$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/530ba529-ac94-44aa-8a24-334da5fccb1e.mft File: 530ba529-ac94-44aa-8a24-334da5fccb1e.mft (raw, json) Hash identifier: MpDbxmmkP4g7GPY35ZBGO9Go2vMHxeZ2NA4t6cvOzXU= Subject key identifier: D9:5A:75:4D:BA:D5:3E:F1:0D:8D:6A:C4:26:B0:FF:86:FD:E0:59:60 Authority key identifier: E2:70:AF:2A:32:F0:30:09:13:CF:91:AB:C2:55:00:27:FA:B8:C1:31 Certificate issuer: /CN=530ba529-ac94-44aa-8a24-334da5fccb1e Certificate serial: 010D0C9F4328584DA3A9A3523193D3AFDBC80580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/530ba529-ac94-44aa-8a24-334da5fccb1e.mft Manifest number: 010D0C9F4328584073A82BC8BDDAA84A87B137B6 Signing time: Sun 26 Apr 2026 23:00:04 +0000 Manifest this update: Sun 26 Apr 2026 23:00:04 +0000 Manifest next update: Tue 28 Apr 2026 23:00:00 +0000 Files and hashes: 1: 06573bb1-1af4-36af-a59e-a95c42e3ede3.roa (hash: /BR5yehV6LPx6KSfheN9X3pVy/Oln+gE0G4kxdPuzsE=) 2: 0df3c573-8fb2-3fff-a320-02f24e0bf9fc.roa (hash: +AjTgIou4NSuZWfw+D67Me76f6DPSncy5xwMSR5wd9E=) 3: 22eb73ec-b415-3bc1-9d15-13db833fbec4.roa (hash: NaxURZgVS9mB0w61EWRFWYNFl87IRki4WA925I0WnG4=) 4: 530ba529-ac94-44aa-8a24-334da5fccb1e.crl (hash: 8QHo68JnNRYEUI2bwNHaSNN1YGRhxCc8+m+YMSJrf6A=) 5: 632ef3ad-4ab4-3cd5-ae6e-1c9aaa4e3555.roa (hash: ocGqbC/RuIqbS4AZ37erpQfCpN+7Iq+Rsr5WzABPE/k=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/530ba529-ac94-44aa-8a24-334da5fccb1e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/530ba529-ac94-44aa-8a24-334da5fccb1e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a3:a9:a3:52:31:93:d3:af:db:c8:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=530ba529-ac94-44aa-8a24-334da5fccb1e Validity Not Before: Apr 26 23:00:04 2026 GMT Not After : Apr 28 23:00:00 2026 GMT Subject: CN=4370322e-2510-4778-a4c2-75de7a181919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9c:ab:e9:ff:42:37:1f:98:87:cd:b5:d0:52: e0:c3:65:e7:0e:ce:19:32:8f:0f:68:17:13:21:49: 36:54:5e:4e:6e:31:b3:f4:01:4a:f4:1b:3d:1f:53: d0:28:c0:7c:f5:0c:5d:b9:76:48:9b:00:db:de:2e: 65:28:fd:a4:b8:cb:8e:a1:84:03:99:90:78:8f:e1: 96:c0:a4:be:89:bf:b4:2e:b4:d7:7a:e7:01:08:02: a2:0e:c8:c6:1c:10:4c:36:c3:ce:01:85:b2:e7:77: 28:26:49:20:2e:b8:38:c5:3d:68:45:e7:d2:a9:75: 9c:25:75:ef:5f:b4:b4:b2:10:e8:57:3f:fa:4b:e4: 0c:10:0e:9f:07:97:e9:97:6f:6b:be:b2:21:dd:68: 0c:ac:64:73:22:56:65:4e:ae:3b:6d:46:ca:01:32: dd:9f:1e:a8:f6:8c:af:66:59:64:eb:67:12:b2:b4: dc:3e:58:3e:36:c8:f6:1b:a9:16:07:11:6b:13:1c: fe:9a:2b:4d:26:e6:c3:29:e7:0d:04:58:88:14:d3: 60:87:2f:9b:73:71:57:48:db:ad:89:c3:46:53:99: 9b:8b:24:f2:03:3e:23:ad:31:15:58:df:42:94:13: ec:7e:5f:ed:06:10:3c:57:4a:c8:b0:7a:77:e7:86: 