$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/47727e8f-5ea0-4ad7-a853-5cade93acd74.mft File: 47727e8f-5ea0-4ad7-a853-5cade93acd74.mft (raw, json) Hash identifier: nqMgDhC5V0Qm+/y64WCIY0mZzgcVB/TJvv1jTF9ePBk= Subject key identifier: 2B:D5:1E:95:D7:13:4A:6D:CB:F5:40:CF:81:EB:2E:89:16:62:E5:63 Authority key identifier: 23:CC:1E:F4:90:EF:01:06:87:7F:DD:36:B9:49:CF:70:A3:A2:F7:93 Certificate issuer: /CN=47727e8f-5ea0-4ad7-a853-5cade93acd74 Certificate serial: 010D0C9F4328584DA45C4C153375679215F77200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/47727e8f-5ea0-4ad7-a853-5cade93acd74.mft Manifest number: 010D0C9F4328584073A83E3481BD656300FDCED6 Signing time: Mon 27 Apr 2026 05:00:04 +0000 Manifest this update: Mon 27 Apr 2026 05:00:04 +0000 Manifest next update: Wed 29 Apr 2026 05:00:00 +0000 Files and hashes: 1: 47727e8f-5ea0-4ad7-a853-5cade93acd74.crl (hash: N83Q6ZTjEzcGzPgR5wubVtmPs59NXizp9/xGD1TiMoU=) 2: a9b090ba-4e2e-3fd0-bda2-f5b0e738e762.roa (hash: +tZOrRnp0qwaASo1ApArWucgTSiPP48eMagqnRLLfAk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/47727e8f-5ea0-4ad7-a853-5cade93acd74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/47727e8f-5ea0-4ad7-a853-5cade93acd74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a4:5c:4c:15:33:75:67:92:15:f7:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47727e8f-5ea0-4ad7-a853-5cade93acd74 Validity Not Before: Apr 27 05:00:04 2026 GMT Not After : Apr 29 05:00:00 2026 GMT Subject: CN=d34c0368-2eaf-46af-b5e4-359a7705dfea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d5:7a:d0:bd:89:a6:6f:fd:bb:71:92:42:da: 53:ab:af:2b:4f:97:f8:99:18:02:7b:d8:c6:11:f6: 6c:f3:13:73:6a:d7:a6:c5:85:27:f9:7c:cf:bf:ee: 61:c2:95:0c:a4:19:77:ed:48:5b:39:df:ea:9f:6b: 70:52:f6:4a:61:e1:12:da:13:ce:f7:67:45:22:1b: 99:2a:27:a5:4a:93:60:2a:73:2a:92:37:dd:41:0b: a5:66:9c:2e:cb:1b:ac:13:8e:91:b0:c4:cc:4a:e7: b2:d8:da:2a:77:3b:dd:f0:18:60:bc:f3:3b:71:e5: b4:07:1f:00:c4:0e:e1:39:1d:63:fc:0c:1d:7a:10: af:40:7c:4e:7b:9c:eb:12:df:cf:85:8b:a9:1f:d1: 74:fe:1f:05:0c:c6:79:bd:53:c2:b9:87:b4:fe:07: be:35:d8:6a:96:4b:fe:a3:da:b6:fd:37:66:77:02: e7:a6:9c:ed:1a:7a:d2:8c:db:c8:06:78:3d:5a:25: 42:f3:15:e1:be:85:14:23:82:53:3a:da:22:fb:98: 9a:68:0f:c3:cd:2a:ea:41:92:a4:e6:79:4f:f7:e7: dc:9b:20:0a:1a:0a:cd:a0:d5:35:2a:b7:57:5f:95: 48:fb:7e:53:dd:97:27:98:70:9d:fe:e5:4f:b0:41: 47:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D5:1E:95:D7:13:4A:6D:CB:F5:40:CF:81:EB:2E:89:16:62:E5:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/47727e8f-5ea0-4ad7-a853-5cade93acd74.