb: 27:fb:69:be -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE22CqH6c/vWaOotSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDIwZjM4ZWItMjY4My00Yjc5LThhNWMtYjE2ZmVkYWFh OWY1MB4XDTI2MDUwMzEzMDAwNFoXDTI2MDUwNTEzMDAwMFowLzEtMCsGA1UEAxMk NGFlODg1YjAtYTBiMi00ZjFiLWE5NzItM2JhZmY4NDczZjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxXHDXSBGQ4OjpyfrDr3iug3Ct7AjCnHeyyd Ri1QN99ZCuhotjs5OvXlUxHQxOqlDeKMv/6wzBuviOCNs4wm7J5frraPMsUEH11b hkGHGwbyH9Q1ScVj1xN2K5D9wH4YKzHOm5iZ4/d9sDNC/1pMmKVsOcNL56rRMXxN ehPgG5SV7UUwm5A796Fc9hZLpnLr7vLNoA9VJkdHxCJ+myMmhKHPKrgtL+BiZcVF MIhCUCP/95yxpJIJegjoIKwUdradpWBJlQmr2sxCvtzUzinaiITUiI27UbTEmDnm W64KCYx0tIgNVmlba19en/NozEECKXWa/1M3e9U81ezgR233vwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFM4TzQbGPGG8G/yM2hELa1mjs9+bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MjBm MzhlYi0yNjgzLTRiNzktOGE1Yy1iMTZmZWRhYWE5ZjUvNDIwZjM4ZWItMjY4My00 Yjc5LThhNWMtYjE2ZmVkYWFhOWY1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDIwZjM4ZWItMjY4My00Yjc5LThh NWMtYjE2ZmVkYWFhOWY1LzQyMGYzOGViLTI2ODMtNGI3OS04YTVjLWIxNmZlZGFh YTlmNS5jcmwwHwYDVR0jBBgwFoAUU1izP0u4jb0DSRhrShSHu9PuZ+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MjBmMzhlYi0yNjgzLTRiNzktOGE1Yy1iMTZm ZWRhYWE5ZjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCxA5aAW9872y2MlDLKRLPW m6er1N8neTuxr8fWyalqCPxPDeNfXrrn+L1cHGmfGFCDS4zCb3fiB2/F2xgpE+9m CH9v/ef4Nn6msOF9y3zuW3Uh+9m3VTjr4b7ayWKauDHipi0cw/YolWmZ6uXBb78a sSlhibtXCHGUgyWp2aTkKs1PsBpmWL0JWwG/Pc8PvSj7qIEWOaaWImOwj14revPi 5KeJXVj/39Z0yEagotewESMvoRGp7cpi4hgrC1Nvcn+yv3ImJwuSlUNSJydIlIpt p1wRMgoWqyZPaDAsxt1Sley1QDb9PclY8RuNcyilC7qoyDHvQO/yW10WiPsn+2m+ -----END CERTIFICATE-----Generated at Sun May 3 15:34:41 2026 by rpki-client