2e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:5A:75:4D:BA:D5:3E:F1:0D:8D:6A:C4:26:B0:FF:86:FD:E0:59:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/530ba529-ac94-44aa-8a24-334da5fccb1e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/530ba529-ac94-44aa-8a24-334da5fccb1e.crl X509v3 Authority Key Identifier: keyid:E2:70:AF:2A:32:F0:30:09:13:CF:91:AB:C2:55:00:27:FA:B8:C1:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:d9:e2:ae:4a:99:e3:02:00:50:0c:fa:35:fc:94:c7:dc:c4: 49:4e:d3:8d:aa:93:fb:c7:e8:4a:fc:98:4a:25:cd:88:96:9b: c5:e3:75:69:8e:3d:f8:a9:7a:ec:af:20:02:bf:fb:d7:d7:a5: 35:ef:8e:34:e1:83:01:32:50:cb:71:40:b3:a8:b6:19:6e:5f: bc:65:74:e1:ff:a5:b7:7a:3a:09:ee:ba:1b:71:db:9e:1d:7b: 07:6c:a8:d4:50:da:08:4d:74:52:ae:11:97:b1:72:69:9c:b5: e4:53:d5:13:cb:09:00:42:50:40:87:87:5f:e9:55:2b:1d:40: a0:38:6c:c1:21:44:1c:1e:65:8f:e2:fc:0d:34:99:37:4f:94: 52:48:51:37:af:e2:fc:8d:3f:3a:13:e9:47:c4:91:d8:8d:59: fe:dd:c2:a5:e0:d5:be:8d:30:f3:2e:d8:6a:c6:93:2d:47:2b: 19:e2:21:87:cc:e8:35:82:31:aa:26:1e:6d:15:34:21:89:fd: 13:64:91:3a:0b:df:c1:90:a0:24:54:26:09:1a:53:a7:11:8e: 07:21:2f:9e:74:86:b4:d8:42:19:35:ff:b4:97:a4:59:00:bb: 13:ce:08:19:70:4b:9c:83:e7:7b:b8:b4:a1:c6:91:52:33:ba: 3b:72:bf:58 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2jqaNSMZPTr9vIBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTMwYmE1MjktYWM5NC00NGFhLThhMjQtMzM0ZGE1ZmNj YjFlMB4XDTI2MDQyNjIzMDAwNFoXDTI2MDQyODIzMDAwMFowLzEtMCsGA1UEAxMk NDM3MDMyMmUtMjUxMC00Nzc4LWE0YzItNzVkZTdhMTgxOTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJyr6f9CNx+Yh8210FLgw2XnDs4ZMo8PaBcT IUk2VF5ObjGz9AFK9Bs9H1PQKMB89QxduXZImwDb3i5lKP2kuMuOoYQDmZB4j+GW wKS+ib+0LrTXeucBCAKiDsjGHBBMNsPOAYWy53coJkkgLrg4xT1oRefSqXWcJXXv X7S0shDoVz/6S+QMEA6fB5fpl29rvrIh3WgMrGRzIlZlTq47bUbKATLdnx6o9oyv Zllk62cSsrTcPlg+Nsj2G6kWBxFrExz+mitNJubDKecNBFiIFNNghy+bc3FXSNut icNGU5mbiyTyAz4jrTEVWN9ClBPsfl/tBhA8V0rIsHp354YuAwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNladU261T7xDY1qxCaw/4b94FlgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MzBi YTUyOS1hYzk0LTQ0YWEtOGEyNC0zMzRkYTVmY2NiMWUvNTMwYmE1MjktYWM5NC00 NGFhLThhMjQtMzM0ZGE1ZmNjYjFlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTMwYmE1MjktYWM5NC00NGFhLThh MjQtMzM0ZGE1ZmNjYjFlLzUzMGJhNTI5LWFjOTQtNDRhYS04YTI0LTMzNGRhNWZj Y2IxZS5jcmwwHwYDVR0jBBgwFoAU4nCvKjLwMAkTz5GrwlUAJ/q4wTEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MzBiYTUyOS1hYzk0LTQ0YWEtOGEyNC0zMzRk YTVmY2NiMWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDF2eKuSpnjAgBQDPo1/JTH 3MRJTtONqpP7x+hK/JhKJc2IlpvF43Vpjj34qXrsryACv/vX16U174404YMBMlDL cUCzqLYZbl+8ZXTh/6W3ejoJ7robcdueHXsHbKjUUNoITXRSrhGXsXJpnLXkU9UT ywkAQlBAh4df6VUrHUCgOGzBIUQcHmWP4vwNNJk3T5RSSFE3r+L8jT86E+lHxJHY jVn+3cKl4NW+jTDzLthqxpMtRysZ4iGHzOg1gjGqJh5tFTQhif0TZJE6C9/BkKAk VCYJGlOnEY4HIS+edIa02EIZNf+0l6RZALsTzggZcEucg+d7uLShxpFSM7o7cr9Y -----END CERTIFICATE-----Generated at Mon Apr 27 09:56:21 2026 by rpki-client