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/47727e8f-5ea0-4ad7-a853-5cade93acd74.crl X509v3 Authority Key Identifier: keyid:23:CC:1E:F4:90:EF:01:06:87:7F:DD:36:B9:49:CF:70:A3:A2:F7:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:d6:b5:19:d3:21:82:96:4f:e1:36:cf:8e:e1:37:50:09:50: 5a:73:97:b5:ae:87:ec:bd:1e:20:fc:47:23:23:29:5c:bc:ae: 7f:ee:25:2b:d3:c1:2b:a7:ec:18:6a:82:00:e9:25:12:27:5e: fe:cf:16:c5:a7:d0:6f:45:ef:95:a9:8f:66:72:74:be:f2:92: c5:1c:53:9c:02:03:65:c2:fc:d1:26:ec:c7:5d:f9:fb:9a:ce: 96:85:ad:8e:98:e6:08:f3:19:8c:65:f5:58:56:8e:f0:fd:3a: 7c:7e:b8:95:0d:f9:6d:46:e6:cc:5e:2a:0d:4f:2b:9b:73:c8: 62:14:71:6b:ac:59:7f:c0:c5:8b:52:bd:6c:52:1b:a2:02:85: b4:31:48:8f:57:1b:6b:1b:9c:68:37:22:50:dd:07:7d:8d:be: 92:ea:0a:2d:14:8c:7c:30:0d:b4:ea:ea:4e:16:2d:0a:45:a0: 9f:63:6b:2a:e7:29:c6:16:b8:4e:a6:e5:40:f1:4c:8e:01:37: 43:c6:fc:73:24:ee:52:a0:1d:ae:94:c1:07:a4:50:58:4d:e1: 85:bb:a1:99:70:82:c7:1f:50:7f:15:1a:2c:f7:1d:34:1f:da: e4:f1:50:32:3d:cb:f0:a6:1c:14:ea:c4:94:21:2d:2c:dc:67: c3:1f:6b:0b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2kXEwVM3VnkhX3cgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDc3MjdlOGYtNWVhMC00YWQ3LWE4NTMtNWNhZGU5M2Fj ZDc0MB4XDTI2MDQyNzA1MDAwNFoXDTI2MDQyOTA1MDAwMFowLzEtMCsGA1UEAxMk ZDM0YzAzNjgtMmVhZi00NmFmLWI1ZTQtMzU5YTc3MDVkZmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tV60L2Jpm/9u3GSQtpTq68rT5f4mRgCe9jG EfZs8xNzatemxYUn+XzPv+5hwpUMpBl37UhbOd/qn2twUvZKYeES2hPO92dFIhuZ KielSpNgKnMqkjfdQQulZpwuyxusE46RsMTMSuey2Noqdzvd8BhgvPM7ceW0Bx8A xA7hOR1j/AwdehCvQHxOe5zrEt/PhYupH9F0/h8FDMZ5vVPCuYe0/ge+Ndhqlkv+ o9q2/TdmdwLnppztGnrSjNvIBng9WiVC8xXhvoUUI4JTOtoi+5iaaA/DzSrqQZKk 5nlP9+fcmyAKGgrNoNU1KrdXX5VI+35T3ZcnmHCd/uVPsEFHtQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCvVHpXXE0pty/VAz4HrLokWYuVjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Nzcy N2U4Zi01ZWEwLTRhZDctYTg1My01Y2FkZTkzYWNkNzQvNDc3MjdlOGYtNWVhMC00 YWQ3LWE4NTMtNWNhZGU5M2FjZDc0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDc3MjdlOGYtNWVhMC00YWQ3LWE4 NTMtNWNhZGU5M2FjZDc0LzQ3NzI3ZThmLTVlYTAtNGFkNy1hODUzLTVjYWRlOTNh Y2Q3NC5jcmwwHwYDVR0jBBgwFoAUI8we9JDvAQaHf902uUnPcKOi95MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NzcyN2U4Zi01ZWEwLTRhZDctYTg1My01Y2Fk ZTkzYWNkNzQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCq1rUZ0yGClk/hNs+O4TdQ CVBac5e1rofsvR4g/EcjIylcvK5/7iUr08Erp+wYaoIA6SUSJ17+zxbFp9BvRe+V qY9mcnS+8pLFHFOcAgNlwvzRJuzHXfn7ms6Wha2OmOYI8xmMZfVYVo7w/Tp8friV DfltRubMXioNTyubc8hiFHFrrFl/wMWLUr1sUhuiAoW0MUiPVxtrG5xoNyJQ3Qd9 jb6S6gotFIx8MA206upOFi0KRaCfY2sq5ynGFrhOpuVA8UyOATdDxvxzJO5SoB2u lMEHpFBYTeGFu6GZcILHH1B/FRos9x00H9rk8VAyPcvwphwU6sSUIS0s3GfDH2sL -----END CERTIFICATE-----Generated at Mon Apr 27 09:56:22 2026 by rpki-client