$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.mft File: 66cd4a40-75d3-4112-a4c8-6de9ca571ffe.mft (raw, json) Hash identifier: OMpj5DnfZTYNc91pdJUopJrtNN6fB9kfBbUe67/S0/s= Subject key identifier: 71:D1:53:5A:36:46:D6:B3:CE:F8:89:DF:EB:D0:E4:9E:E4:1E:E9:A1 Authority key identifier: 27:82:C7:B1:E4:68:E2:EB:E1:56:90:DD:2D:E3:65:AD:79:5B:EC:CB Certificate issuer: /CN=66cd4a40-75d3-4112-a4c8-6de9ca571ffe Certificate serial: 010D0C9F4328584DA314BE55A2F9BAB275707A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.mft Manifest number: 010D0C9F4328584720528DA38C7982779313AF64 Signing time: Sun 26 Apr 2026 18:00:03 +0000 Manifest this update: Sun 26 Apr 2026 18:00:03 +0000 Manifest next update: Tue 28 Apr 2026 18:00:00 +0000 Files and hashes: 1: 16633004-e46a-3fb4-be3b-681f6a980807.roa (hash: ibSrJPYz7PIiPP64ki50e3HKDjZFVL2lYlVx5prfyLg=) 2: 66cd4a40-75d3-4112-a4c8-6de9ca571ffe.crl (hash: nNajeuL75P9/GMu+nH2UWQT1vIBLgqdFeJ/CHfJbS4w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a3:14:be:55:a2:f9:ba:b2:75:70:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66cd4a40-75d3-4112-a4c8-6de9ca571ffe Validity Not Before: Apr 26 18:00:03 2026 GMT Not After : Apr 28 18:00:00 2026 GMT Subject: CN=e4cc4ecb-f9fc-47a0-ab60-22b668640d2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:fb:14:79:62:4b:a5:83:70:8c:91:69:fb:c3: b4:6b:87:54:38:eb:3d:f4:91:0d:81:63:cb:a3:81: e3:3b:07:c5:73:d0:f5:b9:4d:31:20:e8:e7:d7:99: af:dc:62:bb:e9:e4:c4:8e:1e:e5:f9:79:de:c6:e7: 5f:74:95:6b:16:fa:1c:5e:ab:48:cf:9e:39:85:0e: 00:b9:6c:78:5e:cf:b9:60:1c:a2:c4:fa:9e:a3:3a: 85:ff:2c:aa:cb:f2:07:02:0b:31:6d:10:c9:67:be: 2f:7b:f0:6e:f5:06:3d:ed:ad:50:1d:86:af:ee:f3: 20:13:80:a5:32:b0:90:1b:5f:8c:6b:ed:35:27:1c: 9c:5c:8d:d7:5d:c6:ae:49:ac:0d:32:6a:cd:1f:71: e5:10:78:b5:7a:5a:39:55:98:82:a4:2c:91:3d:49: 7c:13:13:58:00:1f:4c:ba:72:a6:72:ce:fe:68:5b: ad:b6:02:cf:d3:fa:29:26:56:e0:61:0f:a0:34:df: bf:2a:50:e7:f0:a6:13:e6:89:b3:19:8e:8f:19:b8: d8:0b:46:1c:88:fb:79:e1:cf:fa:33:ab:76:94:f4: 0f:95:02:4a:8b:04:33:ba:9c:05:7e:15:aa:df:43: b1:ca:91:7e:75:04:3e:ab:97:ae:de:fe:44:1e:25: 21:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D1:53:5A:36:46:D6:B3:CE:F8:89:DF:EB:D0:E4:9E:E4:1E:E9:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.crl X509v3 Authority Key Identifier: keyid:27:82:C7:B1:E4:68:E2:EB:E1:56:90:DD:2D:E3:65:AD:79:5B:EC:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:d8:b1:85:1e:d7:a1:d0:ae:bd:38:f4:a3:6b:2b:f6:b8:5b: 30:57:e1:2f:5b:2a:12:6c:dc:04:33:b7:ab:a2:29:05:cc:ea: e3:ae:5f:ce:54:e7:6d:bd:49:20:39:f1:63:1d:1d:89:01:31: c4:83:73:a7:ec:9e:45:85:72:85:18:c3:19:93:17:57:a5:b1: e9:2d:3a:f1:50:04:89:68:40:e9:1b:65:61:0a:bf:f4:c6:f3: 0c:46:52:f6:64:f4:97:fa:fd:f8:25:1c:70:7c:cc:ea:1d:92: 38:83:1b:e6:e7:d0:75:99:0c:61:6e:97:1c:50:7b:8d:98:bb: eb:20:6d:63:26:c1:47:e1:29:23:a0:3f:f9:ff:9d:b0:49:19: 0b:d8:67:63:f7:77:6e:49:a8:a3:8a:cd:09:17:5c:6f:bd:e1: 2a:f0:9a:2e:8a:d2:ac:0a:77:e3:c3:cc:32:5b:04:1e:11:9f: 9f:bb:86:9c:8d:d1:d7:a1:94:ef:e2:fc:cf:1d:1d:06:90:96: a3:40:a0:9b:be:a9:6b:05:ff:b6:fd:24:13:60:63:72:25:b2: a2:8e:c9:7e:e9:c9:88:d8:75:b7:cf:4a:75:b3:b2:11:7e:57: 05:d9:2c:7c:c0:d3:48:9a:b0:06:00:1d:9f:a9:f1:da:29:32: b1:02:f8:be -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2jFL5Vovm6snVwegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZjZDRhNDAtNzVkMy00MTEyLWE0YzgtNmRlOWNhNTcx ZmZlMB4XDTI2MDQyNjE4MDAwM1oXDTI2MDQyODE4MDAwMFowLzEtMCsGA1UEAxMk ZTRjYzRlY2ItZjlmYy00N2EwLWFiNjAtMjJiNjY4NjQwZDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvsUeWJLpYNwjJFp+8O0a4dUOOs99JENgWPL o4HjOwfFc9D1uU0xIOjn15mv3GK76eTEjh7l+XnexudfdJVrFvocXqtIz545hQ4A uWx4Xs+5YByixPqeozqF/yyqy/IHAgsxbRDJZ74ve/Bu9QY97a1QHYav7vMgE4Cl MrCQG1+Ma+01JxycXI3XXcauSawNMmrNH3HlEHi1elo5VZiCpCyRPUl8ExNYAB9M unKmcs7+aFuttgLP0/opJlbgYQ+gNN+/KlDn8KYT5omzGY6PGbjYC0YciPt54c/6 M6t2lPQPlQJKiwQzupwFfhWq30OxypF+dQQ+q5eu3v5EHiUhmQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHHRU1o2RtazzviJ3+vQ5J7kHumhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NmNk NGE0MC03NWQzLTQxMTItYTRjOC02ZGU5Y2E1NzFmZmUvNjZjZDRhNDAtNzVkMy00 MTEyLWE0YzgtNmRlOWNhNTcxZmZlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjZjZDRhNDAtNzVkMy00MTEyLWE0 YzgtNmRlOWNhNTcxZmZlLzY2Y2Q0YTQwLTc1ZDMtNDExMi1hNGM4LTZkZTljYTU3 MWZmZS5jcmwwHwYDVR0jBBgwFoAUJ4LHseRo4uvhVpDdLeNlrXlb7MswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NmNkNGE0MC03NWQzLTQxMTItYTRjOC02ZGU5 Y2E1NzFmZmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBF2LGFHteh0K69OPSjayv2 uFswV+EvWyoSbNwEM7eroikFzOrjrl/OVOdtvUkgOfFjHR2JATHEg3On7J5FhXKF GMMZkxdXpbHpLTrxUASJaEDpG2VhCr/0xvMMRlL2ZPSX+v34JRxwfMzqHZI4gxvm 59B1mQxhbpccUHuNmLvrIG1jJsFH4SkjoD/5/52wSRkL2Gdj93duSaijis0JF1xv veEq8JouitKsCnfjw8wyWwQeEZ+fu4acjdHXoZTv4vzPHR0GkJajQKCbvqlrBf+2 /SQTYGNyJbKijsl+6cmI2HW3z0p1s7IRflcF2Sx8wNNImrAGAB2fqfHaKTKxAvi+ -----END CERTIFICATE-----Generated at Mon Apr 27 09:55:32 2026 by rpki-client